last executing test programs: 980.936921ms ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") capset(&(0x7f0000000000)={0x20080522}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x81) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) 694.330044ms ago: executing program 3 (id=5): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4AlD6tIEArVzDl2TU2Pexx7urrn/H7SuOrr0zV9yv+pqe6pywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL733R+f7kXE5V+nBw5HfCYGEf2I5bo+FvXMxfz8YUQcic3meC4iBosR9fKb/zwTcS4iPjoUcW/j1mr98Jk99uP8qZvXP/n+d/7xuz/dOfLTN3/yQbv9R589++Hvb0cc/uFrH35y+8msOwAAAJSiqqqqlz7mH02f7/tddwoAmIq8/6+S/LharVarn2j9x/5s9UddaN1UjXe7WUTEenOZ+j2Dw/EAMGfW4+Ouu0CH5F+0YUQ81XUngJnW67oD7It7G7dWeynfXnN/cGyrPf+dclv+673713fsNp2kfY7JtH6+7sQgnt2lP8tT6sMsyfn32/lf3mofpeftd/7Tslv+o61Ln4qT8x+082/Zlv+fI2Ju8++Pzb9UOf/ho+S/Ppjj7V/+AAAAAAAcfPnv/4c7Pv67+PirsicPO/57bEp9AAAAAAAAAIAn7XHH/7vP+H8AAAAws+rP6rW/HHrw2G73Yqsfv9SLeLr1fKAw6WKZla77AQAAAAAAAAAAAAAlGW6dw3upF7EQEU+vrFRVVX81tetH9bjLz7vS1x9K1vUveQAA2PLRoda1/L2IpYi4lO71t7CyslJVS8sr1Uq1vJjfz44Wl6rlxufaPK0fWxzt4Q3xcFTV32ypsVzTpM/Lk9rb369+rVE12EPHpqPDwAEgIrb2RvfskQ6Yqnomun6Xw3yw/R88tn/2ouufUwAAAGD/VVVV9dLtvI+mY/79rjsFAEzDUt7/t48LqNVqtVqtPnh1UzXe7WYREevNZer3DIbjB4A5sx4fd90FOiT/og0j4kjXnQBmWq/rDrAv7m3cWu2lfHvN/UEa3z2fC7It//Xe5nJ5+XHTSdrnmEzr5+tODOLZXfrz3JT6MEty/v12/pe32kfpefud/7Tsln+9noc76E/Xcv6Ddv4tByf//tj8S5XzHz5S/gP5AwAAAADADMt//z9c/PFfdz0AAAAAAAAAYH7d27i1mq97zcf/Pz/meb3mnOs/D4ycf2/P+bv+9yDJ+ffb+bdOyBk05u++8SD/f2/cWv3g5r8+l6czn//CYFS/9kKvPxim05yqhbfialyLtTi14/nDbe2nd7QvbGs/M6H97I72Ud2+nNtPxGr8Iq7Fm/fbFyecGLU0ob2a0J7zH9j+i5TzHza+6vxXUnuvNa3dfb+/Y7tvTse9zsW//ffFnVvX9N2Jwf11a6rX73gH/dn8P3lqFL+6sXb9xG+u3Lx5/XSkybZHz0SaPGE5/4X0lfN/6YWt9vx7v7m93n1/9Mj5z4o7Mdw1/xca8/X6vjzlvnUh5z9KXzn/vAcav/3Pc/67b/+vdNAfAAAAAAAAAAAAAAAAeJiqqjYvEb0YERfS9T/uhA8ARfjDD9JMlYRarVar1eoDWzdV473eLGJp+zIXIuK3474ZADDL/hcR/+y6E3RG/gXL9/urp1/oujPAVN14972fXbl2be36ja57AgAAAAAAAAB8Wnn8z2ON8Z83zwNqjRu9bfzXN+LY3I7/2R8NNsc6Tyv0fDx8/O/j8fDxv4cTXm9hQvtoQvvihPalCe1jL/RoyPk/nzLO+R9NK1bS+K8vddCfruX8j6exnnP+X2o9r5l/9dd5zr+/Lf+TN9/55ckb77736tV3rry99vbaz0+funDu7PlzZ8+fP/nW1Wtrp7b+7bDH+yvnn8e+dh5oWXL+OXP5lyXn/8VUy78sOf8XUy3/suT88/s9+Zcl558/+8i/LDn/l1Mt/7Lk/L+cavmXJef/SqrlX5ac/1dSLf+y5PxfTbX8y5LzP5Fq+Zcl538y1fIvS84/H+GSf1ly/vnMBvmXJed/JtXyL0vO/2yq5V+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Py/mmr5lyXn/7VUy78sOf/XUi3/suT8v55q+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/q+nWv5leXD/fzNTnvnP3yNmoBtmzIyb6fo3EwAAAAAAAAAAAADQNo3TibteRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCCHECWtjiAOLd9df4BCDSUJKSZtSEtKmJTWOvTZO/FXvOgGEylJoSxSkIrUX9KJpEqVRpLYCRZGaSjRCaqT2rlwl4iZqJS4sFSoHJZVSBbY6M+/77szs7Mz6Y+3z8fsh/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBWGz42/ecDWZbl/zf+WJdll+d/X5Ptyb+c23mpVwgAAACcr7caf/7DFemEPcu4UMs2//aB//j+/Pz8fPaFN0+//Zfz8+mMsSwbWp1ljfOif//lL+ZbtwmeykYHBlu+Huxz80N9zh/uc/5In/NX9Tl/dZ/zR/ucv2gHLLKm+fuYxpVtavx1XXOXZldlI43zNnW51FMDqwcH4+9yGgYal5kfOZgdzo5k09nkossMNP7Lspc25Ld1TxZva7DlttZnWXbmZ4/vj2sYCPt4U9Z2Yw2tj90bd2Vjb/7s8f3fmX39vd1m392waKVZtnljvs6ns2zh11XZQLY67ZO4zsGWda7vss6htnUONC6X/71znWeWuc54v0fDOl/psc714bRHrs+ybC5bcptOT2WD2dqOW037e7R5ROTXkT+U78qGz+o42bCM4yS/zGvXtx8nncdk3P8bwj4ZXmINrQ/HG0+uWrTfz/U4ye91EY7V/Lrvy290dLT1V6ttx2q+zeM3LH0MdH3suhwD6VhuOQY29jsGBlcNNY6BwYU1b2w7BqYWXWYwG2jc1ukbeh8DE7NHT0zMPPrYLYeP7js0fWj62NTkzu3bdmzftmPHxMHDR6Ynm3+e3S4tkbXZYDoGN4bXmngMfrBj29ZDcv6bF+55MFqQ50F+3z9zY76gywezJY7xfJunN5//8yB93295Hgy3PA+6vqZ2eR4ML+N5kG9zZvPyvmcOt/zfbQ0r9Vq4ruUYuJTfD/PbfPBDS78Wrg/reuams/1+OLToGIh3ayA89/JT0s97o7eF/bL4uLg2P+OyVdmpmemTWx7ZNzt7cioL46K4suWx6jxe1rbcp2zR8TJ41sfLnr//1Y3Xdjl9XdhXozf3fqzybbaP936sGq/u7ftzVdbcn22nbs3CuMAu9v7s9t0s358pS/TYn/k2T99y/j8LplzS8vo30u/1b2hkuPn6N5T2xkjb69/ih2aosbIsO3PL8l7/RsL/F/v176qCvP7l++rBLb2PgXybZybO9hgY7vn6d32YA2E9HwqJYbQl97/dOH+ueZi2PJZ9j5vh4ZFw3AzHW2w/brYtukx+bfltb548t+Nm8/Xtj1Xbzy0VPG7yffVXk72Pm3ybl6fO/7VjTfxry2vHqn7HwMjQqny9I+kgaL7eza+Jx8CWbH92PDuSHUiXyR/l/LbGty7vGFgV/r/Yrx3XFOQYyPfV81t7HwP5Nj/admF/dtocTknbtPzs1Pn7haUy/7XDC9fXudsudObP1/nxH38qndYtQ+TbvL79bHNG7/10czjlsi77qfP5s9QxfSC7OPvpmrDOIzt6/24q3+aqncs8nvZkWfbq1KuN33eF3+9+79SPv9/2e99uv1N+derVeyfu/8nZrB8AgHP3duPPuVXNnzVb/sV6Of/+DwAAAJRCzP2DYSbyPwAAAFRGzP1DYSbyPwAAAFRGzP3DYSY1yf8P37brhbeeyNK7Ac4H8fy4G+67o7ld7HjPha/H5hfkp3/02yMvfPWJ5d32YJZlv7r3fV23f/iOuK6mE3GdH24/fZFrrlvW7T/0wMJ2re+fcGZX8/rj/VnuYRC7yi9NbG1c79ijU4358r1ZY94/98xTzetvfh23P72tuf3fhDct2XNwoO3ym8N6NoU5Ft5T5r49C/shn/FyL6z/wL9e+dmF24uXG9j4zsbdfP6Pm9cb3yPquSub28f7vdT6/+Vr330h3/6RG7qv/4nB7us/Ha73tTB/ubu5fes+/2rL+v80rD/eXrzclm/9sOv6X3xPc/sXw3HxjTA713/XX7z/rW6PV7ydPbc3Lxdvf/J/tzcuF68vXn/n+kefmGrbH53X//KbzevZ/eWfD7VuH0+PtxM9dHv78T0QHt+2HnmWZd/9s6xtP2cfaV7unzvWH6/vxO3d139zxzpPDFzXuPzC/VnXdr++/ndbu97fuJ49/7iu7f48d3fYf29O/Ci/3tP3h+MxnP9/rzSvr/O9TF+8u/31Jm7/jXXN5228vomO9T/Xsf656/J913/997zZXP+Ld65uW/+eT4Tj6Z7m7Lf+Q397Rdvlv/md5uNx8ivjx47PnDp8oGWvtj6PV4+uWXvZ5e945xXhtbTz673HZx+ePjk2OTaZZWMlfMvAlV7/t8L8n+aYu/C30PSTnzePu2c/2fy+9cFfNL9+Lpz+UHg84/fHr//1SNvx2vm4z93ZnOe7/pvCOpbrPV/7r+uWteHpz7906p/+5PXOnwvi/Tnx7tHG/Xt+w9WN8wZebp7f+XrVz3++u/15/dPhycb8Qdiv8+GdmTde3by9zuuP703y7Kebz9/4k1y8fNbxfiLrhtrvx/mu/6fh55gfXtP++hePjx880fFuzuuygXwJc+H1IZtrnh+3ivv72TNXd729+D482dx7z2aZS5p5dGbiyOFjpx6ZmJ2emZ2YefSxvUePnzo2u7fx3qV7v9jv8gvP77WN5/eB6Z3bs8az/XhzrLBLvf4TD+w/cOvkjQemD+47dXD2gRPTJw/tn5nZP31g5sZ9Bw9Of6Xf5Q8f2D21dde2W7eOHzp8YPdtu3Zt2zV++NjxfBnNRfWxc/JL48dO7m1cZGb39l1TO3Zsnxw/evzA9O5bJyfHT/W7fON703h+6S+Pn5w+sm/28NHp8ZnDj03vntq1c+fWvu/+ePTEwZmxiZOnjk2cGp4+OdG8L2OzjZPz7339Lk89zBwPr3cdBsJP55+7eWd6f9zct59c8qqam7T/eJq9Ed4LKn5/6/d1zP0jYSY1yf8AAABQBzH3hzf+XzhD/gcAAIDKiLl/dZiJ/A8AAACVEXN/M/mPpo9/r0v+v1D9/yf1/xv0//X/M/3/RP9f/z/T/9f/70P/X/+/zOvX/0/9/xn9f5ZStP5/yP3Zmizz7/8AAABQUTH3rw0zkf8BAACgMmLuvyzMRP4HAACAyoi5//Iwk5rkf5//r/+v/9+r/x+31f/P9P+L0P/f9N/6/4vo/+v/Z/r/5+xS9+fLvv4C9v/X6P9TNEXr/8fc/44wk5rkfwAAAKiDmPvfGWYi/wMAAEBlxNx/RZiJ/A8AAACVEXP/ujCTmuR//X/9f/1/n/+v/1+a/r/P/+9C/1//P9P/P2eXuj9f9vUXsP/v8/8pnKL1/2Pu/7Uwk5rkfwAAAKiDmPvfFWYi/wMAAEBlxNx/ZZiJ/A8AAACVEXP/VWEmNcn/9ez/v5Zlmf5/pv+v/9+xTv1//f+VoP+v/9+L/r/+f5nXr/+v/09/Rev/x9z/7jCTmuR/AAAAqIOY+68OM5H/AQAAoDJi7n9PmIn8DwAAAJURc/81YSY1yf/17P/7/H/9/yb9//Z16v/r/68E/X/9/170/5fR/x9e+Kv+f7HWr/+v/09/Rev/x9z/3jCTmuR/AAAAqIOY+68NM5H/AQAAoDJi7n9fmIn8DwAAAJURc//6MJOa5H/9f/1//X/9f/1//f+VVK7+/+CS5+j/N+n/t7tw/f+5hQX4/P/SrF//X/+f/orW/4+5//1hJjXJ/wAAAFAHMfd/IMxE/gcAAIDKiLn/ujAT+R8AAAAqI+b+sTCTmuR//X/9f/1//X/9f/3/lVSu/v/S9P+b9P/bXZTP/2+h/1+s9ev/6//TX9H6/zH3bwgzqUn+BwAAgDqIuX9jmIn8DwAAAJURc//1YSbyPwAAAFRGzP2bwkxqkv/1//X/9f/1//X/9f9Xkv6//n8v+v/6/2Vev/6//j/9Fa3/H3P/DWEmNcn/AAAAUAcx998YZiL/AwAAQGXE3P/BMBP5HwAAACoj5v7NYSY1yf/6//r/+v8l7v8P6f9n+v+Fp/+v/9+L/r/+f5nXr/+v/09/Rev/x9z/oTCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7r85zET+BwAAgMqIuX88zKQm+V//X/9f/7/E/X+f/9+2fv3/YtL/1//vRf9f/7/M69f/1/+nv6L1/2PuvyXMpCb5HwAAAOog5v4tYSbyPwAAAFRGzP0TYSbyPwAAAFRGzP2TYSY1yf/6//r/+v/6//r/+v8rSf9f/78X/X/9/zKvX/9f/5/+itb/j7l/KsykJvkfAAAA6iDm/q1hJvI/AAAAVEbM/dvCTOR/AAAAqIyY+7eHmdQk/5ek/78lFaD0//X/9f/1//X/S0X/X/+/F/1//f8yr1//X/+fdoNdTita/z/m/h1hJjXJ/wAAAFAHMffvDDOR/wEAAKAyYu6/NcxE/gcAAIDKiLn/tjCTmuT/kvT/ff6//r/+fwv9f/3/MtH/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xVmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvDzOR/wEAAKBUun0OYRRz/0fCTGqS//X/q97/n1+t/6//r//fe/36/ytL/1//vxf9f/3/Mq9f/1//n/6K1v+PuX93mElN8j8AAADUQcz9d4SZyP8AAABQGTH33xlmIv8DAABAZcTcvyfMpCb5X/+/6v1/n/+v/6//32/9+v8rS/9f/78X/f9y9v/Djy36/wXq/+fHkP4/RVS0/n/M/XeFmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3fzzMpCb5X/9f/1//X/9f/1//fyXp/69Y/7/xUljk/v+aZdyM/n85+/+R/n9x+v8+/5+iKlr/P+b+u8NMapL/AQAAoA5i7v9EmIn8DwAAAJURc/+vh5nI/wAAAFAZMfffE2ZSk/yv/6//r/+v/6//r/+/kvT/ff5/L/r/+v9lXr/+v/4//RWt/x9z/2+EmdQk/wMAAEAdxNx/b5iJ/A8AAACVEXP/J8NM5H8AAAAomVVLnhNz/2+GmdQk/5ev/z9Wyv7/YLp+/X/9f/1//X/9/wtJ/1//P9P/P2eXuj9f9vXr/+v/01/R+v8x9/9WmElN8j8AAADUQcz9nwozkf8BAACgMmLu/+0wE/kfAAAAKiPm/vvCTGqS/y90/7/z8r34/H/9/0z/X/9f/1///zzp/+v/Z/r/5+xS9+fLvn79f/1/+ita/z/m/t8JM6lJ/gcAAIA6iLn//jAT+R8AAAAK6uGzvkTM/Z8OM5H/AQAAoDJi7v9MmElN8n/5Pv9f/1//X/9f/1//v0z0//X/e9H/1/8v8/r1//X/6a9o/f+Y+x8IM6lJ/gcAAIA6iLn/s2Em8j8AAABURsz9vxtmIv8DAABAZcTc/3thJj3y/9KVhPLR/9f/1//X/9f/1/9fSfr/i/v/+WuY/n+T/r/+f5nXr/+v/09/Rev/x9z/uTAT//4PAAAAlRFz/++Hmcj/AAAAUBkx9/9BmIn8DwAAAJURc/+DYSY1yf/6//r/+v/6//r/+v8rSf/f5//3ov+v/1/m9ev/6//TX9H6/zH3fz7MpCb5HwAAAOog5v4/DDOR/wEAAKAyYu7fG2Yi/wMAAEBlxNz/UJhJTfK//r/+v/6//r/+v/7/StL/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xdmsqf9ZgAAAIDyirn/C2EmNfn3fwAAAKiDmPv3h5nI/wAAAFAZMfcfCDOpSf7X/9f/1//X/9f/1/9fSfr/+v+96P/r/5d5/fr/+v/0V7T+f8z902EmNcn/AAAAUAcx9x8MM5H/AQAAoDJi7j8UZiL/AwAAQGXE3P9wmElN8r/+v/6//n9t+/+vfK9jnfr/+v8rQf9f/78X/X/9/zKvX/9f/5/+itb/j7n/cJhJTfI/AAAA1EHM/V8MM5H/AQAAoDJi7v9SmIn8DwAAAJURc/+RMJOa5H/9f/1//f/a9v+X9/n/axZuV/9f//9c6P/r//ei/6//X+b16//r/9Nf0fr/MfcfDTOpSf4HAACAOoi5/1iYifwPAAAAlRFz//EwE/kfAAAAKiPm/hNhJjXJ//r/Z9X/XzWwRDdQ/7/7+vX/K9D/b6H/r/9/LvT/9f970f/X/y/z+vX/9f/pr2j9/5j7/yjMpCb5HwAAAOog5v6TYSbyPwAAAFRGzP0zYSbyPwAAAFRGzP2zYSY1yf/6/z7/X/9f/1//X/9/Jen/6//3ov+v/1/m9ev/6//TX9H6/zH3nwozqUn+B4D/Z+8+c/U6qz4OP6/zOiRCwBTCEGACDIExIDEGeknooUPovYXeQofQe++99x4IvUpB8VlrhWPsvW2f8/jc+17X9SELTpB8RzEf/kp+2gAAHeTuv1/cYv8DAADANHL33z9usf8BAABgGrn7HxC3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9aN1v/n7n9g3NJk/wMAAEAHufsfFLfY/wAAADCN3P0PjlvsfwAAAJhG7v6HxC1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7Hxq3NNn/AAAA0EHu/ofFLfY/AAAATCN3/8PjFvsfAAAAppG7/9q4pcn+1//r//X/G+z//1//r//fDv2//n+J/l//v+X36//1/6wbrf/P3X9d3NJk/wMAAEAHufsfEbfY/wAAADCN3P2PjFvsfwAAAJhG7v5HxS1N9r/+X/+v/99g/+/7//r/DdH/6/+X6P/1/1t+v/5f/8+60fr/3P2Pjlua7H8AAADoIHf/Y+IW+x8AAACmkbv/sXGL/Q8AAADTyN3/uLilyf7X/+v/9f/6f/2//n+f9P/6/yX6f/3/lt+v/9f/s27v/f+9rz9zL7T/z91/fdzSZP8DAABAB7n7Hx+32P8AAAAwjdz9T4hb7H8AAACYRu7+J8YtTfa//l//f0f/f9v/6f/1//r/O36u/z8e+n/9/xL9v/5/y+/X/+v/Wbf3/n+l9z/7v+fuf1Lc0mT/AwAAQAe5+58ct9j/AAAAMI3c/U+JW+x/AAAAmEbu/qfGLU32v/5f/+/7//p//b/+f5/0/8P2/2f/X+8w/f8F0f/r/8/X/9/rAt6v/6eD0fr/3P1Pi1ua7H8AAADoIHf/0+MW+x8AAACmkbv/hrjF/gcAAIBp5O5/RtzSZP/r//X/+n/9/+H+/1TL/v/2n+n/90P/P2z/v0z/f0H0//p/3//X/7NstP4/d/8z45Ym+x8AAAA6yN3/rLjF/gcAAIBp5O5/dtxi/wMAAMA0cvc/J25psv/1//p//b/+/0jf/79ijv7f9//3R/+v/1+i/9f/b/n9+n/9P+tG6/9z9z83bmmy/wEAAGB6p3a1+58Xt9j/AAAAMI3c/c+PW+x/AAAAmEbu/hfELU32v/5f/6//1/8fqf+f5Pv/+v/90f/r/5dcaP+/0//XX4v+f5z36//1/6wbrf/P3f/CuKXJ/gcAAIAOcve/KG6x/wEAAGAauftfHLfY/wAAADCN3P0viVua7H/9v/5f/6//1//r//dJ/6//X+L7//r/Lb9f/6//Z91o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HL2/j91OV91+ej/9f/6f/2//l//v0/6f/3/Ev3/ufv/q87z6+n/x3q//l//z7rR+v/c/TfGLf75PwAAAEwjd/8r4xb7HwAAAKaRu/9VcYv9DwAAANPI3f/quKXJ/j9f/3/rnQ/+vP7/wuj/z/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/NXFLk/0PAAAAHeTuf23cYv8DAADANHL3vy5usf8BAABgGrn7Xx+3NNn/x//9/2v0//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xC3NNn/AAAA0EHu/jfGLfY/AAAATCN3/5viFvsfAAAAppG7/81xS5P9f/z9v+//6/8vsv8/pf9P+v/4+6r/1/9fBP2//n+n/79kJ93Pb/39+n/9P+tG6/9z9990Zur12/8AAADQwU1n/njV7i1xi/0PAAAA08jd/9a4xf4HAACAaeTuf1vc0mT/6//1/yfe//v+f9H/x99X/b/+/yLo//X/O/3/JTvpfn7r79f/6/9ZN1r/n7v/7XFLk/0PAAAAHeTuf0fcYv8DAADANGL3H/zL7/Y/AAAATOmdZ/541e5dcUuT/d+4/7/mqP3/1f/1n/X/536//v9Y+v+bzv69p//X/2+J/l//v0T/r//f8vvH6f/jB9fq/xnPaP1/7v53xy1N9j8AAAB0kLv/PXGL/Q8AAADTyN1/c9xi/wMAAMA0cve/N25psv8b9/+TfP//PrfEC/T/8/b/vv8fV/+v/z8X/b/+f6f/v2Qn3c9v/f3j9P++/8+4Ruv/c/e/L25psv8BAACgg9z9749b7H8AAACYRu7+D8Qt9j8AAABMI3f/B+OWJvtf/7/1/t/3//X/+n/9/9j0//r/Jfp//f+W36//1/+zbrT+P3f/h+KWJvsfAAAAOsjd/+G4xf4HAACAaeTu/0jcYv8DAADANHL3fzRuabL/9f/6/331/7f/Ivr/Jv3/dfr/nf7/vPT/+v8l+n/9/5bfr//X/7NutP4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBp5O7/RNxi/wMAAMA0cvd/Mm64x11O7knH6/R5fh69uf5f/+/7//p/3//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/1Tc4p//AwAAwDRy9386brH/AQAAYBq5+z8Tt9j/AAAAMI3c/Z+NW5rsf/2//l//v9n+/2r9/+H36//HpP/X/y/R/+v/t/x+/b/+n3Wj9f+5+z8XtzTZ/wAAANBB7v7Pxy32PwAAAEwjd/8X4hb7HwAAAKaRu/+LcUuT/a//1//r/zfb//v+/1nv1/+PSf+v/1+i/9f/b/n9+n/9P+tG6/9z938pbmmy/wEAAKCD3P1fjlvsfwAAAJhG7v6vxC32PwAAAEwjd/9X45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9X4tbmux/AAAA6CB3/9fjFvsfAAAAppG7/xtxi/0PAAAA08jd/824pcn+n7n/X/qf6f8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7NutP4/d/+34pYm+x8AAAA6yN3/7bjF/gcAAIBp5O7/Ttxi/wMAAMA0cvd/N25psv9n7v+X6P8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7PuhPr/07vz9P+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+Hccs8+/++Ny/8Sf3/sff/Z34T6f/1/7sh+//Th96p/z+g/98v/b/+f4n+X/+/5ffr//X/rBvt+/+5+38Ut8yz/wEAAKC93P0/jlvsfwAAAJhG7v6fxC32PwAAAEwjd/9P45Ym+1//7/v/+v9O/f89r9j5/r/+/zLT/+v/l+j/9f9bfr/+X//PutH6/9z9P4tbmux/AAAA6CB3/8/jFvsfAAAAppG7/xdxi/0PAAAA08jd/8u4pcn+1//r//X/rfr/Q+/X/x/Q/++X/l//v0T/r//f8vuz/8/fd/p//T//a7T+P3f/r+KWJvsfAAAAOsjd/+u4xf4HAACAaeTu/03cYv8DAADANHL3/zZuabL/9f/6f/1/m/7/trvtdvp//f9lN1D/f+VRfh39/wH9/2H6f/2/7//r/1k2Wv+fu/+WuKXJ/gcAAIAOcvf/Lm6x/wEAAGAauft/H7fY/wAAADCN3P23xi1N9r/+X/8/Zf9/J/2/7//r/0cxUP9/JPr/A/r/w/T/+n/9v/6fZaP1/7n7/xC3NNn/AAAA0EHu/j/GLfY/AAAATCN3/5/iFvsfAAAAppG7/89xS5P9r//X/198/3+6/rqH7f99/1//r/8fxrz9/5X6f/3/kfv/G248+LH+f5vv1//r/1k3Wv+fu/8vcUuT/Q8AAAAd5O7/a9xi/wMAAMA0cvf/LW6x/wEAAGAaufv/Hrc02f/T9P93v+vB1f/7/r/+X/8fP9f/j2He/t/3//X/vv+v/9f/6/9ZM1r/n7v/H3FLk/0PAAAAHeTu/2fcYv8DAADANHL3/ytusf8BAABgGrn7/x23NNn/0/T/Sf+v/9f/6//j5/r/Mej/9f9L9P/6/y2/X/+v/2fdaP1/7v7/BAAA//9RaTCH") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x127081, 0x0) 0s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. syzkaller login: [ 69.327090][ T5774] cgroup: Unknown subsys name 'net' [ 69.458950][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.945354][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.556089][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.562589][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.056965][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.064720][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.069345][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.072872][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.081479][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.086812][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.093520][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.101815][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.107599][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.115022][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.121281][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.128930][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.135247][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.150171][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.150953][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.157787][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.164893][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.172667][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.185724][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.193556][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.194723][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.200642][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.216779][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.230450][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.675439][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 73.768432][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 73.839947][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 73.855816][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 73.881830][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.889068][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.897407][ T5790] bridge_slave_0: entered allmulticast mode [ 73.904634][ T5790] bridge_slave_0: entered promiscuous mode [ 73.950161][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.957660][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.965235][ T5790] bridge_slave_1: entered allmulticast mode [ 73.972349][ T5790] bridge_slave_1: entered promiscuous mode [ 74.069105][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.082752][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.092092][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.099248][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.106706][ T5784] bridge_slave_0: entered allmulticast mode [ 74.114058][ T5784] bridge_slave_0: entered promiscuous mode [ 74.168139][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.175731][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.183003][ T5784] bridge_slave_1: entered allmulticast mode [ 74.189818][ T5784] bridge_slave_1: entered promiscuous mode [ 74.210123][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.217315][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.224690][ T5785] bridge_slave_0: entered allmulticast mode [ 74.232021][ T5785] bridge_slave_0: entered promiscuous mode [ 74.250188][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.258346][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.266225][ T5783] bridge_slave_0: entered allmulticast mode [ 74.273330][ T5783] bridge_slave_0: entered promiscuous mode [ 74.283598][ T5790] team0: Port device team_slave_0 added [ 74.289753][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.296968][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.304593][ T5783] bridge_slave_1: entered allmulticast mode [ 74.311818][ T5783] bridge_slave_1: entered promiscuous mode [ 74.328573][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.335981][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.343302][ T5785] bridge_slave_1: entered allmulticast mode [ 74.350208][ T5785] bridge_slave_1: entered promiscuous mode [ 74.370439][ T5790] team0: Port device team_slave_1 added [ 74.412775][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.436453][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.468378][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.490738][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.513614][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.520562][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.546831][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.560787][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.573980][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.604479][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.611821][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.637897][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.667159][ T5784] team0: Port device team_slave_0 added [ 74.676683][ T5784] team0: Port device team_slave_1 added [ 74.685103][ T5785] team0: Port device team_slave_0 added [ 74.729218][ T5785] team0: Port device team_slave_1 added [ 74.759598][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.767254][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.793408][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.807143][ T5783] team0: Port device team_slave_0 added [ 74.816043][ T5783] team0: Port device team_slave_1 added [ 74.835154][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.842421][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.868621][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.880479][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.887702][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.913686][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.947062][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.954225][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.980211][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.012767][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.019741][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.046178][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.058859][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.066489][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.092486][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.109520][ T5790] hsr_slave_0: entered promiscuous mode [ 75.116517][ T5790] hsr_slave_1: entered promiscuous mode [ 75.217944][ T5784] hsr_slave_0: entered promiscuous mode [ 75.224636][ T5784] hsr_slave_1: entered promiscuous mode [ 75.230851][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.232762][ T5800] Bluetooth: hci2: command tx timeout [ 75.239134][ T5101] Bluetooth: hci3: command tx timeout [ 75.245102][ T5784] Cannot create hsr debugfs directory [ 75.276779][ T5785] hsr_slave_0: entered promiscuous mode [ 75.283570][ T5785] hsr_slave_1: entered promiscuous mode [ 75.289737][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.297401][ T5785] Cannot create hsr debugfs directory [ 75.312737][ T5101] Bluetooth: hci1: command tx timeout [ 75.316834][ T5800] Bluetooth: hci0: command tx timeout [ 75.335256][ T5783] hsr_slave_0: entered promiscuous mode [ 75.342045][ T5783] hsr_slave_1: entered promiscuous mode [ 75.348076][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.357104][ T5783] Cannot create hsr debugfs directory [ 75.701807][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.717249][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.737401][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.747089][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.813395][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.827430][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.839913][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.850120][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.944345][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.957298][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.967758][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.979825][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.068914][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.079283][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.089831][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.109017][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.130911][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.183493][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.204236][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.211928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.243268][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.250411][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.319890][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.333088][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.380685][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.405335][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.434487][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.441729][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.484645][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.491882][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.503205][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.510469][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.525669][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.532848][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.598360][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.708464][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.723087][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.745540][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.752693][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.776656][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.783931][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.906910][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.969988][ T5785] veth0_vlan: entered promiscuous mode [ 77.006144][ T5785] veth1_vlan: entered promiscuous mode [ 77.107532][ T5785] veth0_macvtap: entered promiscuous mode [ 77.134439][ T5785] veth1_macvtap: entered promiscuous mode [ 77.159137][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.182232][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.207125][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.226837][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.246239][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.255269][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.264541][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.273707][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317920][ T5101] Bluetooth: hci2: command tx timeout [ 77.323551][ T5800] Bluetooth: hci3: command tx timeout [ 77.364464][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.392465][ T5101] Bluetooth: hci1: command tx timeout [ 77.398069][ T5800] Bluetooth: hci0: command tx timeout [ 77.423435][ T5783] veth0_vlan: entered promiscuous mode [ 77.492311][ T5790] veth0_vlan: entered promiscuous mode [ 77.506994][ T5784] veth0_vlan: entered promiscuous mode [ 77.518462][ T5783] veth1_vlan: entered promiscuous mode [ 77.535720][ T5790] veth1_vlan: entered promiscuous mode [ 77.543509][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.557210][ T5784] veth1_vlan: entered promiscuous mode [ 77.568221][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.633215][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.649281][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.663740][ T5790] veth0_macvtap: entered promiscuous mode [ 77.674474][ T5790] veth1_macvtap: entered promiscuous mode [ 77.697123][ T5783] veth0_macvtap: entered promiscuous mode [ 77.716164][ T5783] veth1_macvtap: entered promiscuous mode [ 77.737588][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.749173][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.767014][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.793962][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.808172][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.828016][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.865026][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.875778][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.885920][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.897149][ T5871] syz.3.4[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.899181][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.929847][ T5871] loop3: detected capacity change from 0 to 2048 [ 77.945043][ T5784] veth0_macvtap: entered promiscuous mode [ 77.988560][ T5784] veth1_macvtap: entered promiscuous mode [ 78.018112][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.025231][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.047155][ T5871] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.058961][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.069326][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.081352][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.116570][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.119443][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.216610][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.227791][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.242895][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.255563][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.268663][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.284094][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.299768][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.314416][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.324428][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.338752][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.346418][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.356871][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.367988][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.379683][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.415683][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.431094][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.444233][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.454706][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.464577][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.475763][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.487480][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.499258][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.508453][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.518512][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.527490][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.549513][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.561286][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.570530][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.580083][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.614718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.630793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.707129][ T5876] loop3: detected capacity change from 0 to 32768 [ 78.772266][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.805326][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.828460][ T5876] ERROR: (device loop3): duplicateIXtree: [ 78.828460][ T5876] [ 78.872782][ T5876] ERROR: (device loop3): remounting filesystem as read-only [ 78.919788][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.943019][ T5876] BUG: Bad page state in process syz.3.5 pfn:5c8cc [ 78.949851][ T5876] page:ffffea0001723300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x33 pfn:0x5c8cc [ 78.962654][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.986965][ T5876] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 78.998585][ T5876] page_type: 0xffffffff() [ 79.010145][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.029038][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.044777][ T5880] ERROR: (device loop3): dtSearch: stack overrun! [ 79.044777][ T5880] [ 79.061536][ T5876] raw: 00fff0000000800c ffffea00017232c8 ffffc90004aaf940 0000000000000000 [ 79.074217][ T5876] raw: 0000000000000033 ffff88805c8c84d8 00000000ffffffff 0000000000000000 [ 79.075790][ T5880] btstack dump: [ 79.083576][ T5876] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 79.100548][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.116142][ T5880] bn = 0, index = 0 [ 79.123568][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.136799][ T5876] page_owner tracks the page as allocated [ 79.137128][ T5880] bn = 2d, index = 0 [ 79.148812][ T5880] bn = 0, index = 0 [ 79.182593][ T5876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5876, tgid 5875 (syz.3.5), ts 78915560407, free_ts 24079671951 [ 79.200306][ T5880] bn = 2d, index = 0 [ 79.208997][ T5876] post_alloc_hook+0x1cd/0x210 [ 79.214954][ T5876] get_page_from_freelist+0x195c/0x19f0 [ 79.221302][ T5876] __alloc_pages+0x1e3/0x460 [ 79.221320][ T5880] bn = 0, index = 0 [ 79.222273][ T5876] folio_alloc+0x1e/0x30 [ 79.235081][ T5876] filemap_alloc_folio+0xdf/0x470 [ 79.240260][ T5876] __filemap_get_folio+0x3ee/0xbc0 [ 79.246256][ T5876] pagecache_get_page+0x2a/0x250 [ 79.250988][ T5880] bn = 2d, index = 0 [ 79.251672][ T5876] __get_metapage+0x2a8/0xfa0 [ 79.260091][ T5876] diNewExt+0xa81/0x3120 [ 79.265933][ T5876] diAllocAG+0xe7a/0x1de0 [ 79.271277][ T5880] bn = 0, index = 0 [ 79.272055][ T5876] diAlloc+0x1d5/0x1660 [ 79.280475][ T5876] ialloc+0x8c/0x950 [ 79.286807][ T5876] jfs_mkdir+0x191/0xa30 [ 79.286960][ T5880] bn = 0, index = 0 [ 79.294892][ T5876] vfs_mkdir+0x296/0x440 [ 79.299775][ T5880] jfs_lookup: dtSearch returned -5 [ 79.300500][ T5876] do_mkdirat+0x1d4/0x440 [ 79.312678][ T5876] __x64_sys_mkdirat+0x89/0xa0 [ 79.317518][ T5876] page last free stack trace: [ 79.323383][ T5876] free_unref_page_prepare+0x7ce/0x8e0 [ 79.328922][ T5876] free_unref_page+0x32/0x2e0 [ 79.333787][ T5876] free_contig_range+0xa1/0x160 [ 79.338674][ T5876] destroy_args+0x87/0x770 [ 79.343414][ T5876] debug_vm_pgtable+0x3cc/0x410 [ 79.348709][ T5876] do_one_initcall+0x1fd/0x750 [ 79.354603][ T5876] do_initcall_level+0x137/0x1f0 [ 79.359606][ T5876] do_initcalls+0x69/0xd0 [ 79.364340][ T5876] kernel_init_freeable+0x3d2/0x570 [ 79.369666][ T5876] kernel_init+0x1d/0x1c0 [ 79.374259][ T5876] ret_from_fork+0x48/0x80 [ 79.378720][ T5876] ret_from_fork_asm+0x11/0x20 [ 79.384424][ T5876] Modules linked in: [ 79.388865][ T5876] CPU: 0 PID: 5876 Comm: syz.3.5 Not tainted 6.6.102-syzkaller #0 [ 79.396705][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.406806][ T5876] Call Trace: [ 79.410118][ T5876] [ 79.413088][ T5876] dump_stack_lvl+0x16c/0x230 [ 79.417888][ T5876] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.424080][ T5876] ? show_regs_print_info+0x20/0x20 [ 79.429317][ T5876] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.432599][ T5800] Bluetooth: hci3: command tx timeout [ 79.435511][ T5876] bad_page+0x14b/0x170 [ 79.440902][ T5800] Bluetooth: hci2: command tx timeout [ 79.445049][ T5876] free_unref_page_prepare+0x887/0x8e0 [ 79.445087][ T5876] free_unref_page_list+0xbe/0x860 [ 79.461057][ T5876] ? __folio_memcg+0x63/0x160 [ 79.465791][ T5876] ? folio_memcg+0x127/0x480 [ 79.470418][ T5876] release_pages+0x1fa0/0x2220 [ 79.475232][ T5876] ? lru_cache_disable+0x30/0x30 [ 79.480218][ T5876] ? mlock_drain_local+0x79/0x490 [ 79.482800][ T5101] Bluetooth: hci1: command tx timeout [ 79.485261][ T5876] ? mlock_drain_local+0x79/0x490 [ 79.485303][ T5876] ? mlock_drain_local+0x28d/0x490 [ 79.491512][ T5800] Bluetooth: hci0: command tx timeout [ 79.495696][ T5876] __folio_batch_release+0x71/0xe0 [ 79.495721][ T5876] truncate_inode_pages_range+0x358/0xf00 [ 79.495753][ T5876] ? mapping_evict_folio+0x510/0x510 [ 79.495795][ T5876] ? __static_call_return0+0x9/0x10 [ 79.495821][ T5876] ? shrink_dentry_list+0x685/0x6a0 [ 79.495852][ T5876] ? sync_filesystem+0x107/0x220 [ 79.495882][ T5876] jfs_remount+0x33b/0x5b0 [ 79.495909][ T5876] ? jfs_statfs+0x550/0x550 [ 79.495939][ T5876] reconfigure_super+0x21e/0x880 [ 79.495965][ T5876] path_mount+0xd19/0xfe0 [ 79.496000][ T5876] __se_sys_mount+0x2da/0x3c0 [ 79.560899][ T5876] ? __x64_sys_mount+0xc0/0xc0 [ 79.565799][ T5876] ? lockdep_hardirqs_on+0x98/0x150 [ 79.571006][ T5876] ? __x64_sys_mount+0x20/0xc0 [ 79.575772][ T5876] do_syscall_64+0x55/0xb0 [ 79.580188][ T5876] ? clear_bhb_loop+0x40/0x90 [ 79.584879][ T5876] ? clear_bhb_loop+0x40/0x90 [ 79.589607][ T5876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.595531][ T5876] RIP: 0033:0x7f26bc78ebe9 [ 79.599956][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.619568][ T5876] RSP: 002b:00007f26bd595038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.628022][ T5876] RAX: ffffffffffffffda RBX: 00007f26bc9b5fa0 RCX: 00007f26bc78ebe9 [ 79.636036][ T5876] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 79.644013][ T5876] RBP: 00007f26bc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 79.652004][ T5876] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000 [ 79.659989][ T5876] R13: 00007f26bc9b6038 R14: 00007f26bc9b5fa0 R15: 00007ffffb730c58 [ 79.667983][ T5876] [ 79.689118][ T5876] Disabling lock debugging due to kernel taint [ 79.696088][ T5876] BUG: Bad page state in process syz.3.5 pfn:5c8cb [ 79.703793][ T5876] page:ffffea00017232c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x32 pfn:0x5c8cb [ 79.714833][ T5876] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 79.724597][ T5876] page_type: 0xffffffff() [ 79.728984][ T5876] raw: 00fff0000000800c ffffea0001723288 ffffc90004aaf940 0000000000000000 [ 79.737863][ T5876] raw: 0000000000000032 ffff88805c8c83e0 00000000ffffffff 0000000000000000 [ 79.746525][ T5876] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 79.754153][ T5876] page_owner tracks the page as allocated [ 79.759877][ T5876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5876, tgid 5875 (syz.3.5), ts 78915509710, free_ts 24079661728 [ 79.777790][ T5876] post_alloc_hook+0x1cd/0x210 [ 79.782674][ T5876] get_page_from_freelist+0x195c/0x19f0 [ 79.788436][ T5876] __alloc_pages+0x1e3/0x460 [ 79.795023][ T5876] folio_alloc+0x1e/0x30 [ 79.799311][ T5876] filemap_alloc_folio+0xdf/0x470 [ 79.804835][ T5876] __filemap_get_folio+0x3ee/0xbc0 [ 79.809968][ T5876] pagecache_get_page+0x2a/0x250 [ 79.815094][ T5876] __get_metapage+0x2a8/0xfa0 [ 79.819792][ T5876] diNewExt+0xa81/0x3120 [ 79.824134][ T5876] diAllocAG+0xe7a/0x1de0 [ 79.828517][ T5876] diAlloc+0x1d5/0x1660 [ 79.832845][ T5876] ialloc+0x8c/0x950 [ 79.836759][ T5876] jfs_mkdir+0x191/0xa30 [ 79.841010][ T5876] vfs_mkdir+0x296/0x440 [ 79.845276][ T5876] do_mkdirat+0x1d4/0x440 [ 79.849651][ T5876] __x64_sys_mkdirat+0x89/0xa0 [ 79.854486][ T5876] page last free stack trace: [ 79.859164][ T5876] free_unref_page_prepare+0x7ce/0x8e0 [ 79.864808][ T5876] free_unref_page+0x32/0x2e0 [ 79.869513][ T5876] free_contig_range+0xa1/0x160 [ 79.874915][ T5876] destroy_args+0x87/0x770 [ 79.879367][ T5876] debug_vm_pgtable+0x3cc/0x410 [ 79.884280][ T5876] do_one_initcall+0x1fd/0x750 [ 79.889070][ T5876] do_initcall_level+0x137/0x1f0 [ 79.894191][ T5876] do_initcalls+0x69/0xd0 [ 79.898560][ T5876] kernel_init_freeable+0x3d2/0x570 [ 79.904172][ T5876] kernel_init+0x1d/0x1c0 [ 79.908544][ T5876] ret_from_fork+0x48/0x80 [ 79.913022][ T5876] ret_from_fork_asm+0x11/0x20 [ 79.917853][ T5876] Modules linked in: [ 79.922465][ T5876] CPU: 1 PID: 5876 Comm: syz.3.5 Tainted: G B 6.6.102-syzkaller #0 [ 79.931780][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.941862][ T5876] Call Trace: [ 79.945161][ T5876] [ 79.948124][ T5876] dump_stack_lvl+0x16c/0x230 [ 79.952809][ T5876] ? show_regs_print_info+0x20/0x20 [ 79.958030][ T5876] ? swiotlb_print_info+0x70/0x70 [ 79.963086][ T5876] ? dump_page+0xba7/0x14d0 [ 79.967616][ T5876] bad_page+0x14b/0x170 [ 79.971783][ T5876] free_unref_page_prepare+0x887/0x8e0 [ 79.977273][ T5876] free_unref_page_list+0xbe/0x860 [ 79.982386][ T5876] ? __folio_memcg+0x63/0x160 [ 79.987057][ T5876] ? folio_memcg+0x127/0x480 [ 79.991654][ T5876] release_pages+0x1fa0/0x2220 [ 79.996441][ T5876] ? lru_cache_disable+0x30/0x30 [ 80.001390][ T5876] ? mlock_drain_local+0x79/0x490 [ 80.006436][ T5876] ? mlock_drain_local+0x79/0x490 [ 80.011482][ T5876] ? mlock_drain_local+0x28d/0x490 [ 80.016643][ T5876] __folio_batch_release+0x71/0xe0 [ 80.021759][ T5876] truncate_inode_pages_range+0x358/0xf00 [ 80.027492][ T5876] ? mapping_evict_folio+0x510/0x510 [ 80.032813][ T5876] ? __static_call_return0+0x9/0x10 [ 80.038017][ T5876] ? shrink_dentry_list+0x685/0x6a0 [ 80.043219][ T5876] ? sync_filesystem+0x107/0x220 [ 80.048164][ T5876] jfs_remount+0x33b/0x5b0 [ 80.052588][ T5876] ? jfs_statfs+0x550/0x550 [ 80.057091][ T5876] reconfigure_super+0x21e/0x880 [ 80.062031][ T5876] path_mount+0xd19/0xfe0 [ 80.066369][ T5876] __se_sys_mount+0x2da/0x3c0 [ 80.071043][ T5876] ? __x64_sys_mount+0xc0/0xc0 [ 80.075816][ T5876] ? lockdep_hardirqs_on+0x98/0x150 [ 80.081021][ T5876] ? __x64_sys_mount+0x20/0xc0 [ 80.085800][ T5876] do_syscall_64+0x55/0xb0 [ 80.090220][ T5876] ? clear_bhb_loop+0x40/0x90 [ 80.094914][ T5876] ? clear_bhb_loop+0x40/0x90 [ 80.099585][ T5876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.105481][ T5876] RIP: 0033:0x7f26bc78ebe9 [ 80.109908][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.129526][ T5876] RSP: 002b:00007f26bd595038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.137963][ T5876] RAX: ffffffffffffffda RBX: 00007f26bc9b5fa0 RCX: 00007f26bc78ebe9 [ 80.145946][ T5876] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 80.153940][ T5876] RBP: 00007f26bc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 80.161917][ T5876] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000 [ 80.169904][ T5876] R13: 00007f26bc9b6038 R14: 00007f26bc9b5fa0 R15: 00007ffffb730c58 [ 80.177907][ T5876] [ 80.196506][ T5876] BUG: Bad page state in process syz.3.5 pfn:5c8ca [ 80.205924][ T5876] page:ffffea0001723280 refcount:0 mapcount:0 mapping:0000000000000000 index:0x31 pfn:0x5c8ca [ 80.218210][ T5876] flags: 0xfff0000000800c(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 80.227999][ T5876] page_type: 0xffffffff() [ 80.233296][ T5876] raw: 00fff0000000800c ffffea00017af008 ffffc90004aaf940 0000000000000000 [ 80.241946][ T5876] raw: 0000000000000031 ffff88805c8c82e8 00000000ffffffff 0000000000000000 [ 80.250545][ T5876] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 80.258016][ T5876] page_owner tracks the page as allocated [ 80.263893][ T5876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5876, tgid 5875 (syz.3.5), ts 78915457521, free_ts 24079651071 [ 80.282980][ T5876] post_alloc_hook+0x1cd/0x210 [ 80.287778][ T5876] get_page_from_freelist+0x195c/0x19f0 [ 80.293654][ T5876] __alloc_pages+0x1e3/0x460 [ 80.298306][ T5876] folio_alloc+0x1e/0x30 [ 80.302936][ T5876] filemap_alloc_folio+0xdf/0x470 [ 80.308001][ T5876] __filemap_get_folio+0x3ee/0xbc0 [ 80.313804][ T5876] pagecache_get_page+0x2a/0x250 [ 80.318785][ T5876] __get_metapage+0x2a8/0xfa0 [ 80.323752][ T5876] diNewExt+0xa81/0x3120 [ 80.328023][ T5876] diAllocAG+0xe7a/0x1de0 [ 80.332436][ T5876] diAlloc+0x1d5/0x1660 [ 80.336646][ T5876] ialloc+0x8c/0x950 [ 80.340549][ T5876] jfs_mkdir+0x191/0xa30 [ 80.345043][ T5876] vfs_mkdir+0x296/0x440 [ 80.349324][ T5876] do_mkdirat+0x1d4/0x440 [ 80.354336][ T5876] __x64_sys_mkdirat+0x89/0xa0 [ 80.359140][ T5876] page last free stack trace: [ 80.363868][ T5876] free_unref_page_prepare+0x7ce/0x8e0 [ 80.369383][ T5876] free_unref_page+0x32/0x2e0 [ 80.374124][ T5876] free_contig_range+0xa1/0x160 [ 80.378998][ T5876] destroy_args+0x87/0x770 [ 80.383563][ T5876] debug_vm_pgtable+0x3cc/0x410 [ 80.388430][ T5876] do_one_initcall+0x1fd/0x750 [ 80.393255][ T5876] do_initcall_level+0x137/0x1f0 [ 80.398217][ T5876] do_initcalls+0x69/0xd0 [ 80.403443][ T5876] kernel_init_freeable+0x3d2/0x570 [ 80.408702][ T5876] kernel_init+0x1d/0x1c0 [ 80.413204][ T5876] ret_from_fork+0x48/0x80 [ 80.418656][ T5876] ret_from_fork_asm+0x11/0x20 [ 80.423608][ T5876] Modules linked in: [ 80.427529][ T5876] CPU: 0 PID: 5876 Comm: syz.3.5 Tainted: G B 6.6.102-syzkaller #0 [ 80.436813][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.446864][ T5876] Call Trace: [ 80.450142][ T5876] [ 80.453162][ T5876] dump_stack_lvl+0x16c/0x230 [ 80.457837][ T5876] ? show_regs_print_info+0x20/0x20 [ 80.463033][ T5876] ? swiotlb_print_info+0x70/0x70 [ 80.468050][ T5876] ? dump_page+0xba7/0x14d0 [ 80.472577][ T5876] bad_page+0x14b/0x170 [ 80.476729][ T5876] free_unref_page_prepare+0x887/0x8e0 [ 80.482207][ T5876] free_unref_page_list+0xbe/0x860 [ 80.487345][ T5876] ? __folio_memcg+0x63/0x160 [ 80.492019][ T5876] ? folio_memcg+0x127/0x480 [ 80.496608][ T5876] release_pages+0x1fa0/0x2220 [ 80.501391][ T5876] ? lru_cache_disable+0x30/0x30 [ 80.506362][ T5876] ? mlock_drain_local+0x79/0x490 [ 80.511408][ T5876] ? mlock_drain_local+0x79/0x490 [ 80.516432][ T5876] ? mlock_drain_local+0x28d/0x490 [ 80.521550][ T5876] __folio_batch_release+0x71/0xe0 [ 80.526694][ T5876] truncate_inode_pages_range+0x358/0xf00 [ 80.532420][ T5876] ? mapping_evict_folio+0x510/0x510 [ 80.537727][ T5876] ? __static_call_return0+0x9/0x10 [ 80.542929][ T5876] ? shrink_dentry_list+0x685/0x6a0 [ 80.548145][ T5876] ? sync_filesystem+0x107/0x220 [ 80.553083][ T5876] jfs_remount+0x33b/0x5b0 [ 80.557499][ T5876] ? jfs_statfs+0x550/0x550 [ 80.562008][ T5876] reconfigure_super+0x21e/0x880 [ 80.566952][ T5876] path_mount+0xd19/0xfe0 [ 80.571286][ T5876] __se_sys_mount+0x2da/0x3c0 [ 80.575961][ T5876] ? __x64_sys_mount+0xc0/0xc0 [ 80.580715][ T5876] ? lockdep_hardirqs_on+0x98/0x150 [ 80.585910][ T5876] ? __x64_sys_mount+0x20/0xc0 [ 80.590674][ T5876] do_syscall_64+0x55/0xb0 [ 80.595117][ T5876] ? clear_bhb_loop+0x40/0x90 [ 80.599793][ T5876] ? clear_bhb_loop+0x40/0x90 [ 80.604502][ T5876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.610423][ T5876] RIP: 0033:0x7f26bc78ebe9 [ 80.614836][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.634440][ T5876] RSP: 002b:00007f26bd595038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.642848][ T5876] RAX: ffffffffffffffda RBX: 00007f26bc9b5fa0 RCX: 00007f26bc78ebe9 [ 80.651340][ T5876] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 80.659324][ T5876] RBP: 00007f26bc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 80.667292][ T5876] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000 [ 80.675260][ T5876] R13: 00007f26bc9b6038 R14: 00007f26bc9b5fa0 R15: 00007ffffb730c58 [ 80.683249][ T5876] [ 80.693102][ T5876] BUG: Bad page state in process syz.3.5 pfn:2eb61 [ 80.699729][ T5876] page:ffffea0000bad840 refcount:0 mapcount:0 mapping:0000000000000000 index:0xd pfn:0x2eb61 [ 80.711218][ T5876] flags: 0xfff0800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 80.722954][ T5876] page_type: 0xffffffff() [ 80.727339][ T5876] raw: 00fff0800000820c ffffea0000b9ba48 ffffea0000bde148 0000000000000000 [ 80.736571][ T5876] raw: 000000000000000d ffff8880261a1e88 00000000ffffffff 0000000000000000 [ 80.745381][ T5876] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 80.756229][ T5876] page_owner tracks the page as allocated [ 80.762147][ T5876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5876, tgid 5875 (syz.3.5), ts 78745538189, free_ts 78737922416 [ 80.779916][ T5876] post_alloc_hook+0x1cd/0x210 [ 80.784724][ T5876] get_page_from_freelist+0x195c/0x19f0 [ 80.790298][ T5876] __alloc_pages+0x1e3/0x460 [ 80.795246][ T5876] folio_alloc+0x1e/0x30 [ 80.799560][ T5876] filemap_alloc_folio+0xdf/0x470 [ 80.804696][ T5876] do_read_cache_folio+0x36c/0x7e0 [ 80.809918][ T5876] do_read_cache_page+0x32/0x250 [ 80.814904][ T5876] __get_metapage+0x31a/0xfa0 [ 80.819605][ T5876] diReadSpecial+0x25b/0x710 [ 80.824413][ T5876] jfs_mount+0x3d1/0x860 [ 80.829016][ T5876] jfs_fill_super+0x4e2/0xac0 [ 80.833799][ T5876] mount_bdev+0x22b/0x2d0 [ 80.838140][ T5876] legacy_get_tree+0xea/0x180 [ 80.842875][ T5876] vfs_get_tree+0x8c/0x280 [ 80.847311][ T5876] do_new_mount+0x24b/0xa40 [ 80.852277][ T5876] __se_sys_mount+0x2da/0x3c0 [ 80.856998][ T5876] page last free stack trace: [ 80.861747][ T5876] free_unref_page_prepare+0x7ce/0x8e0 [ 80.867245][ T5876] free_unref_page+0x32/0x2e0 [ 80.871982][ T5876] __slab_free+0x35e/0x410 [ 80.876426][ T5876] qlist_free_all+0x75/0xe0 [ 80.880929][ T5876] kasan_quarantine_reduce+0x143/0x160 [ 80.886583][ T5876] __kasan_slab_alloc+0x22/0x80 [ 80.891502][ T5876] slab_post_alloc_hook+0x6e/0x4d0 [ 80.896644][ T5876] kmem_cache_alloc+0x11e/0x2e0 [ 80.901612][ T5876] getname_kernel+0x5a/0x2f0 [ 80.906235][ T5876] kern_path+0x1d/0x50 [ 80.910306][ T5876] tomoyo_mount_permission+0x774/0x970 [ 80.915942][ T5876] security_sb_mount+0x87/0xc0 [ 80.920744][ T5876] path_mount+0xbc/0xfe0 [ 80.925034][ T5876] __se_sys_mount+0x2da/0x3c0 [ 80.930020][ T5876] do_syscall_64+0x55/0xb0 [ 80.934512][ T5876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.940484][ T5876] Modules linked in: [ 80.944641][ T5876] CPU: 0 PID: 5876 Comm: syz.3.5 Tainted: G B 6.6.102-syzkaller #0 [ 80.953950][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.964016][ T5876] Call Trace: [ 80.967306][ T5876] [ 80.970234][ T5876] dump_stack_lvl+0x16c/0x230 [ 80.974922][ T5876] ? show_regs_print_info+0x20/0x20 [ 80.980117][ T5876] ? swiotlb_print_info+0x70/0x70 [ 80.985137][ T5876] ? dump_page+0xba7/0x14d0 [ 80.989643][ T5876] bad_page+0x14b/0x170 [ 80.993821][ T5876] free_unref_page_prepare+0x887/0x8e0 [ 80.999307][ T5876] free_unref_page_list+0xbe/0x860 [ 81.004422][ T5876] ? __folio_memcg+0x63/0x160 [ 81.009096][ T5876] ? folio_memcg+0x127/0x480 [ 81.013694][ T5876] release_pages+0x1fa0/0x2220 [ 81.018456][ T5876] ? lru_cache_disable+0x30/0x30 [ 81.023389][ T5876] ? mlock_drain_local+0x79/0x490 [ 81.028414][ T5876] ? mlock_drain_local+0x79/0x490 [ 81.033437][ T5876] ? mlock_drain_local+0x28d/0x490 [ 81.038561][ T5876] __folio_batch_release+0x71/0xe0 [ 81.043688][ T5876] truncate_inode_pages_range+0x358/0xf00 [ 81.049415][ T5876] ? mapping_evict_folio+0x510/0x510 [ 81.054716][ T5876] ? __static_call_return0+0x9/0x10 [ 81.059917][ T5876] ? shrink_dentry_list+0x685/0x6a0 [ 81.065114][ T5876] ? sync_filesystem+0x107/0x220 [ 81.070064][ T5876] jfs_remount+0x33b/0x5b0 [ 81.074507][ T5876] ? jfs_statfs+0x550/0x550 [ 81.079023][ T5876] reconfigure_super+0x21e/0x880 [ 81.083960][ T5876] path_mount+0xd19/0xfe0 [ 81.088295][ T5876] __se_sys_mount+0x2da/0x3c0 [ 81.092961][ T5876] ? __x64_sys_mount+0xc0/0xc0 [ 81.097716][ T5876] ? lockdep_hardirqs_on+0x98/0x150 [ 81.102910][ T5876] ? __x64_sys_mount+0x20/0xc0 [ 81.107663][ T5876] do_syscall_64+0x55/0xb0 [ 81.112094][ T5876] ? clear_bhb_loop+0x40/0x90 [ 81.116763][ T5876] ? clear_bhb_loop+0x40/0x90 [ 81.121431][ T5876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.127328][ T5876] RIP: 0033:0x7f26bc78ebe9 [ 81.131741][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.151384][ T5876] RSP: 002b:00007f26bd595038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.159819][ T5876] RAX: ffffffffffffffda RBX: 00007f26bc9b5fa0 RCX: 00007f26bc78ebe9 [ 81.167788][ T5876] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 81.175755][ T5876] RBP: 00007f26bc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 81.183728][ T5876] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000 [ 81.191700][ T5876] R13: 00007f26bc9b6038 R14: 00007f26bc9b5fa0 R15: 00007ffffb730c58 [ 81.200113][ T5876] [ 81.220986][ T113] BUG: Bad page state in process jfsCommit pfn:5c8cd [ 81.228028][ T113] page:ffffea0001723340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x5c8cd [ 81.239020][ T113] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 81.252249][ T113] page_type: 0xffffffff() [ 81.256662][ T113] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000 [ 81.265759][ T113] raw: 000000000000002d ffff88805c8c85d0 00000000ffffffff 0000000000000000 [ 81.274402][ T113] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 81.281732][ T113] page_owner tracks the page as allocated [ 81.287456][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5876, tgid 5875 (syz.3.5), ts 78916497584, free_ts 24079682159 [ 81.305345][ T113] post_alloc_hook+0x1cd/0x210 [ 81.310156][ T113] get_page_from_freelist+0x195c/0x19f0 [ 81.315934][ T113] __alloc_pages+0x1e3/0x460 [ 81.320627][ T113] folio_alloc+0x1e/0x30 [ 81.325812][ T113] filemap_alloc_folio+0xdf/0x470 [ 81.330878][ T113] __filemap_get_folio+0x3ee/0xbc0 [ 81.336154][ T113] pagecache_get_page+0x2a/0x250 [ 81.341485][ T113] __get_metapage+0x2a8/0xfa0 [ 81.346343][ T113] dtSplitRoot+0x203/0x16b0 [ 81.350857][ T113] dtInsert+0xeec/0x5f40 [ 81.355195][ T113] jfs_mkdir+0x6c6/0xa30 [ 81.359467][ T113] vfs_mkdir+0x296/0x440 [ 81.363877][ T113] do_mkdirat+0x1d4/0x440 [ 81.368248][ T113] __x64_sys_mkdirat+0x89/0xa0 [ 81.373064][ T113] do_syscall_64+0x55/0xb0 [ 81.377507][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.383446][ T113] page last free stack trace: [ 81.388126][ T113] free_unref_page_prepare+0x7ce/0x8e0 [ 81.394129][ T113] free_unref_page+0x32/0x2e0 [ 81.398843][ T113] free_contig_range+0xa1/0x160 [ 81.403771][ T113] destroy_args+0x87/0x770 [ 81.408227][ T113] debug_vm_pgtable+0x3cc/0x410 [ 81.413182][ T113] do_one_initcall+0x1fd/0x750 [ 81.417971][ T113] do_initcall_level+0x137/0x1f0 [ 81.423079][ T113] do_initcalls+0x69/0xd0 [ 81.427437][ T113] kernel_init_freeable+0x3d2/0x570 [ 81.432717][ T113] kernel_init+0x1d/0x1c0 [ 81.437069][ T113] ret_from_fork+0x48/0x80 [ 81.441879][ T113] ret_from_fork_asm+0x11/0x20 [ 81.446717][ T113] Modules linked in: [ 81.450638][ T113] CPU: 1 PID: 113 Comm: jfsCommit Tainted: G B 6.6.102-syzkaller #0 [ 81.460026][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.470084][ T113] Call Trace: [ 81.473369][ T113] [ 81.476296][ T113] dump_stack_lvl+0x16c/0x230 [ 81.480975][ T113] ? show_regs_print_info+0x20/0x20 [ 81.486177][ T113] ? swiotlb_print_info+0x70/0x70 [ 81.491211][ T113] ? dump_page+0xba7/0x14d0 [ 81.495727][ T113] bad_page+0x14b/0x170 [ 81.499879][ T113] free_unref_page_prepare+0x887/0x8e0 [ 81.505347][ T113] free_unref_page+0x32/0x2e0 [ 81.510029][ T113] ? __folio_put+0xef/0x210 [ 81.514533][ T113] txUnlock+0x27e/0xcb0 [ 81.518693][ T113] jfs_lazycommit+0x570/0xa60 [ 81.523374][ T113] ? txFreelock+0x5a0/0x5a0 [ 81.527880][ T113] ? do_task_dead+0xd0/0xd0 [ 81.532389][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 81.537346][ T113] kthread+0x2fa/0x390 [ 81.541420][ T113] ? txFreelock+0x5a0/0x5a0 [ 81.545942][ T113] ? kthread_blkcg+0xd0/0xd0 [ 81.550532][ T113] ret_from_fork+0x48/0x80 [ 81.554959][ T113] ? kthread_blkcg+0xd0/0xd0 [ 81.559558][ T113] ret_from_fork_asm+0x11/0x20 [ 81.564345][ T113] [ 81.569229][ T5800] Bluetooth: hci2: command tx timeout [ 81.574675][ T5800] Bluetooth: hci3: command tx timeout [ 81.574993][ T113] page:ffffea0001723340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x5c8cd [ 81.580095][ T5800] Bluetooth: hci0: command tx timeout [ 81.590992][ T5101] Bluetooth: hci1: command tx timeout [ 81.596051][ T113] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 81.611433][ T113] page_type: 0xffffffff() [ 81.615763][ T113] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000 [ 81.624515][ T113] raw: 000000000000002d ffff88805c8c85d0 00000000ffffffff 0000000000000000 [ 81.633148][ T113] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 81.643754][ T113] page_owner tracks the page as allocated [ 81.649801][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5876, tgid 5875 (syz.3.5), ts 78916497584, free_ts 24079682159 [ 81.667794][ T113] post_alloc_hook+0x1cd/0x210 [ 81.672713][ T113] get_page_from_freelist+0x195c/0x19f0 [ 81.678287][ T113] __alloc_pages+0x1e3/0x460 [ 81.683089][ T113] folio_alloc+0x1e/0x30 [ 81.687406][ T113] filemap_alloc_folio+0xdf/0x470 [ 81.692599][ T113] __filemap_get_folio+0x3ee/0xbc0 [ 81.697754][ T113] pagecache_get_page+0x2a/0x250 [ 81.702827][ T113] __get_metapage+0x2a8/0xfa0 [ 81.707520][ T113] dtSplitRoot+0x203/0x16b0 [ 81.713230][ T113] dtInsert+0xeec/0x5f40 [ 81.717525][ T113] jfs_mkdir+0x6c6/0xa30 [ 81.722028][ T113] vfs_mkdir+0x296/0x440 [ 81.726315][ T113] do_mkdirat+0x1d4/0x440 [ 81.730654][ T113] __x64_sys_mkdirat+0x89/0xa0 [ 81.735528][ T113] do_syscall_64+0x55/0xb0 [ 81.739960][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.745908][ T113] page last free stack trace: [ 81.751307][ T113] free_unref_page_prepare+0x7ce/0x8e0 [ 81.756986][ T113] free_unref_page+0x32/0x2e0 [ 81.761714][ T113] free_contig_range+0xa1/0x160 [ 81.766580][ T113] destroy_args+0x87/0x770 [ 81.770992][ T113] debug_vm_pgtable+0x3cc/0x410 [ 81.775895][ T113] do_one_initcall+0x1fd/0x750 [ 81.780686][ T113] do_initcall_level+0x137/0x1f0 [ 81.785802][ T113] do_initcalls+0x69/0xd0 [ 81.790171][ T113] kernel_init_freeable+0x3d2/0x570 [ 81.796430][ T113] kernel_init+0x1d/0x1c0 [ 81.800799][ T113] ret_from_fork+0x48/0x80 [ 81.807896][ T113] ret_from_fork_asm+0x11/0x20 [ 81.813312][ T113] ------------[ cut here ]------------ [ 81.818786][ T113] kernel BUG at include/linux/mm.h:1447! [ 81.825171][ T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 81.831265][ T113] CPU: 1 PID: 113 Comm: jfsCommit Tainted: G B 6.6.102-syzkaller #0 [ 81.840645][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.850719][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 81.856025][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 57 98 dd fe e9 25 ff ff ff e8 3d 51 86 fe 48 8b 3c 24 48 c7 c6 00 f4 e3 8a e8 7d 13 c6 fe <0f> 0b f3 0f 1e fa 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff [ 81.875657][ T113] RSP: 0018:ffffc90002cd7cc0 EFLAGS: 00010246 [ 81.881737][ T113] RAX: e216394a230adc00 RBX: ffff88805c8c85d0 RCX: e216394a230adc00 [ 81.889728][ T113] RDX: 0000000000000000 RSI: ffffffff8afc66a0 RDI: ffffffff8afc6660 [ 81.897747][ T113] RBP: 000000000000007f R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 81.905727][ T113] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff88805c8c85f8 [ 81.913710][ T113] R13: ffffea0001723374 R14: 1ffff1100b9190bf R15: 1ffff1100b9190cc [ 81.921708][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 81.930656][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.937260][ T113] CR2: 00005555694f05c8 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 81.945232][ T113] Call Trace: [ 81.948522][ T113] [ 81.951496][ T113] txUnlock+0x427/0xcb0 [ 81.955677][ T113] jfs_lazycommit+0x570/0xa60 [ 81.960359][ T113] ? txFreelock+0x5a0/0x5a0 [ 81.964861][ T113] ? do_task_dead+0xd0/0xd0 [ 81.969365][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 81.974318][ T113] kthread+0x2fa/0x390 [ 81.978390][ T113] ? txFreelock+0x5a0/0x5a0 [ 81.982945][ T113] ? kthread_blkcg+0xd0/0xd0 [ 81.987534][ T113] ret_from_fork+0x48/0x80 [ 81.991954][ T113] ? kthread_blkcg+0xd0/0xd0 [ 81.996548][ T113] ret_from_fork_asm+0x11/0x20 [ 82.001327][ T113] [ 82.004358][ T113] Modules linked in: [ 82.016929][ T113] ---[ end trace 0000000000000000 ]--- [ 82.022582][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 82.027942][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 57 98 dd fe e9 25 ff ff ff e8 3d 51 86 fe 48 8b 3c 24 48 c7 c6 00 f4 e3 8a e8 7d 13 c6 fe <0f> 0b f3 0f 1e fa 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff [ 82.048558][ T113] RSP: 0018:ffffc90002cd7cc0 EFLAGS: 00010246 [ 82.055397][ T113] RAX: e216394a230adc00 RBX: ffff88805c8c85d0 RCX: e216394a230adc00 [ 82.063749][ T113] RDX: 0000000000000000 RSI: ffffffff8afc66a0 RDI: ffffffff8afc6660 [ 82.072251][ T113] RBP: 000000000000007f R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 82.080266][ T113] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff88805c8c85f8 [ 82.088316][ T113] R13: ffffea0001723374 R14: 1ffff1100b9190bf R15: 1ffff1100b9190cc [ 82.096330][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 82.105386][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.112578][ T113] CR2: 00005555694f05c8 CR3: 000000002e6da000 CR4: 00000000003506e0 [ 82.120562][ T113] Kernel panic - not syncing: Fatal exception [ 82.126941][ T113] Kernel Offset: disabled [ 82.131290][ T113] Rebooting in 86400 seconds..