last executing test programs:

1.960243753s ago: executing program 0 (id=440):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00cb7b"], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x2000c0c0)

1.960089497s ago: executing program 0 (id=441):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r1 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f00000003c0)=<r3=>0x0)
write$dsp(r0, &(0x7f0000000200)="97b218c6fd03", 0x6)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x8, 0x0, 0x0)

1.868252264s ago: executing program 0 (id=442):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)='\x00', 0x1, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000003c0)={r1})

1.850410618s ago: executing program 0 (id=444):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.697877406s ago: executing program 0 (id=445):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18)
poll(0x0, 0x0, 0x9e)

1.581248025s ago: executing program 2 (id=447):
pread64(0xffffffffffffffff, 0x0, 0x0, 0x100)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c)
r3 = dup(r1)
sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='t', 0x1}], 0x1}, 0x844)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
close_range(r0, 0xffffffffffffffff, 0x0)

1.510839688s ago: executing program 0 (id=448):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000200)={[{@force}, {@uid}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x3}}, {}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=")
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0)

1.429374871s ago: executing program 1 (id=449):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)

1.415598777s ago: executing program 2 (id=450):
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
setreuid(0x0, 0xee01)
shmctl$SHM_UNLOCK(r0, 0xc)

1.361411169s ago: executing program 1 (id=451):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$setlease(r0, 0x400, 0x2)

1.361153503s ago: executing program 2 (id=452):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001"], 0xfdef)

1.300512019s ago: executing program 1 (id=453):
syz_usb_connect(0x2, 0x34, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x30, 0x50, 0xc2, 0x20, 0x3a2d, 0xcb2e, 0xdbed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0xef, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x20, 0x2, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xffe}]}}]}}]}}]}}, 0x0)

1.210266295s ago: executing program 2 (id=454):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "e62997", 0x48, 0x6, 0xff, @local, @private2={0xfc, 0x2, '\x00', 0x3}, {[@routing={0x87, 0x2, 0x2, 0x8, 0x0, [@mcast1]}, @fragment={0xa9, 0x0, 0xf4, 0x0, 0x0, 0x5, 0x68}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xffff, 0x0, 0x0, 0x7, 0x3, 0x4, 0x4e24, 0x4e22, 0x3, 0x2}}}}}}}, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
modify_ldt$write(0x1, &(0x7f0000000380)={0x8, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)

190.315942ms ago: executing program 2 (id=455):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000)

110.046554ms ago: executing program 1 (id=456):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

51.299043ms ago: executing program 1 (id=457):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xe, &(0x7f0000000880)={@broadcast, @empty, @void, {@mpls_mc}}, 0x0)

50.933885ms ago: executing program 1 (id=458):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x0, 0x0, '\x00', [@pad1]}, 0x10)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)

0s ago: executing program 2 (id=459):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55785' (ED25519) to the list of known hosts.
syzkaller login: [   48.900626][ T5778] cgroup: Unknown subsys name 'net'
[   49.006429][ T5778] cgroup: Unknown subsys name 'cpuset'
[   49.014541][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.395946][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.630338][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.633843][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.637041][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.640171][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.643136][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.676110][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.680452][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.685950][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.690003][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.693923][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.755717][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.759455][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.763125][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.766968][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.770607][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.978014][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.146154][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.169779][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.173782][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.176956][ T5846] bridge_slave_0: entered allmulticast mode
[   55.181041][ T5846] bridge_slave_0: entered promiscuous mode
[   55.194319][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.197772][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.200802][ T5846] bridge_slave_1: entered allmulticast mode
[   55.205190][ T5846] bridge_slave_1: entered promiscuous mode
[   55.258327][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   55.300620][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.308113][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.392030][ T5846] team0: Port device team_slave_0 added
[   55.400247][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.404237][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.407335][ T5851] bridge_slave_0: entered allmulticast mode
[   55.410929][ T5851] bridge_slave_0: entered promiscuous mode
[   55.417008][ T5846] team0: Port device team_slave_1 added
[   55.419854][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.423917][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.427002][ T5851] bridge_slave_1: entered allmulticast mode
[   55.430936][ T5851] bridge_slave_1: entered promiscuous mode
[   55.502051][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.504388][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.514398][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.520324][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.524522][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.527067][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.529425][ T5855] bridge_slave_0: entered allmulticast mode
[   55.532829][ T5855] bridge_slave_0: entered promiscuous mode
[   55.536393][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.538775][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.549319][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.559773][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.572168][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.574576][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.577065][ T5855] bridge_slave_1: entered allmulticast mode
[   55.580203][ T5855] bridge_slave_1: entered promiscuous mode
[   55.610277][ T5851] team0: Port device team_slave_0 added
[   55.625171][ T5846] hsr_slave_0: entered promiscuous mode
[   55.627715][ T5846] hsr_slave_1: entered promiscuous mode
[   55.632474][ T5851] team0: Port device team_slave_1 added
[   55.671912][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.694646][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.699056][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.702779][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.713404][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.734051][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.736688][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.746524][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.770947][ T5855] team0: Port device team_slave_0 added
[   55.779861][ T5855] team0: Port device team_slave_1 added
[   55.813750][ T5851] hsr_slave_0: entered promiscuous mode
[   55.816200][ T5851] hsr_slave_1: entered promiscuous mode
[   55.818517][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   55.820474][ T5851] Cannot create hsr debugfs directory
[   55.863525][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.865855][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.875348][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.896369][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.899054][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.909065][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.983073][ T5855] hsr_slave_0: entered promiscuous mode
[   55.985512][ T5855] hsr_slave_1: entered promiscuous mode
[   55.987745][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   55.989590][ T5855] Cannot create hsr debugfs directory
[   56.076226][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.089808][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.101292][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.124391][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.165993][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.172315][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.188021][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.200657][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.238241][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.250217][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.257302][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.267636][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.342859][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.378366][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.393286][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.400487][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.403088][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.414275][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.426922][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.429996][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.448388][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.467929][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.471012][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.479238][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   56.491424][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.494537][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.511417][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.514567][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.531113][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.534235][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.628286][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.692925][ T5857] Bluetooth: hci0: command tx timeout
[   56.764152][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.766834][ T5857] Bluetooth: hci1: command tx timeout
[   56.768429][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.820682][ T5846] veth0_vlan: entered promiscuous mode
[   56.838969][ T5851] veth0_vlan: entered promiscuous mode
[   56.842358][ T5857] Bluetooth: hci2: command tx timeout
[   56.853512][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.858032][ T5846] veth1_vlan: entered promiscuous mode
[   56.865898][ T5851] veth1_vlan: entered promiscuous mode
[   56.914685][ T5855] veth0_vlan: entered promiscuous mode
[   56.919778][ T5846] veth0_macvtap: entered promiscuous mode
[   56.927243][ T5846] veth1_macvtap: entered promiscuous mode
[   56.939753][ T5851] veth0_macvtap: entered promiscuous mode
[   56.945903][ T5855] veth1_vlan: entered promiscuous mode
[   56.950332][ T5851] veth1_macvtap: entered promiscuous mode
[   56.968979][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.993033][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.026098][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.029368][ T5708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.034307][ T5708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.038023][ T5708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.043142][ T5855] veth0_macvtap: entered promiscuous mode
[   57.052309][ T5855] veth1_macvtap: entered promiscuous mode
[   57.057281][ T5708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.070564][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.096819][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.124242][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.128107][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.143602][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.155790][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.159508][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.189308][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.194850][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.209760][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.216307][  T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.223518][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.229491][  T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.273141][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.277018][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.334539][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.338430][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.360534][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.384886][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.388147][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.433027][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.436173][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.452211][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.457848][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.655983][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.725557][ T5916] loop1: detected capacity change from 0 to 32768
[   57.750720][ T5918] loop2: detected capacity change from 0 to 32768
[   57.759811][ T5916] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   57.807584][ T5849]  loop2: p9 p11 p16
[   57.814281][ T5916] XFS (loop1): Ending clean mount
[   57.825075][ T5916] XFS (loop1): Quotacheck needed: Please wait.
[   57.826163][ T5918]  loop2: p9 p11 p16
[   57.859416][ T5916] XFS (loop1): Quotacheck: Done.
[   57.900768][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   58.020445][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory
[   58.023151][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory
[   58.032396][ T5858] udevd[5858]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory
[   58.056404][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory
[   58.063770][ T5858] udevd[5858]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory
[   58.067840][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory
[   58.082639][ T5951] loop0: detected capacity change from 0 to 64
[   58.106965][ T5955] loop1: detected capacity change from 0 to 128
[   58.142659][ T5955] =======================================================
[   58.142659][ T5955] WARNING: The mand mount option has been deprecated and
[   58.142659][ T5955]          and is ignored by this kernel. Remove the mand
[   58.142659][ T5955]          option from the mount to silence this warning.
[   58.142659][ T5955] =======================================================
[   58.224368][ T5955] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   58.228977][ T5955] hpfs: filesystem error: improperly stopped
[   58.231427][ T5955] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   58.234974][ T5955] hpfs: You really don't want any checks? You are crazy...
[   58.237708][ T5955] hpfs: hpfs_map_sector(): read error
[   58.240049][ T5955] hpfs: code page support is disabled
[   58.243187][ T5955] hpfs: hpfs_map_4sectors(): unaligned read
[   58.245612][ T5955] hpfs: hpfs_map_4sectors(): unaligned read
[   58.248172][ T5955] hpfs: filesystem error: unable to find root dir
[   58.253707][ T5955] hpfs: hpfs_map_4sectors(): unaligned read
[   58.256815][ T5955] hpfs: hpfs_map_sector(): read error
[   58.514735][ T5899] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   58.722968][ T5899] usb 3-1: Using ep0 maxpacket: 8
[   58.729712][ T5899] usb 3-1: config 0 has an invalid interface number: 193 but max is 1
[   58.733628][ T5899] usb 3-1: config 0 has an invalid interface number: 4 but max is 1
[   58.737007][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   58.741436][ T5899] usb 3-1: config 0 has no interface number 0
[   58.745397][ T5899] usb 3-1: config 0 has no interface number 1
[   58.748113][ T5899] usb 3-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   58.753849][ T5899] usb 3-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[   58.759257][ T5899] usb 3-1: config 0 interface 193 has no altsetting 0
[   58.763368][ T5899] usb 3-1: config 0 interface 4 has no altsetting 0
[   58.768365][ T5899] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a
[   58.771737][ T5857] Bluetooth: hci0: command tx timeout
[   58.773809][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.776487][ T5899] usb 3-1: Product: syz
[   58.777971][ T5899] usb 3-1: Manufacturer: syz
[   58.779592][ T5899] usb 3-1: SerialNumber: syz
[   58.786306][ T5899] usb 3-1: config 0 descriptor??
[   58.991128][ T5857] Bluetooth: hci1: command tx timeout
[   58.994421][ T5857] Bluetooth: hci2: command tx timeout
[   59.105685][ T5899] usb 3-1: unknown interface protocol 0x4f, assuming v1
[   59.109602][ T5899] usb 3-1: 193:2 : does not exist
[   59.117703][ T5899] usb 3-1: unknown interface protocol 0x5, assuming v1
[   59.166335][ T5899] usb 3-1: 4:0 : does not exist
[   59.176438][ T5899] usb 3-1: USB disconnect, device number 2
[   59.226541][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   59.394314][ T5965] block nbd0: shutting down sockets
[   59.559334][ T5971] loop0: detected capacity change from 0 to 4096
[   59.606135][ T5971] ntfs3(loop0): ino=18, mi_enum_attr
[   59.608699][ T5971] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   59.620980][ T5971] ntfs3(loop0): ino=1a, mi_enum_attr
[   59.657204][ T5973] loop1: detected capacity change from 0 to 4096
[   59.709936][ T5973] /dev/loop1: Can't open blockdev
[   59.968570][ T5296] udevd[5296]: worker [5858] terminated by signal 33 (Unknown signal 33)
[   59.977042][ T5296] udevd[5296]: worker [5858] failed while handling '/devices/virtual/block/loop0'
[   60.152367][ T5989] capability: warning: `syz.0.28' uses 32-bit capabilities (legacy support in use)
[   60.507582][ T5975] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   60.511119][ T5975] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   60.525701][ T5975] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   60.535018][ T5975] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   60.538007][ T5975] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   60.550944][ T5975] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   60.558299][ T5975] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   60.561023][ T5975] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   60.568972][ T5975] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   60.872027][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   60.991794][   T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   61.031759][    T9] usb 1-1: Using ep0 maxpacket: 16
[   61.035749][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.041889][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.046251][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   61.051469][    T9] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   61.056103][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.062575][    T9] usb 1-1: config 0 descriptor??
[   61.151814][   T47] usb 3-1: Using ep0 maxpacket: 8
[   61.167277][   T47] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   61.170969][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.177074][   T47] usb 3-1: Product: syz
[   61.178786][   T47] usb 3-1: Manufacturer: syz
[   61.180684][   T47] usb 3-1: SerialNumber: syz
[   61.195808][   T47] usb 3-1: config 0 descriptor??
[   61.625754][   T47] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71
[   61.628114][   T47] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   61.636929][   T47] usb 3-1: USB disconnect, device number 3
[   61.644035][    T9] hid-multitouch 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[   61.731851][   T56] Bluetooth: hci0: command 0x0419 tx timeout
[   61.739425][    T9] usb 1-1: USB disconnect, device number 2
[   62.161277][ T6008] loop1: detected capacity change from 0 to 4096
[   62.500325][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   62.561287][ T6017] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   62.603835][   T56] Bluetooth: hci2: command 0x0419 tx timeout
[   62.604880][ T5857] Bluetooth: hci1: command 0x0419 tx timeout
[   62.652377][    T9] usb 3-1: Using ep0 maxpacket: 16
[   62.664265][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[   62.672024][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   62.688676][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   62.692467][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.695852][    T9] usb 3-1: Product: syz
[   62.697687][    T9] usb 3-1: Manufacturer: syz
[   62.699724][    T9] usb 3-1: SerialNumber: syz
[   62.704989][    T9] usb 3-1: config 0 descriptor??
[   62.972430][    T9] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[   62.976780][    T9] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110
[   63.031737][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   63.181790][ T5900] usb 2-1: Using ep0 maxpacket: 16
[   63.192339][ T5900] usb 2-1: config 10 has an invalid interface number: 29 but max is 0
[   63.195493][ T5900] usb 2-1: config 10 has no interface number 0
[   63.198035][ T5900] usb 2-1: config 10 interface 29 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[   63.203953][ T5900] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=3f.7c
[   63.207475][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.210272][ T5900] usb 2-1: Product: syz
[   63.212463][ T5900] usb 2-1: Manufacturer: syz
[   63.214022][ T5900] usb 2-1: SerialNumber: syz
[   63.315502][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'.
[   63.426802][ T5900] usb 2-1: unknown interface protocol 0x1c, assuming v1
[   63.433139][ T5900] usb 2-1: 29:2 : does not exist
[   63.439805][    T9] usb 3-1: USB disconnect, device number 4
[   63.473745][ T5900] usb 2-1: USB disconnect, device number 2
[   63.536424][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:10.29/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   63.569166][ T6037] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.609418][ T6036] loop0: detected capacity change from 0 to 4096
[   63.636525][ T6036] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   63.650939][ T6036] ntfs3(loop0): Failed to load $Extend (-22).
[   63.655354][ T6036] ntfs3(loop0): Failed to initialize $Extend.
[   63.801847][ T5857] Bluetooth: hci0: command 0x0419 tx timeout
[   63.811054][ T6047] comedi comedi4: bad chanlist[0]=0x00080004 chan=4 range length=2
[   63.919700][    T9] IPVS: starting estimator thread 0...
[   64.012741][ T6054] IPVS: using max 48 ests per chain, 115200 per kthread
[   64.200220][ T6064] loop0: detected capacity change from 0 to 32768
[   64.208199][ T6064] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   64.212271][ T6064] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.230742][ T6064] XFS (loop0): Ending clean mount
[   64.266234][ T5855] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.484060][ T6079] loop0: detected capacity change from 0 to 4096
[   64.489371][ T6079] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   64.503647][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.545483][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.643743][ T6089] vxcan1: entered allmulticast mode
[   64.648926][ T6089] vxcan1: left allmulticast mode
[   64.681945][ T5857] Bluetooth: hci1: command 0x0419 tx timeout
[   64.693631][ T5857] Bluetooth: hci2: command 0x0419 tx timeout
[   64.701794][ T6095] netlink: 'syz.0.72': attribute type 11 has an invalid length.
[   64.799596][ T6101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.75'.
[   64.857471][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'.
[   64.921685][ T6111] loop2: detected capacity change from 0 to 256
[   64.930496][ T6111] exfat: Deprecated parameter 'namecase'
[   64.940995][ T6111] exfat: Deprecated parameter 'utf8'
[   64.950647][ T6111] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   64.986908][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'.
[   65.002915][ T6115] Zero length message leads to an empty skb
[   65.060541][ T6121] loop2: detected capacity change from 0 to 512
[   65.091507][ T6121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.097773][ T6121] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.122241][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.158056][ T6129] loop2: detected capacity change from 0 to 128
[   65.175675][ T6129] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   65.189378][ T6129] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.229627][ T6132] loop1: detected capacity change from 0 to 4096
[   65.255529][ T6132] EXT4-fs: Ignoring removed nomblk_io_submit option
[   65.259194][ T6132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.271813][ T6132] EXT4-fs (loop1): Test dummy encryption mode enabled
[   65.277087][ T6132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.285267][ T6132] EXT4-fs: Ignoring removed nomblk_io_submit option
[   65.287667][ T6132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.292750][ T6132] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   65.308736][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.325249][ T6129] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.88: No space for directory leaf checksum. Please run e2fsck -D.
[   65.331838][ T6129] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.88: checksumming directory block 0
[   65.338078][ T6129] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.88: No space for directory leaf checksum. Please run e2fsck -D.
[   65.345531][ T6129] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.88: checksumming directory block 0
[   65.346654][ T6137] loop0: detected capacity change from 0 to 1024
[   65.363221][ T6137] EXT4-fs: Ignoring removed bh option
[   65.373629][ T6137] EXT4-fs: inline encryption not supported
[   65.400242][ T6137] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   65.405980][ T6138] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.88: No space for directory leaf checksum. Please run e2fsck -D.
[   65.423464][ T6138] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.88: checksumming directory block 0
[   65.432486][ T6137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   65.464712][ T6137] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.92: lblock 2 mapped to illegal pblock 2 (length 1)
[   65.474507][ T6137] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   65.477491][ T6137] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.92: lblock 0 mapped to illegal pblock 48 (length 1)
[   65.483026][ T6137] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   65.486385][ T6137] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.92: Failed to acquire dquot type 0
[   65.491495][ T6137] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem
[   65.498253][ T6137] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.92: mark_inode_dirty error
[   65.503585][ T6137] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   65.507162][ T6137] EXT4-fs (loop0): 1 orphan inode deleted
[   65.512801][ T6137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.535861][   T32] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   65.560617][   T32] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   65.565378][   T32] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u9:1: Failed to release dquot type 0
[   65.599793][ T6137] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.92: lblock 0 mapped to illegal pblock 48 (length 1)
[   65.606386][ T6137] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117
[   65.666971][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.882746][ T5857] Bluetooth: hci0: command 0x0419 tx timeout
[   66.671956][ T5900] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   66.764762][ T5857] Bluetooth: hci2: command 0x0419 tx timeout
[   66.765653][   T56] Bluetooth: hci1: command 0x0419 tx timeout
[   66.788120][ T5851] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.817720][ T6150] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.863369][ T5900] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[   66.870094][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.891806][ T5900] usb 1-1: config 0 descriptor??
[   66.924779][ T6154] evm: overlay not supported
[   67.216120][ T6165] loop1: detected capacity change from 0 to 32768
[   67.232167][ T6165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.102 (6165)
[   67.250612][ T6165] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   67.255185][ T6165] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   67.274903][   T32] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   67.281373][ T6165] BTRFS error (device loop1): failed to load root extent
[   67.286429][ T6165] BTRFS warning (device loop1): try to load backup roots slot 1
[   67.289867][   T32] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   67.296227][ T6165] BTRFS warning (device loop1): couldn't read tree root
[   67.299308][ T6165] BTRFS warning (device loop1): try to load backup roots slot 2
[   67.305865][   T32] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   67.312159][ T6165] BTRFS warning (device loop1): couldn't read tree root
[   67.313502][ T5900] smartjoyplus 0003:0925:8866.0002: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0
[   67.319267][ T6165] BTRFS warning (device loop1): try to load backup roots slot 3
[   67.330102][ T5900] smartjoyplus 0003:0925:8866.0002: no output reports found
[   67.350104][ T6165] BTRFS info (device loop1): checking UUID tree
[   67.353578][ T6165] BTRFS info (device loop1): setting nodatasum
[   67.357158][ T6165] BTRFS info (device loop1): setting nodatacow
[   67.359864][ T6165] BTRFS info (device loop1): enabling ssd optimizations
[   67.363184][ T6165] BTRFS info (device loop1): turning on flush-on-commit
[   67.366281][ T6165] BTRFS info (device loop1): turning on async discard
[   67.369288][ T6165] BTRFS info (device loop1): enabling free space tree
[   67.372370][ T6165] BTRFS info (device loop1): enabling auto defrag
[   67.375167][ T6165] BTRFS info (device loop1): trying to use backup root at mount time
[   67.438314][ T5846] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   67.514142][ T5900] usb 1-1: USB disconnect, device number 3
[   67.769387][ T6185] loop1: detected capacity change from 0 to 32768
[   67.793709][ T6185] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   67.805839][ T6185] XFS (loop1): Ending clean mount
[   67.813456][ T6185] XFS (loop1): Quotacheck needed: Please wait.
[   67.827189][ T6185] XFS (loop1): Quotacheck: Done.
[   67.860333][ T5846] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   67.961936][   T56] Bluetooth: hci0: command 0x0419 tx timeout
[   68.240115][ T6195] loop2: detected capacity change from 0 to 40427
[   68.244025][ T6195] F2FS-fs: heap/no_heap options were deprecated
[   68.252139][ T6195] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3)
[   68.271960][ T6195] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   68.288919][ T6195] F2FS-fs (loop2): invalid crc value
[   68.354254][ T6215] capability: warning: `syz.0.113' uses deprecated v2 capabilities in a way that may be insecure
[   68.363931][ T6195] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   68.370704][ T6215] overlayfs: upper fs does not support tmpfile.
[   68.373318][ T6195] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   68.376418][ T6195] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   68.591719][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   68.842097][   T56] Bluetooth: hci2: command 0x0419 tx timeout
[   68.845084][   T56] Bluetooth: hci1: command 0x0419 tx timeout
[   69.016203][    T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   69.019735][    T9] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[   69.023178][    T9] usb 2-1: Product: syz
[   69.024922][    T9] usb 2-1: Manufacturer: syz
[   69.027835][    T9] usb 2-1: SerialNumber: syz
[   69.032154][    T9] usb 2-1: config 0 descriptor??
[   69.036931][    T9] ch341 2-1:0.0: ch341-uart converter detected
[   69.529991][ T6228] loop0: detected capacity change from 0 to 128
[   69.554194][   T33] audit: type=1800 audit(1759351595.021:2): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.118" name="file2" dev="loop0" ino=1048597 res=0 errno=0
[   69.556353][ T6228] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   69.569470][ T6228] FAT-fs (loop0): Filesystem has been set read-only
[   69.572944][ T6228] syz.0.118: attempt to access beyond end of device
[   69.572944][ T6228] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   69.578520][ T6228] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   69.583018][ T6228] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   69.587908][ T6228] syz.0.118: attempt to access beyond end of device
[   69.587908][ T6228] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   69.593893][ T6228] syz.0.118: attempt to access beyond end of device
[   69.593893][ T6228] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   69.599281][ T6228] syz.0.118: attempt to access beyond end of device
[   69.599281][ T6228] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   69.604647][ T6228] syz.0.118: attempt to access beyond end of device
[   69.604647][ T6228] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   69.610522][ T6228] syz.0.118: attempt to access beyond end of device
[   69.610522][ T6228] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   69.615975][ T6228] syz.0.118: attempt to access beyond end of device
[   69.615975][ T6228] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   69.624541][ T6228] syz.0.118: attempt to access beyond end of device
[   69.624541][ T6228] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   69.631198][ T6229] syz.0.118: attempt to access beyond end of device
[   69.631198][ T6229] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[   69.637108][ T6229] Buffer I/O error on dev loop0, logical block 2065, async page read
[   69.643105][ T6229] syz.0.118: attempt to access beyond end of device
[   69.643105][ T6229] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[   69.648542][ T6229] Buffer I/O error on dev loop0, logical block 2066, async page read
[   69.651997][ T6229] Buffer I/O error on dev loop0, logical block 2067, async page read
[   69.655221][ T6229] Buffer I/O error on dev loop0, logical block 2068, async page read
[   69.658592][ T6229] Buffer I/O error on dev loop0, logical block 2069, async page read
[   69.662302][ T6229] Buffer I/O error on dev loop0, logical block 2070, async page read
[   69.665677][ T6229] Buffer I/O error on dev loop0, logical block 2071, async page read
[   69.669763][ T6229] Buffer I/O error on dev loop0, logical block 2072, async page read
[   69.673256][ T6228] Buffer I/O error on dev loop0, logical block 2065, async page read
[   69.675840][ T6228] Buffer I/O error on dev loop0, logical block 2066, async page read
[   70.056167][    T9] ch341-uart ttyUSB0: break control not supported, using simulated break
[   70.470459][    T9] usb 2-1: ch341-uart converter now attached to ttyUSB0
[   70.478045][    T9] usb 2-1: USB disconnect, device number 3
[   70.485504][    T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[   70.489394][    T9] ch341 2-1:0.0: device disconnected
[   70.647802][ T6239] loop0: detected capacity change from 0 to 8192
[   70.932020][ T5857] Bluetooth: hci2: command 0x0419 tx timeout
[   70.991142][ T6245] loop2: detected capacity change from 0 to 40427
[   71.005331][ T6245] F2FS-fs (loop2): invalid crc value
[   71.092823][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.095662][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.148122][ T6245] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.157425][ T6245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   71.194498][ T6245] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[   71.931188][   T33] audit: type=1800 audit(1759351597.391:3): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.133" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=7696 res=0 errno=0
[   72.204521][ T6293] loop0: detected capacity change from 0 to 512
[   72.236382][ T6293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[   72.246274][ T6293] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.269974][ T6293] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[   72.276581][ T6293] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   72.280370][ T6293] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.143: Failed to acquire dquot type 0
[   72.289243][ T6293] Quota error (device loop0): do_check_range: Getting block 67108864 out of range 0-8
[   72.320037][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[   72.341793][ T5900] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   72.507563][ T5900] usb 3-1: Using ep0 maxpacket: 32
[   72.511942][ T5900] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[   72.515407][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.519469][ T5900] usb 3-1: config 0 has no interface number 0
[   72.531125][ T5900] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[   72.540473][ T5900] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[   72.546661][ T5900] usb 3-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.555540][ T5900] usb 3-1: New USB device found, idVendor=0499, idProduct=152e, bcdDevice=b4.9a
[   72.561936][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.572896][ T5900] usb 3-1: Product: syz
[   72.574616][ T5900] usb 3-1: Manufacturer: syz
[   72.576550][ T5900] usb 3-1: SerialNumber: syz
[   72.591819][ T5900] usb 3-1: config 0 descriptor??
[   72.649988][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   72.718929][ T6316] team0: Port device team_slave_0 removed
[   72.852154][ T6326] loop1: detected capacity change from 0 to 2048
[   72.871893][ T5900] usb 3-1: USB disconnect, device number 5
[   72.894223][ T6327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.906269][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   72.926103][   T33] audit: type=1800 audit(1759351598.391:4): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file1" dev="loop1" ino=15 res=0 errno=0
[   73.319910][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'.
[   73.646514][ T6335] loop0: detected capacity change from 0 to 32768
[   73.677346][ T6335] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   73.717219][ T6335] XFS (loop0): Ending clean mount
[   73.761512][ T5855] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   73.793741][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'.
[   73.964579][ T6357] netlink: 'syz.0.165': attribute type 32 has an invalid length.
[   73.968156][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[   73.973179][ T6357] (unnamed net_device) (uninitialized): option coupled_control: invalid value (47)
[   74.036887][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   74.576955][ T6408] loop1: detected capacity change from 0 to 16
[   74.595192][ T6408] erofs (device loop1): mounted with root inode @ nid 36.
[   75.377011][ T6424] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   75.407993][ T6426] netlink: 64 bytes leftover after parsing attributes in process `syz.0.197'.
[   75.509136][ T6429] loop2: detected capacity change from 0 to 512
[   75.536811][ T6429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.566002][ T6429] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.596016][ T6429] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.200: corrupted inode contents
[   75.613106][ T6429] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.200: mark_inode_dirty error
[   75.622451][ T6429] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.200: corrupted inode contents
[   75.636948][ T6429] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.200: mark_inode_dirty error
[   75.646666][ T6429] EXT4-fs error (device loop2): ext4_lookup:1784: inode #18: comm syz.2.200: 'bus' linked to parent dir
[   75.698278][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.798564][ T6447] loop0: detected capacity change from 0 to 256
[   75.818504][ T6447] FAT-fs (loop0): Directory bread(block 1285) failed
[   75.829986][ T6447] FAT-fs (loop0): Directory bread(block 1285) failed
[   75.833355][ T6447] FAT-fs (loop0): Directory bread(block 1285) failed
[   75.836191][ T6447] FAT-fs (loop0): Directory bread(block 1285) failed
[   76.031024][ T6443] loop1: detected capacity change from 0 to 32768
[   76.058832][ T6443] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.084201][ T6443] XFS (loop1): Ending clean mount
[   76.110727][ T6443] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[   76.111712][  T975] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   76.115658][ T6443] XFS (loop1): Unmount and run xfs_repair
[   76.121046][ T6443] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   76.125022][ T6443] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   76.128769][ T6443] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   76.133162][ T6443] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   76.136879][ T6443] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   76.140586][ T6443] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   76.144334][ T6443] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   76.148028][ T6443] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   76.151799][ T5900] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   76.155125][ T6443] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   76.159573][ T6443] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[   76.166734][ T6443] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[   76.173070][ T6443] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   76.216266][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.271874][  T975] usb 3-1: Using ep0 maxpacket: 32
[   76.277643][  T975] usb 3-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00
[   76.281278][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.296368][  T975] usb 3-1: config 0 descriptor??
[   76.301831][ T5900] usb 1-1: Using ep0 maxpacket: 16
[   76.310038][ T5900] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[   76.314590][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.317890][ T5900] usb 1-1: Product: syz
[   76.319616][ T5900] usb 1-1: Manufacturer: syz
[   76.321489][ T5900] usb 1-1: SerialNumber: syz
[   76.329093][ T5900] usb 1-1: config 0 descriptor??
[   76.333884][ T5900] visor 1-1:0.0: Sony Clie 3.5 converter detected
[   76.399982][ T6462] loop1: detected capacity change from 0 to 256
[   76.432887][   T33] audit: type=1800 audit(1759351601.901:5): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.209" name="file2" dev="loop1" ino=1048600 res=0 errno=0
[   76.448688][ T6462] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[   76.452311][ T6462] FAT-fs (loop1): Filesystem has been set read-only
[   76.537197][ T5900] usb 1-1: clie_3_5_startup: get config number failed: -71
[   76.542820][ T5900] visor 1-1:0.0: probe with driver visor failed with error -71
[   76.551921][ T5900] usb 1-1: USB disconnect, device number 4
[   76.715179][  T975] chicony 0003:04F2:1123.0003: ignoring exceeding usage max
[   76.720226][  T975] chicony 0003:04F2:1123.0003: item fetching failed at offset 3/5
[   76.726119][  T975] chicony 0003:04F2:1123.0003: Chicony hid parse failed: -22
[   76.735089][  T975] chicony 0003:04F2:1123.0003: probe with driver chicony failed with error -22
[   76.931973][ T5900] usb 3-1: USB disconnect, device number 6
[   77.140491][ T6472] netlink: 'syz.0.213': attribute type 30 has an invalid length.
[   77.145319][ T6472] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   77.148774][ T6472] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   77.322565][ T6480] loop0: detected capacity change from 0 to 2048
[   77.331565][ T6480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.601934][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   78.087726][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 61, changing to 9
[   78.093668][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25705, setting to 1024
[   78.097934][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   78.103566][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   78.107086][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.113217][    T9] usb 1-1: config 0 descriptor??
[   78.118115][ T6480] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.605643][    T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   78.625887][ T6499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.224'.
[   78.629008][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[   78.637109][ T6499] netlink: 31 bytes leftover after parsing attributes in process `syz.2.224'.
[   78.643092][ T6499] netlink: 'syz.2.224': attribute type 3 has an invalid length.
[   78.646769][ T6499] netlink: 'syz.2.224': attribute type 2 has an invalid length.
[   78.649695][ T6499] netlink: 31 bytes leftover after parsing attributes in process `syz.2.224'.
[   78.830063][ T6509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.842491][ T6509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.858490][ T6511] loop2: detected capacity change from 0 to 4096
[   78.874189][ T6511] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   78.903912][ T6511] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   78.931471][ T6511] [syz.2.230/6511] FS: loop2 File: /memory.swap.current would truncate fibmap result
[   79.014536][ T6515] pim6reg1: entered promiscuous mode
[   79.016932][ T6515] pim6reg1: entered allmulticast mode
[   79.114911][ T6519] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   79.125847][ T6519] CIFS mount error: No usable UNC path provided in device string!
[   79.125847][ T6519] 
[   79.129679][ T6519] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   79.419908][ T6537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.242'.
[   79.637716][ T6541] loop1: detected capacity change from 0 to 32768
[   79.645792][ T6541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.244 (6541)
[   79.661201][ T6541] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   79.665703][ T6541] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   79.717009][ T6535] loop2: detected capacity change from 0 to 32768
[   79.753936][ T6535] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 76: suballoc slot 3
[   79.760048][ T6535] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   79.782275][ T6535] OCFS2: File system is now read-only.
[   79.784824][ T6535] (syz.2.241,6535,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[   79.805746][ T6535] (syz.2.241,6535,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[   79.814083][ T6541] BTRFS info (device loop1): enabling ssd optimizations
[   79.817140][ T6541] BTRFS info (device loop1): enabling free space tree
[   79.821065][ T6535] (syz.2.241,6535,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=11, slot=0
[   79.829119][ T6535] (syz.2.241,6535,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[   79.833530][ T6535] (syz.2.241,6535,0):ocfs2_mount_volume:1758 ERROR: status = -30
[   79.840805][ T6535] (syz.2.241,6535,0):ocfs2_fill_super:1177 ERROR: status = -30
[   79.873490][ T6541] BTRFS info (device loop1): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[   79.984394][ T5846] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.418624][   T33] audit: type=1326 audit(1759351605.881:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.452559][   T33] audit: type=1326 audit(1759351605.881:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.475040][   T33] audit: type=1326 audit(1759351605.891:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.491094][   T33] audit: type=1326 audit(1759351605.891:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.503854][   T33] audit: type=1326 audit(1759351605.891:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.532805][   T33] audit: type=1326 audit(1759351605.891:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.561829][   T33] audit: type=1326 audit(1759351605.891:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.592152][   T33] audit: type=1326 audit(1759351605.901:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.626331][   T33] audit: type=1326 audit(1759351605.901:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.656456][   T33] audit: type=1326 audit(1759351605.901:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3d8ec29 code=0x7ffc0000
[   80.697253][    T9] usb 1-1: USB disconnect, device number 5
[   80.831177][ T6575] netlink: 'syz.1.251': attribute type 21 has an invalid length.
[   80.835953][ T6575] netlink: 128 bytes leftover after parsing attributes in process `syz.1.251'.
[   80.841766][ T6575] netlink: 'syz.1.251': attribute type 4 has an invalid length.
[   80.855873][ T6575] netlink: 'syz.1.251': attribute type 5 has an invalid length.
[   80.859187][ T6575] netlink: 3 bytes leftover after parsing attributes in process `syz.1.251'.
[   81.030587][ T6581] loop1: detected capacity change from 0 to 1024
[   81.045892][ T6581] EXT4-fs: Ignoring removed nomblk_io_submit option
[   81.072855][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.153520][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.252858][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   81.420320][ T6588] loop1: detected capacity change from 0 to 512
[   81.431920][    T9] usb 1-1: Using ep0 maxpacket: 16
[   81.441342][ T6588] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.441388][    T9] usb 1-1: config 252 has an invalid interface number: 165 but max is 0
[   81.449314][    T9] usb 1-1: config 252 has no interface number 0
[   81.452607][    T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[   81.456398][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.478171][ T6588] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   81.479788][    T9] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[   81.503792][    T9] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[   81.511061][ T6588] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   81.522256][ T6588] EXT4-fs (loop1): orphan cleanup on readonly fs
[   81.537938][ T6588] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.256: Invalid block bitmap block 0 in block_group 0
[   81.572711][ T6588] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.256: Invalid block bitmap block 0 in block_group 0
[   81.591420][ T6588] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.256: Invalid block bitmap block 0 in block_group 0
[   81.611354][ T6588] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.256: Failed to acquire dquot type 1
[   81.623896][ T6588] EXT4-fs (loop1): 1 orphan inode deleted
[   81.634503][   T40] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u10:2: Failed to release dquot type 1
[   81.649199][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.726343][  T975] usb 1-1: USB disconnect, device number 6
[   81.749922][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.273412][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   82.488780][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   82.499562][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.578963][    T9] usb 2-1: config 0 descriptor??
[   82.588739][    T9] cp210x 2-1:0.0: cp210x converter detected
[   82.789624][ T6614] netlink: 176 bytes leftover after parsing attributes in process `syz.0.267'.
[   82.793949][ T6614] netlink: 176 bytes leftover after parsing attributes in process `syz.0.267'.
[   83.019996][    T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[   83.230919][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[   83.435368][    T9] usb 2-1: USB disconnect, device number 4
[   83.445659][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   83.449060][    T9] cp210x 2-1:0.0: device disconnected
[   83.999963][ T6661] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65)
[   84.643864][ T6697] loop1: detected capacity change from 0 to 64
[   84.715681][ T6699] netlink: 2 bytes leftover after parsing attributes in process `syz.0.307'.
[   84.794121][ T6691] loop2: detected capacity change from 0 to 32768
[   84.830391][ T6691] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   84.838772][ T6691] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   84.859329][ T6691] XFS (loop2): Ending clean mount
[   84.867544][ T6691] XFS (loop2): Quotacheck needed: Please wait.
[   84.870674][ T6715] netlink: 72 bytes leftover after parsing attributes in process `syz.0.311'.
[   84.887649][ T6715] netlink: 72 bytes leftover after parsing attributes in process `syz.0.311'.
[   84.903860][ T6691] XFS (loop2): Quotacheck: Done.
[   84.908919][ T6717] netlink: 'syz.1.312': attribute type 8 has an invalid length.
[   84.939756][ T6719] netlink: 140 bytes leftover after parsing attributes in process `syz.0.313'.
[   84.976720][ T5851] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   85.008267][ T6721] process 'syz.1.315' launched './file0' with NULL argv: empty string added
[   85.265802][ T6741] netlink: 196 bytes leftover after parsing attributes in process `syz.1.324'.
[   85.455561][ T6754] loop1: detected capacity change from 0 to 2048
[   85.495515][ T6756] can: request_module (can-proto-0) failed.
[   85.664976][ T6771] loop2: detected capacity change from 0 to 65
[   85.670348][ T6771] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   85.719945][ T6774] hfs: can't find a HFS filesystem on dev nullb0
[   86.260915][ T6820] loop1: detected capacity change from 0 to 1024
[   86.327461][   T33] kauditd_printk_skb: 9 callbacks suppressed
[   86.327469][   T33] audit: type=1800 audit(1759351611.791:22): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=2 res=0 errno=0
[   86.379645][ T4431] hfsplus: bad catalog folder entry
[   86.385436][ T4431] hfsplus: bad catalog file entry
[   86.446396][  T794] cfg80211: failed to load regulatory.db
[   86.625761][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[   86.639302][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'.
[   86.645875][ T6847] netlink: 'syz.2.370': attribute type 7 has an invalid length.
[   86.969087][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   86.976791][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   87.551736][  T794] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   87.646284][ T6865] loop2: detected capacity change from 0 to 256
[   87.730074][ T6870] loop2: detected capacity change from 0 to 256
[   87.762144][  T794] usb 1-1: Using ep0 maxpacket: 8
[   87.767443][  T794] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[   87.772620][ T6870] FAT-fs (loop2): Directory bread(block 64) failed
[   87.773794][  T794] usb 1-1: config 0 has no interface number 0
[   87.775214][ T6870] FAT-fs (loop2): Directory bread(block 65) failed
[   87.775292][ T6870] FAT-fs (loop2): Directory bread(block 66) failed
[   87.781264][  T794] usb 1-1: too many endpoints for config 0 interface 146 altsetting 28: 57, using maximum allowed: 30
[   87.783922][ T6870] FAT-fs (loop2): Directory bread(block 67) failed
[   87.783989][ T6870] FAT-fs (loop2): Directory bread(block 68) failed
[   87.794371][ T6870] FAT-fs (loop2): Directory bread(block 69) failed
[   87.797518][ T6870] FAT-fs (loop2): Directory bread(block 70) failed
[   87.799223][  T794] usb 1-1: config 0 interface 146 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 57
[   87.800062][ T6870] FAT-fs (loop2): Directory bread(block 71) failed
[   87.809605][  T794] usb 1-1: config 0 interface 146 has no altsetting 0
[   87.810561][ T6870] FAT-fs (loop2): Directory bread(block 72) failed
[   87.815682][  T794] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[   87.830355][ T6870] FAT-fs (loop2): Directory bread(block 73) failed
[   87.831827][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.838617][  T794] usb 1-1: config 0 descriptor??
[   87.943857][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'.
[   88.048042][  T794] usb 1-1: string descriptor 0 read error: -71
[   88.070207][  T794] usb 1-1: USB disconnect, device number 7
[   88.332539][ T6902] loop2: detected capacity change from 0 to 256
[   88.530523][   T33] audit: type=1326 audit(1759351613.991:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.399" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304ed8ec29 code=0x7ffc0000
[   88.539640][   T33] audit: type=1326 audit(1759351613.991:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.399" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304ed8ec29 code=0x7ffc0000
[   88.548498][   T33] audit: type=1326 audit(1759351613.991:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.399" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f304ed8ec29 code=0x7ffc0000
[   88.561916][   T33] audit: type=1326 audit(1759351613.991:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.399" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304ed8ec29 code=0x7ffc0000
[   88.580153][   T33] audit: type=1326 audit(1759351613.991:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.399" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304ed8ec29 code=0x7ffc0000
[   88.590611][   T33] audit: type=1326 audit(1759351613.991:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.399" exe="/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f304ed8ec29 code=0x7ffc0000
[   88.599841][   T33] audit: type=1326 audit(1759351613.991:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.2.399" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304ed8ec29 code=0x7ffc0000
[   88.672410][  T794] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   88.821722][  T794] usb 2-1: Using ep0 maxpacket: 16
[   88.826027][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   88.832019][  T794] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   88.835865][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.839149][  T794] usb 2-1: Product: syz
[   88.840909][  T794] usb 2-1: Manufacturer: syz
[   88.843957][  T794] usb 2-1: SerialNumber: syz
[   88.848289][  T794] usb 2-1: config 0 descriptor??
[   88.856476][  T794] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   88.860355][  T794] em28xx 2-1:0.0: DVB interface 0 found: bulk
[   89.003491][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   89.151758][   T24] usb 3-1: Using ep0 maxpacket: 8
[   89.155681][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[   89.159532][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[   89.164386][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[   89.168903][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   89.177141][   T24] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[   89.181049][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.184493][   T24] usb 3-1: Product: syz
[   89.186327][   T24] usb 3-1: Manufacturer: syz
[   89.188380][   T24] usb 3-1: SerialNumber: syz
[   89.194195][   T24] usb 3-1: config 0 descriptor??
[   89.201493][   T24] powermate 3-1:0.0: probe with driver powermate failed with error -5
[   89.421695][ T5899] usb 3-1: USB disconnect, device number 7
[   89.472260][  T794] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   89.624852][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   89.771686][   T24] usb 1-1: Using ep0 maxpacket: 16
[   89.778618][   T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   89.782456][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.785880][   T24] usb 1-1: Product: syz
[   89.787763][   T24] usb 1-1: Manufacturer: syz
[   89.789826][   T24] usb 1-1: SerialNumber: syz
[   89.798889][   T24] r8152-cfgselector 1-1: Unknown version 0x0000
[   89.801580][   T24] r8152-cfgselector 1-1: config 0 descriptor??
[   89.999926][ T6929] Bluetooth: hci3: Frame reassembly failed (-90)
[   90.008685][   T40] Bluetooth: hci3: Frame reassembly failed (-84)
[   90.086745][  T794] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[   90.091011][  T794] em28xx 2-1:0.0: board has no eeprom
[   90.151806][  T794] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   90.154964][  T794] em28xx 2-1:0.0: dvb set to bulk mode.
[   90.157397][   T24] em28xx 2-1:0.0: Binding DVB extension
[   90.174622][  T794] usb 2-1: USB disconnect, device number 5
[   90.185041][  T794] em28xx 2-1:0.0: Disconnecting em28xx
[   90.208206][   T24] em28xx 2-1:0.0: Registering input extension
[   90.212582][  T794] em28xx 2-1:0.0: Closing input extension
[   90.228635][  T794] em28xx 2-1:0.0: Freeing device
[   90.231458][    T9] r8152-cfgselector 1-1: USB disconnect, device number 8
[   92.012731][ T6962] loop1: detected capacity change from 0 to 2048
[   92.032639][ T6962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.043731][ T5857] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   92.109010][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.307852][ T6978] netlink: 168 bytes leftover after parsing attributes in process `syz.0.425'.
[   92.324931][ T6980] loop1: detected capacity change from 0 to 64
[   92.501694][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   92.653695][   T24] usb 3-1: config 0 has no interfaces?
[   92.664711][   T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   92.670668][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.677695][   T24] usb 3-1: Product: syz
[   92.680915][   T24] usb 3-1: Manufacturer: syz
[   93.095838][   T24] usb 3-1: SerialNumber: syz
[   93.099991][   T24] usb 3-1: config 0 descriptor??
[   93.351876][ T5899] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   93.371527][  T975] usb 3-1: USB disconnect, device number 8
[   93.501720][ T5899] usb 2-1: Using ep0 maxpacket: 32
[   93.513417][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short
[   93.520997][ T5899] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   93.528788][ T5899] usb 2-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config
[   93.535035][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   93.541798][ T5899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   93.547975][ T5899] usb 2-1: string descriptor 0 read error: -22
[   93.550746][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   93.554949][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.573184][ T5899] cdc_ncm 2-1:1.0: skipping garbage
[   93.575515][ T5899] cdc_ncm 2-1:1.0: skipping garbage
[   93.577750][ T5899] cdc_ncm 2-1:1.0: invalid descriptor buffer length
[   93.580552][ T5899] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[   93.587179][ T5899] cdc_ncm 2-1:1.0: bind() failure
[   93.599107][ T7002] cgroup: none used incorrectly
[   93.777065][ T5899] usb 2-1: USB disconnect, device number 6
[   93.959785][ T7020] loop2: detected capacity change from 0 to 256
[   93.992962][ T7020] FAT-fs (loop2): Directory bread(block 64) failed
[   93.995757][ T7020] FAT-fs (loop2): Directory bread(block 65) failed
[   93.998560][ T7020] FAT-fs (loop2): Directory bread(block 66) failed
[   94.007931][ T7020] FAT-fs (loop2): Directory bread(block 67) failed
[   94.010587][ T7020] FAT-fs (loop2): Directory bread(block 68) failed
[   94.019768][ T7020] FAT-fs (loop2): Directory bread(block 69) failed
[   94.022579][ T7020] FAT-fs (loop2): Directory bread(block 70) failed
[   94.025128][ T7020] FAT-fs (loop2): Directory bread(block 71) failed
[   94.027647][ T7020] FAT-fs (loop2): Directory bread(block 72) failed
[   94.030060][ T7020] FAT-fs (loop2): Directory bread(block 73) failed
[   94.334048][ T7030] Illegal XDP return value 2257329403 on prog  (id 56) dev N/A, expect packet loss!
[   94.711699][ T5899] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   94.870991][ T5899] usb 2-1: config 0 has an invalid interface number: 97 but max is 0
[   94.874432][ T5899] usb 2-1: config 0 has no interface number 0
[   94.882496][ T5899] usb 2-1: New USB device found, idVendor=3a2d, idProduct=cb2e, bcdDevice=db.ed
[   94.886695][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.889741][ T5899] usb 2-1: Product: syz
[   94.891421][ T5899] usb 2-1: Manufacturer: syz
[   94.895330][ T5899] usb 2-1: SerialNumber: syz
[   94.903297][ T5899] usb 2-1: config 0 descriptor??
[   94.914353][ T5899] rndis_host 2-1:0.97: skipping garbage
[   94.916488][ T5899] usb 2-1: bad CDC descriptors
[   95.126159][ T5900] usb 2-1: USB disconnect, device number 7
[   95.561947][ T7044] netlink: 'syz.2.455': attribute type 39 has an invalid length.
[   95.957650][ T7052] loop2: detected capacity change from 0 to 32768
[   95.988738][ T7052] read_mapping_page failed!
[   95.990556][ T7052] ERROR: (device loop2): txCommit: 
[   95.990556][ T7052] 
[   96.011401][  T117] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[   96.016382][  T117] ------------[ cut here ]------------
[   96.018742][  T117] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[   96.021152][  T117] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   96.024569][  T117] CPU: 0 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[   96.028218][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.032255][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[   96.034250][  T117] Code: e0 fd 90 0f 0b e8 31 e3 78 fe 48 c7 c7 20 61 e4 8b 48 c7 c6 19 5d e4 8b ba a4 03 00 00 48 c7 c1 20 6e e4 8b e8 22 26 e0 fd 90 <0f> 0b e8 0a e3 78 fe 48 c7 c7 20 61 e4 8b 48 c7 c6 19 5d e4 8b ba
[   96.041883][  T117] RSP: 0018:ffffc900024a7ba8 EFLAGS: 00010246
[   96.044327][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 2486670b89ab3000
[   96.047621][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   96.050882][  T117] RBP: ffffc90001ffa090 R08: ffffc900024a78c7 R09: 1ffff92000494f18
[   96.054151][  T117] R10: dffffc0000000000 R11: fffff52000494f19 R12: dffffc0000000000
[   96.057404][  T117] R13: 1ffff11007a757c7 R14: ffff88803d3abe38 R15: 0000000000000000
[   96.060712][  T117] FS:  0000000000000000(0000) GS:ffff8880b83fc000(0000) knlGS:0000000000000000
[   96.064537][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.067249][  T117] CR2: 0000200000001400 CR3: 0000000110962000 CR4: 00000000000006f0
[   96.070691][  T117] Call Trace:
[   96.072115][  T117]  <TASK>
[   96.073129][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.074937][  T117]  jfs_lazycommit+0x584/0xa90
[   96.076533][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[   96.078259][  T117]  ? __pfx_default_wake_function+0x10/0x10
[   96.080290][  T117]  ? __kthread_parkme+0x7b/0x200
[   96.081945][  T117]  ? __kthread_parkme+0x1a1/0x200
[   96.083637][  T117]  kthread+0x711/0x8a0
[   96.085057][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[   96.086798][  T117]  ? __pfx_kthread+0x10/0x10
[   96.088349][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[   96.090176][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.091902][  T117]  ? __pfx_kthread+0x10/0x10
[   96.093447][  T117]  ret_from_fork+0x4bc/0x870
[   96.095012][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[   96.096856][  T117]  ? __switch_to_asm+0x39/0x70
[   96.098643][  T117]  ? __switch_to_asm+0x33/0x70
[   96.100527][  T117]  ? __pfx_kthread+0x10/0x10
[   96.102143][  T117]  ret_from_fork_asm+0x1a/0x30
[   96.103759][  T117]  </TASK>
[   96.105023][  T117] Modules linked in:
[   96.107129][  T117] ---[ end trace 0000000000000000 ]---
[   96.110068][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[   96.112060][  T117] Code: e0 fd 90 0f 0b e8 31 e3 78 fe 48 c7 c7 20 61 e4 8b 48 c7 c6 19 5d e4 8b ba a4 03 00 00 48 c7 c1 20 6e e4 8b e8 22 26 e0 fd 90 <0f> 0b e8 0a e3 78 fe 48 c7 c7 20 61 e4 8b 48 c7 c6 19 5d e4 8b ba
[   96.119740][  T117] RSP: 0018:ffffc900024a7ba8 EFLAGS: 00010246
[   96.122699][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 2486670b89ab3000
[   96.125723][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   96.128529][  T117] RBP: ffffc90001ffa090 R08: ffffc900024a78c7 R09: 1ffff92000494f18
[   96.131399][  T117] R10: dffffc0000000000 R11: fffff52000494f19 R12: dffffc0000000000
[   96.134648][  T117] R13: 1ffff11007a757c7 R14: ffff88803d3abe38 R15: 0000000000000000
[   96.137357][  T117] FS:  0000000000000000(0000) GS:ffff8880b83fc000(0000) knlGS:0000000000000000
[   96.140291][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.142542][  T117] CR2: 000055dc8eade7b8 CR3: 000000010e540000 CR4: 00000000000006f0
[   96.145271][  T117] Kernel panic - not syncing: Fatal exception
[   96.148209][  T117] Kernel Offset: disabled
[   96.149969][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:47:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000053 RBX=0000000000000053 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900024a72f0
R8 =ffff888021400237 R9 =1ffff11004280046 R10=dffffc0000000000 R11=ffffffff8556dea0
R12=dffffc0000000000 R13=ffffffff99d19918 R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556df1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001400 CR3=0000000110962000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0ab3fa7498 00007f0ab3fa7470 XMM03=00007f0ab3fa74a8 00007f0ab3fa74a0
XMM04=00007f0ab4b0d100 00007f0ab3fa7460 XMM05=00007f0ab3fa7478 00007f0ab3fa74c0
XMM06=00007f0ab3fa74b8 00007f0ab3fa74b0 XMM07=00007f0ab3fa74a8 00007f0ab3fa74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0ab3e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=339eb0a8af466400 RBX=ffffffff81972677 RCX=339eb0a8af466400 RDX=0000000000000001
RSI=ffffffff8c03da40 RDI=ffffffff81972677 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fc35970 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020006000
RIP=ffffffff8b7fddd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd1b555c68 CR3=0000000110962000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0ab3fa7498 00007f0ab3fa7470 XMM03=00007f0ab3fa74a8 00007f0ab3fa74a0
XMM04=00007f0ab4b0d100 00007f0ab3fa7460 XMM05=00007f0ab3fa7478 00007f0ab3fa74c0
XMM06=00007f0ab3fa74b8 00007f0ab3fa74b0 XMM07=00007f0ab3fa74a8 00007f0ab3fa74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0ab3e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
