last executing test programs:

6.504202786s ago: executing program 2 (id=342):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x403, 0x20000000000410, 0x6, 0x6, 0x1000, 0xf67, 0xe})
creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42)

6.397706661s ago: executing program 2 (id=345):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0)

5.115952841s ago: executing program 2 (id=355):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
listen(r1, 0x0)
close(r1)

5.05190364s ago: executing program 2 (id=356):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000090300000000000000000000100c"], 0x0, 0x56}, 0x20)

5.051693467s ago: executing program 2 (id=357):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)

4.90235407s ago: executing program 2 (id=359):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

2.793252185s ago: executing program 1 (id=375):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="ff071d6ce89d96666b", 0x9}, {0x0, 0x3f}], 0x2)

2.724264816s ago: executing program 1 (id=376):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x2}}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)

2.575121479s ago: executing program 0 (id=379):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

2.425399656s ago: executing program 0 (id=380):
r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

2.356294616s ago: executing program 0 (id=381):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b1a, &(0x7f0000000040))

2.296136567s ago: executing program 0 (id=382):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x0, 0xc2cf, 0x2, 0x595f3151, 0x19, "00ded0fffdab7923e56de8bd024af900"})
write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
io_setup(0x20fe, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000340)='\t', 0x1, 0x600}])

2.084526907s ago: executing program 0 (id=383):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}]}, 0x24}, 0x1, 0x0, 0x0, 0x410}, 0x8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$eJzs3U9vHGcdB/Df/vHacds0qlAVIg5uyp+W0vxPoPxryoEDHEBCPZPIdauUFFASEK0i4soHxAV4CXDphUPfAi+grwHxAoiU9NQDZdDYz+OMN+usTeKZXT+fj7SZ+c2z430m3x3PrGdmJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+NEPf3a2FxFXfpsmHIt4OgYR/Ygjdb0S9cjl/PxhRByPzeZ4PiIGixH1/Jv/PBtxISI+ORpx7/7t1XryuT324+KZWzc+//EP/vmHP28cf/etn3803v7TL5z/+I93Io795LWPP7/zZJYdAAAASlFVVdVLH/NPpM/3/a47BQC0Im//qyRPV6vVavUTrf/U38/zn36q6/6qD2ndVE12p1lExHpznnqfweF4AJgz6/FZ112gQ/Iv2jAinuq6E8BM63XdAQ7Evfu3V3sp315ze7Cy1Z7/Trkj//Xe9vUduw2nGT/HpK3310YM4rld+nOkpT7Mkpx/fzz/K1vto/S8g86/LbvlP9q69Kk4Of/BeP5jduT/l4iY2/z7E/MvVc5/uJ/81wdzvP7LHwAAAACAwy///f9Yx8d/Fx9/UfbkUcd/V1rqAwAAAAAAAAA8aY97/79t7v8HAAAAM6v+rF7769EH03b7LrZ6+pu9iGfGng8UZqXx5YAAAAAAAAAAAAAAQDuGEcvpvP6FiHhmebmqqvrRNF7v1+POP+9KX34oWde/5AEAYMsnR8eu5e9FLEXEm+m7/haWl5eraiEilqsji3l/drS4VB1pfK7Nw3ra4mgPO8TDUVX/sKXGfE3TPi9Pax//efVrjarBHjrWjg4DB4CI2Noa3bNFOmSq6tnoei+H+WD9P3ys/+xF1+9TAAAA4OBVVVX10td5n0jH/PtddwoAaEXe/o8fF1Cr1epi6k+3Js5Mf9TqA6ybqsnuNIuIWG/OU+8zuB0/AMyZ9fis6y7QIfkXbRgRx7vuBDDTel13gANx7/7t1V7Kt9fcHqxstedzQXbkv97bnC/PP2k4zfg5Jm29vzZiEM/t0p/nW+rDLMn598fzv7LVnm/xv53P0sHk35bd8q+X81gH/elazn8wnv+Yg17/27IR/Yn5lyrnP9xX/gP5AwAAAADADMt//z/m+G9eZAAAAAAAAACYO/fu317N173m4/9fmvC8XnPM9Z+HRs6/t+f8Xf97mOT8++P5j52QM2iM333jQf6f3r+9+tGtf38xD2c+/4XBqH7thV5/MEzn/FQLb8e1uB5rceah5w93tJ99qH1hR/u5Ke3nH2of1e1HcvupWI1fxfV4a7t9ccqJUUtT2qsp7Tn/gfW/SDn/YeNR57+c2ntjw9rdD/sPrffN4aTXufz3/3z14bWrDcMd1UYMtpet4Wj9z8nW+vTA5v/JU6P4zc21G6d+d/XWrRtnIw12TD0XafCE5fwX0iPn/9KLW+35935zfb374Wjf+c+KjRhOyn/z/f1iY7xe3pdb7lsXcv6j9Mj55y3Q5PV/nvOfuP5vLt8rHfQHAAAAAAAAAAAAAAAAHqWqqs1LRC9HxKV0/U9X12YCAO3K2/8qydPVarVarVYfvrqpmuz1ZhER/2jOU+8z/H7SDwMAZtl/I+JfXXeCzsi/YPn7/urhl7vuDNCqm+9/8Iur16+v3bjZdU8AAAAAAAAAgP9Xvv/nSuP+z5vnAY3dN3rH/V/fiJW5vf9nfzTYvNd5WqAX4tH3/z4Zj77/93DK6y1MaR9NaV+c0r40pX3ihR4NOf8XUsY5/xNpwUq6/+tLHfSnazn/k+lezzn/r409r5l/9bd5zr+/I//Tt9779emb73/w6rX3rr6z9s7aL8+euXTh/MUL5y9ePP32tetrZ7b+7bDHByvnn+997TzQsuT8c+byL0vO/yupln9ZUv7bu6HyL0te//P+nvzLkvPPn33kX5ac/8upln9Zcv5fT7X8y5LzfyXV8i9Lzv8bqZZ/WXL+r6Za/mXJ+Z9KtfzLkvM/nWr5lyXnn49wyb8sOf98ZoP8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf9LqZZ/WXL+30y1/MuS8/9WquVflpz/a6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dT/aj8322xX7Qj5/+9VFv/y5Lz/36q5V+WnP/rqZZ/WR58/7+RfY8sz0Y3jBh58iNd/2YCAAAAAAAAAAAAAMa1cTpx18sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17jZGrvO8HfvZmrw0B/8OdOGCbm4GF3fUNHGIwScifkl4oCWnTkhrHXhsnvtW7TgChsim0JQpSkdoX9EXTJEqiSG0FqiI1lWiE1Ejtm6p51QhVilopUl0JKgcllVIFtjpznufZmdnZmbW9a5855/OJ8M/eOWfmmTNnZve70XcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2cYPT/3RQJZl+X+NP9Zl2cX539dku/N/zu640CsEAAAAztU7jT//6tL0hd1L2Klpm3+87l++Mzc3N5d95u1T7/7J3Fy6YEOWDa3OssZl0T/9/GdzzdsEz2WjA4NN/x7scfNDPS4f7nH5SI/LV/W4fHWPy0d7XL7gACywpvh9TOPKbmz8dV1xSLPLs5HGZTd22Ou5gdWDg/F3OQ0DjX3mRg5kh7LD2VQ2sWCfgcb/suy1jfltPZjF2xpsuq31WZad/skz++IaBsIxvjFrubGG5sfurfuzDW//5Jl935p585pOs+dhWLDSLNu8KV/n81k2/+uqbCBbnY5JXOdg0zrXd1jnUMs6Bxr75X9vX+fpJa4z3u/RsM4fdFnn+vC1J2/Ismw2W3Sbds9lg9natltNx3u0OCPy68gfyvdmw2d0nmxcwnmS7/PjG1rPk/ZzMh7/jeGYDC+yhuaH460vrlpw3M/2PMnvdRnO1fy6H85vdHS0+VerLedqvs0zNy1+DnR87DqcA+lcbjoHNvU6BwZXDTXOgcH5NW9qOQcmF+wzmA00buvUTd3PgfGZI8fHp596+o5DR/YenDo4dXRyYse2rdu3bd2+ffzAocNTE8WfZ3ZI+8jabDCdg5vCa008B29p27b5lJz72vI9D0ZL8jzI7/snbs4XdPFgtsg5nm/z/OZzfx6k7/tNz4PhpudBx9fUDs+D4SU8D/JtTm9e2vfM4ab/Oq1hpV4L1zWdAxfy+2F+m4/duvhr4fqwrhduO9Pvh0MLzoF4twbCcy//Svp5b/TucFwWnhfX5hdctCo7OT114s4n987MnJjMwjgvLmt6rNrPl7VN9ylbcL4MnvH5svsvf3HztR2+vi4cq9Hb5x+rVR0eh3ybbWPdH6vGq3vn49ny1S1ZGMvsfB/PTt/N8uOZskSXcz/f5vk7zv1nwZRLml7/Rnq9/g2NDBevf0PpaIy0vP4tfGiGGivLstN3LO31byT8d75f/y4vyetffqweu7P7OZBv88L4mZ4Dw11f/24IcyCs59aQGEabcv+7jctni9O06bHsed4MD4+E82Y43mLrebN1wT75teW3vXni7M6bzTe0PlYtP7dU8LzJj9WfTnQ/b/JtXp8899eONfGvTa8dq3qdAyNDq/L1jqSToHi9m1sTz4E7s33Zsexwtj/tkz/K+W2NbVnaObAq/He+XzuuLsk5kB+rl7d0Pwfybb6/dXl/dtocvpK2afrZqf33C4tl/muH56+v/bAtd+bP1/mRbd1/N5Rv8+a2M80Z3Y/T7eErF3U4Tu3Pn8XO6f3Z+TlOV4d1Ht7e/XdT+TaX71ji+bQ7y7I3Jt9o/L4r/H73b07+63dafu/b6XfKb0y+8dD4Iz88k/UDAHD23m38Obuq+Fmz6f+xXsr//w8AAAD0hZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/n7h75yvvPJuldwOcC+Ll8TA8fG+xXex4z4Z/b5ibl3/9Q98YeeVLzy7ttgezLPvFQ+/ruP0T98Z1FY7HdX6g9esLXH39km7/8Ufnt2t+/4TTO4vrj/dnqadB7Cq/Nr6lcb0bnppszNcfyhrzkdkXniuuv/h33P7U1mL7Pw9vWrL7wEDL/pvDem4Mc0N4T5mHd88fh3zG/V5Zf90/XPbJ+duL+w1suqRxN1/+veJ643tEvXRZsX2834ut/++//O1X8u2fvKnz+p8d7Lz+U+F6fxzmz3cV2zcf8y81rf8Pwvrj7cX97vz69zqu/9Wriu1fDefFV8NsX//9f/z+dzo9XvF2dt9T7Bdvf+J/tjX2i9cXr799/aPPTrYcj/brf/3t4np2ff6nQ83bx6/H24kev6f1/B4Ij29LjzzLsm//YdZynLMPFvv9Xdv64/Udv6fz+m9vW+fxgesb+8/fn3Ut9+sr39zS8f7G9ez+63Ut9+elB8Lxe3v8+/n1nnoknI/h8v/9QXF97e9l+uoDra83cfuvriuet/H6xtvW/1Lb+mevz49d7/U/+Hax/lfvW92y/t0fDefTg8Xstf6Df3Fpy/5f+1bxeJz4wtjRY9MnD+0Pd2Zd2/N49eiatRdd/J5LLg2vpe3/3nNs5ompExsmNkxk2YY+fMvAlV7/18P872LMLv8tFH740+K8e/FjxfetW35W/Pul8PXHw+MZvz9+5c9GWs7X9sd99r5inuv6bwvrWKqrvvwf13f48n8ueM/fU59+7eTf/v6b7T8XxPtz/IrRxv17eeOVjcsGXi8ub3+96uXfr2h9Xv9oeKIxvxuO61x4Z+ZNVxa313798b1JXvx48fyNP8nF/bO29xNZN9R6P851/T8KP8d87+rW1794fnz32bZ3c16XDeRLmA2vD9lscXncKh7vF09f2fH24vvwZLPXnMkyFzX91PT44UNHTz45PjM1PTM+/dTTe44cO3l0Zk/jvUv3fLbX/vPP77WN5/f+qR3bssaz/VgxVtiFXv/xR/ftv2vi5v1TB/aePDDz6PGpEwf3TU/vm9o/ffPeAwemvtBr/0P7d01u2bn1ri1jBw/t33X3zp1bd44dOnosX0axqB52THxu7OiJPY1dpndt2zm5ffu2ibEjx/ZP7bprYmLsZK/9G9+bxvK9Pz92Yurw3plDR6bGpg89PbVrcueOHVt6vvvjkeMHpjeMnzh5dPzk9NSJ8eK+bJhpfDn/3tdrf+ph+lh4vWszEH46/9TtO9L74+a+8cVFr6rYpPXH0+yt8F5Q8ftbr3/H3D8SZlKT/A8AAAB1EHN/eOP/+QvkfwAAAKiMmPtXh5nI/wAAAFAZMfePhpnUJP/r/+v/6//r/+v/n8f+f6b/v9z0/5el/7+Q/v+S6P/r/+v/6//TXdn6/zH3r8myWuZ/AAAAqIOY+9eGmcj/AAAAUBkx918UZiL/AwAAQGXE3H9xmEk98v9I+1/1//X/9f+b+/9xW/3/TP9f//8s6f/r/3ej/6//38/rL2H/f43+P2VTtv5/zP3vCTOpR/4HAACAWoi5/5IwE/kfAAAAKiPm/kvDTOR/AAAAqIyY+9eFmdQk//v8f/1//X+f/6//r/+/kvT/9f+70f/X/+/n9Zew/+/z/ymdsvX/Y+7/f2EmNcn/AAAAUAcx9783zET+BwAAgMqIuf+yMBP5HwAAACoj5v7Lw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+K8JMapL/AQAAoA5i7r8yzET+BwAAgMqIuf+qMBP5HwAAACoj5v6rw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+a8JMapL/AQAAoA5i7r82zET+BwAAgMqIuf99YSbyPwAAAFRGzP3rw0xqkv/1//X/S9//H9T/1/8v6P/r/3eyvP3/wUUv0f8v6P+30v/X/9f/1/+nu7L1/2Puf3+YSU3yPwAAANRBzP3XhZnI/wAAAFAZMfdfH2Yi/wMAAEBlxNy/IcykJvlf/1//v/T9f5//r/8fZu36/zMD+v9L4PP/9f8z/f+zdqH78/2+fv1//X96K1v/P+b+jWEmNcn/AAAAUAcx928KM5H/AQAAoDJi7r8hzET+BwAAgMqIuf/GMJOa5H/9/7Ps/69p/af+f+f16//r/+v/+/x//X/9/270//X/+3n9+v9L6/+v6nVFVFrZ+v8x998UZlKT/A8AAAB1EHP/zWEm8j8AAABURsz9t4SZyP8AAABQGTH3bw4zqUn+1//3+f/6//r/+v/6/ytJ/3/J/f81Z7Mu/f+C/v/ZudD9+X5ffz/1/0c77O/z/zkfytb/j7n/1jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7r89zET+BwAAgMqIuX8szKQm+V//X/9f/1//X/9f/38lVbX/n15Hff6//r/+v/7/Cvf/v7nI/v3y+f/UW9n6/zH33xFmUpP8DwAAAHUQc/+dYSbyPwAAAFRGzP3jYSbyPwAAAFRGzP0TYSY1yf/6//r/+v/6//r/+v8rqar9//bP/8+yTP9f/z/R/9f/L9vn/3ei/8/5ULb+f8z9k2EmNcn/AAAAUAcx928JM5H/AQAAoDJi7t8aZiL/AwAAQGXE3L8tzKQm+V//X/9f/1//X/9f/38l1aX/7/P/i8v1/wv6//r/+v/6/3U02OFrZev/x9y/PcykJvkfAAAA6iDm/h1hJvI/AAAAVEbM/XeFmcj/AAAAUBkx998dZlKT/K//r/+v/6//X97+f+vtr1z//7/0/1eQ/r/+fzf6//r//bx+/X/9f3pb3v7/pefc/4+5f2eYSU3yPwAAANRBzP0fCDOR/wEAAKAyYu6/J8xE/gcAAIC+0ulzCKOY+z8YZlKT/K//X/X+/9xq/X/9//7t/7ceT5//r//fSXj51P9fonr1/9csuD39/1YXuj/f7+vX/9f/p7fl7f8v+PH0jPv/MffvCjOpSf4HAACAOoi5/94wE/kfAAAAKiPm/vvCTOR/AAAAqIyY+3eHmdQk/+v/V73/X77P/x/I9P/1/wv6//r/y8Hn/+v/Zz7//6ydbX8+vu+G/n95+v/5OaT/TxmVrf8fc//9YSY1yf8AAABQBzH3fyjMRP4HAACAyoi5/8NhJvI/AAAAVEbM/R8JM6lJ/tf/1//3+f/6//r/+v8rSf9f/78b/f/+7P9H+v/l6f/7/H/Kqmz9/5j7HwgzqUn+BwAAgDqIuf+jYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/wTCTmuR//X/9f/1//X/9f/3/laT/r//fjf6//n8/r1//X/+f3srW/4+5/5fCTGqS/wEAAKAOYu5/KMxE/gcAAIDKiLn/Y2Em8j8AAABURsz9vxxmUpP8r/9/fvr/g+n69f/1//X/9f/1/5dTn/b/R/X/C/r/+v/9vH79f/1/eitb/z/m/l8JM6lJ/gcAAIA6iLn/V8NM5H8AAACojJj7fy3MRP4HAACAyoi5/+Ewk5rkf/1/n/+v/6//X9r+/3Dr8dT/1//vpE/7/z7/P9D/1//v5/Xr/+v/01vZ+v8x9/96mElN8j8AAADUQcz9j4SZyP8AAABQGTH3fzzMRP4HAACAyoi5/xNhJjXJ//r/+v/6//r/pe3/tx1P/f+y9v//reul+v/6/93o/+v/9/P69f/1/+mtbP3/mPsfDTOpSf4HAACAOoi5/5NhJvI/AAAAVEbM/b8RZiL/AwAAQGXE3P+bYSb9mf8Hz3QH/X/9f/1//X/9f/3/laT/v7D/n7+GXcj+/6qlbKj/vyT6//r/+v/6/3RXtv5/zP2fCjPpz/wPAAAAdBBz/2+Fmcj/AAAAUBkx9/92mIn8DwAAAJURc/9jYSY1yf/6//r/+v/6//r/+v8rSf/f5/93o/+v/9/P69f/1/+nt7L1/2Pu/3SYSU3yPwAAANRBzP2/E2Yi/wMAAEBlxNy/J8xE/gcAAIDKiLn/8TCTmuR//X/9f/1//f/l6f/P6f/r/3ek/6//343+v/5/P69f/1//n97K1v+PuX9vmElN8j8AAADUQcz9nwkzkf8BAACgMmLu3xdmIv8DAABAZcTcvz/MpCb5X/9f/1//X//f5//r/68k/X/9/270//X/+3n9+v/6//RWtv5/zP1TYSY1yf8AAABQBzH3Hwgzkf8BAACgMmLuPxhmIv8DAABAZcTc/0SYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/n9ev/6//T2/L1///52Xp/8fcfyjMpCb5HwAAAOog5v7PhpnI/wAAAFAZMfd/LsxE/gcAAIDKiLn/cJhJTfK//r/+v/5/Bfv/w/r/mf5/aej/6/93o/+v/9/P69f/1/+nt+Xr/2fL0v+Puf9ImElN8j8AAADUQcz9R8NM5H8AAACojJj7j4WZyP8AAABQGTH3Hw8zqUn+1//X/9f/r2D/3+f/N+j/l4P+v/5/N/r/+v/9vH79f/1/eitb/z/m/t8NM6lJ/gcAAIA6iLn/RJiJ/A8AAACVEXP/dJiJ/A8AAACVEXP/TJhJTfK//r/+v/6//r/+v/7/StL/1//vRv+/f/r/Ix321//X//8/9u6jyY676uP41WPLksr1FCv2vAV27OAd+DWwYUuxIOeMAZNzzjnnaHLOOZick0FkMFSZsu45x5Y16h6N5+p2/8/ns/DxyGOpramS61dT32r9P3OW1v/n7r9v3NJk/wMAAEAHufvvF7fY/wAAADCM3P33j1vsfwAAABhG7v4HxC1N9r/+X/+v/19M/7/t/PT/+n/9/yXR/+v/N/vu/8/EB4P3/wfR/+v/9f/MWVr/n7v/gXFLk/0PAAAAHeTuf1DcYv8DAADAMHL3Pzhusf8BAABgGLn7HxK3NNn/+n/9/7j9/6m19f/e/59f1xH7/xO3/rL6/+Ol/9f/b/bd/zd5//9B9P/6f/0/c5bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/5f/z9u/7+69//r//PrOkT/f6Z+Hu//1//r/y9O/6//X/Pz6//1/8xbWv+fu/+RcUuT/Q8AAAAd5O5/VNxi/wMAAMAwcvc/Om6x/wEAAGAYufsfE7c02f/6f/2//l//r/+/DO//1//r//X/B9L/6//X/Pz6f/0/85bW/+fuf2zc0mT/AwAAQAe5+x8Xt9j/AAAAMIzc/Y+PW+x/AAAAGEbu/ifELU32v/5f/6//1//r//X/u6T/1/9P0f/r/9f8/Pp//T/zdt7/X3PtuXvY/j93/7VxS5P9DwAAAB3k7n9i3GL/AwAAwDBy9z8pbrH/AQAAYBi5+58ctzTZ/wf0/1ds9P9N+/+bT+j/9f/L7P9vij9l9P/6/wutu/8/rf/X/5/74eX1/4f7ndD/6//1/8zZef8/0/vf/uPc/dfFLU32PwAAAHSQu/8pcYv9DwAAAMPI3f/UuMX+BwAAgGHk7n9a3NJk/3v/v/7/ON//nz+v/n9L/+/9//p//b/3/0/bYf9/r/zN1P9f3L77+bU//1T/f/dDPL/+nw6W1v/n7n963NJk/wMAAEAHufufEbfY/wAAADCM3P3PjFvsfwAAABhG7v5nxS0N9v+V+v96jqT/9/7/Q/X/Z7b/vv7//OfR/+v/D6L/1/9P8f5//f+an9/7/+f7/6vnfhKGt7T+P3f/s+OWBvsfAAAAusjd/5y4xf4HAACAYeTuf27cYv8DAADAMHL3Py9uabL/9f/6f/2/9//fof7/Cv2//n+a/l//P0X/r/9f8/Pr/73/n3lL6/9z9z8/bqnhd+UR/isBAACAJcnd/4K4pcn3/wEAAKCD3P0vjFvsfwAAABhG7v4XxS1N9r/+X/+v/9f/e/+//n+X9P/D9f8n9P+30v/r//X/+n+mLa3/z93/4rilyf4HAACADnL3vyRusf8BAABgGLn7Xxq32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/6/93Sf8/XP/v/f+3of/X/+v/9f9MW1r/n7v/5XFLk/0PAAAAHeTuf0XcYv8DAADAMHL3vzJusf8BAABgGLn7XxW3NNn/+n/9v/5f/6//1//v0vL7/5OH+iz9/5b+/3y76v9PX+TX0/8v6/mPp//Pr77+nzEtoP+/x20/zt3/6rilyf4HAACADnL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/i/X/Z6/e/vOZ/j9/w/T/cfX/+v+N/r/o//X/m1X0/4ej/9/S/5/P+//1/97/r/9n2gL6//M+zt3/+rilyf4HAACADnL3vyFusf8BAABgGLn73xi32P8AAAAwjNz9b4pbmux/7//X/+v/9f/6f/3/Lun/9f9TVtT/nzroB/X/+n/9v/6faUvr/3P3vzluabL/AQAAoIPc/W+JW+x/AAAAGEbu/rfGLfY/AAAADCN3/9vilib7X/+v/997//9/+v+k/4+vq/5f/38J9P/6/433/x/Zvvv5tT+//l//z7yl9f+5+98etzTZ/wAAANBB7v53xC32PwAAAAwjd/874xb7HwAAAIaRu/9dcUuT/a//1//vvf/3/v+i/4+vq/5f/38J9P/6/43+/8j23c+v/fn1//p/5i2t/8/d/+64pcn+BwAAgA5y978nbrH/AQAAYBi5+98bt9j/AAAAMIzc/e+LW5rsf/2//l//r//X/+v/d0n/r/+fcnn7/+vO6v/Pt+9+fu3Pr//X/zNvaf1/7v73xy1N9j8AAAB0kLv/A3GL/Q8AAADDyN3/wbjF/gcAAIBh5O7/UNzSZP/r/9fe/9/zxniCpfX/+Sn6f/2//l//r//X/1/Uct//f/s/KQ6m/9f/6//1/0y7bP3/va+5z91u+ZuZ/j93/4fjlib7HwAAADrI3X993GL/AwAAwDBy938kbrH/AQAAYBi5+z8atzTZ/z36/5MXfNo4/b/3/+v/F93/5x+q+n/9v/5f/3+g5fb/h6P/1//r//X/TFva+/9z938sbmmy/wEAAKCD3P0fj1vsfwAAABhG7v5PxC32PwAAAAwjd/8n45Ym+79H/38h/f/Wsff/N99J/6//L97/r//f6P/1/zP0//r/NT//0P3/iY3+n2OxtP4/d/+n4pYm+x8AAAA6yN3/6bjF/gcAAIBh5O7/TNxi/wMAAMAwcvd/Nm646//v75EuK/2//t/7//X/+n/9/y7p/4/Q/5+48tDPpf/f0v8fzb77+bU//9D9v/f/c0yW1v/n7v9c3OL7/wAAADCM3P2fj1vsfwAAABhG7v4vxC32PwAAAAxg27vn7v9i3NJk/+v/9f/6f/2//l//v0v6f+//n6L/1/+v+fn1//p/5i2t/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBi5+78St9j/AAAAMIzc/V+NW5rsf/2//l//r//X/+v/d0n/r/+fov/X/6/5+fX/+n/mLa3/z93/tbilyf4HAACADnL3fz1usf8BAABgGLn7vxG32P8AAAAwjNz934xbmux//b/+X/+v/9f/773/P7nR/x+Z/l//v9H/H9m++/m1P7/+X//PvKX1/7n7vxW3NNn/AAAA0EHu/m/HLfY/AAAADCN3/3fiFvsfAAAAhpG7/7txS5P9P3L/P/Vp+v8t/b/+f6P/X0L/7/3/d4D+X/+/0f8f2b77+bU/v/5f/8+8pfX/ufu/F7c02f8AAADQQe7+78ct9j8AAAAMI3f/DZvN9fY/AAAAjOmGc389vflB3NJk/4/c/0/R/2/p//X/G/2//n/H9P/6/yn6f/3/mp9f/6//Z97S+v/c/T+MW5rsfwAAAOggd/+P4hb7HwAAAIaRu//HcYv9DwAAAMPI3f+TuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9P41bmux/AAAA6CB3/8/iFvsfAAAAhpG7/+dxi/0PAAAAw8jd/4u4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACGkbv/13GL/Q8AAADDyN3/m7ilyf7X/+v/9f/6f/2//n+X2vb/t/xvVf8/S/+v/1/z8+v/9f/MW1r/n7v/t3FLk/0PAAAAHeTu/13cYv8DAADAMHL3/z5usf8BAABgGLn7/xC3NNn/+n/9v/5f/7+O/v8q/b/+/0CL7f+9//9Q9P/6/zU/v/5f/8+8pfX/uftvjFua7H8AAADoIHf/H+MW+x8AAACGkbv/T3GL/Q8AAADDyN1/Nm5psv/1//r/Ifv/U/r/8fp/7/9fZf9/F/2//n+a/l//v+bn1//r/5m3tP4/d/+f45Ym+x8AAAA6yN3/l7jF/gcAAIBh5O7/a9xi/wMAAMAwcvf/LW5psv/1//r/Ift/7//X/+v/F0P/r/+fov/X/6/5+fX/+n/mLa3/z93/97ilyf4HAACADnL3/yNusf8BAABgGLn7/xm32P8AAAAwjNz9/4pbmux//b/+X/+v/9f/6/93Sf+/3v7/qo3+f47+X/+v/9f/M21p/X/u/n/HLU32PwAAAHSQu/+muOXA/X/ny/RUAAAAwHHK3f+fuMX3/wEAAGAYufv/G7c02f/6f/2//l//r//X/++S/n+9/b/3/8/T/+v/9f/6f6Ytrf/P3f+/AAAA///XHBWv")
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r4, 0x2007ffc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000340)={0x0, 0x2, 0x18})
accept$unix(r4, &(0x7f0000000180), &(0x7f00000000c0)=0x6e)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
copy_file_range(r4, 0x0, r5, 0x0, 0xfffffbffa003e45b, 0x700000000000000)

280.081395ms ago: executing program 1 (id=384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
r7 = open(0x0, 0x6c143, 0x0)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "cd0f9bcdc8292bb9", "a884b8acbab5d8416c9479d9ec75f9c5", "09011ee8", "4284ef20778207a0"}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x56, &(0x7f00000004c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x2, 0x3f18, {0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @loopback, @loopback, {[@rr={0x7, 0x17, 0xe5, [@rand_addr=0x64010101, @private=0xa010100, @multicast1, @loopback, @remote]}]}}}}}}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
socket$nl_generic(0x10, 0x3, 0x10)

153.413789ms ago: executing program 1 (id=385):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/23, 0x17}], 0x1}, 0xfffffffb}], 0x1, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000240)=0xfffffffb, 0x4)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000)

66.273179ms ago: executing program 0 (id=386):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x0, 0x0, 0x0)

221.572µs ago: executing program 1 (id=387):
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0)

0s ago: executing program 1 (id=388):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0xfffffffffffffffd, &(0x7f0000000040)=0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9726' (ED25519) to the list of known hosts.
syzkaller login: [   49.005716][ T5775] cgroup: Unknown subsys name 'net'
[   49.156761][ T5775] cgroup: Unknown subsys name 'cpuset'
[   49.164921][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.433251][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.570714][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.574642][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.577983][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.581870][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.585937][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.644077][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.647947][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.651350][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.660307][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.664720][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.713759][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.717576][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.722346][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.726801][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.730676][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.013427][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   57.066730][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   57.159122][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   57.173777][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.176835][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.180053][ T5843] bridge_slave_0: entered allmulticast mode
[   57.184412][ T5843] bridge_slave_0: entered promiscuous mode
[   57.219079][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.223593][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.226562][ T5843] bridge_slave_1: entered allmulticast mode
[   57.230402][ T5843] bridge_slave_1: entered promiscuous mode
[   57.254972][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.257976][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.260872][ T5847] bridge_slave_0: entered allmulticast mode
[   57.266026][ T5847] bridge_slave_0: entered promiscuous mode
[   57.270444][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.273639][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.276529][ T5847] bridge_slave_1: entered allmulticast mode
[   57.280111][ T5847] bridge_slave_1: entered promiscuous mode
[   57.332396][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.339304][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.346803][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.358331][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.413322][ T5843] team0: Port device team_slave_0 added
[   57.417226][ T5847] team0: Port device team_slave_0 added
[   57.444939][ T5843] team0: Port device team_slave_1 added
[   57.449050][ T5847] team0: Port device team_slave_1 added
[   57.452007][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.454726][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.457164][ T5850] bridge_slave_0: entered allmulticast mode
[   57.459919][ T5850] bridge_slave_0: entered promiscuous mode
[   57.502103][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.504590][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.507153][ T5850] bridge_slave_1: entered allmulticast mode
[   57.509763][ T5850] bridge_slave_1: entered promiscuous mode
[   57.513304][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.516280][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.530333][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.537035][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.540008][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.552331][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.588384][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.591305][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.602826][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.622651][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.628982][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.634786][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.637755][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.649261][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.714297][ T5847] hsr_slave_0: entered promiscuous mode
[   57.717601][ T5847] hsr_slave_1: entered promiscuous mode
[   57.741310][ T5850] team0: Port device team_slave_0 added
[   57.750501][ T5843] hsr_slave_0: entered promiscuous mode
[   57.753922][ T5843] hsr_slave_1: entered promiscuous mode
[   57.756936][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   57.759435][ T5843] Cannot create hsr debugfs directory
[   57.764437][ T5850] team0: Port device team_slave_1 added
[   57.804647][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.807166][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.817124][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.835802][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.838431][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.849275][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.929901][ T5850] hsr_slave_0: entered promiscuous mode
[   57.933987][ T5850] hsr_slave_1: entered promiscuous mode
[   57.936833][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.939233][ T5850] Cannot create hsr debugfs directory
[   58.247098][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.269141][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.286133][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.293782][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.337009][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.346345][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.353427][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.373677][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.456974][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.471225][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.481519][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.487283][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.565353][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.597359][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.606844][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   58.623672][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.626975][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.644786][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.647969][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.659099][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   58.667302][   T55] Bluetooth: hci0: command tx timeout
[   58.676612][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.679660][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.698595][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.701092][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.719330][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.741968][   T55] Bluetooth: hci1: command tx timeout
[   58.768636][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.772795][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.779509][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   58.800150][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.803306][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.822047][   T55] Bluetooth: hci2: command tx timeout
[   58.828661][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.831720][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.884844][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.974325][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.034632][ T5847] veth0_vlan: entered promiscuous mode
[   59.040838][ T5847] veth1_vlan: entered promiscuous mode
[   59.063822][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.072429][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.083398][ T5847] veth0_macvtap: entered promiscuous mode
[   59.088144][ T5847] veth1_macvtap: entered promiscuous mode
[   59.116315][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.129777][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.139204][ T5843] veth0_vlan: entered promiscuous mode
[   59.152667][ T5850] veth0_vlan: entered promiscuous mode
[   59.165006][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.169079][ T5843] veth1_vlan: entered promiscuous mode
[   59.175088][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.185464][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.189198][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.201105][ T5850] veth1_vlan: entered promiscuous mode
[   59.234276][ T5843] veth0_macvtap: entered promiscuous mode
[   59.242423][ T5843] veth1_macvtap: entered promiscuous mode
[   59.279539][ T5850] veth0_macvtap: entered promiscuous mode
[   59.285901][ T5850] veth1_macvtap: entered promiscuous mode
[   59.290313][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.295479][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.299217][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.335717][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.339749][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.353216][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.357031][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.357065][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.376130][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.379679][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.397215][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.401104][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.415209][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.435224][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.446226][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.447288][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.449757][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.531278][ T5913] cgroup: name respecified
[   59.533390][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.536599][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.584878][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.597162][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.629959][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.635287][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.658010][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.667008][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.826777][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.981187][ T5931] loop2: detected capacity change from 0 to 32768
[   60.387236][ T5938] loop1: detected capacity change from 0 to 256
[   60.687970][ T5944] program syz.1.12 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   60.767169][   T55] Bluetooth: hci0: command tx timeout
[   60.822044][   T55] Bluetooth: hci1: command tx timeout
[   60.902542][   T55] Bluetooth: hci2: command tx timeout
[   61.012531][ T1058] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[   61.015897][ T1058] ata1.00: irq_stat 0x40000001
[   61.017987][ T1058] ata1.00: failed command: ZAC MANAGEMENT OUT
[   61.020615][ T1058] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 19
[   61.020615][ T1058]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[   61.029504][ T1058] ata1.00: status: { DRDY ERR }
[   61.032067][ T1058] ata1.00: error: { ABRT }
[   61.033881][ T1058] ata1.00: device reported invalid CHS sector 0
[   61.219468][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   61.735617][ T1058] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   61.739199][ T1058] ata1: failed to read log page 10h (errno=-5)
[   61.742190][ T1058] ata1.00: exception Emask 0x1 SAct 0x2000 SErr 0x0 action 0x0
[   61.745437][ T1058] ata1.00: irq_stat 0x40000000
[   61.747501][ T1058] ata1.00: failed command: WRITE FPDMA QUEUED
[   61.750164][ T1058] ata1.00: cmd 61/88:68:ea:03:10/00:00:00:00:00/40 tag 13 ncq dma 69632 out
[   61.750164][ T1058]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   61.757735][ T1058] ata1.00: status: { DRDY }
[   61.759811][ T1058] ata1.00: error: { ABRT }
[   61.764012][ T1058] ata1.00: configured for UDMA/100
[   61.766562][ T1058] ata1: EH complete
[   61.783149][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.787701][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   61.798115][   T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   61.802350][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   61.805911][   T10] usb 1-1: SerialNumber: syz
[   62.066191][   T10] usb 1-1: 0:2 : does not exist
[   62.074246][   T10] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[   62.086303][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   62.099234][   T10] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[   62.127344][   T10] usb 1-1: USB disconnect, device number 2
[   62.167216][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   62.822474][   T55] Bluetooth: hci0: command tx timeout
[   62.902158][   T55] Bluetooth: hci1: command tx timeout
[   62.982352][   T55] Bluetooth: hci2: command tx timeout
[   63.147155][   T33] audit: type=1326 audit(1756996923.134:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.28" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe93ed8ebe9 code=0x0
[   63.184742][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   63.323182][ T5986] loop1: detected capacity change from 0 to 32768
[   63.331158][ T5986] XFS: ikeep mount option is deprecated.
[   63.333441][ T5986] XFS: ikeep mount option is deprecated.
[   63.410496][ T5986] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   63.471848][ T5986] XFS (loop1): Ending clean mount
[   63.499592][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   63.571771][ T6004] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   63.576880][ T6004] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   64.243538][ T6013] loop2: detected capacity change from 0 to 40427
[   64.260749][ T6013] F2FS-fs (loop2): invalid crc value
[   64.266143][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   64.365732][ T6013] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   64.372675][ T6013] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   64.399472][   T33] audit: type=1804 audit(1756996924.384:3): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.33" name="/newroot/10/file1/file1" dev="loop2" ino=10 res=1 errno=0
[   64.610252][ T5847] syz-executor: attempt to access beyond end of device
[   64.610252][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   64.621635][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   64.621647][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.621652][ T5847] Call Trace:
[   64.621655][ T5847]  <TASK>
[   64.621659][ T5847]  dump_stack_lvl+0x189/0x250
[   64.621670][ T5847]  ? preempt_schedule_thunk+0x16/0x30
[   64.621682][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.621690][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[   64.621696][ T5847]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   64.621706][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   64.621719][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[   64.621732][ T5847]  f2fs_write_end_io+0x886/0xb60
[   64.621746][ T5847]  __submit_merged_bio+0x27a/0x6a0
[   64.621758][ T5847]  __submit_merged_write_cond+0x255/0x530
[   64.621770][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[   64.621793][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   64.621830][ T5847]  ? rcu_is_watching+0x15/0xb0
[   64.621850][ T5847]  ? __pfx___schedule+0x10/0x10
[   64.621866][ T5847]  ? preempt_schedule+0xae/0xc0
[   64.621876][ T5847]  ? preempt_schedule_common+0x83/0xd0
[   64.621885][ T5847]  ? preempt_schedule+0xae/0xc0
[   64.621893][ T5847]  ? __pfx_preempt_schedule+0x10/0x10
[   64.621901][ T5847]  ? do_raw_spin_lock+0x121/0x290
[   64.621915][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   64.621926][ T5847]  do_writepages+0x32e/0x550
[   64.621939][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   64.621949][ T5847]  filemap_fdatawrite+0x199/0x240
[   64.621959][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   64.621984][ T5847]  ? preempt_schedule_thunk+0x16/0x30
[   64.621996][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[   64.622009][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[   64.622025][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   64.622049][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[   64.622058][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[   64.622067][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[   64.622073][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[   64.622091][ T5847]  ? shrinker_free+0x2ce/0x3e0
[   64.622100][ T5847]  deactivate_locked_super+0xbc/0x130
[   64.622109][ T5847]  cleanup_mnt+0x425/0x4c0
[   64.622117][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[   64.622128][ T5847]  task_work_run+0x1d4/0x260
[   64.622138][ T5847]  ? __pfx_task_work_run+0x10/0x10
[   64.622146][ T5847]  ? __x64_sys_umount+0x122/0x160
[   64.622156][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[   64.622167][ T5847]  exit_to_user_mode_loop+0xec/0x110
[   64.622177][ T5847]  do_syscall_64+0x2bd/0x3b0
[   64.622184][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.622190][ T5847]  ? asm_sysvec_call_function_single+0x1a/0x20
[   64.622199][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.622205][ T5847] RIP: 0033:0x7fe93ed8ff17
[   64.622213][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   64.622219][ T5847] RSP: 002b:00007ffda5c02e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   64.622228][ T5847] RAX: 0000000000000000 RBX: 00007fe93ee11c05 RCX: 00007fe93ed8ff17
[   64.622232][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda5c02ef0
[   64.622236][ T5847] RBP: 00007ffda5c02ef0 R08: 0000000000000000 R09: 0000000000000000
[   64.622240][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda5c03f80
[   64.622244][ T5847] R13: 00007fe93ee11c05 R14: 000000000000fb51 R15: 00007ffda5c03fc0
[   64.622255][ T5847]  </TASK>
[   64.713632][   T10] usb 2-1: Using ep0 maxpacket: 32
[   64.743962][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   64.759658][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[   64.764221][   T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[   64.768531][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[   64.774351][   T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   64.777208][   T10] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[   64.783458][   T10] usb 2-1: Product: syz
[   64.787412][   T10] usb 2-1: Manufacturer: syz
[   64.790020][   T10] usb 2-1: SerialNumber: syz
[   64.801277][   T10] usb 2-1: config 0 descriptor??
[   64.902698][   T55] Bluetooth: hci0: command tx timeout
[   64.982249][   T55] Bluetooth: hci1: command tx timeout
[   65.063604][   T55] Bluetooth: hci2: command tx timeout
[   65.220114][   T10] gs_usb 2-1:0.0: Configuring for 1 interfaces
[   65.692438][   T10] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[   65.697827][   T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[   65.729467][   T10] usb 2-1: USB disconnect, device number 2
[   65.769125][ T6039] : renamed from batadv_slave_1 (while UP)
[   66.124133][ T6062] nftables ruleset with unbound chain
[   66.562558][ T5875] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.570751][ T6084] loop1: detected capacity change from 0 to 40427
[   66.574827][ T6084] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   66.577975][ T6084] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   66.610887][ T6084] F2FS-fs (loop1): invalid crc value
[   66.650325][ T6084] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   66.656495][ T6084] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   66.659438][ T6084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   66.795941][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short
[   66.800374][ T5875] usb 3-1: config 249 has an invalid interface number: 177 but max is 0
[   66.805415][ T5875] usb 3-1: config 249 has no interface number 0
[   66.808134][ T5875] usb 3-1: config 249 interface 177 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[   66.841722][ T5875] usb 3-1: config 249 interface 177 altsetting 0 has an endpoint descriptor with address 0x53, changing to 0x3
[   66.850964][ T6082] loop0: detected capacity change from 0 to 32768
[   66.853327][ T5875] usb 3-1: config 249 interface 177 altsetting 0 endpoint 0x3 has invalid maxpacket 65199, setting to 1024
[   66.864797][   T33] audit: type=1800 audit(1756996926.854:4): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.62" name="file1" dev="loop0" ino=4 res=0 errno=0
[   66.876911][ T5875] usb 3-1: config 249 interface 177 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[   66.890744][ T5875] usb 3-1: config 249 interface 177 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   66.900648][ T5875] usb 3-1: New USB device found, idVendor=057c, idProduct=3800, bcdDevice=5a.9d
[   66.905515][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.908981][ T5875] usb 3-1: Product: syz
[   66.910677][ T5875] usb 3-1: Manufacturer: syz
[   66.914559][ T5875] usb 3-1: SerialNumber: syz
[   66.929075][ T6076] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   67.385405][ T6092] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure
[   67.428682][   T55] Bluetooth: hci1: command tx timeout
[   67.440493][ T5875] usb 3-1: USB disconnect, device number 2
[   67.722422][   T52] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   67.886520][ T6100] 9pnet_fd: p9_fd_create_tcp (6100): problem binding to privport
[   67.888444][   T52] usb 1-1: unable to get BOS descriptor or descriptor too short
[   67.895556][   T52] usb 1-1: not running at top speed; connect to a high speed hub
[   67.904687][   T52] usb 1-1: config 1 has an invalid interface number: 130 but max is 0
[   67.908144][   T52] usb 1-1: config 1 has no interface number 0
[   67.919349][   T52] usb 1-1: config 1 interface 130 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   67.928189][   T52] usb 1-1: config 1 interface 130 has no altsetting 0
[   67.933456][   T52] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=84.ac
[   67.937281][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.940448][   T52] usb 1-1: Product: syz
[   67.946437][   T52] usb 1-1: Manufacturer: syz
[   67.948466][   T52] usb 1-1: SerialNumber: syz
[   67.953888][ T6094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   68.082202][ T5973] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   68.165483][   T52] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware
[   68.181385][   T52] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[   68.185624][   T52] dib0700: firmware download failed at 7 with -71
[   68.200440][   T52] usb 1-1: USB disconnect, device number 3
[   68.334322][ T5973] usb 2-1: Using ep0 maxpacket: 32
[   68.339503][ T5973] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   68.353907][ T5973] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   68.357645][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   68.360993][ T5973] usb 2-1: Product: syz
[   68.363345][ T5973] usb 2-1: Manufacturer: syz
[   68.366512][ T5973] usb 2-1: SerialNumber: syz
[   68.374705][ T5973] usb 2-1: config 0 descriptor??
[   68.377548][ T6098] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   68.381989][ T5973] hub 2-1:0.0: bad descriptor, ignoring hub
[   68.384849][ T5973] hub 2-1:0.0: probe with driver hub failed with error -5
[   68.765734][ T5973] usb 2-1: USB disconnect, device number 3
[   69.071829][ T5973] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   69.223791][ T5973] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[   69.239043][ T5973] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   69.243658][ T5973] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11
[   69.248010][ T5973] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024
[   69.252781][ T5973] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   69.256018][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.260884][ T6115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   69.269794][ T5973] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   69.338299][ T6117] loop2: detected capacity change from 0 to 32768
[   69.347977][ T6117] 
[   69.347977][ T6117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   69.347977][ T6117] 
[   69.392577][ T3576] read_mapping_page failed!
[   69.394675][ T3576] ERROR: (device loop2): txCommit: 
[   69.394675][ T3576] 
[   69.398598][ T3576] jfs_write_inode: jfs_commit_inode failed!
[   69.401303][ T5847] 
[   69.401303][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   69.401303][ T5847] 
[   69.408003][ T5847] 
[   69.408003][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   69.408003][ T5847] 
[   69.473506][ T5875] usb 1-1: USB disconnect, device number 4
[   69.684255][ T6123] loop2: detected capacity change from 0 to 32768
[   69.700830][ T6123] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas_v0: no devices in entry btree: 1/0 []
[   69.700830][ T6123] replicas_v0 (size 24):
[   69.700830][ T6123] btree: 0 [] (unknown data_type 16): 2 [1 0] user: 1 [0]
[   69.700830][ T6123] 
[   69.710224][ T6123] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[   70.039852][ T6135] warning: `syz.0.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.131888][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   70.284236][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.288944][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.294329][ T5875] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   70.297384][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.301922][ T5875] usb 3-1: config 0 descriptor??
[   70.361789][ T5973] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   70.463060][ T6146] geneve2: entered promiscuous mode
[   70.465190][ T6146] geneve2: entered allmulticast mode
[   70.513689][ T5973] usb 1-1: Using ep0 maxpacket: 8
[   70.519670][ T5973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.530286][ T5973] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[   70.535256][ T5973] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac
[   70.539341][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.554097][ T5973] usb 1-1: config 0 descriptor??
[   70.563404][ T5973] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22
[   70.797669][   T52] usb 1-1: USB disconnect, device number 5
[   70.851843][ T5973] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   71.004158][ T5973] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[   71.007555][ T5973] usb 2-1: config 6 has no interface number 0
[   71.010050][ T5973] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   71.014617][ T5973] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   71.019528][ T5973] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   71.027063][ T5973] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   71.030835][ T5973] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[   71.034003][ T5973] usb 2-1: Product: syz
[   71.035719][ T5973] usb 2-1: Manufacturer: syz
[   71.037338][ T5973] usb 2-1: SerialNumber: syz
[   71.042797][ T5973] hso 2-1:6.2: Failed to find INT IN ep
[   71.250822][ T5973] usb 2-1: USB disconnect, device number 4
[   71.306709][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.310525][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.328901][ T5875] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71
[   71.338621][ T5875] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71
[   71.343160][ T5875] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71
[   71.348922][ T5875] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[   71.352630][ T5875] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71
[   71.370965][ T5875] usb 3-1: USB disconnect, device number 3
[   71.882781][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'.
[   71.960226][   T55] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1
[   72.069893][ T6162] loop2: detected capacity change from 0 to 4096
[   72.081853][ T6162] EXT4-fs: Conflicting test_dummy_encryption options
[   72.490702][ T6175] loop2: detected capacity change from 0 to 256
[   72.519097][ T6175] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.554642][ T6175] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[   72.940971][ T6193] loop2: detected capacity change from 0 to 16
[   72.950932][ T6193] erofs (device loop2): algorithm 1 isn't enabled on this kernel
[   73.041949][ T5973] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   73.139062][ T6202] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   73.142321][ T5875] IPVS: starting estimator thread 0...
[   73.193953][ T5973] usb 1-1: Using ep0 maxpacket: 8
[   73.205639][ T5973] usb 1-1: config 0 has an invalid interface number: 78 but max is 0
[   73.208617][ T5973] usb 1-1: config 0 has no interface number 0
[   73.216232][ T6206] loop2: detected capacity change from 0 to 512
[   73.221125][ T6206] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   73.232305][ T5973] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21
[   73.237587][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.246838][ T5973] usb 1-1: Product: syz
[   73.247857][ T6204] IPVS: using max 44 ests per chain, 105600 per kthread
[   73.248528][ T5973] usb 1-1: Manufacturer: syz
[   73.248539][ T5973] usb 1-1: SerialNumber: syz
[   73.250179][ T5973] usb 1-1: config 0 descriptor??
[   73.252311][ T6206] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   73.273184][ T6206] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   73.282187][ T6206] EXT4-fs (loop2): 1 truncate cleaned up
[   73.293403][ T6206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.498747][ T5973] usbhid 1-1:0.78: couldn't find an input interrupt endpoint
[   73.503418][ T5973] usb 1-1: USB disconnect, device number 6
[   74.117732][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.231746][   T52] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   74.383915][   T52] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   74.387315][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.392270][   T52] usb 2-1: config 0 descriptor??
[   74.397242][   T52] gspca_main: cpia1-2.14.0 probing 0813:0001
[   74.622421][ T6236] loop0: detected capacity change from 0 to 40427
[   74.632428][ T6236] F2FS-fs (loop0): invalid crc value
[   74.682247][ T6236] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   74.686431][ T6236] F2FS-fs (loop0): Start checkpoint disabled!
[   74.693538][ T6236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   74.773997][   T33] audit: type=1800 audit(1756996934.764:5): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.127" name="bus" dev="loop0" ino=10 res=0 errno=0
[   74.795290][ T6239] syz.0.127: attempt to access beyond end of device
[   74.795290][ T6239] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   74.802039][   T52] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[   74.805595][ T6239] syz.0.127: attempt to access beyond end of device
[   74.805595][ T6239] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.811127][ T6239] syz.0.127: attempt to access beyond end of device
[   74.811127][ T6239] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.818387][ T6239] syz.0.127: attempt to access beyond end of device
[   74.818387][ T6239] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.823712][ T6239] syz.0.127: attempt to access beyond end of device
[   74.823712][ T6239] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.830502][ T6239] syz.0.127: attempt to access beyond end of device
[   74.830502][ T6239] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   74.837461][ T6239] syz.0.127: attempt to access beyond end of device
[   74.837461][ T6239] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.852103][ T6239] syz.0.127: attempt to access beyond end of device
[   74.852103][ T6239] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   74.860892][ T6239] syz.0.127: attempt to access beyond end of device
[   74.860892][ T6239] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   74.875994][ T6239] syz.0.127: attempt to access beyond end of device
[   74.875994][ T6239] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   75.206660][   T52] gspca_cpia1: usb_control_msg 02, error -71
[   75.209841][   T52] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[   75.220174][   T52] usb 2-1: USB disconnect, device number 5
[   75.316007][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   75.480620][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   75.480642][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.480650][   T32] Workqueue: writeback wb_workfn (flush-7:0)
[   75.480694][   T32] Call Trace:
[   75.480702][   T32]  <TASK>
[   75.480708][   T32]  dump_stack_lvl+0x189/0x250
[   75.480725][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.480739][   T32]  ? __pfx_queue_work_on+0x10/0x10
[   75.480750][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   75.480766][   T32]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   75.480789][   T32]  f2fs_handle_critical_error+0x37c/0x540
[   75.480811][   T32]  f2fs_write_end_io+0x886/0xb60
[   75.480834][   T32]  __submit_merged_bio+0x27a/0x6a0
[   75.480854][   T32]  __submit_merged_write_cond+0x255/0x530
[   75.480875][   T32]  f2fs_write_data_pages+0x261d/0x3000
[   75.480914][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   75.480940][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   75.480975][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   75.481000][   T32]  ? trace_f2fs_writepages+0x7f/0x200
[   75.481026][   T32]  ? f2fs_write_node_pages+0x478/0x6e0
[   75.481044][   T32]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   75.481069][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   75.481086][   T32]  do_writepages+0x32e/0x550
[   75.481105][   T32]  ? reacquire_held_locks+0x127/0x1d0
[   75.481116][   T32]  ? writeback_sb_inodes+0x384/0x1010
[   75.481135][   T32]  __writeback_single_inode+0x145/0xff0
[   75.481151][   T32]  ? do_raw_spin_unlock+0x4d/0x240
[   75.481167][   T32]  writeback_sb_inodes+0x6c7/0x1010
[   75.481186][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   75.481212][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   75.481255][   T32]  ? rcu_is_watching+0x15/0xb0
[   75.481275][   T32]  wb_writeback+0x43b/0xaf0
[   75.481294][   T32]  ? queue_io+0x3d1/0x590
[   75.481310][   T32]  ? __pfx_wb_writeback+0x10/0x10
[   75.481330][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   75.481348][   T32]  wb_workfn+0x409/0xef0
[   75.481371][   T32]  ? __pfx_wb_workfn+0x10/0x10
[   75.481385][   T32]  ? __lock_acquire+0xab9/0xd20
[   75.481409][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   75.481424][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   75.481438][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   75.481449][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   75.481460][   T32]  process_scheduled_works+0xae1/0x17b0
[   75.481493][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[   75.481516][   T32]  worker_thread+0x8a0/0xda0
[   75.481546][   T32]  kthread+0x711/0x8a0
[   75.481563][   T32]  ? __pfx_worker_thread+0x10/0x10
[   75.481574][   T32]  ? __pfx_kthread+0x10/0x10
[   75.481590][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   75.481603][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.481638][   T32]  ? __pfx_kthread+0x10/0x10
[   75.481653][   T32]  ret_from_fork+0x3fc/0x770
[   75.481668][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[   75.481708][   T32]  ? __switch_to_asm+0x39/0x70
[   75.481722][   T32]  ? __switch_to_asm+0x33/0x70
[   75.481735][   T32]  ? __pfx_kthread+0x10/0x10
[   75.481750][   T32]  ret_from_fork_asm+0x1a/0x30
[   75.481774][   T32]  </TASK>
[   75.616740][   T32] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   75.619105][   T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   75.619116][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.619120][   T32] Workqueue: writeback wb_workfn (flush-7:0)
[   75.619133][   T32] Call Trace:
[   75.619137][   T32]  <TASK>
[   75.619140][   T32]  dump_stack_lvl+0x189/0x250
[   75.619152][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.619161][   T32]  ? __pfx_queue_work_on+0x10/0x10
[   75.619168][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   75.619178][   T32]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   75.619192][   T32]  f2fs_handle_critical_error+0x37c/0x540
[   75.619205][   T32]  f2fs_write_end_io+0x886/0xb60
[   75.619220][   T32]  __submit_merged_bio+0x27a/0x6a0
[   75.619232][   T32]  __submit_merged_write_cond+0x255/0x530
[   75.619245][   T32]  f2fs_write_data_pages+0x261d/0x3000
[   75.619270][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   75.619286][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   75.619308][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   75.619323][   T32]  ? trace_f2fs_writepages+0x7f/0x200
[   75.619333][   T32]  ? f2fs_write_node_pages+0x478/0x6e0
[   75.619344][   T32]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   75.619359][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   75.619369][   T32]  do_writepages+0x32e/0x550
[   75.619381][   T32]  ? reacquire_held_locks+0x127/0x1d0
[   75.619388][   T32]  ? writeback_sb_inodes+0x384/0x1010
[   75.619400][   T32]  __writeback_single_inode+0x145/0xff0
[   75.619409][   T32]  ? do_raw_spin_unlock+0x4d/0x240
[   75.619419][   T32]  writeback_sb_inodes+0x6c7/0x1010
[   75.619430][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   75.619447][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   75.619473][   T32]  ? rcu_is_watching+0x15/0xb0
[   75.619484][   T32]  wb_writeback+0x43b/0xaf0
[   75.619501][   T32]  ? queue_io+0x3d1/0x590
[   75.619515][   T32]  ? __pfx_wb_writeback+0x10/0x10
[   75.619533][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   75.619552][   T32]  wb_workfn+0x409/0xef0
[   75.619573][   T32]  ? __pfx_wb_workfn+0x10/0x10
[   75.619589][   T32]  ? __lock_acquire+0xab9/0xd20
[   75.619614][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   75.619629][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   75.619638][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   75.619644][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   75.619651][   T32]  process_scheduled_works+0xae1/0x17b0
[   75.619693][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[   75.619710][   T32]  worker_thread+0x8a0/0xda0
[   75.619728][   T32]  kthread+0x711/0x8a0
[   75.619738][   T32]  ? __pfx_worker_thread+0x10/0x10
[   75.619745][   T32]  ? __pfx_kthread+0x10/0x10
[   75.619754][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   75.619762][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.619772][   T32]  ? __pfx_kthread+0x10/0x10
[   75.619780][   T32]  ret_from_fork+0x3fc/0x770
[   75.619789][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[   75.619799][   T32]  ? __switch_to_asm+0x39/0x70
[   75.619807][   T32]  ? __switch_to_asm+0x33/0x70
[   75.619815][   T32]  ? __pfx_kthread+0x10/0x10
[   75.619823][   T32]  ret_from_fork_asm+0x1a/0x30
[   75.619839][   T32]  </TASK>
[   75.619842][   T32] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   75.693197][ T5911] usb 3-1: Using ep0 maxpacket: 32
[   75.753399][ T5911] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   75.758481][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0
[   75.761224][ T5911] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[   75.767006][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.785586][ T5911] usb 3-1: config 0 descriptor??
[   76.022767][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   76.026470][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[   76.031223][ T5240] Bluetooth: hci1: hardware error 0x00
[   76.193967][ T6253] loop0: detected capacity change from 0 to 40427
[   76.202911][ T6253] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   76.206229][ T6253] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   76.217232][ T6253] F2FS-fs (loop0): invalid crc value
[   76.276935][ T6253] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.283385][ T6253] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   76.286527][ T6253] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   76.561106][ T5911] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   76.564419][ T5911] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   76.567780][ T5911] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   76.571062][ T5911] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   76.576254][ T5911] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0
[   76.588271][ T5911] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0
[   76.899740][ T6259] loop0: detected capacity change from 0 to 131072
[   76.903283][ T6259] =======================================================
[   76.903283][ T6259] WARNING: The mand mount option has been deprecated and
[   76.903283][ T6259]          and is ignored by this kernel. Remove the mand
[   76.903283][ T6259]          option from the mount to silence this warning.
[   76.903283][ T6259] =======================================================
[   76.916770][ T6264] loop1: detected capacity change from 0 to 8192
[   76.919539][ T6259] F2FS-fs (loop0): invalid crc value
[   76.927046][ T6264] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   76.927829][ T5911] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-110)
[   76.956202][ T6259] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.960749][ T6259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   76.988868][ T5911] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -110
[   77.033969][ T5911] usb 3-1: USB disconnect, device number 4
[   77.354768][ T6278] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.140'.
[   77.442996][ T6282] loop1: detected capacity change from 0 to 512
[   77.448940][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.452284][ T6281] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.476263][ T6282] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.142: casefold flag without casefold feature
[   77.511534][ T6282] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.142: couldn't read orphan inode 15 (err -117)
[   77.534550][ T6282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.575258][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.341820][ T5240] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   78.461812][ T6302] netlink: 'syz.2.146': attribute type 3 has an invalid length.
[   78.465419][ T6302] netlink: 'syz.2.146': attribute type 3 has an invalid length.
[   78.514221][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'.
[   78.526752][ T6302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'.
[   78.898772][ T6311] loop2: detected capacity change from 0 to 256
[   78.935662][ T6311] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   79.524252][ T6333] loop1: detected capacity change from 0 to 40427
[   79.533786][ T6333] F2FS-fs (loop1): invalid crc value
[   79.550759][ T6345] loop2: detected capacity change from 0 to 4096
[   79.597488][ T6333] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   79.622681][ T6333] F2FS-fs (loop1): Start checkpoint disabled!
[   79.634796][ T6333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   79.688153][ T6351] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.749441][ T1093] CPU: 0 UID: 0 PID: 1093 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) 
[   79.749460][ T1093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.749467][ T1093] Workqueue: writeback wb_workfn (flush-7:1)
[   79.749487][ T1093] Call Trace:
[   79.749491][ T1093]  <TASK>
[   79.749496][ T1093]  dump_stack_lvl+0x189/0x250
[   79.749515][ T1093]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.749528][ T1093]  ? __pfx_queue_work_on+0x10/0x10
[   79.749538][ T1093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.749572][ T1093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.749598][ T1093]  f2fs_handle_critical_error+0x37c/0x540
[   79.749617][ T1093]  f2fs_write_end_io+0x886/0xb60
[   79.749668][ T1093]  __submit_merged_bio+0x27a/0x6a0
[   79.749688][ T1093]  __submit_merged_write_cond+0x255/0x530
[   79.749709][ T1093]  f2fs_write_data_pages+0x261d/0x3000
[   79.749746][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.749769][ T1093]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   79.749803][ T1093]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   79.749817][ T1093]  ? look_up_lock_class+0x74/0x170
[   79.749839][ T1093]  ? trace_f2fs_writepages+0x7f/0x200
[   79.749854][ T1093]  ? f2fs_write_node_pages+0x478/0x6e0
[   79.749870][ T1093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   79.749893][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.749910][ T1093]  do_writepages+0x32e/0x550
[   79.749927][ T1093]  ? reacquire_held_locks+0x127/0x1d0
[   79.749938][ T1093]  ? writeback_sb_inodes+0x384/0x1010
[   79.749957][ T1093]  __writeback_single_inode+0x145/0xff0
[   79.749972][ T1093]  ? do_raw_spin_unlock+0x4d/0x240
[   79.749988][ T1093]  writeback_sb_inodes+0x6c7/0x1010
[   79.750018][ T1093]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   79.750057][ T1093]  ? rcu_is_watching+0x15/0xb0
[   79.750075][ T1093]  wb_writeback+0x43b/0xaf0
[   79.750094][ T1093]  ? queue_io+0x3d1/0x590
[   79.750109][ T1093]  ? __pfx_wb_writeback+0x10/0x10
[   79.750135][ T1093]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.750153][ T1093]  wb_workfn+0x409/0xef0
[   79.750176][ T1093]  ? __pfx_wb_workfn+0x10/0x10
[   79.750189][ T1093]  ? __lock_acquire+0xab9/0xd20
[   79.750211][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   79.750227][ T1093]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.750239][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   79.750247][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[   79.750258][ T1093]  process_scheduled_works+0xae1/0x17b0
[   79.750284][ T1093]  ? __pfx_process_scheduled_works+0x10/0x10
[   79.750304][ T1093]  worker_thread+0x8a0/0xda0
[   79.750332][ T1093]  kthread+0x711/0x8a0
[   79.750347][ T1093]  ? __pfx_worker_thread+0x10/0x10
[   79.750358][ T1093]  ? __pfx_kthread+0x10/0x10
[   79.750372][ T1093]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.750387][ T1093]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.750402][ T1093]  ? __pfx_kthread+0x10/0x10
[   79.750415][ T1093]  ret_from_fork+0x3fc/0x770
[   79.750430][ T1093]  ? __pfx_ret_from_fork+0x10/0x10
[   79.750445][ T1093]  ? __switch_to_asm+0x39/0x70
[   79.750457][ T1093]  ? __switch_to_asm+0x33/0x70
[   79.750469][ T1093]  ? __pfx_kthread+0x10/0x10
[   79.750483][ T1093]  ret_from_fork_asm+0x1a/0x30
[   79.750508][ T1093]  </TASK>
[   79.750544][ T1093] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   79.994198][ T6353] loop0: detected capacity change from 0 to 32768
[   79.999585][ T6353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.171 (6353)
[   80.035342][ T6353] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.039708][ T6353] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   80.216421][ T6353] BTRFS info (device loop0): enabling ssd optimizations
[   80.219066][ T6353] BTRFS info (device loop0): enabling free space tree
[   80.245806][ T6353] BTRFS info (device loop0): use zstd compression, level 3
[   80.298393][ T5850] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.519658][ T6388] Zero length message leads to an empty skb
[   80.567168][ T6392] netlink: 'syz.0.177': attribute type 4 has an invalid length.
[   80.581531][ T6392] netlink: 'syz.0.177': attribute type 4 has an invalid length.
[   80.587567][ T6394] loop1: detected capacity change from 0 to 1024
[   80.648781][ T6400] loop0: detected capacity change from 0 to 128
[   80.667679][ T6400] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.670585][ T6394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.673921][ T6400] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   80.710739][ T6394] EXT4-fs error (device loop1): ext4_get_first_dir_block:3552: inode #11: comm syz.1.181: directory missing '..'
[   80.739729][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.904837][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.047339][ T6416] loop1: detected capacity change from 0 to 4096
[   81.071457][ T6416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.112163][ T6404] loop2: detected capacity change from 0 to 32768
[   81.170598][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.187533][ T6404] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   81.212603][ T6404] (syz.2.186,6404,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[   81.253642][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   81.266402][ T5847] (syz-executor,5847,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[   81.290472][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[   81.296112][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'.
[   81.331494][ T6425] loop1: detected capacity change from 0 to 4096
[   81.355861][ T6426] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.381776][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   81.446677][   T10] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[   81.450294][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.456939][   T10] usb 1-1: Product: syz
[   81.459857][   T10] usb 1-1: Manufacturer: syz
[   81.462744][   T10] usb 1-1: SerialNumber: syz
[   81.466509][   T10] usb 1-1: config 0 descriptor??
[   81.483090][   T10] comedi comedi5: This driver needs USB 2.0 to operate. Aborting...
[   81.485884][   T10] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[   81.527979][ T6437] loop1: detected capacity change from 0 to 4096
[   81.696140][ T5973] usb 1-1: USB disconnect, device number 7
[   81.748926][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.206'.
[   81.756975][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.206'.
[   81.767245][ T6453] loop2: detected capacity change from 0 to 164
[   81.777398][ T6453] ISOFS: unable to read i-node block
[   81.779741][ T6453] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   83.591868][ T5973] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   83.749256][ T5973] usb 3-1: config 255 has an invalid interface number: 91 but max is 0
[   83.752339][ T5973] usb 3-1: config 255 has no interface number 0
[   83.756025][ T5973] usb 3-1: config 255 interface 91 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   83.762117][ T5973] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=a8.6a
[   83.765781][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.768770][ T5973] usb 3-1: Product: syz
[   83.770997][ T5973] usb 3-1: Manufacturer: syz
[   83.774616][ T5973] usb 3-1: SerialNumber: syz
[   83.780317][ T5973] usbtouchscreen 3-1:255.91: probe with driver usbtouchscreen failed with error -12
[   83.989019][ T5911] usb 3-1: USB disconnect, device number 5
[   84.071842][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   84.243331][   T10] usb 1-1: Using ep0 maxpacket: 8
[   84.247791][   T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[   84.251127][   T10] usb 1-1: config 0 has no interface number 0
[   84.253949][   T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   84.258527][   T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   84.264133][   T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   84.269531][   T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   84.274627][   T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   84.278197][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.283319][   T10] usb 1-1: config 0 descriptor??
[   84.292869][   T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   84.493212][ T6517] loop1: detected capacity change from 0 to 128
[   84.496678][ T6517] Invalid source name
[   84.498478][ T6517] UBIFS error (pid: 6517): cannot open "/dev/loop1", error -22
[   84.518922][   T10] usb 1-1: USB disconnect, device number 8
[   84.531452][   T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[   84.681905][ T6522] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.707066][ T6522] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   84.837730][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   85.053029][ T5911] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   85.056839][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.060053][ T5911] usb 3-1: Product: syz
[   85.065461][ T5911] usb 3-1: Manufacturer: syz
[   85.067291][ T5911] usb 3-1: SerialNumber: syz
[   85.779898][ T5911] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[   85.961941][ T5869] usb 3-1: USB disconnect, device number 6
[   86.674638][  T974] cfg80211: failed to load regulatory.db
[   86.917529][ T6564] loop2: detected capacity change from 0 to 4096
[   86.941832][ T6564] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   87.067322][ T6564] ntfs3(loop2): Failed to load $Extend (-22).
[   87.069962][ T6564] ntfs3(loop2): Failed to initialize $Extend.
[   87.592896][ T6581] loop2: detected capacity change from 0 to 4096
[   87.612903][ T6581] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   87.624948][ T6581] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   87.630564][ T6581] ntfs3(loop2): ino=19, mi_enum_attr
[   87.644169][ T6581] ntfs3(loop2): failed to convert "c46c" to cp857
[   87.648719][ T6581] ntfs3(loop2): ino=20, mi_enum_attr
[   87.816958][ T6591] loop2: detected capacity change from 0 to 8
[   87.820344][ T6591] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   87.841045][ T6591] cramfs: Error -5 while decompressing!
[   87.846851][ T6591] cramfs: ffffffff99bef668(26)->ffff888038448000(4096)
[   87.850053][ T6591] cramfs: Error -3 while decompressing!
[   87.852995][ T6591] cramfs: ffffffff99bef682(26)->ffff888038449000(4096)
[   87.856580][ T6591] cramfs: Error -3 while decompressing!
[   87.859210][ T6591] cramfs: ffffffff99bef69c(16)->ffff88803844a000(4096)
[   87.864148][ T6591] cramfs: Error -5 while decompressing!
[   87.868055][ T6591] cramfs: ffffffff99bef668(26)->ffff888038448000(4096)
[   87.871231][   T33] audit: type=1800 audit(1756996947.854:6): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.256" name="file2" dev="loop2" ino=348 res=0 errno=0
[   87.881869][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   88.004873][ T6599] loop2: detected capacity change from 0 to 16
[   88.009317][ T6599] erofs: Unknown parameter 'cache_stratey'
[   88.039981][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   88.044037][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.047443][   T10] usb 2-1: Product: syz
[   88.058846][   T10] usb 2-1: Manufacturer: syz
[   88.060988][   T10] usb 2-1: SerialNumber: syz
[   88.201974][ T6603] loop0: detected capacity change from 0 to 4096
[   88.211134][ T6603] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   88.257780][ T6603] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   88.279486][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[   88.296511][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[   88.306233][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   88.322180][   T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[   88.348599][   T10] usb 2-1: USB disconnect, device number 6
[   88.413757][ T6599] loop2: detected capacity change from 0 to 32768
[   88.417923][ T6599] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 0 start >= end (9 >= 7)
[   88.417923][ T6599] journal_seq_blacklist (size 40):
[   88.417923][ T6599] 9-7 24-64
[   88.417923][ T6599] 
[   88.430873][ T6599] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[   89.505481][ T6627] loop0: detected capacity change from 0 to 164
[   89.861895][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   90.228174][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[   90.519385][ T6638] pim6reg1: entered promiscuous mode
[   90.521350][ T6638] pim6reg1: entered allmulticast mode
[   90.728723][ T6628] syz.1.271 (6628): drop_caches: 2
[   90.755110][ T6640] loop2: detected capacity change from 0 to 512
[   90.762854][ T6640] EXT4-fs: Ignoring removed mblk_io_submit option
[   90.766366][ T6640] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   90.775695][ T6640] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   90.779088][ T6640] EXT4-fs (loop2): orphan cleanup on readonly fs
[   90.786448][ T6640] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.278: Invalid block bitmap block 0 in block_group 0
[   90.804050][ T6640] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.278: Invalid block bitmap block 0 in block_group 0
[   90.837921][ T6640] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.278: Invalid block bitmap block 0 in block_group 0
[   90.887822][ T6640] Quota error (device loop2): write_blk: dquota write failed
[   90.891217][ T6640] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   90.925327][ T6640] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.278: Failed to acquire dquot type 1
[   90.953873][ T6640] EXT4-fs (loop2): 1 orphan inode deleted
[   90.957621][ T1093] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[   90.961417][ T1093] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u9:7: Failed to release dquot type 1
[   91.000301][ T6640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.047019][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.197841][ T6652] loop0: detected capacity change from 0 to 256
[   91.204600][ T6652] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   91.219620][ T6652] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   91.282022][ T5875] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   91.319087][ T6654] loop2: detected capacity change from 0 to 4096
[   91.325150][ T6654] ntfs3(loop2): mft corrupted
[   91.327118][ T6654] ntfs3(loop2): Failed to load $MFT.
[   91.465740][ T5875] usb 2-1: config 2 has an invalid interface number: 211 but max is 0
[   91.470023][ T5875] usb 2-1: config 2 has no interface number 0
[   91.478288][ T5875] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[   91.484601][ T5875] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[   91.493008][ T5875] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[   91.496881][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.500202][ T5875] usb 2-1: Product: syz
[   91.502996][ T5875] usb 2-1: Manufacturer: syz
[   91.505018][ T5875] usb 2-1: SerialNumber: syz
[   91.517060][ T6643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   91.534114][ T5875] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[   91.537382][ T5875] em28xx 2-1:2.211: Device initialization failed.
[   91.540159][ T5875] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[   91.729757][ T5875] usb 2-1: USB disconnect, device number 7
[   92.440306][ T6665] loop0: detected capacity change from 0 to 256
[   92.614224][   T33] audit: type=1326 audit(1756996952.594:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.2.290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93ed8ebe9 code=0x7ffc0000
[   92.634384][   T33] audit: type=1326 audit(1756996952.594:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.2.290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93ed8ebe9 code=0x7ffc0000
[   92.645696][   T33] audit: type=1326 audit(1756996952.594:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.2.290" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fe93ed8ebe9 code=0x7ffc0000
[   92.654399][   T33] audit: type=1326 audit(1756996952.594:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.2.290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93ed8ebe9 code=0x7ffc0000
[   92.832272][ T6683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.297'.
[   92.835567][ T6683] netlink: 35 bytes leftover after parsing attributes in process `syz.1.297'.
[   92.839201][ T6683] netlink: 'syz.1.297': attribute type 5 has an invalid length.
[   92.848445][ T6683] netlink: 'syz.1.297': attribute type 6 has an invalid length.
[   92.851145][ T6683] netlink: 35 bytes leftover after parsing attributes in process `syz.1.297'.
[   92.867028][ T6685] loop0: detected capacity change from 0 to 512
[   92.882354][ T6685] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.298: casefold flag without casefold feature
[   92.893865][ T6685] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.298: couldn't read orphan inode 15 (err -117)
[   92.900378][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.932421][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.328430][ T6706] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.524411][ T6696] loop0: detected capacity change from 0 to 32768
[   93.554587][ T6696] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   93.574216][ T6696] XFS (loop0): Ending clean mount
[   93.594856][ T6696] XFS (loop0): syz.0.302 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[   93.631270][ T5850] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   93.958214][ T6728] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   94.157056][ T6730] loop0: detected capacity change from 0 to 32768
[   94.165541][ T6730] jfs_mount: Mount Failure: File System Dirty.
[   94.174087][ T6730] Mount JFS Failure: -22
[   94.179386][ T6730] jfs_mount failed w/return code = -22
[   94.395137][ T6734] kernel read not supported for file /!selinu (pid: 6734 comm: syz.0.316)
[   94.399617][   T33] audit: type=1800 audit(1756996954.384:11): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.316" name=2173656C696E75FF7F dev="mqueue" ino=8985 res=0 errno=0
[   94.624067][ T6700] loop1: detected capacity change from 0 to 262144
[   94.629123][ T6700] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.304 (6700)
[   94.637318][ T6700] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   94.641513][ T6700] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   94.751072][   T36] BTRFS warning (device loop1): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[   94.771537][ T6700] BTRFS info (device loop1): read error corrected: ino 0 off 22036480 (dev /dev/loop1 sector 43040)
[   94.776521][ T6700] BTRFS info (device loop1): read error corrected: ino 0 off 22040576 (dev /dev/loop1 sector 43048)
[   94.781278][ T6700] BTRFS info (device loop1): read error corrected: ino 0 off 22044672 (dev /dev/loop1 sector 43056)
[   94.787157][ T6700] BTRFS info (device loop1): read error corrected: ino 0 off 22048768 (dev /dev/loop1 sector 43064)
[   94.799574][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'.
[   94.814027][ T6700] BTRFS info (device loop1): enabling ssd optimizations
[   94.817044][ T6700] BTRFS info (device loop1): enabling free space tree
[   95.148610][ T6700] BTRFS info (device loop1): balance: start -d -m -s
[   95.153637][ T6772] loop0: detected capacity change from 0 to 4096
[   95.159314][ T6700] BTRFS info (device loop1): relocating block group 30408704 flags metadata|dup
[   95.195218][ T6700] BTRFS info (device loop1): found 3 extents, stage: move data extents
[   95.219805][ T6700] BTRFS info (device loop1): relocating block group 22020096 flags system|dup
[   95.242889][ T6700] BTRFS info (device loop1): found 1 extents, stage: move data extents
[   95.263914][ T6700] BTRFS info (device loop1): relocating block group 13631488 flags data
[   95.306067][ T6700] BTRFS info (device loop1): balance: canceled
[   95.364967][ T5843] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   95.656413][ T6776] loop0: detected capacity change from 0 to 32768
[   95.685270][ T6776] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   95.755745][ T6776] XFS (loop0): Ending clean mount
[   95.768912][ T6776] XFS (loop0): Quotacheck needed: Please wait.
[   95.814198][ T6776] XFS (loop0): Quotacheck: Done.
[   95.865703][ T5850] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   95.921266][ T6792] loop2: detected capacity change from 0 to 512
[   95.937101][ T6792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   95.950460][ T6792] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[   96.029419][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.160231][ T6801] loop2: detected capacity change from 0 to 2048
[   96.203687][ T6803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   96.208130][ T6803] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   96.223233][ T6801] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   96.231223][ T6801] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[   96.362621][ T6811] loop2: detected capacity change from 0 to 512
[   96.399873][ T6813] netlink: 'syz.0.343': attribute type 10 has an invalid length.
[   96.415530][ T6811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.420152][ T6811] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.457975][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'.
[   96.484978][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.771822][ T5973] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   96.915143][ T6841] loop0: detected capacity change from 0 to 128
[   96.921995][ T5973] usb 3-1: Using ep0 maxpacket: 16
[   96.926664][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.936138][ T5973] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[   96.939861][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.952204][ T5973] usb 3-1: Product: syz
[   96.954945][ T5973] usb 3-1: Manufacturer: syz
[   96.956920][ T5973] usb 3-1: SerialNumber: syz
[   96.963484][ T5973] usb 3-1: config 0 descriptor??
[   96.980161][ T5973] pegasus_notetaker 3-1:0.0: Invalid number of endpoints
[   96.986067][ T5973] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   96.993448][  T974] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   97.145403][  T974] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   97.149234][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.154812][  T974] usb 2-1: config 0 descriptor??
[   97.191552][ T5973] usb 3-1: USB disconnect, device number 7
[   97.364180][  T974] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[   97.578296][  T974] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[   97.581128][  T974] [drm] Initialized udl on minor 3
[   97.968629][  T974] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[   97.987585][  T974] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[   98.015070][ T5973] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   98.025271][  T974] usb 2-1: USB disconnect, device number 8
[   98.034564][ T5973] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[   98.179899][ T6861] loop0: detected capacity change from 0 to 1024
[   98.212498][ T6861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.217439][ T6861] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.227396][ T6861] EXT4-fs (loop0): shut down requested (1)
[   98.248776][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.111840][ T5875] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   99.200012][ T6882] netlink: 116 bytes leftover after parsing attributes in process `syz.0.369'.
[   99.283545][ T5875] usb 2-1: config 0 has no interfaces?
[   99.285916][ T5875] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   99.289540][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.301546][ T5875] usb 2-1: config 0 descriptor??
[   99.317813][ T6888] loop0: detected capacity change from 0 to 16
[   99.324286][ T6888] erofs (device loop0): mounted with root inode @ nid 36.
[   99.433484][ T6891] loop0: detected capacity change from 0 to 256
[   99.440163][ T6891] exfat: Deprecated parameter 'utf8'
[   99.443538][ T6891] exfat: Deprecated parameter 'utf8'
[   99.452080][ T6891] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[   99.461082][ T6891] exFAT-fs (loop0): error, in sector 160, dentry 12 should be unused, but 0x85
[   99.511992][ T5875] usb 2-1: USB disconnect, device number 9
[  100.984974][ T6915] loop0: detected capacity change from 0 to 32768
[  101.648175][   T33] audit: type=1800 audit(1756996961.634:12): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.383" name="file1" dev="loop0" ino=4 res=0 errno=0
[  101.790914][ T6923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.639612][ T6922] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[  102.639612][ T6922] 
[  102.645200][ T6922] ERROR: (device loop0): remounting filesystem as read-only
[  102.897167][ T5850] ------------[ cut here ]------------
[  102.899860][ T5850] kernel BUG at fs/jfs/inode.c:169!
[  102.902584][ T5850] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  102.906468][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  102.910518][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.914839][ T5850] RIP: 0010:jfs_evict_inode+0x438/0x440
[  102.917238][ T5850] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 c3 69 e8 fe e9 16 fe ff ff e8 69 fb 84 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  102.925513][ T5850] RSP: 0018:ffffc9000335fae0 EFLAGS: 00010293
[  102.928173][ T5850] RAX: ffffffff833ab2a7 RBX: ffff88802ce4e060 RCX: ffff888022ce0000
[  102.931569][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802ce4e060
[  102.934724][ T5850] RBP: 0000000000000001 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  102.938104][ T5850] R10: dffffc0000000000 R11: ffffffff833a8fa0 R12: dffffc0000000000
[  102.941461][ T5850] R13: dffffc0000000000 R14: ffff88802ce4dce8 R15: ffffffff833aae70
[  102.944730][ T5850] FS:  0000555571468500(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  102.948466][ T5850] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.951272][ T5850] CR2: 00007fc76b204fc8 CR3: 000000010e2b6000 CR4: 00000000000006f0
[  102.954719][ T5850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  102.958174][ T5850] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  102.961463][ T5850] Call Trace:
[  102.963186][ T5850]  <TASK>
[  102.964501][ T5850]  ? evict+0x4f8/0x9c0
[  102.966248][ T5850]  ? __pfx_jfs_evict_inode+0x10/0x10
[  102.968422][ T5850]  evict+0x504/0x9c0
[  102.970053][ T5850]  ? __pfx_evict+0x10/0x10
[  102.971934][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  102.974105][ T5850]  evict_inodes+0x64c/0x6d0
[  102.976145][ T5850]  ? __pfx_evict_inodes+0x10/0x10
[  102.978386][ T5850]  generic_shutdown_super+0x9a/0x2c0
[  102.980780][ T5850]  kill_block_super+0x44/0x90
[  102.982751][ T5850]  deactivate_locked_super+0xbc/0x130
[  102.984912][ T5850]  cleanup_mnt+0x425/0x4c0
[  102.986803][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.989004][ T5850]  task_work_run+0x1d4/0x260
[  102.990843][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  102.992967][ T5850]  ? __x64_sys_umount+0x122/0x160
[  102.994954][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[  102.997065][ T5850]  exit_to_user_mode_loop+0xec/0x110
[  102.999204][ T5850]  do_syscall_64+0x2bd/0x3b0
[  103.001052][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.003107][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.005672][ T5850]  ? exc_page_fault+0x9f/0xf0
[  103.007631][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.010059][ T5850] RIP: 0033:0x7fb8e138ff17
[  103.012233][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  103.020255][ T5850] RSP: 002b:00007ffc56def008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.023859][ T5850] RAX: 0000000000000000 RBX: 00007fb8e1411c05 RCX: 00007fb8e138ff17
[  103.026963][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc56def0c0
[  103.030290][ T5850] RBP: 00007ffc56def0c0 R08: 0000000000000000 R09: 0000000000000000
[  103.033579][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc56df0150
[  103.036820][ T5850] R13: 00007fb8e1411c05 R14: 00000000000190ac R15: 00007ffc56df0190
[  103.040022][ T5850]  </TASK>
[  103.041410][ T5850] Modules linked in:
[  103.043788][ T5850] ---[ end trace 0000000000000000 ]---
[  103.050608][ T5850] RIP: 0010:jfs_evict_inode+0x438/0x440
[  103.053754][ T5850] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 c3 69 e8 fe e9 16 fe ff ff e8 69 fb 84 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  103.062676][ T5850] RSP: 0018:ffffc9000335fae0 EFLAGS: 00010293
[  103.067180][ T5850] RAX: ffffffff833ab2a7 RBX: ffff88802ce4e060 RCX: ffff888022ce0000
[  103.070836][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802ce4e060
[  103.074460][ T5850] RBP: 0000000000000001 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  103.077794][ T5850] R10: dffffc0000000000 R11: ffffffff833a8fa0 R12: dffffc0000000000
[  103.080960][ T5850] R13: dffffc0000000000 R14: ffff88802ce4dce8 R15: ffffffff833aae70
[  103.084943][ T5850] FS:  0000555571468500(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  103.088439][ T5850] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.091100][ T5850] CR2: 00007ffd32877b88 CR3: 000000010e2b6000 CR4: 00000000000006f0
[  103.094790][ T5850] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  103.098282][ T5850] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  103.101563][ T5850] Kernel panic - not syncing: Fatal exception
[  103.104926][ T5850] Kernel Offset: disabled
[  103.106656][ T5850] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:42:43  Registers:
info registers vcpu 0

CPU#0
RAX=ffff888021af8000 RBX=ffffffff99ce01c0 RCX=ffffffff819e05cd RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff99ce01c0 RBP=ffffffff99ce01c8 RSP=ffffc9000331f7e8
R8 =ffffffff99ce01c3 R9 =1ffffffff339c038 R10=dffffc0000000000 R11=fffffbfff339c039
R12=dffffc0000000000 R13=1ffffffff339c03a R14=ffffffff99ce01d0 R15=ffffffff99ce01c8
RIP=ffffffff819e061e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555563de7500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd32877b88 CR3=0000000021ddc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc76a412e53
XMM06=0000000000000000 00007fc76a412e4d XMM07=0000000000000000 00007fc76a412e61
XMM08=0000000000000000 00007fc76a412ee7 XMM09=0000000000000000 00007fc76a412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000335f230
R8 =ffff8880210d0237 R9 =1ffff1100421a046 R10=dffffc0000000000 R11=ffffffff854f3b80
R12=dffffc0000000000 R13=ffffffff99afd904 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571468500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc76b204fc8 CR3=000000010e2b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc76a597498 00007fc76a597470 XMM03=00007fc76a5974a8 00007fc76a5974a0
XMM04=00007fc76b0fd100 00007fc76a597460 XMM05=00007fc76a597478 00007fc76a5974c0
XMM06=00007fc76a5974b8 00007fc76a5974b0 XMM07=00007fc76a5974a8 00007fc76a5974a0
XMM08=0000000000000000 00007fc76a412ee7 XMM09=0000000000000000 00007fc76a412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
