last executing test programs:

2m30.379098364s ago: executing program 1 (id=26):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)

2m30.247092729s ago: executing program 1 (id=27):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r1, 0x402, 0x40000029)
fcntl$notify(r0, 0x402, 0x1c)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r2, 0x402, 0x1a)
open(&(0x7f0000000080)='./bus\x00', 0x68bc2, 0x1c0)

2m30.09482687s ago: executing program 1 (id=28):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0xfefa}, 0x68)

2m30.025522353s ago: executing program 1 (id=30):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0xa00c40, &(0x7f0000000380)={[{@lazytime}, {@nolargeio}, {@quota}, {@filestreams}, {@bsdgroups}, {@nolazytime}, {@dax_never}]}, 0x4, 0x968d, &(0x7f000001c300)="$eJzs3Am4pnMBuP/3DGOXMVRSaiqiRdYsUWYGMxSSJdqRJWUpqdCmRUoqItqzb9nKEsrWSrK3UEKoZIm02Ib5X2fmDGPcpF+//+VX931f1znv+z7v8zzn+34/z3KO5mrzSRtPHAzmGkxv3GDWzr1m8pQxV21w+5FbLXjMcqfcvf8jV1x8/MjjhJHHiYPBYNTI20PTl40dnHraqMHs05Y/3LxzzzM0/2Cw/MjLkf0MVp7+MP/lM9abOkuzDnTo4W/7TP+a1gLDP2L4yWH773X4YDAYM9P2Q4PB0J6P+qDSNp8wedLDVg+5DVuNHnk+89cc07/mv2gwmP+MAR8fM6879CR8pOGfueeLzhm9wZPws//r2nzC5HVn8R8+F2cbWbby8Dk+6zlobNbj/NYltlh1ZAqnHW+DwfAl7hHnyn9Fm0+YtN7gsa/zgyNXu2CfqdOvm3MOpt8o5h4MBvOMXF/ne7Jd6j9rwsQVpt2zZ7weYZ9xLO9Jx8XxbznpweGb9GAwWGgwGLvOjHtBVVVV/Xc0YeIKa8L9f67Hu/+ffPKiZ3T/r6qq+u9t3QkTVxi+189y/5/v8e7/uyx64cem/7f/8StP3+rBJ/dDVFVV1b/VpHXx/j/m8e7/K6956Xrd/6uqqv5722j9aff/+Wa5/y/8ePf/N5602mIj6834veGBmXY5NNP/nnD/TMtnm2n5fTMtHz3TfmZef46Zlt8z0/I5h9+D9ccNBmNn/HvBKQ8vHjtu+L2R5ffOtHz8w/9OZ/G1Zlo+Yablk2ZaPnFkrMPLJ8+0fPJM66/zOFNdVVX1/0wbrTBpzcFM/85+ZPEiM96n+//5Z1679JM13qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqvrv7MHbzzpnMBgMDQaDUYPBlMHI85kfB1OnTp06/Prk8y677Ekb6P8bDZ17zeQpY67a4PYjt1rwmOVOuXv/h2fpv7b//k9Q/0nD/nMdN24w2GnTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGjoFRg8GUwcjzPWc8nrnfG940suqqm51y50EPb7n4+O1Hnp17zeQp2z8JY38SGhr+rGOu2uD2I7da8JjlTrl7//+Bs+e//xPUf9I0/+2HBoOR83vM8Lm8wYSNNllqMBgcdOcpm600eOi9VYbfW23sbIPZpm261LTvay/OO95znemP44e/LfzQPk6etv91px4629Asg5ipV5x7w5Fv3/zuFWd9XPKxP8eoGU8Ov+70u6ZOnTr1EQtHmusxNp6x/xmfZdbzfGTsSw2PfZldd3zXMu/ZfY+lt99xy+222W6bnZZbYZUVV1p+uZVWfdky226/wzbLTv/+GHM2btr3NZ/InM0365zdPmHmOZv1sz3WnI17/DmbtscpewxtMmPOZv8352zNx5+zcduP/KDFx48ebDFtaoYGg8XXGj3YbfjFcnMOBouvPbLuIsPrrj521GCw38MfdPjZnA8dg0N7Dq+z+aSNJz48skd/wkddpx+x4uLjRx4njDxOnD7EcYOHD8Wxg1NPGzU8F4+Y5nnnnmdo/sFg+ZGXI/sZrDry7iEz1ps6S7MOdOjhb/tM/5rWAsM7GX7yjmXPunr4XJxl+/8/+j+6/j/Ka5WhhyZqaORrZJ3pXhMmr/vwz5o2DcNzN9vIspWHTWads/+bPWq842YfjHmc8U5ad+IKw4tnmf8Zm+DxdccSF3xg+rE1fuXpWz34f4xC453vcca77gQc73yPN97jPnjJadN39X9tvLNc69ab9n38E7nWDR7/Wjcb7WCbixeb9Vr36sce4iPO4xlzNOcsKz3WtW63g5ffc3j/4x//Wrfe8NhHP+JaN2owWHzNGde64QvfpNGD/YZfLD/8YvLowTHDL1aY9mLuwXnDL176tp132Hp4wToz5mTZ4f2OHzs0zf2ClW9ZcuoBU6euNTKW8WMfOdaR42PczPfzCWOnT+aMbWfsd3jVGfu9+enT35s0st8J/8Z+Z2xL471zgenvTR7Z78RZ9jv6cfY7Y9tHnQ9LDT104XqM682kWa43I3/jzPhxj/iaY/rX/BcNBvOfQb6zrPsvr5l0/s71OOOdMHGFNYfHN8v5+9DhSOfvJZOvGr5XzD8YDBYaDMauM2Ps/2ZDjzXe2R9/vBNhvLM/3nivOHbH9f8vjHcw03gfcZxtvtH0Y2WdkeNs8r9x/M7Ydtbr2Ohp706/7K/zRK5j4x51HfvobKNmmeyZeqzf2baG9ac/X+Th33OvOfHoGXM/epb9/qvf2Wb6LENwHRszy9/zo9a5fjBEc77ncatfOnTg48/56MEj/7aYMecztn28OZ/8ROb8WY8/50/09+Slnj/9/dGzjH/mOd9w32d+ZsaczzHLfv/VnE9+/HvHo+d8/GA0zfmy902ft8e7nj7WnM/YdsacD3/E1cbOPlh7+J41MueTnsicL/J/5zifB9af/nybhxadfeQpr5sx57PO8b+a80n/7pyPe+g4X3zae88bNZhjjsFuW+666y7LTf8+4+Xy07/zteiea6bP8+PdSx/LaMa2j3derPVEjMY8IaOhf2W06OyPZfTwqXXEzrs87f/0WrTWv2s04GvRVUdPn7fH+73oseZ8xrZ0H1x4pu1n/Tt0o/Wn/d493yz3wRmb4H3w7DPX23vGLkc2e2CWYc64r94/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHz4I8wx0/ozWMcN/807snzKw6uPHf7ladzI8ntnWj7+4W0XX2um5RNmWj5ppuUTHz40Fp880/LJM62/zuDfbMZ/k95+1ot8PdH677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXj7WeeMHAOjBoMpg+nPh0YeB3sObXjbGsOPg8Fg9MonTN3wyR7vk9zQuddMnjLmqg1uP3KrBY9Z7pS79/8fOHv++z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw0Ggw2nnrDyqMFD7y0y/N7qY0cNBvsNPWIHcz60ztCew+tsPmnjiYPBXCNrjHvUD33UefSIFRcfP/I4YeRx4vTr07jBw8fr2MGpp40azD5t+cPNO/c8Q/MPBsuPvBzZz2Dl6Q/zXz5jvamzNOtAhx7+ts/0r2ktMPwjhp/stt3kZw/P1Szb/z/TjGv19qP+5aqd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/55/R8v/Wom6y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u3/ff+7/X8ZRT06d/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3IO3n3XOyDEwajCYMpj+fGjPkcfB0EmnvnDkEBm9+5VHHfpkj/dJbujcayZPGXPVBrcfudWCxyx3yt37/w+cPf/9n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlBoPBoUddufuowUPvLTL83upjRw0G+w09YgdzPrTO0J7D62w+aeOJg8FcI2uMe9QPfdR59IgVFx8/8jhh5HHi9OvTuMHDx+vYwamnjRrMPm35w8079zxD8w8Gy4+8HNnPYOXpD/NfPmO9qbM060CHHv62z/SvaS0w/COGn+w13zUnDc/VLNv/P9OMa/X2o/7lqp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMfz5q5HFoz5tu/PAmw4/DrxdcZ+9rnuzxPskNnXvN5Cljrtrg9iO3WvCY5U65e///gbPnv/8T1H/SsP9cx40bDHba9MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckaejHl46as+OC2zo3GsmTxlz1Qa3H7nVgscsd8rd+z/ZA/pPewz/j+aPWfw/lj9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/p/JH7P475s/ZvH/bP6Yxf9z+WMW/8/nj1n898sfs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/A/KH7P4H5w/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi/+38scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/2/ljFv/v5I9Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/7v5Yxb/M/LHLP5n5o9Z/M/KH7P4fy9/zOL//fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv8L8scs/hfmj1n8f5Y/ZvG/KH/M4v/z/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjF/6r8MYv/1fljFv/f5I9Z/H+bP2bxvyZ/zOL/u/wxi/+1+WMW/+vyxyz+1+ePWfx/nz9m8b8hf8zif2P+mMX/pvwxi/8f8scs/n/MH7P4/yl/zOJ/c/6Yxf/P+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/0v+mMX/jvwxi/+d+WMW/7/mj1n878ofs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Zxvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+T+q2UceDf7Pzx+znP+L549Z/JfIH7P4vyB/zOK/ZP6YxX+p/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/9L5Yxb/l+aPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+WPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/l+WMW/9Xyxyz+q+ePWfxfkT9m8X9l/pjFf438MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+18scs/mvnj1n8J+WPWfwnq/xne8JrWvzXUfk/8Sz+6+aPWfxflT9m8X91/pjFf738MYv/+vljFv8N8scs/q/JH7P4b5g/ZvF/bf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+XP2bx3yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyf/aR042yNfW/zPzR+z+J+XP2bxPz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/hfkj1n8L8wfs/j/LH/M4n9R/pjF/+f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/VfljFv9X549Z/NcT+q/xBNax+K8v9H8iWfw3yB+z+L8mf8ziv2H+mMX/tYPL8ocs/ht1/mMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/6EH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+K+RP2bxH58/ZvGfkD9m8Z+YP2bxXzN/zOK/Vv6YxX/t/DGL/6T8MYv/5Pwxi/86+WMW/3Xzxyz+r8ofs/i/On/M4r9e/pjFf/38MYv/BvljFv/X5I9Z/DfMH7P4vzZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vyx+z+G+WP2bx3zx/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4b5E/ZvHfMn/M4r9V/pjF/235Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P4fzR/zOL/sfwxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8f9M/pjFf9/8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP8cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1flj1n8X50/ZvFfL3/M4r9+/pjFf4P8MYv/a/LHLP4b5o9Z/F+bP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+WPWfw3yx+z+G+eP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/LfIH7P4b5k/ZvHfKn/M4v+2/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/h/Jn/M4r9v/pjF/7P5Yxb/z+WPWfw/nz9m8d8vf8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvE/KH/M4n9w/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8f9m/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+38ofs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/2/nj1n8v5M/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv/v5o9Z/M/IH7P4n5k/ZvE/K3/M4v+9/DGL//fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8L8gfs/hfmD9m8f9Z/pjF/6L8MYv/z/PHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv+r8scs/lfnj1n8f5M/ZvH/bf6Yxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d1r95378ty3+f7X6/4ss/nflj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9V/pjF/9X5Yxb/9fLHLP7r549Z/DfIH7P4vyZ/zOK/Yf6Yxf+1+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf13+mMV/s/wxi//m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6YxX+L/DGL/5b5Yxb/rfLHLP5vyx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/9vzxyz+2+ePWfzfkT9m8X9n/pjFf4f8MYv/jvljFv+d8scs/jvnj1n835U/ZvF/d/6YxX+X/DGL/3vyxyz+u+aPWfzfmz9m8X9f/pjF//35Yxb/3fLHLP67549Z/PfIH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/Z/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/Z/LHLP775o9Z/D+bP2bx/1z+mMX/8/ljFv/98scs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/g/LHLP4H549Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f92/pjF/zv5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyx+z+H8/f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/4L8MYv/hfljFv+f5Y9Z/C/KH7P4/zx/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/Kn/M4n91/pjF/zf5Yxb/3+aPWfyvyR+z+P8uf8zif23+mMX/uvwxi//1+WMW/9/nj1n8b8gfs/jfmD9m8b8pf8zi/4f8MYv/H/PHLP5/yh+z+N+cP2bx/3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zif2f+mMX/r/ljFv+78scs/n/LH7P4/z1/zOL/j/wxi/8/88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/3IP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/yfljFv918scs/uvmj1n8X5U/ZvF/df6YxX+9/DGL//r5Yxb/DfLHLP6vyR+z+G+YP2bxf23+mMV/o/wxi//G+WMW/03yxyz+m+aPWfxflz9m8d8sf8ziv3n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bx3yJ/zOK/Zf6YxX+r/DGL/9vyxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ3/M4v+Z/DGL/775Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/i/LHLP4/zx+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/K/KH7P4X50/ZvH/Tf6Yxf+3+WMW/2vyxyz+v8sfe6T/6Cd7OP95j+F/bf6Y5fy/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/2v+8/10Nv5f/o/vf9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/isp/ad+5F+tYfFfWen/r7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+bmf2HOhhmZPH/beSYxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z93kD9m8e//8o2z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/yx/2X/qR95aOm8r8sf+1/2n/n83yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/zKf/9xPZCWL/+U+/yeUxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfb5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//r8scs/pvlj1n8N88fs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+W+SPWfy3zB+z+G+VP2bxf1v+mMV/6/wxi/82+WMW/23zxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/sIf9tT/qf9n9X/pjl/H93/pjFf5f8MYv/e/LHLP675o9Z/N+bP2bxf1/+mMX//fljFv/d8scs/rvnj1n898gfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/9n8scs/vvmj1n8P5s/ZvH/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS//kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4v/R/DGL/8fyxyz+H88fs/h/In/M4r9X/pjF/5P5Yxb/vfPHLP6fyh+z+H86f8ziv0/+mMX/M/ljFv9988cs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif9TBvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9aIv+5/o11Lf5ri/z/nSz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/AoP8MYv/UP6YxX9U/pjFf7b8MYv/7Pk/otlGHi3+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj/1/7NGzFiCGAkXRZ79kYtu2bdu2bWdi27Zt27Zt254UqbLW/YLcvbtTn5b/A/2PWv7v5n/U8n93/6OW/3v4H7X839P/qOX/Xv5HLf/39j9q+b+P/1HL/339j1r+7+d/1PJ/f/+jlv8H+B+1/D/Q/6jl/0H+Ry3/D/Y/avl/iP9Ry/9D/Y9a/h/mf9Ty/3D/o5b/R/gftfw/0v+o5f9R/kct/4/2P2r5f4z/Ucv/Y/2PWv4f53/U8v94/6OW/yf4H7X8P9H/qOX/Sf5HLf9P9j9q+X+K/1HL/1P9j1r+n+Z/1PL/dP+jlv9n+B+1/D/T/6jl/1n+Ry3/z/Y/avl/jv9Ry/9z/Y9a/p/nf9Ty/3z/o5b/F/gftfy/0P+o5f9F/kct/y/2P2r5f4n/Ucv/S/2PWv5f5n/U8v9y/6OW/1f4H7X8v9L/qOX/Vf5HLf+v9j9q+X+N/1HL/2v9j1r+X+d/1PL/ev+jlv83+B+1/L/R/6jl/03+Ry3/b/Y/avl/i/9Ry/9b/Y9a/t/mf9Ty/3b/o5b/d/gftfy/0/+o5f9d/kct/+/2P2r5f4//Ucv/e/2PWv7f53/U8v9+/6OW/w/4H7X8f9D/qOX/Q/5HLf8f9j9q+f+I/1HL/0f9j1r+P+Z/1PL/cf+jlv9P+B+1/H/S/6jl/1P+Ry3/n/Y/avn/jP9Ry/9n/Y9a/j/nf9Ty/3n/o5b/L/gftfx/0f+o5f9L/kct/1/2P2r5/4r/Ucv/V/2PWv6/5n/U8v91/6OW/2/4H7X8f9P/qOX/W/5HLf/f9j9q+f+O/1HL/3f9j1r+v+d/1PL/ff+jlv8f+B+1/P/Q/6jl/0f+Ry3/P/Y/avn/if9Ry/9P/Y9a/n/mf9Ty/3P/o5b/X/gftfz/0v+o5f9X/kct/7/2P2r5/43/Ucv/b/2PWv5/53/U8v97/6OW/z/4H7X8/9H/qOX/T/5HLf9/9j9q+f+L/1HL/0H+RyX/B/zJ/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/v/2PWv7/x/+o5f9//Y9a/v/P/6jl///9j1r+D+Z/1PJ/cP+jlv8D/I9a/g/hf9Tyf0j/o5b/Q/kftfwf2v+o5f8w/kct/4f1P2r5P5z/Ucv/4f2PWv6P4H/U8n9E/6OW/yP5H7X8H9n/qOX/KP5HLf9H9T9q+T+a/1HL/9H9j1r+j+F/1PJ/TP+jlv9j+R+1/B/b/6jl/zj+Ry3/x/U/avk/nv9Ry//x/Y9a/k/gf9Tyf0L/o5b/E/kftfyf2P+o5f8k/kct/yf1P2r5P5n/Ucv/yf2PWv5P4X/U8n9K/6OW/1P5H7X8n9r/qOX/NP5HLf+n9T9q+T+d/1HL/+n9j1r+z+B/1PJ/Rv+jlv8z+R+1/J/Z/6jl/yz+Ry3/Z/U/avk/m/9Ry//Z/Y9a/s/hf9Tyf07/o5b/c/kftfyf2/+o5f88/kct/+f1P2r5P5//Ucv/+f2PWv4v4H/U8n9B/6OW/wv5H7X8X9j/qOX/Iv5HLf8X9T9q+b+Y/1HL/8X9j1r+L+F/1PJ/Sf+jlv9L+R+1/F/a/6jl/zL+Ry3/l/U/avm/nP9Ry//l/Y9a/q/gf9Tyf0X/o5b/K/kftfxf2f+o5f8q/kct/1f1P2r5v5r/Ucv/1f2PWv6v4X/U8n9N/6OW/2v5H7X8X9v/qOX/Ov5HLf/X9T9q+b+e/1HL//X9j1r+b+B/1PJ/Q/+jlv8b+R+1/N/Y/6jl/yb+/2bQ77Pl/6b+Ry3/N/M/avm/uf9Ry/8t/I9a/m/pf9Tyfyv/o5b/W/sftfzfxv+o5f+2/kct/7fzP2r5v73/Ucv/HfyPWv7v6H/U8n8n/6OW/zv7H7X838X/qOX/rv5HLf8H+h/94f4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mq+/cd4XRdwHP8ccIBkGy5mDGuDfFu6pXTHj+EfTkgELvTA34gaAncgeAd0HHacGj/+IJfOH7mRYytXwrCctHnLNZ1dmlmzWLXV7IeapStrkeks2GJd+95977z7dtz6vs/3m5WPxx/3/X4+X14f4LYnnw9TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9dDY0LjoytGXJq7OCDDx9u7n2dfXTFTQd+331B/2v546XDXHLM4IOenp6e2c/O2lE+nFAUReln21k+nlg5Ll1/Z/2XOvqOwvzuFxcfn/zLxiMH1pz2cF3X0ftqe8/WFjeu29DS/IkxRREuqi06Sgd1NUURFtUW95YO6ksHi2uLh0sHs3oPTim+Wzo4b+3mlqbSiSXR3zP4f9HQuLMYO6TYYsifBoP731n/nTv6X0e4ZP/VxhXl/i/v/OGbFZ/1O0H//dcPCyr7r/o3CJxQdf0/P7//dYRL/sf9f9KTK18e7rMT999//fBJ/UM6wzz/D2m08rm/4vl/+jCXHNhfWdN5vNT/Jbc+M6N8atx/8/z/zvXDRZX9jxny/F96jl/Y//w/oSjCxaP8dsB7SkPjriMj3f9H7n/ctIpNzeD+T2/bvL/U/2OLf/B4+VRtlf0vHOH+P2ZJxa8VqE5D41d7Ku7/VfRffGyYSw70/9bjv32o1P+jf7z/jEGfVdP/xZX9z2xv3TJz6/bOcze0rl7fvL55U92sebPn1tfNPX/OzN5Hgr6vo/yuwHvD6O7/xaSKTU1RNA/sr+468FSp/zkPPDC7fGpilf0vGvH+P939H4b1kTHF+PFFx+r29ra6vq/9h/V9X/t+2DD9V/H3/zPPLv+w2vJrTVFMHdjfecZdy0v9v33omd3lU+Or7H/xiP3PH/h5gQijvP83VWyG9H/w0Iu9z/9L7zl4evlUtX//XzJi/6+4/8NoNDRW/A8/77JS/7uKSyM7DQ3++x+kk6P/R9++vjtuHT6lf0gnR/9/+MLRc+LWYan+IZ0c/Y/beP9zcetwif4hnRz9L5syb3ncOlyqf0gnR/9rXznnr3Hr0Kh/SCdH/2d/ZXdH3Dos0z+kk6P/B9tmb4tbh+X6h3Ry9P/zUx98NW4dLtM/pJOj/2PH7r4hbh0u1z+kk6P/rj1n/ShuHa7QP6STo//L1i0Icetwpf4hnRz9T5v658fi1uEq/UM6Ofqf+5d/nhq3DlfrH9LJ0f/tX1y+L24drtE/pJOj/7HXvfxC3Dqs0D+kk6P/JWdtWxC3DtfqH9LJ0X/Tz5p64tZhZbn/CYX+4V2Xo/+Z3/zJhrh1uM79H9LJ0f/hZY/siVuH6/UP6eTof09dMTluHW7QP6STo/9vfP+0Q3Hr8Gn9Qzo5+v/dk0/Mi1uHVfqHdHL0/+yHbvtW3DrcqH9IJ0f/96x54cy4dVitf0gnR/8P7X3uy3HrsEb/kE6O/l9/vfV9ceuwVv+QTo7+J0085bW4dWjSP6STo/8Ft3ytLW4dmvUP6eTov3V314/j1mGd/iGdHP1/9PjUlXHrsF7/kE6O/lfM2fvBuHW4Sf+QTo7+P7D0gl1x67BB/5BOjv4v7P74hXHrsFH/kE6O/tuf/vzX49bhZv1DOjn63zvj1UVx69Cif0gnR/8vrVry07h1aNU/pJOj/zcfuXZT3Dps0j+kk6P/J37x1rG4ddisf0gnR//vP3/h3+PWYYv+IZ0c/S9a/MbauHX4jP4hnRz9b+z610tx69Cmf0gnR/8zDl+1NG4dtuof0snR//fOrdsftw7t+od0cvR/xxX76uPWYZv+IZ0c/e8/eOddcetwi/4hnRz9v/Gr6dPi1uGz+od0cvR/3+RD18StQ4f+IZ0c/f96U+3TceuwXf+QTo7+/7Fvyo64dejUP6STo/+nXuv+U9w63Kp/SCdH/6vG/WZ83Drcpn9IJ0f/Uzq33Bu3DrfrH9LJ0f+8u1efF7cOn9M/pJOj/61/e/7bceuwQ/+QztbtnTevbmlpbvPGG2+8GXhzsv9kAlJ7J/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//9O+OOp")
r0 = open(0x0, 0x80242, 0x0)
ftruncate(r0, 0x2007ffc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000002c0)={{r1}, 0x401, 0xffffffffffffffff, 0x7})

2m29.58072649s ago: executing program 1 (id=39):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

2m29.304898344s ago: executing program 1 (id=41):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f000005f000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x1, 0x1ff, 0x3)

2m13.685458623s ago: executing program 32 (id=41):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f000005f000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x1, 0x1ff, 0x3)

1m5.79354606s ago: executing program 3 (id=1001):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x100000000}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0xfffffffe, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000006280)="3e51056d145e3e0b01fb5ce04d51284abe5b7b573434410cd45f0fb98b6ff676878cd2953781ca7146543f92c27f794a8815a79fb6ab28316c54d4de8accaa142e5986c7f830b83426818e5a187d1663bf76b1251f22102b417695167f0f7da1e1d405fce255ef834143fca129b52a29e6851410de6bbf1fd6ddbd65c0748d973371a5963895045e52c88ca90df9b6b70e153be92d6389e6ad4af0f9af04d7e2ff0beea069f3d7b628a01e750b727b7f57be1d9ebb16a4c15b4e026e58bb685ea7b9e5cfd936714b83c31585b3f9c41e02ce0fe4ff5f66c8ebcee1af58bc09a027b8af0dee2771b74a5c37215cc4c06c9cdf2e6393f4b844c637520239c1b15a2a027feeb287e145615d12929f49f1f7fb07165a313b1c25d17961206300c9698099aa9a6d18c149e4bb3a3ae13511957eb771f62967a9793e71a0ea8d2992ee5155675a0b1d148668d0c134ce1b798b7cabcb76c82b2ee304f0ff819a22a9c319b05ef573411f9d2d112b28ba8c5d3169dd62251e0054c38c0d0d5136d53fbd550f05d69bf1bf7b7e928e2bb46cdfeb5ccd8f5fdfbf890f0988d02bf418aa96f45e3c63d4ba42e7d23064da743806180a7e8f1d85e7eec79f48de8da3e20f3e9e6797f1cf10a76b7ec7018c99dc141a92fa3db84e202b33020f42adaf8d5b9ad0c67872e2a697d6eb1e6af24846d618afdc9a166fd9f1005500056e262e413a4b479e3ba6f5439bca8b3cce3d7899bcde2c69c16773338e85128fed7087631939c62a64cba87c2fabeb55be7a5587b42eaeb0c6782b543dc6e06610699f8f7af7397b5a19713adffbae2a244e3047881071cb1769581c4b75b6b8dd8219e0d4073630df60d04cd3c26c671f95089229b54df3fc3dcab798b003e4be3c7399f0be7a08b864b1c3d33dd69622f9d58cebe6867c5aab7a7b8c2592c1e7b27b640fa490f410ee39d807256c4846dc1938cca720a0b2f9ea3a5164731239df701b5c088ebfd21a2710a3f1c92e64a2b4c07afdbd3e74ae35d11bf916fb73312f14a91ef04d0645f82d25eab91e58e999babe23b774c262dc559baecd1e76e0e9afcaef65053a34e4e5647cd458c48cc4e958de0da2ed3e144eff042832f5b40d52cf2d2ab02cd6ec262d52a4155efd5587c27f01b1f8457b0138394b130d6e8843ae25e6f80dfe9a8819fd337c463ecc3384333b00b2ac1cabfb9056d82ca43de2ce6955d32929fbf7663d6db1c0f3dc4b1bf12c08a94181334c9d2ced01c92f75abebfe31ae3677aceda945819c30329d019a38b879584e3eec662c28ec8954e1aaff6cef4d1be0499706b00f6cb328438f3e8895e4106fd4fab0e986f8a5d18d79eb444eb1de22a4c6ae96ddf09b4e65241d6cb3ded36eeb9cb1fe1b6439e271158a0394d9656eb04fad8742afdf111b7077ae502cc6cf0737aebae51370932faf1c601b487da4c328cc12a792afe702ba487f838a2123ab84ad5a62fca69b0288c075ff71fee580cdc605b4cbd1c827e4ca6be2ff4c0220293c9551c4eb58ef5889f874939edc51ec57a43e5b5345a0f38bbffd68e7f09bdd1a03a2a27580067ecbd277a6a8f0b87587cc2516a53df9c1fbd3163a9d5d897c79cd5a224856f684e11b90d451bdb0de38f2eb675651e3a45a9bc5a9da8bb473cd0f55eb3cbfad953a1592d2eb932e3a9b9051771cd0ddf11bcb8458a5382cbf4dbe8d918593fd4bc66f67f5b45c43976717081c0038fb42c6df418b7c95ba55ca93551a64353e239e2524188f964228724720143ac6ce589c065d4054e1fbd5e26f6ef42a4421bf016bbe3e669ed62ca4f601c12ca960d7cfbc131533b8f6289cdf4c8703ca430a4808519db232c79d4ddbbe05b067160045feeaaea6d00179e4c279e6fbe57246d5187128f77a280ae222ed3b5ea516130ffdbbd670f478ffb9751a1e45030f905990fa324ccc5417b272c72e665ed8e58c6ebfb5bbf6efbc9db9c2d923f70d27ebabffed27c48adc208e2b5877cf1975869314d64f52f5ea2a4bff5af09aff098a52a8c44462a5b2a6495694b76f44e0d13ac83fee968fbe9173bdf5b4ff9f4646eef5ae539c9e692cff7e816ed0aeef77ce18a876e8a9e0c35419d14b76e3e741f88e78032882639a4b30854c0136d85b579f7d67ce83a8559b33aa691c70cec58b5379209d790185f1db211d6ed36047964fceae3a9886152beea693ba224c1b1e6ef237d87fa4bf79cfe8d568ef6076fce7250c9dce789c6840f8e8227da003dad8501d561faf00267158f81656e9f4254537f7feb1d6c5c76d5ece8d5433732a46387a331844126008ca0647bd580fdc1a1c55f8510271156e6dca68e7985b8cdfbe9b3bc4b6c2528593a14bdc65ffceab4cf047edc672725316b06727a36efa26b3b3a13e4c8e68a6539f908d8ac988bb90b4df40bfb548eccb14beee0fb248e1702fa60b168bb68a6233aec09a195d29920bdd1918368721c7d86455900a08a2696627c7e1d2afbc6f222f1a3d8207a26904b79b5073f0366c45fa9671eeed2a8b1095081e39a612507b460e8b9a49e3f9b14d5cc6bf138360b51bb99acfaf8c042bf1d1ff9e1e47efde8ffce92b5daaea87f12d49381493331d148b8d869b1477bb4fc541c0bd7d7bbeb67a1aa7611a2c31182c021e6f1b9b9c19d65855b364abd5cd2b56ccc6899a072f6524f0873f79f1705cb8235fe74e1c969fde301a1ed5e1692c97453a868e9cb5a8783b3880791491b1f104f6a2c71951d02160adb1bcc77a37a029d197a72ba1f7c2a987ec57ae21e61ac4ba075c09f6f3327c77532aeda47a7d72fd9c671f63a9d04d8fad5941d5ac46194b505796ba39a661df9896f2dadb231edff2bc5c11f22cd209ac0a2239a5902bcbe6cca96a4299c984eedb89da67acb62c1921a0549a92f69cc74f1b8d557a8ff7379650b688c63e95f131640a3169e85802edd4d19553b7f09365c2763ee1bad5ad120a54c795689ae03554ece7e526197b453ef81bddf367e6972e8540a5fbda3bcaaa19b2f3f991390a707a1eeea48112e56e534181bb6d1d542a7b81425e79765270151b32f347bd7484aac8024886876a1d9532071e28024053816c076f9657ddae4cb5ceea943097d0fe86d7363ceea178f016988ebe7c3f11fbee61e6624bcac370b458cb738e33140730c335e00f00ae0b6808a1ea41bc1186ff065d3098d82bd526fb55e131f8361a687bf1663c97445c2cacfa788f00be9549d64ad29294faa9a05bd325a83d97ac022d4bbb80c50c691f8a869599adc9998db08d265cc02db6df501c58d07510b5a7b3a3220315af68ed0fe7056d5686f415390c51be2ab4b6a444102612c280fff9458323da65ae5ac8b7cbd5dfdacbc5dbd50fb12a114e5c31c1ef43e32da6ba1f8a89f48c882671d9c5765a4654c40a4acd7ba9ad03b66ef260c8aa4cad5113a7deed4901677fb94e30c52665d10012316317bf42d62f5f55ef859ae7b9bb6d28cd229cc87009b06a25ea86304a6d2853393be112bbcdcfbddd2129c6aba435eb76a16053bc277c941340d709d7851b68923e022f2c964de99923c0bf22253e1d4541e4bf358dd34e6134d65a468ae70b6c72942d55e8147e8c5aab34577af53572a7e179be35f26c49e2bf7c575e7ec7c7e7521889bb009b9b01d9bf8751441700ae2a8d7b23d7862de0cab2124abcfcc0fef37999cfe90f4eef809c5f3162183418fe0e1b3ba6e3764ebc3135fb268f251169f083cff0f4923cbab069b53371910129d3ca65e8ee285eb692febbfb35af82c18add3faf37185a688baa5ef57332267e9682d54cc2a9505b100e248ff461b49a5c0cbc464eb7caa65cb9bee7f8577d920581ce4a3c48576c32163efb1324a85d667389bba364b62390a0c58b17f8bb4ec7800f0f50784a3f7df02726784aef17b2c3d242ae885afd4c8d824d1db019c56c4cc1c85408c2260113a491458cdb99c26d8143a238f5646d2a4410bf41a86035a646ffad0d4ad7eb455269571cd4f3ac3d2fe94b37bd70f3915f8f42fda7f753c69524083d854395d00d514b74304702b9514ad2dc0e12c3e82cb338ed273b8abef6fb9509c67e805bf47a386306ab9309c4db01b69bf7f9c8e2fe53dbe1912ffcedee7b7a27d6687a0243e3ffb85ee9008045390b802e2ca3b462aed8d185d63a462cbf1f1ec8be129f732f7f84e4a84a387990d2d0621e900e1ed577858eff0a6785fe1a8caa81277f99bc0809a7a454dd000c2c8c3a99d8d15d869c1835e68ce463811abefd7755ab0f5892a268517eee026f192397edcf03ce046594f17f327d207274afc0ce4ca0b4b134705b9c9cab16b8daa2a9dfbc80cd5f6729a409cb1dec698cbe26afda53974afb23ba1c037503dccf361182907b3edff87d28b0d3bac4fd8b0ec64878acc72280ffd723e9137ebd2cfd4566bb0f2a968c59f07c908ca0ab06b269584dd0381faa82549173d37487f0b5fbd6fb512aece0447f69c8fb3025e476184e5847a9c63b2ef91aeafc888a7d54e75ebabe1943922946d90dd707731ad533407760b023adcc4b1ea523557bae9fba28ef74b7a8487e9200e4f11befde8e01981ab79e43e6e17612cffb5c173bd53d13375bf02abe31dc71093dcc286ae21f3955d3060c085ea313253b1c7bdc834aa8d64b1f427e1038ea27cab0abbf7533a6115ff730b900f0fd3c79ccd83d1b0b7a8d34980b2ec776dc6ae7e85f0f46d5c01db894f108c58f179387c1501fb04fc774666a90054aea3a2c12c67b270eb402aab6f488cf1030ec8216684c58885a54cbc6ca783b466c23e5b268877f52fe580a4d54b772251b5dfed42fd8a16b20949d5e9079c70bb7fad7728081d2c7a0402865a847c1d3f1bd99b24767e2556aaaade88aa76d3381c0af0f05c50fc1eab86b0b098e74d92cff2b57aae4822c991b6d2a989e4ae8570a15a0b95f422d20161d69ac1baef4119bc4c0f3d28bd688ca7a190a7924781072ffbe77d73f123db7157a3fefe21c1adcf24f76d8a9980ec2edb781dfde8d34dd5952fb3b99a4415c474a7a9fc663b88322a05a827b2294c4b42f356fb64700fa65c277e764e79c32f926f0a014d66ccaba6bf314ec4ae0ad917b3e31093eac1cfbf609dc0f1d28a47284befc326d9c68292e81e09ebefb830578ba591cc0906269a389ddfb1857a7f57f78ffe897e208cffc6a422a2932bbd9d8acbce1162ee77bea3dbc97c81bfbe734a88b9c8228ba6fda4f4fb8e34a30bb6644a0c4e983c4775dafd276a99ee256750a0aa644576ad42ecd31c35527a5c796a295e76456bd8ccb03b197eb84e6eba54943209e79cadd8a27a9143d031b6747568d5f2e5eda97f4e5d749a424e11224df46a71e93fb6f8848f42b2671f8752fbed11929f628b4f9c290addcd985229edb2eac2aacd900afcea9da54cd31d0fff2c31d59639d753e9039117dbaae7b52721b502c5acff6c1d9b3bda1fad38ee951afd2f147760787935ef70b8335809888468fad51d2581871e55f59c5ffef91c73d0d6b57c332dad94155d2640de2fda9745a0cbeccdb367bc6f80692e5db8e8ba6c75f744defb75b7a89ffe950736dc9b582702dc26e3c3a5d6ce78f906152c5aed687bd54cd3556765e6ce5f4e6afef13b1f5d506dae0a9085bd1fe69a921ed465013683c1d3cb64d84c1ae32f21c4e14bb02c15491bba4a51cb78021457b1e114fd898513d5e0bf970b47d2b80108f176050ebf78dde5cc82cb34ed2c99ccb4d7928df430a754e58b616dedc037ebd32aa4528217f5ede44bd46f746b0bb3d25170334c179b90e10d6fb6aea9b7d1aa1b72ff4285d68111c0f9a4735c886cb9794619f598d6d9818c6fb58104ecdd934ccedcd3ac57e5f3cf606ce71ed027767d4c38aaa2453530a8aa1b60c496a318ea1c6ee7a638d5d5563ea97193c176d5fbb5a07238e531ee0ad94398b0bcc2ea07d33292eb8e3cc47c469ad7bcbb29ed3f32e8c29b878194a7a958c0215204ef71b72efe6834e15f43559efeb6ca1090cd441573fa963bda420b379f4e92121d6dd331b3838887fe076b67c870b9fd82f2beaea3c3fce783c6d38b36856ee07bb937793082b8cadc3ddbae53992c5b05401e41563543db0d372cb96a548d4a67292d093b371d7a711addebba573a514a4960102b4ec830f7530422de3ebf9ff5ec491ce124ca163234dd916d231f10a7acf150a8c1c423f5bc0347b5959a7cd73b6275c0fe1d562c33f37f3ce3f0c9ef35dc2158234880f0d19d08cf110c8312492809c8b59f2fc2e5f57d3870b3c2e4ee7056363b9f4c76ed31d99136baf33be8c1529fee46807db82a868c7755d7c0091c4a931b64c41c353489e2e1354f92d804400e4422a5d79a43f947b94dc5e5b62733522c05d8f6bc79a66d2e916156319930e3276252ab5abb298540800c8e83551800bf0940208e06006f0f4d4555aa059ac5979792ce423fdc814ba1c9cdd4250cc603e81020b2fc3afcbe881d96249d7eaf043fd450ca5713440c6361af785fa0db1f027252bd25b10aec2c2bad0a75855947091282c2db164735f0a0a4e365de20c70579bd4d8cb0597e2c1096bcaba0d976a790b6c0f0e0745f624f5479b956a67842f2d19d91d14f64dfc3f493885e495e012cccc5410163cac4eee4828c74216456803d229c9416e0526dde67edc2dc0cbca10d7091b53619a3746c71f2b6fb66c7d81cdd6dbb8b7944f9148ed5ffe6faf168938c921ba8b308bbbcdf10bef25379534e81b5a4cdee6c56a002151ed99af1db3f3565fb3a3e95675d1bd20b69d869405d84ae43ea421b014451c5f8039eebcdcc7718ddbd2a293a849892d8364d193c4a67aafffdd340913b85032374fae537638651fae1b6df28daea3a017945401a265bf1e651e61e70cf82ba03346396f089be14fe21b4e9af2e5ba91959463e8cd9564e019bb6267c59ec5ca650e981e1b798fbd04975d93150b50e01e61d41b4d7d37a5b34f1a9c9787182f48dc3f2b41dbf795c3889c62a1d54a3b3ad018f087fd0e82f40235abacb2d9f6d98eb8a98b50ac409c73600fa0acfb88684a020b25d00b8475ac0968aafdef7b3a508ccf40c005c9a9f8c43342ef0a03e133f7be24a2085512ca5461af4e4e8d97491834c49440eee1581a1414510584b5a78d768c8611ef731e521d1402e7e61f9b058d6f8880b3abb4019db1a60ac5903786307f301010bbef269cc1298d8911c58e2f0c68e50e2b93ba9365762b8554f8ad3ebf3ed2ccf198328255a641b1d38db97eb74d185773e7922ad0424aacac23da3c77e8fce83fd7f0a3f5933e66ea0f0e8fcdf0922df4d4d7fe4508ef922aa4909b2a4b3c3e89ed1936f55ee23ad0615f1927f2ee6ce67a8534941c8225e03803645714360743854a5632492ea0d0aa62401cb4ae72f6530c40f9e310bb024ae6547d641cb2d87e356a7b6b670920d2c40d7735de13ca6bd1feaf469259e2bf80b9e81ade19bff7f4037d7b74ee98c245c48a79b31f91bf1842a9d81591a4ddb11b07ee5d825de67ef8fa922e334580719e4d95a164500d5699e5342d569d8b18875b4563396b400393e59f0509353f4d0f684951cb9ceb7be269b2357daf495bc31727c232ec1158249386c8191e03166032159e856fdbeea75413c7f74f5a22bf56013156fc9598a76feca2cbe59bdfb704e975d7bae26b98ec7fc0c2cbbca2d235479f920a29ddebb6953b26e2d9f706d38f6beb5af6dfa6e499fff9ce2462017fe611538a4862922dbfbdb56b1aa80cff39633c2392203d3cecdbc33433932fd68194c82d58bbd2dfbfad76c99b6802cd0c21204a35114a75cb4b856af4ed118bafda9263e4076886c775db3521ebc294dfb0a2a25c5996d9c7b7afbfb0b2cdc199fba721c76bc5f583ceee1f5d863d6cb32ff9f6bdf61ea5f61b967e488c976e591a16105a750196d4af68a7295b5948600f0d312f744682f0a3e73c2cfe72b1719f6496f04d2b30b840ccc6c77d1f575716a48a07266d76990b7dc0ac7aa2e7430411a4c2f903aa3bfae69355e79147d7b5dd0bfd324a4d7ab232026bcb5fe714fa30c7e07e2cc17a08d18759ebaf3a1b55cb25c5bc4261e21a8f1e8f18b745a55b5c838c79354d254bd38788a3194f973e843b1d7232d5786b69d9465620f4fb21a3f1143516d07a52c6d243c3601f69ae899c055700dbce52d81a5936924e094aab0e636b07a958061ce7ca0e1503791cc10ce9199c8409ed5613398642d6cbe7f428ecb28bdf0768875a21f1cf81700cf2fa2e0764a8053ed13906b103a2886607782b27728a0dff3b68435504cc4d6de481e2592547292e922828e34373267acf052632f1c1f7df3ba981f088eb64903024af33f7034549e4a978e2840eb5da738b08ff21ffa4cc50fe324ac83888a7551ffa5bde37d8919772abdc42d7ab10201e0e9018e95283e772507b34a939e0971c42c3e8def7f7b71ae21d02d7fd4d42dd7ee950c929fb399335f04acde32bcb387134cd48151d9a2da947f91b80ee3a19d3c4e21f77435104b9fd5a096ad3db865cac2295903d1d827515f9a7bffbb9b27af00e9516f434b112600a22b9f5a4a2ed0a50a0a851d54149cb8efb15cda7096e7c465c41be5970bc45857b39e40b86482aee77bbca9cbbed51c75016383a4ab500e624567c086da2087e0fc3a9b03d8a759d3ed6926a305654e1b3a7e0d0c9894adfecbd0463b413ea782324c91c2b5ebd0bb978a69fec5b4eb122e60bb1f88f74287ad13469422fb64e383dafd0318127a5171a3b4b988ac9b921539fb8b094fbf2b3e74138c1cd0424a3e7b9424f925412098c39bf1371c32ca5489d76876a6df3a01ec3be7f9801755aeda1d84a03eb60e9d5a7bbe60dd7d78dd1f5cf8d3175de0942fcb0ef153b8fd0d15efa384c1d115cd1aa46bdd019e46f049b9abc04886e9c9e62c4776d245015fd8a207e6fbd52f0b0a613c363c9a6af7e1678311c225875eb7cd95de4631b263a9908c47ba151bfc8ab989fc6dc3a819cddd61fbb5efb69ca819de07e4d7031fea0d53fa1b6dbb5762e9762a33556885a6fb714a8911ef544f27a343e6b585bd068ecb9e225cfe8da13189d3a55c0430a18f109dde99d12210000c1dd2ad0222ed806e000f41d2eb9a36d6ff43358d79e4427fb59f4b1b21756a38eee8e96078e38209a09ba431be1796960a511784b1db6be698284160ae8c8e34104faae913679c225bb617038e9036d36611c0f2a34602ce04a24eb05b626a5ee30d6105f352714cae810acb69ada6e5bcc58123be1f17d08c8640764dfb91d973904c21d4f9bb8dc7fed676594567da69470fb4e6340679f68c0877cecea3948b4139689db494eea65e96b6d9285aa82a5dd7f9c1575b3dc895dc0c90219af519d21e5a555786332ccdef48ba6e80312f678f5302cb8534f2faf4cf2aaabe0a9c2ae57107dff11a51ef931c7471a33c300cc676d2877715b35298210a73384d4e3c0d1fa28169e3933cc6158ddbebbee12a57be75a6823bce0e71974abc110107873421c804f82b170f63287458186fae3d0423ee75f01aae5e9a6001f452e7c4b1d349c143ae11c268d3e8fb088b43e90b61c959de771519ae3dc426d52459cedaf544dd90492ae08ef3c064002bf2fb7eaf763ffedd8a9c6dbc493f7d39c3c60f0fbf9f423410f5ddb6e949e9fcd8e5a65aa0bbbc623224a728d852952d515a80acbe9ef3b8a6b8ac9a95c23a7d047208ba1687eaad6805f43f3ad694275bfbe34ae50fa0fad00f99ab9927449d7806a8291e941ef3467bb3b7a92ee6a5f7036468df3bb4c36c20c81a0fc98bd6fa973685ed526f6302dc7776f1d44207817271bf3a207313bedfc87e84abb40d34bb01d426ed7fe355a982e352bd97a9f3a3b83d679872fa7c572bc9c8fa24223b445cffb9d8b37632b428feb777abfb6c5663b2b12a7d419e4d0b4d2801437e369d20b613fb50543bf06c3a0608fb149926961d84b6ea3c87146b71295e5dbc239cf4586f3910100eba3b9a1545ce490aebe4ef1869c2088e16309f6a60d6034414dd93c19b0b38cc39473e5565d81e1d18908f7e0847debde84baab768896893632b834004a1c1bd49076ce6083c896011d31ebd6909375bf910cfa8d88d79e4118d1708f427718766401ff994b91e010852d9fe085f9ccb45422a10fe86b11f4e03294f03323ec9f8393fd8ce6d20623bd0af2391f75e1951732e401a3eea31df5a6b70817ba0dc44abc50eb646b91706c95c397e63a3102388cbadb13dc8c95b231b30231da7ed7ebe5629ddf799c9ddc822474573391ad83b692cda95389192f4f0d52c57ab4980cc629a3058a55543f778b671b7e1f4b9f5c38e54832b39160a8585f2bbd56f6eb3aad1262074313b271e1d641e6d6e2df747e018cd9e69dca6dcb090a16ec3bdd7f5f8176515392cfb251d30396df12c07287a59d94c8f6cf85c160fc18c9ce3376e687050e05dccb24c3cc7c0f6242f84dec1595eac4683c3b9a559ff2612414fe3214ca64b283877552d3969d3918203a762f385ba6a81c1627e2a8cb61be80b9feab1b842bbe8e77682cf02134b71a27ae5e7371e3f5f540d90ae04d4418ae6252a3f6b217c4ba075f044ec4343becfcf2fd7f04871ba2ed3eb31fa846734dc3db40246f4f689d8b5914bb4804aa2c5e4ec0730570cccaa4f993929b5409c5aad1856fb084c5062cd6f69c80ba87e3bce46c11dc898baed7a6c192f4f8be86dbdf0f5ed0625b56d365f5efceff7aaa3109a9afed3fa73ff500cd4dbba68ca845afaa1434aeff819a219d8a1e4ecfa4b08bc1c12b569752d576f233924729a429d360f00c389068153dd3f6e1f38b0803bc6d7a970f05c76fdd6520d8f3f3f1b79cde9c310a4c4a9f4491fbad53956661d86e2d7b173f471ce93829f31f1be9a9436d0fbcd99286a1d1d2593061ebf4b37133ab65a147921eed378c73e9cab938599935030459b5864dd4986925e359c633c23339292f3b1f085f9e9a56144c712992de05fd54d0f710dfc3081457682df5703058923c07201f57a0a21a0bcde96941f9927b5162e2d7de95358af827bb50898d876b928a51e927e100ec4cf75052a703f816bb8de764609da6d18553390c931290aae033cb92143b2a51ea600ccee9224c8a1c29636a5801df6929433a1358fd9d4dde4e8fede6173fb65a95ce54904b167f960edd3d917052dee785dd0f1c92a49d9839c17569914dd8dfc6b5151e74beabc276a9451f4cf7bbd26770b829b782cfd4ba15a94ea8e8e83015c5e34ebf810de7f199efecce0905df8d714fe102d8b3a9184701cdeb22ff9462db3a7741b0426d6b56eb6946eeb6e218a54dee83f96c40944fdcedc6f98d39e28cdafe27e5bdb1a58df29efcd8b2764fc3a162ed85ad1a6bf7d9b8aa25c6951167d911f55c1621b36f4d0f78d55934337b48dcb2dd8870923cedb82bda4d395a795f473ba54c2699e95638eb153cd848ea4dd2ab8b14b9a8cb9b8409e41a1e482f79310262f9476c8ce04d5d40d47d49aecd42ef931955c02300", 0x2000, &(0x7f0000000a00)={&(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdd, 0x0, 0x0, 0x10, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m5.495778789s ago: executing program 3 (id=1003):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)='5~v', 0xc3ff}], 0x1, &(0x7f0000000b40)=ANY=[], 0x108}}], 0x2, 0x0)
open(0x0, 0x101800, 0x0)

1m4.540127935s ago: executing program 3 (id=1017):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
add_key(0x0, 0x0, &(0x7f0000000800)="c2f13dae81f05002e9b4afe6384efdbd3f0b0fd214accef212786da28251cb6138d0232c99aa9c519b955863531879844be45b9fac652c4158932acdce43a280ff91e1784fde2036", 0x48, 0xfffffffffffffff8)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b)

1m4.354365108s ago: executing program 3 (id=1020):
getresuid(&(0x7f0000000440), 0x0, 0x0)

1m4.252065973s ago: executing program 3 (id=1022):
setresuid(0xee00, 0xee00, 0xee00)
socket$inet6(0xa, 0x3, 0xff)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0)

1m4.074684521s ago: executing program 3 (id=1026):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
epoll_create1(0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

49.154561704s ago: executing program 33 (id=1026):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
epoll_create1(0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

869.014379ms ago: executing program 2 (id=1673):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004000)

781.680855ms ago: executing program 2 (id=1675):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r0, 0x4b32, 0xf1a)

732.507641ms ago: executing program 2 (id=1676):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setsockopt(r0, 0x1, 0x54, &(0x7f00000001c0)="37cb2e49", 0x4)

673.218457ms ago: executing program 2 (id=1678):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@reiserfs_5={0x14, 0x5, {0x3, 0x1, 0x2, 0x8000}}, &(0x7f0000000280), 0x0)

672.949212ms ago: executing program 0 (id=1679):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x500, 0x141)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x200417e, 0x0, 0x7ff, 0x2, 0x84})

640.420908ms ago: executing program 2 (id=1680):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xc, 0x3, 0x9, 0x2, 0x55, "eb293fced92dbac812456ed0cfe43130e63fca", 0xfffffffd, 0x80})
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0xe000, 0xb3, 0x17, "041000"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0xc5)

570.544076ms ago: executing program 2 (id=1682):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1100f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x40000}], 0x2, 0x0, 0x0, 0xb)

570.007323ms ago: executing program 0 (id=1683):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xadb9}, @call={0x85, 0x0, 0x0, 0xb0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94)

492.988463ms ago: executing program 4 (id=1684):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000008c0)=[{{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1}}], 0x8)

411.500373ms ago: executing program 0 (id=1685):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

411.078226ms ago: executing program 4 (id=1686):
fsopen(&(0x7f0000000100)='cgroup\x00', 0x0)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2)

343.194886ms ago: executing program 0 (id=1687):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48814}, 0x14040052)
recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10041, 0x0)

272.251934ms ago: executing program 4 (id=1688):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x84}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

271.973594ms ago: executing program 0 (id=1689):
syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x5, &(0x7f00000000c0)={[{}, {}, {@nodiscard}, {@nobarrier}, {}, {@nodiscard}, {@nobarrier}]}, 0x0, 0xf43, &(0x7f0000001e80)="$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")

195.849376ms ago: executing program 4 (id=1690):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0)

142.498338ms ago: executing program 4 (id=1691):
setreuid(0xffffffffffffffff, 0xee00)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)

288.782µs ago: executing program 4 (id=1692):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001100)=""/4090, 0xffa}, {&(0x7f0000000040)=""/84, 0x54}, {&(0x7f00000000c0)=""/79, 0x4f}], 0x4)

0s ago: executing program 0 (id=1693):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x51}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90)

kernel console output (not intermixed with test programs):

 should not happen!! Data will be lost
[  107.411364][ T7066] 
[  107.534894][ T7073] sctp: [Deprecated]: syz.3.430 (pid 7073) Use of int in maxseg socket option.
[  107.534894][ T7073] Use struct sctp_assoc_value instead
[  107.567022][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  107.670398][ T5235] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  108.010604][ T7094] loop2: detected capacity change from 0 to 128
[  108.388693][ T7105] fuseblk: Bad value for 'fd'
[  108.714646][ T7086] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  108.717790][ T7086] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.728030][ T7086] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.737662][ T7086] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  108.739882][ T7086] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  108.744384][ T7086] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  108.748648][ T7086] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  108.752204][ T7086] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  108.756541][ T7086] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  108.820276][ T7113] loop0: detected capacity change from 0 to 1024
[  109.000254][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  109.009169][ T7126] netlink: 'syz.3.457': attribute type 5 has an invalid length.
[  109.019892][ T7126] ip6erspan0: entered promiscuous mode
[  109.160376][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  109.166036][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  109.169414][ T5894] usb 3-1: config 244 has an invalid interface number: 68 but max is 0
[  109.172366][ T5894] usb 3-1: config 244 has no interface number 0
[  109.174323][ T5894] usb 3-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  109.177980][ T5894] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  109.183326][ T5894] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  109.186737][ T5894] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[  109.189929][ T5894] usb 3-1: config 244 interface 68 has no altsetting 0
[  109.194899][ T5894] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  109.197618][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.201702][ T5894] usb 3-1: Product: syz
[  109.203097][ T5894] usb 3-1: Manufacturer: syz
[  109.204638][ T5894] usb 3-1: SerialNumber: syz
[  109.438034][ T5894] comedi comedi5: Endpoint has wrong direction
[  109.443064][ T5894] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device.
[  109.473902][ T5894] usb 3-1: USB disconnect, device number 5
[  109.985021][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[  110.013190][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.070455][ T7134] loop0: detected capacity change from 0 to 262144
[  110.073678][ T7134] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.461 (7134)
[  110.080064][ T7134] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  110.083205][ T7134] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  110.086019][ T7134] BTRFS info (device loop0): using free-space-tree
[  110.129683][ T7162] loop2: detected capacity change from 0 to 512
[  110.193337][ T7134] BTRFS info (device loop0): balance: start -d -m -s
[  110.204397][ T7134] BTRFS info (device loop0): relocating block group 30408704 flags metadata|dup
[  110.232890][ T7134] BTRFS info (device loop0): found 3 extents, stage: move data extents
[  110.259248][ T7134] BTRFS info (device loop0): relocating block group 22020096 flags system|dup
[  110.279187][ T7134] BTRFS info (device loop0): found 1 extents, stage: move data extents
[  110.296593][ T7134] BTRFS info (device loop0): relocating block group 13631488 flags data
[  110.329074][ T7134] BTRFS info (device loop0): found 1 extents, stage: move data extents
[  110.347188][ T7134] BTRFS info (device loop0): found 1 extents, stage: update data pointers
[  110.364536][ T7134] BTRFS info (device loop0): balance: ended with status: 0
[  110.385532][ T5850] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  110.790205][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.792633][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout
[  111.521680][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  111.681026][ T5881] usb 1-1: config 0 has an invalid interface number: 216 but max is 0
[  111.683749][ T5881] usb 1-1: config 0 has no interface number 0
[  111.687882][ T5881] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  111.714617][ T5881] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  111.748758][ T5881] usb 1-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[  111.755578][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.765498][ T5881] usb 1-1: Product: syz
[  111.772377][ T5881] usb 1-1: Manufacturer: syz
[  111.776028][ T5881] usb 1-1: SerialNumber: syz
[  111.826625][ T5881] usb 1-1: config 0 descriptor??
[  111.864263][ T5881] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  111.980605][ T5881] snd-usb-audio 1-1:0.216: probe with driver snd-usb-audio failed with error -2
[  112.032465][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  112.071715][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.142238][ T5881] usb 1-1: USB disconnect, device number 8
[  112.162452][ T6541] udevd[6541]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.218175][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  112.228657][ T5908] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  112.250073][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.253537][ T5908] usb 3-1: config 0 has no interface number 0
[  112.278829][ T5908] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  112.299352][ T5908] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  112.326156][ T5908] usb 3-1: config 0 interface 8 has no altsetting 0
[  112.334935][ T5908] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  112.338352][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.345327][ T5908] usb 3-1: Product: syz
[  112.346950][ T5908] usb 3-1: Manufacturer: syz
[  112.348421][ T5908] usb 3-1: SerialNumber: syz
[  112.357329][ T5908] usb 3-1: config 0 descriptor??
[  112.480850][ T7206] syz.3.485 (7206): drop_caches: 2
[  112.667045][ T5908] ath6kl: Failed to submit usb control message: -71
[  112.690190][ T5908] ath6kl: unable to send the bmi data to the device: -71
[  112.693052][ T5908] ath6kl: Unable to send get target info: -71
[  112.721995][ T5908] ath6kl: Failed to init ath6kl core: -71
[  112.737054][ T5908] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71
[  112.753306][ T5908] usb 3-1: USB disconnect, device number 6
[  112.819487][ T7213] loop0: detected capacity change from 0 to 1024
[  112.829933][ T7213] EXT4-fs: inline encryption not supported
[  112.837119][ T7213] EXT4-fs: Ignoring removed bh option
[  112.870240][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout
[  112.872283][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout
[  112.882506][ T7213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.945407][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.077394][ T7223] loop8: detected capacity change from 0 to 7
[  113.085560][ T5846] Dev loop8: unable to read RDB block 7
[  113.087789][ T5846]  loop8: unable to read partition table
[  113.089766][ T5846] loop8: partition table beyond EOD, truncated
[  113.263448][ T7223] Dev loop8: unable to read RDB block 7
[  113.281582][ T7223]  loop8: unable to read partition table
[  113.295816][ T7223] loop8: partition table beyond EOD, truncated
[  113.313274][ T7223] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  113.553161][ T7241] netlink: 'syz.0.499': attribute type 10 has an invalid length.
[  113.656253][ T7249] loop2: detected capacity change from 0 to 512
[  113.678843][ T7249] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.503: bad orphan inode 13
[  113.686075][ T7249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  113.695757][ T7249] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.703952][ T7249] EXT4-fs error (device loop2): ext4_lookup:1779: inode #2: comm syz.2.503: bad inode number: 15
[  113.746705][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  113.850539][ T5908] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  114.016067][ T5908] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[  114.024846][ T5908] usb 1-1: config 0 has no interface number 0
[  114.028821][ T5908] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  114.035985][ T5908] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.046558][ T5908] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[  114.053071][ T5908] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  114.065438][ T5908] usb 1-1: Manufacturer: syz
[  114.084444][ T5908] usb 1-1: config 0 descriptor??
[  114.092431][ T5908] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints
[  114.098478][ T5908] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19!
[  114.150728][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout
[  114.301685][  T972] usb 1-1: USB disconnect, device number 9
[  114.386273][ T7262] openvswitch: netlink: IP tunnel dst address not specified
[  114.963704][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout
[  114.969213][ T5235] Bluetooth: hci1: command 0x0c1a tx timeout
[  115.346993][ T7269] loop0: detected capacity change from 0 to 4096
[  116.169462][ T7307] loop3: detected capacity change from 0 to 128
[  116.294099][ T7313] loop2: detected capacity change from 0 to 2048
[  116.332431][ T7313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.362417][ T7313] overlayfs: invalid redirect ((null))
[  116.384843][ T5852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  116.548978][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.600641][ T7320] netlink: 'syz.2.531': attribute type 1 has an invalid length.
[  116.854512][ T7330] loop2: detected capacity change from 0 to 128
[  116.864323][ T7330] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  117.146962][ T7339] loop2: detected capacity change from 0 to 256
[  117.161328][ T7339] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.817158][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.820274][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.823280][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.826176][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.829092][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.832154][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.836260][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.839653][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  117.842900][ T7367] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  118.002537][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'.
[  118.111273][ T7381] loop9: detected capacity change from 0 to 7
[  118.116890][ T7381] buffer_io_error: 5870 callbacks suppressed
[  118.116902][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.143582][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.153698][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.156881][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.170305][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.179176][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.192758][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.200952][ T7381] ldm_validate_partition_table(): Disk read failed.
[  118.207330][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.213345][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.216343][ T7381] Buffer I/O error on dev loop9, logical block 0, async page read
[  118.220398][ T7381] Dev loop9: unable to read RDB block 0
[  118.222877][ T7381]  loop9: unable to read partition table
[  118.225221][ T7381] loop9: partition table beyond EOD, truncated
[  118.227589][ T7381] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ
[  118.227589][ T7381] ) failed (rc=-5)
[  118.266907][ T7383] sp0: Synchronizing with TNC
[  118.724103][ T7413] loop0: detected capacity change from 0 to 2048
[  118.753552][ T7415] tap0: tun_chr_ioctl cmd 1074025677
[  118.755438][ T7415] tap0: linktype set to 778
[  118.758679][ T7413]  loop0: p1 < > p4 < >
[  118.760295][ T7413] loop0: partition table partially beyond EOD, truncated
[  118.766402][ T7413] loop0: p4 start 42180 is beyond EOD, truncated
[  118.784915][ T7400] loop2: detected capacity change from 0 to 32768
[  118.791736][ T7400] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.569 (7400)
[  118.822001][ T7400] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.825546][ T7400] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  118.828706][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  118.838620][ T7400] BTRFS info (device loop2): using free-space-tree
[  118.970591][ T5852] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.197273][ T7417] loop0: detected capacity change from 0 to 32768
[  119.198804][ T7436] loop3: detected capacity change from 0 to 32768
[  119.210212][ T7417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.577 (7417)
[  119.236233][ T7417] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.243265][ T7417] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  119.246801][ T7417] BTRFS info (device loop0): using free-space-tree
[  119.268283][ T7436] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.322985][ T7436] XFS (loop3): Ending clean mount
[  119.345761][ T7436] XFS (loop3): Quotacheck needed: Please wait.
[  119.352603][ T5850] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.412874][ T7436] XFS (loop3): Quotacheck: Done.
[  119.545226][ T7469] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  119.570137][ T7469] CIFS mount error: No usable UNC path provided in device string!
[  119.570137][ T7469] 
[  119.580584][ T7469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  119.583403][ T6429] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.798497][ T7473] cgroup: none used incorrectly
[  119.909292][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'.
[  119.917899][ T7477] netlink: 'syz.3.584': attribute type 1 has an invalid length.
[  119.921692][ T7477] netlink: 'syz.3.584': attribute type 2 has an invalid length.
[  119.924897][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'.
[  120.101826][ T7489] loop3: detected capacity change from 0 to 4096
[  120.108833][ T7489] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  120.114546][ T7489] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  120.121013][ T7489] ntfs3(loop3): volume is dirty and "force" flag is not set!
[  120.123538][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'.
[  120.127621][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'.
[  120.410244][ T5881] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  120.564616][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short
[  120.568385][ T5881] usb 4-1: not running at top speed; connect to a high speed hub
[  120.574999][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.579091][ T5881] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  120.583209][ T5881] usb 4-1: config 1 has no interface number 1
[  120.585784][ T5881] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  120.591331][ T5881] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  120.598010][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  120.601401][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.603912][ T5881] usb 4-1: Product: syz
[  120.605214][ T5881] usb 4-1: Manufacturer: syz
[  120.606765][ T5881] usb 4-1: SerialNumber: syz
[  120.826861][ T5881] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  120.853348][ T5881] usb 4-1: USB disconnect, device number 5
[  120.874178][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.494219][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'.
[  121.809685][ T7539] loop0: detected capacity change from 0 to 2048
[  121.841119][ T5881] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.846994][ T7539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.928020][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.001741][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  122.005958][ T5881] usb 3-1: config 0 has an invalid interface number: 161 but max is 0
[  122.008922][ T5881] usb 3-1: config 0 has no interface number 0
[  122.022367][ T5881] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=44.e9
[  122.029011][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.035229][ T5881] usb 3-1: Product: syz
[  122.037882][ T5881] usb 3-1: Manufacturer: syz
[  122.039943][ T5881] usb 3-1: SerialNumber: syz
[  122.043856][ T5881] usb 3-1: config 0 descriptor??
[  122.154283][ T7552] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.268265][ T5881] usb 3-1: USB disconnect, device number 7
[  122.286334][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.622'.
[  122.339182][ T7562] loop0: detected capacity change from 0 to 256
[  122.372680][ T7562] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  122.548089][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'.
[  122.557483][ T7574] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  122.563612][ T7574] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  123.299305][ T7601] geneve2: entered promiscuous mode
[  123.309250][ T7601] geneve2: entered allmulticast mode
[  123.388299][ T7605] tmpfs: Bad value for 'mpol'
[  123.563531][ T7611] loop2: detected capacity change from 0 to 512
[  123.602232][ T7611] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  123.672632][ T7619] bond0: Unable to set down delay as MII monitoring is disabled
[  124.017223][ T7643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.060457][ T5881] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  124.063033][ T7645] netlink: 'syz.3.665': attribute type 1 has an invalid length.
[  124.135809][ T7639] loop2: detected capacity change from 0 to 32768
[  124.139306][ T7639] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.662 (7639)
[  124.155998][ T7639] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  124.162571][ T7639] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  124.165852][ T7639] BTRFS info (device loop2): using free-space-tree
[  124.207991][   T33] audit: type=1800 audit(1755041052.775:42): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.662" name="file1" dev="loop2" ino=260 res=0 errno=0
[  124.227340][   T33] audit: type=1800 audit(1755041052.795:43): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.662" name="file1" dev="loop2" ino=260 res=0 errno=0
[  124.240516][ T5881] usb 1-1: Using ep0 maxpacket: 16
[  124.252510][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.256040][ T5881] usb 1-1: config 0 has no interfaces?
[  124.258135][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  124.286063][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.296974][ T5881] usb 1-1: config 0 descriptor??
[  124.519139][ T5881] usb 1-1: USB disconnect, device number 10
[  124.840325][ T5852] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  125.020668][ T5896] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  125.026491][ T7678] loop2: detected capacity change from 0 to 1024
[  125.045221][ T7678] hfsplus: bad catalog entry type
[  125.069714][ T4496] hfsplus: b-tree write err: -5, ino 4
[  125.184908][ T5896] usb 4-1: config 0 has no interfaces?
[  125.190563][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  125.193830][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.209126][ T5896] usb 4-1: config 0 descriptor??
[  125.447215][ T1273] usb 4-1: USB disconnect, device number 6
[  125.528792][ T7682] loop2: detected capacity change from 0 to 32768
[  125.566434][ T7682] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  125.566434][ T7682] 
[  125.583852][ T7682] ERROR: (device loop2): remounting filesystem as read-only
[  125.586778][ T7682] ERROR: (device loop2): jfs_unlink: 
[  125.586778][ T7682] 
[  125.629403][ T5852] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt
[  125.629403][ T5852] 
[  125.989608][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'.
[  126.029029][ T7684] loop0: detected capacity change from 0 to 131072
[  126.032792][ T7684] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  126.035866][ T7684] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  126.042128][ T7684] F2FS-fs (loop0): invalid crc value
[  126.078947][ T7684] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.083307][ T7684] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  126.086108][ T7684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  126.185673][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'.
[  126.556603][ T7710] netlink: 'syz.3.686': attribute type 1 has an invalid length.
[  126.920123][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'.
[  126.924376][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'.
[  126.925231][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[  126.927419][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'.
[  126.930914][ T7725] netlink: 'syz.3.693': attribute type 18 has an invalid length.
[  126.942931][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'.
[  127.414657][   T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  127.561774][ T5894] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  127.582388][   T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  127.585314][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.591743][   T24] usb 1-1: config 0 descriptor??
[  127.596499][   T24] cp210x 1-1:0.0: cp210x converter detected
[  127.742044][ T5894] usb 3-1: Using ep0 maxpacket: 16
[  127.745997][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  127.750246][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.756944][ T5894] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.764959][ T5894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.768455][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.771772][ T5894] usb 3-1: Product: syz
[  127.773473][ T5894] usb 3-1: Manufacturer: syz
[  127.775387][ T5894] usb 3-1: SerialNumber: syz
[  127.970296][ T7739] process 'syz.3.698' launched '/dev/fd/3' with NULL argv: empty string added
[  128.001732][ T5894] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  128.004669][ T5894] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  128.028761][   T24] usb 1-1: cp210x converter now attached to ttyUSB0
[  128.056197][ T7741] loop3: detected capacity change from 0 to 256
[  128.066260][ T7741] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.084947][ T5894] usb 3-1: USB disconnect, device number 8
[  128.155448][ T7744] udevd[7744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.221926][ T1273] usb 1-1: USB disconnect, device number 11
[  128.235782][ T1273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  128.245793][ T1273] cp210x 1-1:0.0: device disconnected
[  128.705601][ T5881] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  128.871982][ T5881] usb 4-1: Using ep0 maxpacket: 8
[  128.995370][ T5881] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  129.001446][ T5881] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  129.010676][ T5881] usb 4-1: config 135 has no interface number 0
[  129.015025][ T5881] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  129.033189][ T7761] loop0: detected capacity change from 0 to 512
[  129.040256][ T5881] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  129.046583][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.049062][ T5881] usb 4-1: Product: syz
[  129.050709][ T5881] usb 4-1: Manufacturer: syz
[  129.053400][ T5881] usb 4-1: SerialNumber: syz
[  129.077647][ T7761] EXT4-fs (loop0): 1 orphan inode deleted
[  129.080862][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.085012][ T7761] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.089087][ T5881] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[  129.095162][   T36] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  129.099041][   T36] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u10:1: Failed to release dquot type 1
[  129.102306][ T5881] usb 4-1: No valid video chain found.
[  129.119075][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.178866][ T7768] loop0: detected capacity change from 0 to 1024
[  130.169942][ T7801] loop0: detected capacity change from 0 to 32768
[  130.272564][ T7801] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only
[  130.272585][ T7801]   allowing incompatible features above 0.0: (unknown version)
[  130.272595][ T7801]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  130.292224][ T7801] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  130.298175][ T7801] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  130.301954][ T7801] bcachefs (loop0): Version upgrade required:
[  130.301954][ T7801] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  130.301954][ T7801] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  130.301954][ T7801]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  130.364494][ T7812] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  130.380285][ T7801] bcachefs (loop0): accounting_read... done
[  130.389649][ T7801] bcachefs (loop0): alloc_read... done
[  130.393171][ T7801] bcachefs (loop0): done starting filesystem
[  130.456148][ T5850] bcachefs (loop0): shutting down
[  130.488643][ T5850] bcachefs (loop0): shutdown complete
[  130.605974][ T7819] loop2: detected capacity change from 0 to 4096
[  130.624361][ T7819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.637596][ T7819] EXT4-fs (loop2): shut down requested (2)
[  130.666672][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.048173][ T7835] loop2: detected capacity change from 0 to 32768
[  131.061863][ T7835] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.074184][ T7835] XFS (loop2): Ending clean mount
[  131.078957][ T7835] capability: warning: `syz.2.738' uses 32-bit capabilities (legacy support in use)
[  131.096932][ T5852] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.310000][ T5908] usb 4-1: USB disconnect, device number 7
[  131.910846][ T7859] loop0: detected capacity change from 0 to 40427
[  131.921200][ T7859] F2FS-fs (loop0): invalid crc value
[  131.961769][ T5908] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  131.977704][ T7859] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  131.983177][ T7859] F2FS-fs (loop0): Start checkpoint disabled!
[  131.989218][ T7859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  132.021459][ T4496] bio_check_eod: 5876 callbacks suppressed
[  132.021471][ T4496] kworker/u9:5: attempt to access beyond end of device
[  132.021471][ T4496] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.028530][ T4496] CPU: 0 UID: 0 PID: 4496 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  132.028543][ T4496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.028549][ T4496] Workqueue: writeback wb_workfn (flush-7:0)
[  132.028566][ T4496] Call Trace:
[  132.028571][ T4496]  <TASK>
[  132.028575][ T4496]  dump_stack_lvl+0x189/0x250
[  132.028590][ T4496]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.028600][ T4496]  ? __pfx_queue_work_on+0x10/0x10
[  132.028643][ T4496]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.028655][ T4496]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.028669][ T4496]  f2fs_handle_critical_error+0x37c/0x540
[  132.028686][ T4496]  f2fs_write_end_io+0x886/0xb60
[  132.028708][ T4496]  __submit_merged_bio+0x27a/0x6a0
[  132.028721][ T4496]  __submit_merged_write_cond+0x255/0x530
[  132.028734][ T4496]  f2fs_write_data_pages+0x261d/0x3000
[  132.028762][ T4496]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.028780][ T4496]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  132.028810][ T4496]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  132.028819][ T4496]  ? look_up_lock_class+0x74/0x170
[  132.028837][ T4496]  ? trace_f2fs_writepages+0x7f/0x200
[  132.028847][ T4496]  ? f2fs_write_node_pages+0x478/0x6e0
[  132.028869][ T4496]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.028880][ T4496]  do_writepages+0x32e/0x550
[  132.028895][ T4496]  ? reacquire_held_locks+0x127/0x1d0
[  132.028903][ T4496]  ? writeback_sb_inodes+0x384/0x1010
[  132.028919][ T4496]  __writeback_single_inode+0x145/0xff0
[  132.028930][ T4496]  ? do_raw_spin_unlock+0x4d/0x240
[  132.028944][ T4496]  writeback_sb_inodes+0x6c7/0x1010
[  132.028954][ T4496]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.028976][ T4496]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  132.029008][ T4496]  ? rcu_is_watching+0x15/0xb0
[  132.029023][ T4496]  wb_writeback+0x43b/0xaf0
[  132.029038][ T4496]  ? queue_io+0x391/0x590
[  132.029049][ T4496]  ? __pfx_wb_writeback+0x10/0x10
[  132.029063][ T4496]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.029074][ T4496]  wb_workfn+0x409/0xef0
[  132.029091][ T4496]  ? __pfx_wb_workfn+0x10/0x10
[  132.029102][ T4496]  ? __lock_acquire+0xab9/0xd20
[  132.029121][ T4496]  ? process_scheduled_works+0x9ef/0x17b0
[  132.029132][ T4496]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.029140][ T4496]  ? process_scheduled_works+0x9ef/0x17b0
[  132.029146][ T4496]  ? process_scheduled_works+0x9ef/0x17b0
[  132.029155][ T4496]  process_scheduled_works+0xae1/0x17b0
[  132.029178][ T4496]  ? __pfx_process_scheduled_works+0x10/0x10
[  132.029206][ T4496]  worker_thread+0x8a0/0xda0
[  132.029216][ T4496]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.029229][ T4496]  ? __kthread_parkme+0x7b/0x200
[  132.029244][ T4496]  kthread+0x711/0x8a0
[  132.029255][ T4496]  ? __pfx_worker_thread+0x10/0x10
[  132.029262][ T4496]  ? __pfx_kthread+0x10/0x10
[  132.029273][ T4496]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.029281][ T4496]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.029288][ T4496]  ? __pfx_kthread+0x10/0x10
[  132.029298][ T4496]  ret_from_fork+0x3fc/0x770
[  132.029309][ T4496]  ? __pfx_ret_from_fork+0x10/0x10
[  132.029321][ T4496]  ? __switch_to_asm+0x39/0x70
[  132.029330][ T4496]  ? __switch_to_asm+0x33/0x70
[  132.029339][ T4496]  ? __pfx_kthread+0x10/0x10
[  132.029348][ T4496]  ret_from_fork_asm+0x1a/0x30
[  132.029367][ T4496]  </TASK>
[  132.029371][ T4496] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  132.223005][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  132.227038][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  132.231108][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  132.234747][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 232, setting to 64
[  132.238107][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  132.244177][ T5908] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  132.247042][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.249522][ T5908] usb 4-1: Product: syz
[  132.250833][ T5908] usb 4-1: Manufacturer: syz
[  132.252392][ T5908] usb 4-1: SerialNumber: syz
[  132.256071][ T5908] usb 4-1: config 0 descriptor??
[  132.259752][ T7850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  132.266961][ T5908] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input4
[  132.503763][ T5908] usb 4-1: USB disconnect, device number 8
[  132.507084][ T7875] loop2: detected capacity change from 0 to 1024
[  132.512453][ T7875] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  132.531975][ T7875] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.751: Invalid block bitmap block 0 in block_group 0
[  132.547086][ T7875] Quota error (device loop2): write_blk: dquota write failed
[  132.549615][ T7875] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  132.562916][ T7875] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.751: Failed to acquire dquot type 0
[  132.578906][ T7875] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.751: Freeing blocks not in datazone - block = 0, count = 4096
[  132.589532][ T7875] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.751: Invalid inode bitmap blk 0 in block_group 0
[  132.610733][ T1094] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[  132.615326][ T7875] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  132.621760][ T1094] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u10:8: Failed to release dquot type 0
[  132.625590][ T7875] EXT4-fs (loop2): 1 orphan inode deleted
[  132.628173][ T7875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.677710][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.737504][ T7879] loop2: detected capacity change from 0 to 128
[  132.770655][ T7879] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.776256][ T7879] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.796144][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.799496][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.807163][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.509439][ T7888] loop3: detected capacity change from 0 to 32768
[  133.517945][ T7888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.755 (7888)
[  133.556094][ T7888] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.565659][ T7888] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  133.570515][ T7888] BTRFS info (device loop3): using free-space-tree
[  133.602694][ T7903] loop0: detected capacity change from 0 to 256
[  133.678937][ T7888] BTRFS info (device loop3): rebuilding free space tree
[  133.906846][ T6429] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.024617][ T7928] netlink: 'syz.3.766': attribute type 4 has an invalid length.
[  134.083936][ T7932] binder: 7931:7932 ioctl 541b 0 returned -22
[  134.303780][ T7938] loop3: detected capacity change from 0 to 8192
[  134.313168][ T7938] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.930706][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.774'.
[  134.934314][ T7949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.774'.
[  134.937862][ T7949] tipc: MTU too low for tipc bearer
[  135.176210][ T5896] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  135.181741][ T7951] loop2: detected capacity change from 0 to 32768
[  135.192230][ T7951] jfs_mount: Failed to read AGGREGATE_I
[  135.200240][ T7951] Mount JFS Failure: -5
[  135.202188][ T7951] jfs_mount failed w/return code = -5
[  135.353948][ T5896] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  135.361462][ T5896] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  135.367094][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0
[  135.369724][ T5896] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  135.394916][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.404351][ T5896] usb 1-1: config 0 descriptor??
[  135.413706][ T7947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.547877][ T7967] loop2: detected capacity change from 0 to 128
[  135.561256][ T7967] FAT-fs (loop2): FAT read failed (blocknr 33568)
[  135.853068][ T5896] sony 0003:054C:024B.0003: item fetching failed at offset 0/2
[  135.855905][ T5896] sony 0003:054C:024B.0003: parse failed
[  135.857689][ T5896] sony 0003:054C:024B.0003: probe with driver sony failed with error -22
[  135.866344][ T7983] loop2: detected capacity change from 0 to 256
[  135.904637][ T7983] FAT-fs (loop2): Directory bread(block 64) failed
[  135.908321][ T7985] loop3: detected capacity change from 0 to 1024
[  135.909283][ T7983] FAT-fs (loop2): Directory bread(block 65) failed
[  135.914824][ T7983] FAT-fs (loop2): Directory bread(block 66) failed
[  135.917391][ T7983] FAT-fs (loop2): Directory bread(block 67) failed
[  135.919978][ T7983] FAT-fs (loop2): Directory bread(block 68) failed
[  135.925027][ T7983] FAT-fs (loop2): Directory bread(block 69) failed
[  135.927589][ T7983] FAT-fs (loop2): Directory bread(block 70) failed
[  135.929974][ T7983] FAT-fs (loop2): Directory bread(block 71) failed
[  135.933261][   T33] audit: type=1800 audit(1755041064.503:44): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.792" name="file1" dev="loop3" ino=20 res=0 errno=0
[  135.933536][ T7983] FAT-fs (loop2): Directory bread(block 72) failed
[  135.945459][ T7985] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.946394][ T7983] FAT-fs (loop2): Directory bread(block 73) failed
[  135.947955][ T7985] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.960191][   T33] audit: type=1800 audit(1755041064.523:45): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.792" name="file1" dev="loop3" ino=20 res=0 errno=0
[  136.055762][ T5896] usb 1-1: USB disconnect, device number 12
[  136.117191][ T7989] loop2: detected capacity change from 0 to 512
[  136.130259][ T7989] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.141155][ T7989] EXT4-fs: Ignoring removed i_version option
[  136.160874][ T7989] EXT4-fs (loop2): 1 orphan inode deleted
[  136.165165][ T7989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.175524][ T7989] EXT4-fs (loop2): shut down requested (1)
[  136.195678][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.802261][ T8019] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  137.963202][ T8012] loop3: detected capacity change from 0 to 32768
[  137.965744][ T8012] XFS: attr2 mount option is deprecated.
[  137.984389][ T8027] net_ratelimit: 45 callbacks suppressed
[  137.984414][ T8027] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  138.014524][   T24] IPVS: starting estimator thread 0...
[  138.051843][ T8012] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  138.058264][ T8012] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.070391][ T8012] XFS (loop3): Ending clean mount
[  138.075494][ T8012] XFS (loop3): Quotacheck needed: Please wait.
[  138.180517][ T8040] netlink: 68 bytes leftover after parsing attributes in process `syz.2.809'.
[  138.207928][ T8029] IPVS: using max 61 ests per chain, 146400 per kthread
[  138.301855][ T8012] XFS (loop3): Quotacheck: Done.
[  138.345040][ T6429] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.614214][ T8050] netlink: 'syz.3.815': attribute type 4 has an invalid length.
[  139.030554][ T8062] loop3: detected capacity change from 0 to 2048
[  139.085369][ T8062] Dev loop3: RDB in block 1 has bad checksum
[  139.114551][ T5295] Dev loop3: RDB in block 1 has bad checksum
[  139.234851][ T8067] loop2: detected capacity change from 0 to 2048
[  139.270968][ T8067] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  139.280657][ T8067] UDF-fs: Scanning with blocksize 512 failed
[  139.307262][ T8067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.338432][   T33] audit: type=1800 audit(1755041067.903:46): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.823" name="file2" dev="loop2" ino=819 res=0 errno=0
[  139.944191][ T8079] loop3: detected capacity change from 0 to 32768
[  139.976771][ T8079] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.008236][ T8079] XFS (loop3): Ending clean mount
[  140.015124][ T8079] XFS (loop3): Quotacheck needed: Please wait.
[  140.057265][ T8079] XFS (loop3): Quotacheck: Done.
[  140.105409][ T6429] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.169689][ T8104] loop2: detected capacity change from 0 to 32768
[  140.185053][ T8104] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.840 (8104)
[  140.205263][ T8104] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.208484][ T8104] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  140.211163][ T8104] BTRFS info (device loop2): using free-space-tree
[  140.287266][ T8121] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.290514][ T8121] 8021q: adding VLAN 0 to HW filter on device team0
[  140.298864][ T8121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.336468][ T8136] netlink: 84 bytes leftover after parsing attributes in process `syz.3.844'.
[  140.384282][ T5852] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.441215][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'.
[  140.977107][ T8121] syz.0.843 (8121) used greatest stack depth: 20120 bytes left
[  142.225854][ T5881] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  142.400151][ T8188] gre1: entered promiscuous mode
[  142.427357][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.433793][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  142.436953][ T5881] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  142.441117][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.446705][ T5881] usb 1-1: config 0 descriptor??
[  142.452393][ T5881] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  142.458420][ T5881] dvb-usb: bulk message failed: -22 (3/0)
[  142.467873][ T5881] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  142.471996][ T5881] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  142.477635][ T5881] usb 1-1: media controller created
[  142.481922][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  142.490826][ T5881] dvb-usb: bulk message failed: -22 (6/0)
[  142.494424][ T5881] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  142.499201][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[  142.509350][ T5881] dvb-usb: schedule remote query interval to 150 msecs.
[  142.512080][ T5881] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  142.975789][ T5881] dvb-usb: bulk message failed: -22 (1/0)
[  142.977837][ T5881] dvb-usb: error while querying for an remote control event.
[  143.101870][ T5908] usb 1-1: USB disconnect, device number 13
[  143.131068][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  143.251749][ T8207] loop3: detected capacity change from 0 to 128
[  143.380209][ T8211] netlink: 52 bytes leftover after parsing attributes in process `syz.3.873'.
[  143.812849][ T5908] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  143.976295][ T5908] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  143.979627][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.997787][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'.
[  144.016708][ T5908] usb 4-1: config 0 descriptor??
[  144.021610][ T5908] cp210x 4-1:0.0: cp210x converter detected
[  144.268221][ T5908] usb 4-1: cp210x converter now attached to ttyUSB0
[  144.812372][ T5881] usb 4-1: USB disconnect, device number 9
[  144.823294][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  144.831798][ T5881] cp210x 4-1:0.0: device disconnected
[  144.929877][ T8253] loop0: detected capacity change from 0 to 32768
[  145.062711][ T8253] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  145.062733][ T8253]   allowing incompatible features above 0.0: (unknown version)
[  145.062739][ T8253]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  145.115299][ T8253] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  145.118158][ T8253] bcachefs (loop0): initializing new filesystem
[  145.131115][ T8253] bcachefs (loop0): going read-write
[  145.154864][ T8253] bcachefs (loop0): marking superblocks
[  145.164065][ T8273] loop2: detected capacity change from 0 to 24
[  145.185788][ T8273] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  145.188891][ T8253] bcachefs (loop0): initializing freespace
[  145.196855][ T8253] bcachefs (loop0): done initializing freespace
[  145.204434][ T8253] bcachefs (loop0): reading snapshots table
[  145.205745][ T8273] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  145.206863][ T8253] bcachefs (loop0): reading snapshots done
[  145.226661][ T8273] romfs: read error for inode 0x70040
[  145.262414][ T8253] bcachefs (loop0): done starting filesystem
[  145.298992][ T8253] syz.0.892 (8253) used greatest stack depth: 15352 bytes left
[  145.336608][ T5850] bcachefs (loop0): shutting down
[  145.338616][ T5850] bcachefs (loop0): going read-only
[  145.341055][ T5850] bcachefs (loop0): finished waiting for writes to stop
[  145.361663][ T5850] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  145.426359][ T5850] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  145.444072][ T5850] bcachefs (loop0): clean shutdown complete, journal seq 4
[  145.448016][ T8283] netlink: 'syz.2.899': attribute type 1 has an invalid length.
[  145.449348][ T5850] bcachefs (loop0): marking filesystem clean
[  145.451829][ T8283] netlink: 148 bytes leftover after parsing attributes in process `syz.2.899'.
[  145.457114][ T8283] netlink: 'syz.2.899': attribute type 1 has an invalid length.
[  145.494167][ T5850] bcachefs (loop0): shutdown complete
[  145.564215][ T8285] loop3: detected capacity change from 0 to 4096
[  145.575827][ T8289] loop2: detected capacity change from 0 to 256
[  145.587632][ T8289] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  145.630643][ T8290] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.851695][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'.
[  146.876082][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout
[  147.105700][ T8302] loop3: detected capacity change from 0 to 32768
[  147.160176][ T8302] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.227287][ T8302] XFS (loop3): Ending clean mount
[  147.244414][ T8302] XFS (loop3): Quotacheck needed: Please wait.
[  147.293528][ T8302] XFS (loop3): Quotacheck: Done.
[  147.392626][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'.
[  147.397613][ T8302] XFS (loop3): User initiated shutdown received.
[  147.406275][ T8302] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  147.419779][ T8346] loop0: detected capacity change from 0 to 1764
[  147.434392][ T8302] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  147.497147][ T6429] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.696586][ T8360] loop2: detected capacity change from 0 to 256
[  147.731933][ T8360] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d)
[  148.140807][ T8392] loop0: detected capacity change from 0 to 4096
[  148.144389][ T8392] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  148.150048][ T8394] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.935'.
[  148.155470][ T8394] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  148.178875][ T8392] ntfs3(loop0): $AttrDef is corrupted.
[  148.376356][ T8408] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  148.578962][ T8404] loop2: detected capacity change from 0 to 32768
[  148.582300][ T8404] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.940 (8404)
[  148.595825][ T8404] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  148.599013][ T8404] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  148.622490][ T8404] BTRFS info (device loop2): using free-space-tree
[  148.715049][   T33] audit: type=1800 audit(1755041077.282:47): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.940" name="file1" dev="loop2" ino=260 res=0 errno=0
[  148.824930][ T5852] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  148.861647][ T8413] loop0: detected capacity change from 0 to 32768
[  148.896015][ T8438] Zero length message leads to an empty skb
[  148.909029][ T8413] BTRFS info: device /dev/loop0 (7:0) using temp-fsid b95e1cb5-b129-484c-9c03-58d54b5d16c7
[  148.931764][ T8413] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.943 (8413)
[  148.991015][ T8413] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  148.995164][ T8413] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  148.998607][ T8413] BTRFS info (device loop0): using free-space-tree
[  149.384109][   T33] audit: type=1800 audit(1755041077.952:48): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.943" name="file1" dev="loop0" ino=260 res=0 errno=0
[  149.897411][ T5850] BTRFS info (device loop0): last unmount of filesystem b95e1cb5-b129-484c-9c03-58d54b5d16c7
[  150.852077][ T8475] loop3: detected capacity change from 0 to 16
[  150.858584][ T8475] erofs (device loop3): bogus i_mode (0) @ nid 58320
[  150.948621][ T8477] loop3: detected capacity change from 0 to 4096
[  150.951515][ T8477] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  150.973846][ T8477] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  150.976561][ T8477] ntfs3(loop3): ino=1a, mi_enum_attr
[  150.978313][ T8477] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  150.987835][ T8477] ntfs3(loop3): ino=5, "/" ntfs_readdir
[  150.991678][ T8481] 9pnet_fd: p9_fd_create_unix (8481): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  151.071684][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.959'.
[  151.190636][ T8493] netlink: 'syz.2.964': attribute type 10 has an invalid length.
[  151.216549][ T8493] team0: Port device syz_tun added
[  151.646060][ T8511] loop2: detected capacity change from 0 to 32768
[  151.681662][ T8511] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  151.710407][ T8511] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  151.761306][ T5852] ocfs2: Unmounting device (7,2) on (node local)
[  151.857536][ T8538] loop0: detected capacity change from 0 to 1024
[  151.861480][ T8538] hfsplus: invalid catalog btree flag
[  151.867220][ T8538] hfsplus: failed to load catalog file
[  152.075952][ T8550] loop2: detected capacity change from 0 to 2048
[  152.110388][ T8551] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.642791][ T8561] loop2: detected capacity change from 0 to 512
[  152.658827][ T8561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  152.687317][ T8561] EXT4-fs (loop2): 1 truncate cleaned up
[  152.699290][ T8561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.765662][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.028175][ T8575] loop2: detected capacity change from 0 to 4096
[  153.054847][ T8575] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  153.073398][ T8575] ntfs3(loop2): ino=0, mi_enum_attr
[  153.110428][ T8575] ntfs3(loop2): ino=0, mi_enum_attr
[  153.130803][ T8575] ntfs3(loop2): Failed to load $MFT (-2).
[  153.419709][ T8582] loop0: detected capacity change from 0 to 2048
[  153.430472][ T8582] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  153.440644][ T5846] udevd[5846]: incorrect nilfs2 checksum on /dev/loop0
[  153.442147][ T8582] NILFS (loop0): too large checkpoint size: 1741 bytes
[  153.450815][ T8582] NILFS (loop0): error -22 while loading super root
[  153.481136][ T5846] udevd[5846]: incorrect nilfs2 checksum on /dev/loop0
[  154.508442][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1000'.
[  154.725132][ T8597] loop2: detected capacity change from 0 to 512
[  154.732075][ T8597] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.736290][ T8597] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.747957][ T8597] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  154.767982][ T8597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  154.790350][ T8597] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1002: corrupted in-inode xattr: e_value size too large
[  154.814726][ T8597] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1002: couldn't read orphan inode 15 (err -117)
[  154.843906][ T8597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.872641][ T8597] EXT4-fs (loop2): shut down requested (1)
[  154.956743][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.508088][ T8619] loop0: detected capacity change from 0 to 1764
[  155.679043][ T8627] loop2: detected capacity change from 0 to 1024
[  155.690293][ T8627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.765913][ T8626] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt.
[  155.870417][ T8634] loop3: detected capacity change from 0 to 128
[  155.897571][ T8634] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  155.908210][ T8634] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  155.923033][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.017971][ T6429] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.810060][ T8686] loop2: detected capacity change from 0 to 32768
[  157.815343][ T8686] read_mapping_page failed!
[  157.817761][ T8686] diRead: diIAGRead returned -5
[  157.899200][ T8688] loop0: detected capacity change from 0 to 32768
[  157.902054][ T8688] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1039 (8688)
[  157.985112][ T8688] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.989558][ T8688] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  157.999784][ T8688] BTRFS info (device loop0): using free-space-tree
[  158.204271][ T8688] BTRFS info (device loop0): rebuilding free space tree
[  158.292354][ T8688] BTRFS info (device loop0): checking UUID tree
[  158.372212][   T33] audit: type=1804 audit(1755041086.931:49): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1039" name="/newroot/358/bus/bus" dev="loop0" ino=263 res=1 errno=0
[  158.860406][ T5850] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.502339][ T8729] loop0: detected capacity change from 0 to 4096
[  159.568906][ T8729] ntfs3(loop0): ino=1e, "file1" attr_set_size
[  159.571821][ T8729] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  159.710981][ T8727] loop2: detected capacity change from 0 to 40427
[  159.739347][ T8727] F2FS-fs (loop2): invalid crc value
[  159.778505][ T8727] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.782401][ T8727] F2FS-fs (loop2): Start checkpoint disabled!
[  159.786755][ T8727] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  159.825419][   T33] audit: type=1800 audit(1755041088.390:50): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1048" name="file1" dev="loop2" ino=10 res=0 errno=0
[  159.836115][ T8727] syz.2.1048: attempt to access beyond end of device
[  159.836115][ T8727] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  159.846743][   T33] audit: type=1800 audit(1755041088.410:51): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1052" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0
[  159.856087][ T8727] syz.2.1048: attempt to access beyond end of device
[  159.856087][ T8727] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  159.879308][ T4496] kworker/u9:5: attempt to access beyond end of device
[  159.879308][ T4496] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  159.897419][ T4496] CPU: 1 UID: 0 PID: 4496 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  159.897434][ T4496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.897440][ T4496] Workqueue: writeback wb_workfn (flush-7:2)
[  159.897456][ T4496] Call Trace:
[  159.897459][ T4496]  <TASK>
[  159.897463][ T4496]  dump_stack_lvl+0x189/0x250
[  159.897476][ T4496]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.897486][ T4496]  ? __pfx_queue_work_on+0x10/0x10
[  159.897493][ T4496]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.897503][ T4496]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.897516][ T4496]  f2fs_handle_critical_error+0x37c/0x540
[  159.897530][ T4496]  f2fs_write_end_io+0x886/0xb60
[  159.897549][ T4496]  __submit_merged_bio+0x27a/0x6a0
[  159.897562][ T4496]  __submit_merged_write_cond+0x255/0x530
[  159.897574][ T4496]  f2fs_write_data_pages+0x261d/0x3000
[  159.897600][ T4496]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.897616][ T4496]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  159.897642][ T4496]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  159.897657][ T4496]  ? trace_f2fs_writepages+0x7f/0x200
[  159.897667][ T4496]  ? f2fs_write_node_pages+0x478/0x6e0
[  159.897678][ T4496]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  159.897694][ T4496]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.897704][ T4496]  do_writepages+0x32e/0x550
[  159.897718][ T4496]  ? reacquire_held_locks+0x127/0x1d0
[  159.897726][ T4496]  ? writeback_sb_inodes+0x384/0x1010
[  159.897739][ T4496]  __writeback_single_inode+0x145/0xff0
[  159.897749][ T4496]  ? do_raw_spin_unlock+0x4d/0x240
[  159.897761][ T4496]  writeback_sb_inodes+0x6c7/0x1010
[  159.897782][ T4496]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  159.897811][ T4496]  ? rcu_is_watching+0x15/0xb0
[  159.897823][ T4496]  wb_writeback+0x43b/0xaf0
[  159.897836][ T4496]  ? queue_io+0x391/0x590
[  159.897847][ T4496]  ? __pfx_wb_writeback+0x10/0x10
[  159.897861][ T4496]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.897871][ T4496]  wb_workfn+0x409/0xef0
[  159.897886][ T4496]  ? __pfx_wb_workfn+0x10/0x10
[  159.897896][ T4496]  ? __lock_acquire+0xab9/0xd20
[  159.897912][ T4496]  ? process_scheduled_works+0x9ef/0x17b0
[  159.897923][ T4496]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.897957][ T4496]  ? process_scheduled_works+0x9ef/0x17b0
[  159.897967][ T4496]  ? process_scheduled_works+0x9ef/0x17b0
[  159.897975][ T4496]  process_scheduled_works+0xae1/0x17b0
[  159.897997][ T4496]  ? __pfx_process_scheduled_works+0x10/0x10
[  159.898017][ T4496]  worker_thread+0x8a0/0xda0
[  159.898027][ T4496]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.898039][ T4496]  ? __kthread_parkme+0x7b/0x200
[  159.898053][ T4496]  kthread+0x711/0x8a0
[  159.898063][ T4496]  ? __pfx_worker_thread+0x10/0x10
[  159.898071][ T4496]  ? __pfx_kthread+0x10/0x10
[  159.898081][ T4496]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.898088][ T4496]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.898098][ T4496]  ? __pfx_kthread+0x10/0x10
[  159.898107][ T4496]  ret_from_fork+0x3fc/0x770
[  159.898117][ T4496]  ? __pfx_ret_from_fork+0x10/0x10
[  159.898127][ T4496]  ? __switch_to_asm+0x39/0x70
[  159.898137][ T4496]  ? __switch_to_asm+0x33/0x70
[  159.898145][ T4496]  ? __pfx_kthread+0x10/0x10
[  159.898155][ T4496]  ret_from_fork_asm+0x1a/0x30
[  159.898172][ T4496]  </TASK>
[  159.898176][ T4496] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  160.112015][ T8750] loop0: detected capacity change from 0 to 1024
[  160.116643][ T8750] EXT4-fs: Ignoring removed orlov option
[  160.147975][ T8750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.198561][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.634165][ T8763] loop2: detected capacity change from 0 to 40427
[  160.645222][ T8763] F2FS-fs (loop2): build fault injection rate: 14
[  160.647821][ T8763] F2FS-fs (loop2): build fault injection type: 0x1dff
[  160.669227][ T8763] F2FS-fs (loop2): invalid crc value
[  160.672611][ T8763] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  160.682137][ T8763] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  160.932317][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv1
[  160.936273][ T8771] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  160.939313][ T8771] team0: Failed to send options change via netlink (err -105)
[  160.941707][ T8771] team0: Port device batadv1 added
[  160.993101][ T8774] loop0: detected capacity change from 0 to 2048
[  161.057146][ T5846]  loop0: p2 < > p4
[  161.062088][ T5846] loop0: p4 size 8192 extends beyond EOD, truncated
[  161.074873][ T8774]  loop0: p2 < > p4
[  161.079196][ T8774] loop0: p4 size 8192 extends beyond EOD, truncated
[  161.120918][ T5295]  loop0: p2 < > p4
[  161.124079][ T5295] loop0: p4 size 8192 extends beyond EOD, truncated
[  161.181895][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  161.193356][ T6541] udevd[6541]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  161.243724][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  161.259100][ T6541] udevd[6541]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  161.291381][ T8789] loop2: detected capacity change from 0 to 64
[  161.320787][ T6541] udevd[6541]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  161.329312][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  161.376064][ T8791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1072'.
[  161.443173][ T8795] loop2: detected capacity change from 0 to 512
[  161.491706][ T8795] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[  161.494392][ T8795] System zones: 0-2, 18-18, 34-35
[  161.502208][ T8795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.510018][ T8795] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  161.557065][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.677456][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'.
[  161.691042][ T8812] batadv1: entered allmulticast mode
[  161.811426][ T8822] loop0: detected capacity change from 0 to 1024
[  162.003794][ T8829] loop2: detected capacity change from 0 to 128
[  162.470817][ T8860] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1102'.
[  162.473826][ T8860] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1102'.
[  162.483815][ T8860] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1102'.
[  162.517955][ T8862] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  162.700251][ T8869] 9pnet: p9_errstr2errno: server reported unknown error @L	O!L+
[  163.055127][ T1273] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  163.218125][ T1273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.226647][ T1273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.235231][ T1273] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  163.238953][ T1273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.256335][ T1273] usb 1-1: config 0 descriptor??
[  163.441882][ T8875] loop2: detected capacity change from 0 to 32768
[  163.456434][ T8875] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1109 (8875)
[  163.464877][ T8875] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.474718][ T8875] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  163.478780][ T8875] BTRFS info (device loop2): using free-space-tree
[  163.538344][ T8875] BTRFS info (device loop2): rebuilding free space tree
[  163.642364][ T5852] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.694681][ T1273] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  163.740033][ T1273] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  163.884078][ T1273] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00
[  164.030864][ T8900] loop2: detected capacity change from 0 to 128
[  164.052996][ T8900] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.063054][ T8900] ext4 filesystem being mounted at /433/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  164.107494][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.162881][ T8903] loop2: detected capacity change from 0 to 64
[  164.270297][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'.
[  164.383446][ T8911] binder: 8910:8911 ioctl 80286722 0 returned -22
[  164.490711][ T1273] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71
[  164.500327][ T1273] usb 1-1: USB disconnect, device number 14
[  164.751450][ T8921] loop2: detected capacity change from 0 to 32768
[  164.764631][ T8921] XFS: ikeep mount option is deprecated.
[  164.779173][ T8921] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.800156][ T8921] XFS (loop2): Ending clean mount
[  164.807739][ T8921] XFS (loop2): Quotacheck needed: Please wait.
[  164.841524][ T8921] XFS (loop2): Quotacheck: Done.
[  164.868580][ T5852] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.149620][ T8935] loop2: detected capacity change from 0 to 4096
[  165.153797][ T8935] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  165.170379][ T8935] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  165.459308][ T8955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1136'.
[  165.462160][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1137'.
[  165.615565][ T8969] vivid-007: =================  START STATUS  =================
[  165.618549][ T8969] vivid-007: Enable Output Cropping: true
[  165.620703][ T8969] vivid-007: Enable Output Composing: true
[  165.622558][ T8969] vivid-007: Enable Output Scaler: true
[  165.624238][ T8969] vivid-007: Tx RGB Quantization Range: Automatic
[  165.630228][ T8969] vivid-007: Transmit Mode: HDMI
[  165.632093][ T8969] vivid-007: Hotplug Present: 0x00000000
[  165.633817][ T8969] vivid-007: RxSense Present: 0x00000000
[  165.635802][ T8969] vivid-007: EDID Present: 0x00000000
[  165.637680][ T8969] vivid-007: ==================  END STATUS  ==================
[  165.905542][ T5881] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  165.975523][  T972] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  166.075504][ T5881] usb 1-1: Using ep0 maxpacket: 8
[  166.079024][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.082564][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  166.089059][ T5881] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  166.092354][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.095095][ T5881] usb 1-1: Product: syz
[  166.097777][ T5881] usb 1-1: Manufacturer: syz
[  166.099312][ T5881] usb 1-1: SerialNumber: syz
[  166.102949][ T5881] usb 1-1: config 0 descriptor??
[  166.137533][  T972] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  166.141208][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.145902][  T972] usb 3-1: config 0 descriptor??
[  166.311609][ T1273] usb 1-1: USB disconnect, device number 15
[  167.373166][  T972] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  167.376345][  T972] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  167.379600][  T972] asix 3-1:0.0: probe with driver asix failed with error -71
[  167.384462][  T972] usb 3-1: USB disconnect, device number 9
[  168.119100][ T8997] loop0: detected capacity change from 0 to 1024
[  168.246865][ T9001] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  168.521176][ T9017] loop0: detected capacity change from 0 to 4096
[  168.525393][ T9017] ntfs3(loop0): Primary boot: invalid bytes per sector 1792.
[  168.534801][ T9017] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  169.241699][ T9039] syzkaller0: entered promiscuous mode
[  169.243415][ T9039] syzkaller0: entered allmulticast mode
[  171.334024][ T9048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.490795][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  171.497712][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  171.502906][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  171.510167][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  171.513914][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  171.613183][ T9052] loop0: detected capacity change from 0 to 32768
[  171.622234][ T9052] (syz.0.1182,9052,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  171.633579][ T9052] (syz.0.1182,9052,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  171.654126][ T9052] JBD2: Ignoring recovery information on journal
[  171.707613][ T9052] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  171.765846][ T9053] chnl_net:caif_netlink_parms(): no params data found
[  171.837083][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  171.877506][   T33] audit: type=1326 audit(1755041100.439:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.911870][   T33] audit: type=1326 audit(1755041100.439:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.926751][   T33] audit: type=1326 audit(1755041100.439:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.943019][   T33] audit: type=1326 audit(1755041100.449:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.945303][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.957352][   T33] audit: type=1326 audit(1755041100.449:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.965145][   T33] audit: type=1326 audit(1755041100.449:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.973973][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.976527][   T33] audit: type=1326 audit(1755041100.449:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.986048][   T33] audit: type=1326 audit(1755041100.449:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  171.995359][ T9053] bridge_slave_0: entered allmulticast mode
[  171.999533][ T9053] bridge_slave_0: entered promiscuous mode
[  172.017685][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.020353][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.028232][ T9053] bridge_slave_1: entered allmulticast mode
[  172.034300][ T9053] bridge_slave_1: entered promiscuous mode
[  172.094957][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.104407][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.200114][ T9053] team0: Port device team_slave_0 added
[  172.207999][ T9053] team0: Port device team_slave_1 added
[  172.265876][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.268354][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.276697][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.280975][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.283175][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.291337][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.342138][ T9085] loop0: detected capacity change from 0 to 1024
[  172.353074][ T9053] hsr_slave_0: entered promiscuous mode
[  172.355464][ T9053] hsr_slave_1: entered promiscuous mode
[  172.362628][ T9053] debugfs: 'hsr0' already exists in 'hsr'
[  172.364503][ T9053] Cannot create hsr debugfs directory
[  172.864615][ T9053] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  172.873256][ T9053] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  172.879106][ T9053] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  172.884344][ T9053] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  173.061113][ T9104] loop0: detected capacity change from 0 to 4096
[  173.188890][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.206079][ T9053] 8021q: adding VLAN 0 to HW filter on device team0
[  173.215883][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.218878][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.238445][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.241391][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.420527][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.596725][ T5235] Bluetooth: hci4: command tx timeout
[  173.659575][ T1089] ntfs3(loop0): ino=5, mi_enum_attr
[  174.089130][ T9053] veth0_vlan: entered promiscuous mode
[  174.115025][ T9053] veth1_vlan: entered promiscuous mode
[  174.236025][ T9053] veth0_macvtap: entered promiscuous mode
[  174.260353][ T9053] veth1_macvtap: entered promiscuous mode
[  174.346207][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.365845][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.434603][ T5859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.442366][ T5859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.456250][ T5859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.488346][ T5859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.775209][  T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.798048][  T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.880767][  T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.894239][  T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.030138][ T9150] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1211'.
[  175.141395][ T9156] loop2: detected capacity change from 0 to 4096
[  175.180276][ T9156] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  175.206686][ T5894] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  175.228583][ T5852] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22.
[  175.277703][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  175.357611][ T5894] usb 1-1: Using ep0 maxpacket: 16
[  175.378111][ T5894] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.381815][ T5894] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.385442][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0
[  175.388667][ T5894] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  175.393402][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.408158][ T5894] usb 1-1: config 0 descriptor??
[  175.459844][   T24] usb 5-1: Using ep0 maxpacket: 16
[  175.476879][   T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  175.481115][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.485119][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.498502][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.505168][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.509182][   T24] usb 5-1: Product: syz
[  175.511827][   T24] usb 5-1: Manufacturer: syz
[  175.513867][   T24] usb 5-1: SerialNumber: syz
[  175.677764][ T5235] Bluetooth: hci4: command tx timeout
[  175.883712][ T5894] hid (null): usage index exceeded
[  175.885963][ T5894] hid (null): usage index exceeded
[  175.888281][ T5894] hid (null): unknown global tag 0x53
[  175.995525][   T24] usb 5-1: 0:2 : does not exist
[  176.075808][ T5894] usb 1-1: USB disconnect, device number 16
[  176.949019][   T24] usb 5-1: USB disconnect, device number 2
[  177.415707][ T9165] loop0: detected capacity change from 0 to 32768
[  177.757667][ T5235] Bluetooth: hci4: command tx timeout
[  177.965751][ T9197] loop4: detected capacity change from 0 to 256
[  178.048001][ T9197] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  178.050777][ T9197] FAT-fs (loop4): Filesystem has been set read-only
[  178.061938][ T9197] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  178.069003][ T9197] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  178.072276][ T9197] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  178.103434][ T9197] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  178.114377][ T9197] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  178.131447][ T9205] loop2: detected capacity change from 0 to 4096
[  178.296657][ T4496] ntfs3(loop2): ino=5, mi_enum_attr
[  178.725398][ T9212] loop2: detected capacity change from 0 to 2048
[  178.753539][ T9212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.180273][ T9233] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  179.610515][ T9262] loop0: detected capacity change from 0 to 1024
[  179.613333][ T9262] EXT4-fs: Ignoring removed nobh option
[  179.615158][ T9262] EXT4-fs: Ignoring removed bh option
[  179.675422][ T9262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.737976][ T9266] block nbd0: server does not support multiple connections per device.
[  179.745417][ T9266] block nbd0: shutting down sockets
[  179.837660][ T5235] Bluetooth: hci4: command tx timeout
[  179.893838][ T9275] loop2: detected capacity change from 0 to 4096
[  179.936851][ T9275] ntfs3(loop2): ino=19, mi_enum_attr
[  179.941237][ T9275] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  180.432138][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.573540][ T9302] loop0: detected capacity change from 0 to 128
[  180.590128][ T9302] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.598068][ T9302] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.211720][ T9308] loop4: detected capacity change from 0 to 32768
[  181.516771][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.539546][ T9319] loop2: detected capacity change from 0 to 2048
[  181.622730][ T9323] macvlan2: entered promiscuous mode
[  181.626575][ T9323] macvlan2: entered allmulticast mode
[  181.631964][ T9323] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  181.668931][ T9319] hpfs: filesystem error: improperly stopped; already mounted read-only
[  181.671754][ T9319] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  181.675074][ T9319] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  181.702045][ T9323] macvlan3: entered promiscuous mode
[  181.704145][ T9323] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  182.060160][ T9334] netlink: 'syz.4.1288': attribute type 3 has an invalid length.
[  182.095667][ T9336] loop4: detected capacity change from 0 to 256
[  182.127015][ T9336] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  182.151239][ T9327] loop0: detected capacity change from 0 to 32768
[  182.168189][ T9327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1286 (9327)
[  182.193967][ T9327] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.197289][ T9327] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  182.217749][ T9327] BTRFS info (device loop0): using free-space-tree
[  182.373917][ T9356] loop4: detected capacity change from 0 to 256
[  182.390709][ T9356] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  182.416241][ T5850] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.779464][ T9369] loop4: detected capacity change from 0 to 512
[  182.782591][ T9369] EXT4-fs: Ignoring removed mblk_io_submit option
[  182.787225][ T9369] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  182.794653][ T9369] EXT4-fs (loop4): DAX unsupported by block device.
[  183.223242][ T9377] sctp: [Deprecated]: syz.2.1301 (pid 9377) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.223242][ T9377] Use struct sctp_sack_info instead
[  183.418981][ T9388] loop0: detected capacity change from 0 to 4096
[  183.428338][ T9388] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  183.468045][ T9388] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  183.481132][ T9392] loop2: detected capacity change from 0 to 256
[  183.983734][ T9401] loop4: detected capacity change from 0 to 32768
[  183.997280][ T9401] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1311 (9401)
[  184.012879][ T9407] loop0: detected capacity change from 0 to 32768
[  184.024110][ T9401] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  184.027361][ T9401] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  184.037910][ T9401] BTRFS info (device loop4): using free-space-tree
[  184.127875][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  184.197551][ T9053] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  184.278714][   T24] usb 3-1: Using ep0 maxpacket: 16
[  184.313643][   T24] usb 3-1: config 0 has an invalid interface number: 94 but max is 0
[  184.316308][   T24] usb 3-1: config 0 has no interface number 0
[  184.330223][   T24] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90
[  184.338027][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.345659][   T24] usb 3-1: Product: syz
[  184.347107][   T24] usb 3-1: Manufacturer: syz
[  184.364742][   T24] usb 3-1: SerialNumber: syz
[  184.386848][   T24] usb 3-1: config 0 descriptor??
[  184.394210][   T24] usb 3-1: unsupported MDLM descriptors
[  184.723374][ T5908] usb 3-1: USB disconnect, device number 10
[  184.986444][ T9445] tipc: Started in network mode
[  184.989667][ T9445] tipc: Node identity 22458ca0ae62, cluster identity 4711
[  184.992905][ T9445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.008922][ T9445] syzkaller0: entered promiscuous mode
[  185.011128][ T9445] syzkaller0: entered allmulticast mode
[  185.083177][ T9445] tipc: Resetting bearer <eth:syzkaller0>
[  185.100941][ T9444] tipc: Resetting bearer <eth:syzkaller0>
[  185.152047][ T9444] tipc: Disabling bearer <eth:syzkaller0>
[  185.296166][ T9447] loop6: detected capacity change from 0 to 524287999
[  185.308945][ T9447] buffer_io_error: 9 callbacks suppressed
[  185.308961][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.327939][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.334412][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.343672][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.346646][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.374279][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.376918][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.390727][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.401127][ T9447] ldm_validate_partition_table(): Disk read failed.
[  185.418979][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.421583][ T9447] Buffer I/O error on dev loop6, logical block 0, async page read
[  185.424078][ T9447] Dev loop6: unable to read RDB block 0
[  185.437069][ T9447]  loop6: unable to read partition table
[  185.441660][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'.
[  185.448564][ T9447] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5)
[  185.726700][ T9473] loop0: detected capacity change from 0 to 256
[  185.736134][ T9473] exfat: Deprecated parameter 'utf8'
[  185.754802][ T9473] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  185.844702][ T9484] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.1340'.
[  185.953099][  T972] kernel read not supported for file /video7 (pid: 972 comm: kworker/1:2)
[  186.011262][ T9497] loop0: detected capacity change from 0 to 4096
[  186.071761][ T9501] loop4: detected capacity change from 0 to 256
[  186.103867][ T9501] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  186.150017][ T9503] loop2: detected capacity change from 0 to 4096
[  186.302088][ T9503] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  186.314651][ T9503] ntfs3(loop2): Failed to load $Extend (-22).
[  186.317167][ T9503] ntfs3(loop2): Failed to initialize $Extend.
[  187.368410][ T9507] afs: Unknown parameter 'A~|vN'
[  187.468127][ T5894] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  187.635102][ T5894] usb 1-1: config 0 has no interfaces?
[  187.649692][   T33] audit: type=1804 audit(1755041116.207:60): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1352" name="file0" dev="ramfs" ino=18066 res=1 errno=0
[  187.667432][ T5894] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  187.682075][ T9515] loop2: detected capacity change from 0 to 764
[  187.685602][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  187.692178][ T5894] usb 1-1: Product: syz
[  187.694250][ T5894] usb 1-1: Manufacturer: syz
[  187.697520][ T9515] rock: directory entry would overflow storage
[  187.709214][ T9515] rock: sig=0x5850, size=36, remaining=22
[  187.723758][ T5894] usb 1-1: config 0 descriptor??
[  187.936875][ T5908] usb 1-1: USB disconnect, device number 17
[  188.602601][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'.
[  189.146874][ T9550] netlink: 'syz.2.1368': attribute type 21 has an invalid length.
[  189.149544][ T9550] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1368'.
[  189.214352][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'.
[  189.284277][ T5908] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  189.315867][ T9554] netlink: 'syz.4.1371': attribute type 2 has an invalid length.
[  189.320252][ T9554] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.1371'.
[  189.370916][ T9558] loop4: detected capacity change from 0 to 128
[  189.391297][ T9558] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  189.429464][ T9053] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.451988][ T5908] usb 1-1: Using ep0 maxpacket: 32
[  189.456760][ T5908] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[  189.461963][ T5908] usb 1-1: config 0 has no interface number 1
[  189.472941][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  189.503512][ T5908] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  189.507254][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.514714][ T5908] usb 1-1: Product: syz
[  189.516535][ T5908] usb 1-1: Manufacturer: syz
[  189.523446][ T5908] usb 1-1: SerialNumber: syz
[  189.528738][ T5908] usb 1-1: config 0 descriptor??
[  189.808848][ T5908] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[  189.812189][ T5908] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  189.817284][ T9567] sp0: Synchronizing with TNC
[  189.845104][ T5908] usb 1-1: USB disconnect, device number 18
[  189.854316][ T9568] sp0: Found TNC
[  191.059857][ T9570] loop2: detected capacity change from 0 to 32768
[  191.074811][ T9570] btrfs: Deprecated parameter 'usebackuproot'
[  191.076017][ T9572] loop0: detected capacity change from 0 to 32768
[  191.077460][ T9570] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  191.084253][ T9570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1376 (9570)
[  191.144326][ T9570] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.149250][ T9570] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  191.159599][ T9570] BTRFS info (device loop2): using free-space-tree
[  191.247779][  T163] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  191.259565][ T9570] BTRFS error (device loop2): failed to load root extent
[  191.262026][ T9570] BTRFS warning (device loop2): try to load backup roots slot 1
[  191.265067][   T32] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  191.286099][ T9570] BTRFS warning (device loop2): couldn't read tree root
[  191.292186][ T9570] BTRFS warning (device loop2): try to load backup roots slot 2
[  191.295742][   T32] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  191.312822][ T9570] BTRFS warning (device loop2): couldn't read tree root
[  191.315797][ T9570] BTRFS warning (device loop2): try to load backup roots slot 3
[  191.351695][ T9570] BTRFS info (device loop2): rebuilding free space tree
[  191.380087][ T9570] BTRFS info (device loop2): checking UUID tree
[  191.523753][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.982179][ T9605] loop2: detected capacity change from 0 to 4096
[  192.048680][ T9606] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.072796][ T9605] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  192.082699][ T9608] loop0: detected capacity change from 0 to 512
[  192.090475][ T9605] Remounting filesystem read-only
[  192.212314][ T9601] loop4: detected capacity change from 0 to 32768
[  192.271974][ T9601] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  192.345881][ T9601] XFS (loop4): Ending clean mount
[  192.425552][ T9053] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  192.646711][ T9622] loop0: detected capacity change from 0 to 40427
[  192.668023][ T9622] F2FS-fs (loop0): Image doesn't support compression
[  192.671561][   T24] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  192.687059][ T9622] F2FS-fs (loop0): invalid crc value
[  192.736908][ T9622] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.742580][ T9622] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  192.829499][   T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  192.833174][   T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  192.848321][   T24] usb 3-1: string descriptor 0 read error: -22
[  192.854237][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  192.863548][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.110489][   T24] cdc_ncm 3-1:1.0: bind() failure
[  193.126724][   T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  193.129371][   T24] cdc_ncm 3-1:1.1: bind() failure
[  193.134241][   T24] usb 3-1: USB disconnect, device number 11
[  193.402044][ T9650] loop0: detected capacity change from 0 to 256
[  193.417570][ T9650] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  193.422380][ T9650] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  193.431854][ T9650] exFAT-fs (loop0): valid_size(150994954) is greater than size(10)
[  193.446946][   T33] audit: type=1800 audit(1755041122.006:61): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1399" name="file1" dev="loop0" ino=1048630 res=0 errno=0
[  193.455883][ T9652] loop4: detected capacity change from 0 to 2048
[  193.460872][ T9652] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  193.469606][ T9652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.516842][ T9652] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 0
[  193.536678][ T9652] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 0
[  193.775976][ T9670] loop4: detected capacity change from 0 to 8
[  193.921602][ T9677] loop2: detected capacity change from 0 to 256
[  193.933749][ T9677] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  194.306928][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.310257][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.322673][ T9686] loop0: detected capacity change from 0 to 128
[  194.413683][ T9690] loop2: detected capacity change from 0 to 8
[  194.422411][ T9690] Major/Minor mismatch, older Squashfs 1.0 filesystems are unsupported
[  194.859020][ T5894] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  194.954838][ T9714] loop0: detected capacity change from 0 to 128
[  194.986783][ T9714] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.992705][ T9714] ext4 filesystem being mounted at /516/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.029431][ T5894] usb 3-1: Using ep0 maxpacket: 16
[  195.037961][ T5894] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  195.042382][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.046258][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.051496][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.057164][ T5894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.057185][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.057195][ T5894] usb 3-1: Product: syz
[  195.057201][ T5894] usb 3-1: Manufacturer: syz
[  195.057208][ T5894] usb 3-1: SerialNumber: syz
[  195.302050][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'.
[  195.341229][ T9728] delete_channel: no stack
[  195.343520][ T9727] delete_channel: no stack
[  195.477690][ T5894] usb 3-1: 0:2 : does not exist
[  195.591634][ T9735] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  195.899108][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  196.049199][   T24] usb 5-1: Using ep0 maxpacket: 16
[  196.053658][   T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  196.056722][   T24] usb 5-1: config 1 has no interface number 1
[  196.058839][   T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  196.064790][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.067682][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.072490][   T24] usb 5-1: Product: syz
[  196.073805][   T24] usb 5-1: Manufacturer: syz
[  196.075224][   T24] usb 5-1: SerialNumber: syz
[  196.309512][ T5894] usb 3-1: USB disconnect, device number 12
[  196.310960][   T24] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  196.314671][   T24] usb 5-1: 2:1 : sample bitwidth 189 in over sample bytes 3
[  196.325485][   T24] usb 5-1: failed to enable PITCH for EP 0x82
[  196.346735][   T24] usb 5-1: USB disconnect, device number 3
[  196.390664][ T9292] udevd[9292]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.414518][ T5846] udevd[5846]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory
[  196.421885][ T5846] udevd[5846]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory
[  196.443626][ T6900] udevd[6900]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  197.023412][ T9752] loop2: detected capacity change from 0 to 512
[  197.076979][ T9752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.120951][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.227029][ T9765] syzkaller0: entered allmulticast mode
[  197.229816][ T9765] syzkaller0: entered promiscuous mode
[  197.274183][ T9765] syzkaller0 (unregistering): left allmulticast mode
[  197.277654][ T9765] syzkaller0 (unregistering): left promiscuous mode
[  197.513773][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  197.698612][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  197.702794][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.707464][   T10] usb 1-1: Product: syz
[  197.710017][   T10] usb 1-1: Manufacturer: syz
[  197.713975][   T10] usb 1-1: SerialNumber: syz
[  197.732657][   T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  197.857907][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  198.294387][  T972] usb 1-1: USB disconnect, device number 19
[  198.831173][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'.
[  198.964347][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  198.980379][   T10] ath9k_htc: Failed to initialize the device
[  198.984080][  T972] usb 1-1: ath9k_htc: USB layer deinitialized
[  199.083677][ T9809] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  199.086455][ T9809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  199.153024][ T9809] vhci_hcd vhci_hcd.0: Device attached
[  199.379517][ T5896] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  199.438852][ T9818] loop4: detected capacity change from 0 to 256
[  199.443960][  T972] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  199.470775][ T9818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  199.492066][ T9818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  199.500525][ T9818] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  199.504225][ T9818] UDF-fs: Scanning with blocksize 512 failed
[  199.512876][ T9818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  199.523651][ T9818] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  199.600183][  T972] usb 1-1: Using ep0 maxpacket: 16
[  199.641886][  T972] usb 1-1: config 0 has no interfaces?
[  199.652055][  T972] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  199.668556][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.698107][  T972] usb 1-1: config 0 descriptor??
[  199.927126][  T972] usb 1-1: USB disconnect, device number 20
[  199.944228][ T9813] vhci_hcd: connection closed
[  199.959633][   T13] vhci_hcd: stop threads
[  199.972379][   T13] vhci_hcd: release socket
[  199.978063][   T13] vhci_hcd: disconnect device
[  199.990963][ T5896] vhci_hcd: vhci_device speed not set
[  200.378720][ T9837] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1482'.
[  200.588730][ T9835] loop2: detected capacity change from 0 to 32768
[  200.602261][ T9835] lmLogInit: exit(-22)
[  200.608015][ T9835] lmLogOpen: exit(-22)
[  200.608429][ T9851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.808819][ T9860] netlink: 'syz.4.1491': attribute type 1 has an invalid length.
[  200.988549][ T9868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1495'.
[  201.462804][ T9878] loop4: detected capacity change from 0 to 128
[  201.567758][ T9878] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  201.572917][ T9878] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  201.870049][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  202.057557][ T5896] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  202.067386][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.076826][ T5896] usb 3-1: Product: syz
[  202.078768][ T5896] usb 3-1: Manufacturer: syz
[  202.084617][ T5896] usb 3-1: SerialNumber: syz
[  202.111669][ T5896] usb 3-1: config 0 descriptor??
[  202.207209][ T5896] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  202.214970][ T5896] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  202.240155][ T5896] usb-storage 3-1:0.0: USB Mass Storage device detected
[  202.285341][ T5896] usb-storage 3-1:0.0: device ignored
[  202.353368][ T5896] usb 3-1: USB disconnect, device number 13
[  202.822193][ T9053] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  202.829249][ T9901] loop0: detected capacity change from 0 to 256
[  202.849392][ T9901] FAT-fs (loop0): Directory bread(block 64) failed
[  202.852360][ T9901] FAT-fs (loop0): Directory bread(block 65) failed
[  202.855057][ T9901] FAT-fs (loop0): Directory bread(block 66) failed
[  202.857573][ T9901] FAT-fs (loop0): Directory bread(block 67) failed
[  202.859678][ T9901] FAT-fs (loop0): Directory bread(block 68) failed
[  202.862363][ T9901] FAT-fs (loop0): Directory bread(block 69) failed
[  202.864528][ T9901] FAT-fs (loop0): Directory bread(block 70) failed
[  202.866527][ T9901] FAT-fs (loop0): Directory bread(block 71) failed
[  202.868600][ T9901] FAT-fs (loop0): Directory bread(block 72) failed
[  202.872297][ T9901] FAT-fs (loop0): Directory bread(block 73) failed
[  202.933263][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1511'.
[  203.010057][   T33] audit: type=1400 audit(1755041131.565:62): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9908 comm="syz.2.1513"
[  203.373210][ T9938] loop2: detected capacity change from 0 to 512
[  203.427824][ T9941] loop0: detected capacity change from 0 to 1024
[  203.455329][ T9936] loop4: detected capacity change from 0 to 32768
[  203.461027][ T9938] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1527: Invalid inode bitmap blk 4 in block_group 0
[  203.481272][ T9936] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  203.505593][ T9938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.575380][   T33] audit: type=1326 audit(1755041132.135:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9937 comm="syz.2.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  203.602331][   T33] audit: type=1326 audit(1755041132.135:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9937 comm="syz.2.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  203.619324][   T33] audit: type=1326 audit(1755041132.135:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9937 comm="syz.2.1527" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1bd4d8ebe9 code=0x7ffc0000
[  204.250437][ T9053] ocfs2: Unmounting device (7,4) on (node local)
[  204.358620][ T9956] netlink: 'syz.4.1533': attribute type 21 has an invalid length.
[  204.384643][ T9958] loop0: detected capacity change from 0 to 8
[  204.389427][ T9958] squashfs image failed sanity check
[  204.465484][ T9962] openvswitch: netlink: VXLAN extension 11 out of range max 1
[  204.540547][ T9964] loop4: detected capacity change from 0 to 512
[  204.597045][ T9964] EXT4-fs (loop4): 1 truncate cleaned up
[  204.607390][ T9964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.703502][ T9053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.042491][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1547'.
[  205.045325][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1547'.
[  205.065101][ T9988] trusted_key: syz.4.1546 sent an empty control message without MSG_MORE.
[  205.207794][ T9995] usb usb1: usbfs: process 9995 (syz.0.1550) did not claim interface 0 before use
[  206.147837][T10012] overlayfs: upper fs does not support file handles, falling back to index=off.
[  206.156702][T10012] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  206.389454][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.484114][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'.
[  206.662576][T10036] loop2: detected capacity change from 0 to 512
[  206.701686][T10036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.723422][T10036] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.732331][T10040] 8021q: adding VLAN 0 to HW filter on device bond2
[  206.737924][T10036] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  206.757105][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.840186][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  207.000148][   T10] usb 1-1: Using ep0 maxpacket: 32
[  207.003400][   T10] usb 1-1: config 6 has an invalid interface number: 140 but max is 0
[  207.006003][   T10] usb 1-1: config 6 has no interface number 0
[  207.007917][   T10] usb 1-1: config 6 interface 140 has no altsetting 0
[  207.021158][   T10] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= a.2b
[  207.024048][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.026524][   T10] usb 1-1: Product: syz
[  207.027837][   T10] usb 1-1: Manufacturer: syz
[  207.029084][T10053] loop4: detected capacity change from 0 to 256
[  207.029313][   T10] usb 1-1: SerialNumber: syz
[  207.039342][T10053] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  207.303443][   T10] mvusb_mdio 1-1:6.140: probe with driver mvusb_mdio failed with error -5
[  207.313428][T10063] loop2: detected capacity change from 0 to 128
[  207.331175][   T10] usb 1-1: USB disconnect, device number 21
[  209.200339][   T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  209.381179][   T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  209.402428][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.436352][   T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  209.458668][   T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  209.480251][   T24] usb 1-1: Manufacturer: syz
[  209.546853][   T24] usb 1-1: config 0 descriptor??
[  209.551678][   T24] igorplugusb 1-1:0.0: incorrect number of endpoints
[  209.758773][   T24] usb 1-1: USB disconnect, device number 22
[  209.984638][T10109] loop2: detected capacity change from 0 to 8
[  210.000993][T10109] unable to read id index table
[  210.959347][T10129] loop0: detected capacity change from 0 to 4096
[  210.963441][T10129] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  210.980638][T10129] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  210.992557][T10129] ntfs3(loop0): ino=1e, mi_enum_attr
[  211.119006][T10137] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1610'.
[  211.126397][T10137] netlink: zone id is out of range
[  211.128102][T10137] netlink: zone id is out of range
[  211.129712][T10137] netlink: zone id is out of range
[  211.131736][T10137] netlink: zone id is out of range
[  211.133360][T10137] netlink: zone id is out of range
[  211.134918][T10137] netlink: zone id is out of range
[  211.136466][T10137] netlink: zone id is out of range
[  211.138035][T10137] netlink: zone id is out of range
[  211.139869][T10137] netlink: zone id is out of range
[  211.146097][T10137] netlink: zone id is out of range
[  211.286144][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  211.292311][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  211.296590][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  211.301770][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  211.308219][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  211.469969][T10153] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1617'.
[  211.477695][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'.
[  212.388033][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'.
[  213.109330][T10163] loop4: detected capacity change from 0 to 4096
[  213.148462][T10163] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  213.171540][T10159] loop0: detected capacity change from 0 to 32768
[  213.188008][T10159] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1619 (10159)
[  213.194065][T10163] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  213.202207][T10163] ntfs3(loop4): ino=19, mi_enum_attr
[  213.242259][T10159] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.250278][T10159] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  213.255195][T10159] BTRFS info (device loop0): using free-space-tree
[  213.337901][T10159] BTRFS info (device loop0): rebuilding free space tree
[  213.411615][T10159] BTRFS info (device loop0): checking UUID tree
[  213.584155][ T5850] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.995926][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'.
[  214.155237][T10187] loop2: detected capacity change from 0 to 2048
[  214.192424][T10187] EXT4-fs: Ignoring removed bh option
[  214.219412][T10187] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  214.822517][T10201] loop0: detected capacity change from 0 to 16
[  214.847126][T10201] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  214.859378][T10201] erofs (device loop0): mounted with root inode @ nid 36.
[  214.992876][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  215.152036][ T5896] usb 3-1: Using ep0 maxpacket: 8
[  215.159378][ T5896] usb 3-1: config 128 has an invalid interface number: 25 but max is 0
[  215.164382][ T5896] usb 3-1: config 128 has no interface number 0
[  215.173004][ T5896] usb 3-1: New USB device found, idVendor=0cf2, idProduct=76f6, bcdDevice=9b.f5
[  215.178742][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.188788][ T5896] usb 3-1: Product: syz
[  215.202130][ T5896] usb 3-1: Manufacturer: syz
[  215.203592][ T5896] usb 3-1: SerialNumber: syz
[  215.208377][ T5896] usb-storage 3-1:128.25: USB Mass Storage device detected
[  215.424085][ T5896] usb 3-1: USB disconnect, device number 14
[  216.438205][T10222] loop0: detected capacity change from 0 to 128
[  216.457398][T10222] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.462067][T10222] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.068362][T10230] loop2: detected capacity change from 0 to 1024
[  217.080677][T10230] EXT4-fs: Ignoring removed bh option
[  217.090990][T10230] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  217.102987][T10230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.394774][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.404880][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.598896][T10240] macvlan2: entered promiscuous mode
[  217.605488][T10240] macvlan2: entered allmulticast mode
[  217.608837][T10240] veth1_vlan: entered allmulticast mode
[  217.616790][T10240] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  217.784849][T10244] net_ratelimit: 72 callbacks suppressed
[  217.784867][T10244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.982788][T10254] bridge0: port 3(erspan0) entered blocking state
[  217.985196][T10254] bridge0: port 3(erspan0) entered disabled state
[  217.987449][T10254] erspan0: entered allmulticast mode
[  217.993520][T10254] erspan0: entered promiscuous mode
[  217.995914][T10254] bridge0: port 3(erspan0) entered blocking state
[  217.999720][T10254] bridge0: port 3(erspan0) entered forwarding state
[  218.312641][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  218.651838][   T24] usb 5-1: Using ep0 maxpacket: 16
[  218.661722][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  218.665179][   T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  218.668885][   T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  218.678969][   T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  218.683046][   T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  218.686902][   T24] usb 5-1: config 1 interface 0 has no altsetting 0
[  218.689425][   T24] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  218.696975][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.714443][   T24] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  219.067561][   T24] scsi host6: usb-storage 5-1:1.0
[  219.274055][   T10] usb 5-1: USB disconnect, device number 4
[  219.555832][T10310] netlink: 'syz.0.1674': attribute type 21 has an invalid length.
[  219.558862][T10310] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1674'.
[  219.722528][T10320] loop0: detected capacity change from 0 to 512
[  219.747831][T10320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.824241][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.205426][T10344] loop0: detected capacity change from 0 to 4096
[  220.219540][T10344] NILFS (loop0): mounting unchecked fs
[  220.226941][T10344] NILFS (loop0): recovery required for readonly filesystem
[  220.229916][T10344] NILFS (loop0): write access will be enabled during recovery
[  220.264440][T10328] loop2: detected capacity change from 0 to 32768
[  220.265531][T10344] NILFS (loop0): invalid segment: Checksum error in super root
[  220.273419][T10344] NILFS (loop0): error -22 while loading super root
[  220.278351][T10328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1682 (10328)
[  220.335128][T10328] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.338906][T10328] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  220.346202][T10328] BTRFS info (device loop2): using free-space-tree
[  220.490354][   T34] INFO: task syz-executor:5845 blocked for more than 143 seconds.
[  220.493322][   T34]       Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0
[  220.496868][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  220.533870][   T34] task:syz-executor    state:D stack:20920 pid:5845  tgid:5845  ppid:1      task_flags:0x400140 flags:0x00004004
[  220.541348][T10328] BTRFS info (device loop2): rebuilding free space tree
[  220.552868][   T34] Call Trace:
[  220.557835][   T34]  <TASK>
[  220.561332][   T34]  __schedule+0x1798/0x4cc0
[  220.574420][   T34]  ? do_raw_spin_lock+0x121/0x290
[  220.585767][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.593174][   T34]  ? __pfx___schedule+0x10/0x10
[  220.602532][   T34]  ? schedule+0x91/0x360
[  220.604013][   T34]  schedule+0x165/0x360
[  220.605363][   T34]  v9fs_evict_inode+0x170/0x320
[  220.608027][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  220.610755][   T34]  ? __pfx_var_wake_function+0x10/0x10
[  220.613023][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  220.615096][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  220.617781][   T34]  evict+0x504/0x9c0
[  220.619385][   T34]  ? __pfx_evict+0x10/0x10
[  220.621738][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  220.630183][   T34]  ? _raw_spin_unlock+0x28/0x50
[  220.632246][   T34]  ? iput+0x6d8/0x9d0
[  220.633877][   T34]  __dentry_kill+0x209/0x660
[  220.635789][   T34]  ? dput+0x37/0x2b0
[  220.637447][   T34]  dput+0x19f/0x2b0
[  220.638967][   T34]  shrink_dcache_for_umount+0xa0/0x170
[  220.646169][   T34]  generic_shutdown_super+0x67/0x2c0
[  220.648950][   T34]  kill_anon_super+0x3b/0x70
[  220.652463][   T34]  v9fs_kill_super+0x4c/0x90
[  220.654484][   T34]  deactivate_locked_super+0xbc/0x130
[  220.656708][   T34]  cleanup_mnt+0x425/0x4c0
[  220.658581][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.661062][   T34]  task_work_run+0x1d4/0x260
[  220.663013][   T34]  ? __pfx_task_work_run+0x10/0x10
[  220.665078][   T34]  ? __x64_sys_umount+0x122/0x160
[  220.667914][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  220.670424][   T34]  exit_to_user_mode_loop+0xec/0x110
[  220.672700][   T34]  do_syscall_64+0x2bd/0x3b0
[  220.674536][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.676835][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.679366][   T34]  ? exc_page_fault+0x9f/0xf0
[  220.681464][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.683878][   T34] RIP: 0033:0x7fdb6738ff17
[  220.685759][   T34] RSP: 002b:00007fff1a61d718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  220.689148][   T34] RAX: 0000000000000000 RBX: 00007fdb67411c05 RCX: 00007fdb6738ff17
[  220.692609][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1a61d7d0
[  220.695826][   T34] RBP: 00007fff1a61d7d0 R08: 0000000000000000 R09: 0000000000000000
[  220.699055][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff1a61e860
[  220.702505][   T34] R13: 00007fdb67411c05 R14: 0000000000011520 R15: 00007fff1a61e8a0
[  220.705682][   T34]  </TASK>
[  220.707046][   T34] 
[  220.707046][   T34] Showing all locks held in the system:
[  220.709987][   T34] 1 lock held by khungtaskd/34:
[  220.712177][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  220.716310][   T34] 5 locks held by kworker/u10:1/36:
[  220.718499][   T34] 2 locks held by getty/5674:
[  220.725142][   T34]  #0: ffff888106a310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  220.728994][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  220.733519][   T34] 1 lock held by syz-executor/5845:
[  220.735712][   T34]  #0: ffff8880304920e0 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  220.739949][   T34] 1 lock held by syz.3.1026/8660:
[  220.742163][   T34]  #0: ffff8880304920e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  220.746082][   T34] 2 locks held by syz.2.1682/10328:
[  220.748255][   T34] 
[  220.749275][   T34] =============================================
[  220.749275][   T34] 
[  220.755510][   T34] NMI backtrace for cpu 0
[  220.755532][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  220.755547][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.755555][   T34] Call Trace:
[  220.755561][   T34]  <TASK>
[  220.755568][   T34]  dump_stack_lvl+0x189/0x250
[  220.755594][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.755618][   T34]  ? __pfx__printk+0x10/0x10
[  220.755646][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  220.755661][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  220.755683][   T34]  ? __pfx__printk+0x10/0x10
[  220.755703][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  220.755725][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  220.755745][   T34]  watchdog+0xf93/0xfe0
[  220.755764][   T34]  ? watchdog+0x1de/0xfe0
[  220.755784][   T34]  kthread+0x711/0x8a0
[  220.755802][   T34]  ? __pfx_watchdog+0x10/0x10
[  220.755817][   T34]  ? __pfx_kthread+0x10/0x10
[  220.755833][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.755850][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.755864][   T34]  ? __pfx_kthread+0x10/0x10
[  220.755881][   T34]  ret_from_fork+0x3fc/0x770
[  220.755895][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  220.755911][   T34]  ? __switch_to_asm+0x39/0x70
[  220.755926][   T34]  ? __switch_to_asm+0x33/0x70
[  220.755941][   T34]  ? __pfx_kthread+0x10/0x10
[  220.755954][   T34]  ret_from_fork_asm+0x1a/0x30
[  220.755982][   T34]  </TASK>
[  220.755987][   T34] Sending NMI from CPU 0 to CPUs 1:
[  220.819333][    C1] NMI backtrace for cpu 1
[  220.819350][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  220.819360][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.819365][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  220.819382][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 97 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  220.819389][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  220.819397][    C1] RAX: a513e8e33df12800 RBX: ffffffff81968308 RCX: a513e8e33df12800
[  220.819403][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b4408 RDI: ffffffff8be32600
[  220.819408][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  220.819414][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa34230
[  220.819419][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  220.819424][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  220.819430][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.819435][    C1] CR2: 000055556bf8b5c8 CR3: 0000000108110000 CR4: 00000000000006f0
[  220.819459][    C1] Call Trace:
[  220.819465][    C1]  <TASK>
[  220.819469][    C1]  default_idle+0x13/0x20
[  220.819480][    C1]  default_idle_call+0x74/0xb0
[  220.819494][    C1]  do_idle+0x1e8/0x510
[  220.819504][    C1]  ? __pfx_do_idle+0x10/0x10
[  220.819515][    C1]  cpu_startup_entry+0x44/0x60
[  220.819522][    C1]  start_secondary+0x101/0x110
[  220.819535][    C1]  common_startup_64+0x13e/0x147
[  220.819550][    C1]  </TASK>
[  220.823758][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  220.823782][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  220.823801][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.823811][   T34] Call Trace:
[  220.823818][   T34]  <TASK>
[  220.823826][   T34]  dump_stack_lvl+0x99/0x250
[  220.823850][   T34]  ? __asan_memcpy+0x40/0x70
[  220.823867][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.823884][   T34]  ? __pfx__printk+0x10/0x10
[  220.823913][   T34]  vpanic+0x281/0x750
[  220.823931][   T34]  ? __pfx_vpanic+0x10/0x10
[  220.823946][   T34]  ? preempt_schedule+0xae/0xc0
[  220.823964][   T34]  ? preempt_schedule_common+0x83/0xd0
[  220.823985][   T34]  panic+0xb9/0xc0
[  220.823999][   T34]  ? __pfx_panic+0x10/0x10
[  220.824016][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  220.824040][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  220.824065][   T34]  watchdog+0xfd2/0xfe0
[  220.824088][   T34]  ? watchdog+0x1de/0xfe0
[  220.824146][   T34]  kthread+0x711/0x8a0
[  220.824166][   T34]  ? __pfx_watchdog+0x10/0x10
[  220.824182][   T34]  ? __pfx_kthread+0x10/0x10
[  220.824200][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.824215][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.824231][   T34]  ? __pfx_kthread+0x10/0x10
[  220.824248][   T34]  ret_from_fork+0x3fc/0x770
[  220.824265][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  220.824283][   T34]  ? __switch_to_asm+0x39/0x70
[  220.824300][   T34]  ? __switch_to_asm+0x33/0x70
[  220.824315][   T34]  ? __pfx_kthread+0x10/0x10
[  220.824333][   T34]  ret_from_fork_asm+0x1a/0x30
[  220.824361][   T34]  </TASK>
[  220.947570][   T34] Kernel Offset: disabled
[  220.949237][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:13:01  Registers:
info registers vcpu 0

CPU#0
RAX=fffffffffffffff0 RBX=ffffffff90db1436 RCX=0000000000000000 RDX=ffffc90001d6f9c8
RSI=ffffc90001d6ff48 RDI=ffffc90001d6f988 RBP=dffffc0000000000 RSP=ffffc90001d6f860
R8 =ffffc90001d6f9e7 R9 =0000000000000000 R10=ffffc90001d6f9d8 R11=fffff520003adf3d
R12=ffffc90001d6ff48 R13=ffffc90001d6f9d8 R14=ffffc90001d6f988 R15=1ffffffff21b6287
RIP=ffffffff8172e713 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f95cc50fc80 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa4eb8e56c0 CR3=000000002489e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=000000000000002d 0000000000002f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=313a312d352f312d 352f356273752f34
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000070 RBX=0000000000000070 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888106c08237 R9 =1ffff11020d81046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18e3 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f047204f520 CR3=000000012634a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000ff00ff0000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000ff00000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0472012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
