program: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x1, 0x59f6, &(0x7f0000005d40)="$eJzs3X+MHNWdIPBX3T0/POMfYwOLA2E8GLzLwm485pdIstp493aTFbDIEass5kzMgMesE9tYtlnAkGBykAMBEYkSJST5g0QEHYkTIcElOCiEH2dzCQnikkMngi65g/yRE+GwAvhQlMusZrpeT3dN11RPT49/wOcje6rf6+rve1X1urq+r3umAwAAAO8IlXT5qdE3b/qH72+5OfSXJ8q9cYWBdHnd4egdh1pPZenEcv+tOw5edMLf/ziOiz+74Zu/Hrryb3/0YN833tq34eSNv/i7Y6589GPn773nK0+8seDhP75UFDeOp9Mny8mrSQi9PzjwhU/ve+b48bokhFBOBnaHsDhZ8sTiJBNi+PchhA2NdbvjjQe+WF3efEdPwwqLMkGy22W8v7P0puNs18Frzwi//Ju1t/x02Xe+3bXnld2TqyTj6zz05lkbq8WFl9c/viuEMC/9Py6OtqXxwelyTQihr+5x5xX065QW+78yp3xiuuxOl+mwztWfLpdnyqXMetly1JVZ9k3f3Kzl9aPd9YrMn7w5sYnZk9Fs5fUz1i9Ol99Ll6fPMH45/k9CKQmVWvc3J5NjJNQdtyQkExvaWyuXasc2pNufKSeZcilTLndltmui3XSglZOksT6ul6mPp+NKWn9y/bm6iYtz6t+VLnvTJ+pbsRyyN6r6p9yobdeE2K8D0/TlUCjVnYOa1dcOfHow+tO6/mTJlMeMNRHv27f2zhXldU/uH8jpR/JgksZP2oq/6yeL53/0W7dfszQv/uWlNH6prfi/uuDZ1y69/etfzo1/d4xfbiv+mY/1vXrBU7cuz90/B+L+qbQVf+Slp+9aduwVe3L7f2+M39tW/NV7n+1ZcPCxx3P7Pxz3z7y24r/4/g++/MDzj7ySGz/E+H1txV+3d9tnegYPnpYb//G4f/rbGz+v7zn3hcHB3wzlxX8uxl/QVvz7d9/zvvsW3XF+7vFdE/fPQFvxLzz10VvmH3zkpLxzZ3Jvp145Ad6ZjkmvsW5Ly+3mmbNVly98aahSveabn/5f0MmGMhef4+0s7GR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghHHfGf/3Q//7IwKuVtNyT3nixVF3G+u4QknkhhB07R7bv3LT1qqGPXX3N9q0jm4dGdg6Nbt25/fqhs/9iaPvots0j12/61LzJ+EtCUl0mJ01pu2dsbKw00FgX2/t3p+755Yrz/s9vQxg+7ueDldz+r7xny33HNvmZkawe+8CWay76+TlfS7drIO3XQJN+jY2NjYWcfv3fS/5w3+cO/Pq0EIb/ZLp+Pf3iX/+woUMTFZNxUqWeUO1QT9LXtB+1Xqf9ifursnHT5tHh6ffv+OPLOdvx72945fcbr/vsH6r7tzd3O1rcv/NWj20ufXHthf//izdWK4r6dbiOe9H+jlsR+xf3X2+6vxem27UwZ7sqOdt1608ff/4HJ9z+xu4wXHl92dS2i7arKx0AXcm7Wmo3ttCXLG6o703Xj0c8Pm7lzi3bVu64ftdfbtoyctXoVaNb37vq7FXnDp9z7jkrJ7Z8ZYe3P7b/py1u/1yOp650eWxY9K+7vxd/tjaeivpVtD/G+1W8P+p7lPf867v4059/7z1PXVStKBrnce3a+SRd9o0f51WhbrxN3V/NtqtoP4QQhprth9feOD8c/z823VJ0Hqo/MvU/6/Wny9997byvLv2r6u1Dcp6v71Cb5/lnlqe9nuzPxP7qTY/H2BGwf6vjv9bT6vaEcrpd/U37teqZp7ru3P/bT9T6190drhvZuXP7qurP+WlP5ycnNu1XtjZu17KJn+WQ7pZQG6ZNxmuYeI5X+5c9f8bVs3u1P72vP1nSdLuy4n371t65orzuyf15ezp5sNrivLCgukzenbPm5swDy7UON2v/SHj+NR0fX6huZ974GPzQVx/+yMPfPXvK+Diz+rNou5Kc7frO8/d//huf/Y/f7dx2zf/rZwd+9z//ZUW14mg5r3wo9jrtT1J/XjkzhKLn37LQfDtyn3+l5ttT9PzLtjO5fuaORdXFUKa6P5Tber6e+Vjfqxc8devy3OfrgVafrzc2lMoFz9dWx8/Lad1cjZ/s8yupNPZj7p5fDQMlWT32o9uO2f3ETWtOqFYUjeva2s3G9Vkt5B852/XDS18YvHroP/z3zp03vvkXD63/xcjqT1Yr2j9vxL505rj3pvu3N2f/1nod8876/fueK6/evKFaf+Re/6bLgvwnnkp2XL/r4yObN49u39HadrX6ehrbye7ldl9P49ltScF2laZs19zdaGV/tfp8i/3f0Pb+any+9YekrdeFXT9ZPP+j37r9moEpj0oburyUxi+1Ff9XFzz72qW3f/3LufHvjvErbcUfeenpu5Yde8We3Pj3Jmn83rbir977bM+Cg489nht/OPZ/XlvxX3z/B19+4PlHXpkSPx04SYjx+9vb/6/vOfeFwcHf5Pb/uSRtZ/waKYSH3jxrY7WcTMwXxHE63o+u+sfVzSek5SRTLmXK5fpyqTrXWmugnCSN9XG9tP7kur4088859fEqrHdpdflWLIfsjenrD7/uhlKp7tzfrL7oOhUA4O0uvv8fr0Hj+/+j6YVS/kwDTJptHrY0J27Mwybncxqv95em8ePj4zzg4HvC8Pjy5qHqhf5M30eIz4fsPGds57RTGmO0O89ZNP++PFOO/arOl1fq8tDU1LymElqYf5/aTs78eyqz+cXz40O3TenWUN28Vfb4daUzZs0+75Dpb2U8Qt74yM6Lxc9zDC4Ma8Y3LWlxfGQ/RxOPQ/wcTXdde+NOyJw42/0czWzHR+z2NONjosvF729MPX5hmv07efyaR8sevxkc797x9ef6/dkOzBs2PaUdunnDuX0/zLxkTvz0CXakzxvG+rgdlRbnEz+SU9+p+cR4uoj9OjBNXw4F84nA21XM/+NrxHj+P34B/v8y6xVdh2avGmO83M8JlZv3pyjvmPo5vb62XsfX7d32mZ7Bg6flXuc83urnfrY1lPoKPvdTtB9XZMqF+zFngqYo38u2U7Tfs5/L6A8L2trv9+++5333Lbrj/Nz9vqb6Qlq83z/fUFpQsN+PgnyheXz5wjsiX2h9/izsHmtj/uyw5SPpB5/mKh/5p5z6meYjfVNu1LZrwlGXj3Qd2n4BAEePmP/X3j9L8///FVdIryOK8tbTM+UYLzdvzbk+yctb/zFdXpdZvz/9jYqZXpdfeOqjt8w/+MhJuXnLva3mof+poTRQmIfOLm/OzSPWdObz4rl5RC3Pml2emNv/Wp44uzw9N34tT59dHp27f2p59HhmNZ68tDcPkBu/Ng9wpOa5y0JreW7BfF2msVhsdb5urj+Hctjy6PTXZ2eRR89r2KC3xhqKF+ds90zz6P4pN2rbNUEeDQBweMX8P17Gxfz/qcx6s32fPTcv6NB1e/bvgdTiP3eo8srZvP+b+2eLOvb+b3HeOtd5/VzPSxypeXGr7//Ocl5ofU782rzQ3M6THcV58bTvL7ecF6eNvi3z4rptkRcDABzdYv4f3xzKz/9nl580y9+6GvKTIzk/r70vO+W3FuTn75T8/Gif/5L/z2n+H8she6PqqM7/vS8OAPC2EfP/+GuP8e///Ze0nP279UdJnj41vjz9bZynv/Y2ytM7P88W5vZzALuDeYDp5wHqPnlvHgAAgMOhayJTmvp79pely+zv2ef9Xv6lOeu3qpJeHl+xc/vo6Pprtm0Y2Tm6fuvVG0Z3rL92+6adO0e3VtdrM2/8Wm+aN+a+f5nmjV2hku6PKatMXIpn87ZF6d9DWJTz9xCy68ewJ07cmPr3ELLNziv4OwKTx6/5dmXbzzt+pWnWnzo+Lss93nnx/zln/ah2/K/8lzPXb9yxftPWTTs3jWzetGu0cb3xrLVvBt+bGXfLjL4vNfNjitLMv7+zM/0oTelHV7o/8r6fPcn0Y3Hak8V533+Q0+8f/7fP/eupY394IITh48rvntX+S1aP/edLRv9x5/6fbxvvf2na/lfX7N4W92fR95XWIsfvg43fa7/56h07z9h49TVbs98o2Z44n1GqledoPiN9+pdbnJ9YF7K/4F81088plKfcODK1PD8BAECD+P5/vJ6N7x9+Nr2AivWt5+mze/84N08fLszTJ2S/l6woT8+uH7e31Ty9d5Z5erb9ojy92frN5nHy8u68+P+Us/5MtT5OZvc5j9xxcnlr4yT7fQZF4yS7/kzHSTLLcZJtv2icNFu/2TjJO+558T+cs36e1sfD7D6Xkzse7m5tPPx5ppw7HrqbP36m46E0y/GQ7W/ReGi2frPxkHd88+JflLN+qxrHx/jAmBgXo+uvvXr7x+vW6w+liXR/rr7/Yvb9m9vv/2hX6/2f2899zX3/5/b3v+a+/7P7XFlu/5+b3UxY6/2f2+93adchm69NXxeKPn9WNI+7Nqd+pvO43VNuHJnM48LhE/P/+HZPzP/vSJedfhvo6P+etOzrXHdL8X2PWWeuY2qv56XJdr2eHzm8ngMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pqeydGK5/9YdBy864e9//KnRN2/6h+9vufnPbvjmr4eu/NsfPdj3jbf2bTh54y/+7pgrH/3Y+Xvv+coTbyx4+I8vFQYemPhZOT0t9oaQvJqE0PuDA1/49L5njh+vS0II5WRgdwiLkyVPLE4yEYZ/H0LYUOtn450PvXnWxvHlzXf0NNQvygTJblfoL8f+1PczhOsKt4ijUG86znYdvPaM8Mu/WXvLT5d959tde17ZPblK0ls3nkJYeHn947tCCPPS/+PiaFsaH5wu14QQ+uoed15Bv05psf8rc8onpsvudNlfECfevzxTLmXWy5ajrsyyr6C92crrR7vrFZlfX+iZPK6dktfPWL84XX4vXZ4+w/jl+D8JpSRUat3fnEyOkVB33JKQTBzL3lq5VDu2IR3XmXKSKZcy5XJXZrsm2k0HWjlJGuvjepn6eDqupPUn15+rm7i4dqtxrXfF2vSJ+lZ2rUzQ/ik3atvV0K8D0/TlUCjVnYOa1dcOfFe13J/W9SdLpjxmrIl43761d64or3ty/0BOP5IHqy31T4ykmcff9ZPF8z/6rduvWZoX//JSGr/UVvxfXfDsa5fe/vUv58a/O8YvN8S/ucX4Zz7W9+oFT926PHf/HIj7p9JW/0deevquZcdesSe3//fG+L0zjj/+PF2999meBQcfezy3/8Nx/8xrq/8vvv+DLz/w/COv5MYPMX5fW/HX7d32mZ7Bg6flxn887p/+9sbP63vOfWFw8DdDefGfi/EXtBX//t33vO++RXecn3t818T9M9BW/AtPffSW+QcfOSnv3Jnc26lXToB3pmPSa6zb0nK7eeZs1eULXxqqVK/55qf/F3SyoYzxdhbOYXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN6efnbj2Zdd8oEPr60kISQ564w1Ee8rd69ePdRGuyMvPX3XsmOv2FNft7SNOAAAAECxmIeXajW9YWm4NpkXTmy6fpwjODGWksb67BxCjJOdI2g3TqlDccodilPpUJyuDsXp7lCcng7F6S2I0xtaizNvmjiV8VHRYn/6pu1P63H6OxRnfofiLOhQnIUdirOoQ3EGpo3T+jhc3KE4SzoU55gOxTm2Q3GO61CcP+lQnOM7FCc7pzzTcbggXfOEvDgTN8qFcSpJuXZHs/n049N2TpplO/0F7Swoej1usZ15LbZzSuZxpRm209tiO386y3aSFtv581m2UypoJ47b67L9i+3EUovj//oOxdnVoTg3dCjOjYVxKi3F+USH+vPJDsW5aZZxAFoV8//JfG8g9FT+KvSlZ5zsLEDMd5dN/Jz6epd3Qorx3p2p7y6Kl03UM/GWzbR/2QmETLzlmfquhniVWj4yTbze+ngrMncWbm92QiHTv9Mz9T1F8bITCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwh35249mXXfKBD68NSRj/19RYE/G+cvfq1UNttLtv7Z0ryuue3F9f11NpIxAAAABQKObhXbWa3tBTWRV6ku6G9XrTeYDetFweqC4HF4Y148tkqDRR7ksWT/u4Svq4lTu3bFu54/pdf7lpy8hVo1eNbn3vqrNXnTt8zrnnrNy4afPocPVnCD0F8UIIE9MPO67f9fGRzZtHt++oVmb7vzR93NK0nKSPG3xPGB5f3pz2f0lBe6Up7c3djeKjBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/xr7dhchVng8Af87M7My4mn/2j19jMOsQo9hWWrVr0VbcA4UKfgQXoczabiXUSKWrCZqItVMNVK3SUlACIcWLplipVnrjR5VSPwhYrG2gm4ai0nrRXrRoa4kSaIlMye6c2ZnZmcx2Ktmov9/FOWfe93ne57xDCDznzAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcXXP1iZna5NT0aBKR9Ilp9JDN5YtpWh2i7pef3fL90vjBc9rHSoUhFgIAAAAGyvrwkdZIOUqFfOTjtPlP66JtIhb7fgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KNnrj4xU5ucmj4+iUj6xDR6yObyxTStDlH3jXce/8yr4+N/bR+rDLEOAAAAMFjWh+daI+WoxJkxkpzWEZc9G1jTld8dl62zdplx3c8O+sWducy4s5cZ97EBcRua59sDAAAAPviy/r/QGhmLUmFV3/7/CH19sr0t7oyuuHzzPMxvBQAAAID/Tdb/l1ojlSgVKq1+fdB7/KzfX9cVl+UPem+f5Z/VJ3/Q+/yrmufu9/T9/pYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFh5c/WJmdrk1HQ+iUj6xDR6yObyxTStDlH3gudG/37FnnvWtY+VCgPTckOUAgAAgI+8rA9fbL3LUSqMxkgcP9/3j1/20JNffPLpiYhYaPOLxbh949att1ywcMzizn9lz8j3XnrrW0vizl84rtgGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA981cfWKmNjk1fVwSkfSJafSQzeWLaVodou7rn/vCnx/d/8yb7WOVIdYBAAAABsv68MXevxyVKEYxTpn/1N7rH5bruuj3zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD48Lj1G3d8fePs7KZbXBy9i1IcE7fhwkX/i5X+nwkAAHi/nRFJNNr8qzHYqVev9F0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHgrn6xExtcmq6nEQkfWIaPWRz+WKaVoeomz67t7Tq4HMvtI9VhlgHAAAAGCzrwxd7/3JUYiRG4uT5T72eCcz3/2NH8SYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAY8pcfWKmNjk1vSqJSPrENHrI5vLFNK1GlP7buo9s3/XZh1d/9/L2sVJhmB0AAAAAg2R9eLE1Uo5S4eNRitObn2c7E5J889z7ucBi3paOtNFl59U78vLLzruva2eF5m4W8srZemML51ZedWletS2vEq3y1Y682NGRtWrAfQYAAACsoKz/X3yBPxalQqmtz/1JR/yYPhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6GOuPjFTm5yaTpKIpE9Mo4dsLl9M0+oQde/4zf+f8JWf3r+tfawyxDoAAADAYFkfvtj7l6MSa+P/Yu183x9jnfFZ3D9qhx5+8J9/OSfivFP2jRe6l/1hdvGr1y99vvsQkeuMzkWsbtZL+tT79e8evG1949CjEeednD99Sb3oqpePiLZ6nUumjadqm67a+tK+LQO+HAAAAPiQyPr/kdbIWJQKN/ft/7POe0D/3zLfgK++bfvPT2oemx15V0ZurFkv16fe59c//qezLvrbW4f7/yPV+9Sumx4+qaPgwkiXJG1M3rRtw74Ld+eyXS/Uz3fVz76XL33zzX/fcPsDhxbql6PcHF9T6FV/6XFRoxQRx6WN2dzO6Svf21nvrF/os/97fvvC/l+uuf/dw/XfOWO0Vf/sI+y/d/15x6WN0Wvu3XHxrj0bOutHRLVX/bffvTxO/cONd3fvf7Rr4dW3FaPz+184dknSxivrDuy+6KHKJZ31k6762ff/s/2P7PjxA995Oquf/VbknDO763dXzurnuuq/fN+J21+86+o1nfVzffb//LWvjm+ufvv33fu/vmPVQt+7WLr/x8594rrXNqZ3dk8dyfy/HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA+UufrETG1yajqXRCR9Yho9ZHP5YppWh6j7xhV73772/h/9oH2sMsQ6AAAAwGBZH77Y+5ejEsUoxuh83/9UbdNVW1/atyXGFmaT5rkwu/nWrZ+4YfO2m69foTsHAAAAlivr/wutkbEoFdbHSLP/n7xp24Z9F+7OZf1/Luv/b7hxdtN50Yp7+b4Tt79419VrWs8JIuZ/FlA+HPfpxbjLLt07duCPXzurZ9wFi3GvrDuw+6KHKpdkcdEed360nk88du4T1722Mb2zdX/tcZ/86ubZ5uOJbN3Ra+7dcfGuPRta+2ieR5vrZnGzuZ3TV763s57F5ZvncnPfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBSc/WJmdrk1HTkI5I+MY0esrl8MU2rQ9S9cv0v7j7h4DNr28dKhSEWAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7DDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbrJzSOKo4D+Hu7G7PNJm3SClbFNK2KUg8WBRG9qKhIK1LwVClSbe1BFAQRpR5MpRVLVbwIVi9FVFCjFBRsLJZWScV/xYsHFRSqB6EUA9oQPFjJ5s1mM9lx7VQF9fOB5e17M/Od38y8fckAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL9Kb215sz2y88Gp28676ZPH7zn52C3v3b/9kkdf/2Fk8w0f7+t7ZXpiy8qtX9+4bPOBe9eO73nx8C8D7/x2rGvwI7PN6tSthxBPxBDq708+98TEp+fMjMUQQjUOjoYwFJceHoq5hDW/hhC2tOqcv/Htk1dunWm37+6dN74kF5K/rtCoZvXMGpxfL/8t9TTPtk09fFn49voNOz5f8dabPWPHR+d2ifW2+RTC4k3tx/eEEBalz4xsti3PDk7t+hBCX9txV3ep68I/Wf/lBf3zU3tWahtdcrLtq3L9Sm6/fD/Tk2v7upzvTBXVUXa/bvpz/fxidKaK6szGh1L7bmpXt+9U7Z5fzT4xVGKotcq/L87NkdD23GKIzWdZb/UrrWcb0vXn+jHXr+T61Z7cdTXPmyZaNcb549l+ufFsOa6l8ZXta3UHtzcrPbVg/NzU1tMPdTrrh/yXWY0FX1rX1ZTVNfkHtfwTKm1rUKfx1oNPD6ORxhpx6YJjTnWQbZvY8NTF1Y0fHBksqCPuiyk/lsrf9tlQ/51v7HpoeVH+pkrKr5TK/27d0Z/u2PXSC4X5z2b51VL5VxzsO7Huw52rCu/PZHZ/aqXy7zr20dMrzr57rNOzbubvzfLrpfKvGz/aOzB18FBh/Wuy+7OoVP431978/Wtf7j9emB+y/L5S+RvHH3imd3jq0sL8Q7M/hUZzhpaYPz+PXfXV8PCPI0X5X2T3f6BDfuya/+ronmteXrJ7beH8XJ/dn8FS9d960YEd/VP7LyhaO+Pev+ovJ8D/07L0P9aTqT/znlkLp/+eeXqm00I/95bS9r7w/Ehtdkt/+gyUP1FXM+dZ/DfmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOztwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FQAAAD//wy/Ico=") syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000000000e) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x2000}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) read$FUSE(r3, &(0x7f0000006540)={0x2020}, 0x2076) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffe000/0x1000)=nil}) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000000)) [ 68.081256][ T5337] Bluetooth: hci0: command tx timeout [ 68.417818][ T5357] loop0: detected capacity change from 0 to 32768 [ 68.648312][ T5357] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 68.648326][ T5357] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 68.660902][ T5357] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 68.664048][ T5357] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 68.667768][ T5357] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 68.667768][ T5357] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 68.740948][ T5357] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0: (unpack error) [ 68.740983][ T5357] invalid variable length fields, deleting [ 68.748918][ T5357] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0: (unpack error) [ 68.748929][ T5357] invalid variable length fields, deleting [ 68.780065][ T5357] bcachefs (loop0): accounting_read... done [ 68.783482][ T5357] bcachefs (loop0): alloc_read... done [ 68.786212][ T5357] bcachefs (loop0): snapshots_read... done [ 68.790971][ T5357] bcachefs (loop0): check_allocations... [ 68.795609][ T5357] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.795634][ T5357] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 68.820618][ T5357] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 68.820636][ T5357] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 68.833581][ T5357] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.833596][ T5357] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 68.844798][ T5357] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 68.844813][ T5357] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 68.857217][ T5357] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.857227][ T5357] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 68.868169][ T5357] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 68.868185][ T5357] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 68.881050][ T5357] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.881066][ T5357] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 68.892693][ T5357] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 68.892703][ T5357] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 68.903278][ T5357] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.903288][ T5357] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 68.915424][ T5357] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.915439][ T5357] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 68.927421][ T5357] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 68.927432][ T5357] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 68.939987][ T5357] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 68.944232][ T5357] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 68.951875][ T5357] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 68.956236][ T5357] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 68.965034][ T5357] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 68.972932][ T5357] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 68.978040][ T5357] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 68.982529][ T5357] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 68.986943][ T5357] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 68.991871][ T5357] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 68.996609][ T5357] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.001107][ T5357] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 69.006169][ T5357] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.011340][ T5357] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 69.016516][ T5357] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.022112][ T5357] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 69.026300][ T5357] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 69.030989][ T5357] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 69.035682][ T5357] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 69.041822][ T5357] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 69.047157][ T5357] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 69.047169][ T5357] Ratelimiting new instances of previous error [ 69.055398][ T5357] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 69.055408][ T5357] Ratelimiting new instances of previous error [ 69.073280][ T5357] done [ 69.076049][ T5357] bcachefs (loop0): going read-write [ 69.090677][ T5357] bcachefs (loop0): journal_replay... done [ 69.148437][ T5357] bcachefs (loop0): check_extents_to_backpointers... [ 69.150282][ T5357] bcachefs (loop0): scanning for missing backpointers in 4/128 buckets [ 69.158076][ T5357] done [ 69.162090][ T5357] bcachefs (loop0): check_inodes... done [ 69.166581][ T5357] bcachefs (loop0): resume_logged_ops... done [ 69.170975][ T5357] bcachefs (loop0): delete_dead_inodes... done [ 69.176427][ T5357] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 69.182449][ T5357] bcachefs (loop0): check_extents_to_backpointers... done [ 69.186600][ T5357] bcachefs (loop0): check_inodes... done [ 69.191298][ T5357] bcachefs (loop0): resume_logged_ops... done [ 69.194524][ T5357] bcachefs (loop0): delete_dead_inodes... done [ 69.209980][ T5357] bcachefs (loop0): done starting filesystem [ 69.436351][ T5358] ------------[ cut here ]------------ [ 69.438759][ T5358] kernel BUG at fs/bcachefs/btree_trans_commit.c:348! [ 69.442863][ T5358] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 69.445808][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.449715][ T5358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.454172][ T5358] RIP: 0010:__bch2_trans_commit+0x86e5/0x8870 [ 69.456988][ T5358] Code: 90 fd eb 0c e8 bc a1 90 fd eb 05 e8 b5 a1 90 fd 49 bd 00 00 00 00 00 fc ff df 4c 8b 64 24 48 e9 e1 af ff ff e8 9c a1 90 fd 90 <0f> 0b e8 94 a1 90 fd 90 0f 0b e8 8c a1 90 fd 90 0f 0b e8 84 a1 90 [ 69.465234][ T5358] RSP: 0018:ffffc9000fe17540 EFLAGS: 00010287 [ 69.467903][ T5358] RAX: ffffffff842f19a4 RBX: ffffffff842edb75 RCX: 0000000000100000 [ 69.471308][ T5358] RDX: ffffc9000e53b000 RSI: 00000000000035a2 RDI: 00000000000035a3 [ 69.474551][ T5358] RBP: ffffc9000fe17830 R08: 0000000000000000 R09: ffffffff842edb75 [ 69.478018][ T5358] R10: dffffc0000000000 R11: ffffed100a5d9309 R12: ffff88805610c020 [ 69.481577][ T5358] R13: dffffc0000000000 R14: ffff88805610e4d8 R15: 0000000000000001 [ 69.485087][ T5358] FS: 00007f6a5d85c6c0(0000) GS:ffff88808d20f000(0000) knlGS:0000000000000000 [ 69.489090][ T5358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.492118][ T5358] CR2: 0000200000006540 CR3: 0000000042e0e000 CR4: 0000000000352ef0 [ 69.495665][ T5358] Call Trace: [ 69.497228][ T5358] [ 69.498633][ T5358] ? bch2_setattr_nonsize+0xcf5/0x10e0 [ 69.501240][ T5358] ? __pfx___bch2_trans_commit+0x10/0x10 [ 69.503814][ T5358] ? __asan_memset+0x22/0x50 [ 69.505892][ T5358] ? __bch2_trans_kmalloc+0x410/0x9d0 [ 69.508380][ T5358] bch2_setattr_nonsize+0xcf5/0x10e0 [ 69.510810][ T5358] ? __pfx_bch2_setattr_nonsize+0x10/0x10 [ 69.513293][ T5358] ? __bch2_bkey_get_val_typed+0x121/0x390 [ 69.515932][ T5358] ? __bch2_inode_peek+0x11f/0x370 [ 69.518337][ T5358] ? setattr_prepare+0x1e7/0xac0 [ 69.520685][ T5358] ? bch2_setattr+0x186/0x220 [ 69.522868][ T5358] ? __pfx_bch2_setattr+0x10/0x10 [ 69.525416][ T5358] notify_change+0xb36/0xe40 [ 69.527419][ T5358] vfs_utimes+0x3fb/0x570 [ 69.529335][ T5358] ? __pfx_vfs_utimes+0x10/0x10 [ 69.531424][ T5358] ? user_path_at+0x44/0x60 [ 69.533269][ T5358] ? kmem_cache_free+0x18f/0x400 [ 69.535411][ T5358] do_utimes+0x1bd/0x2a0 [ 69.537111][ T5358] ? __pfx_do_utimes+0x10/0x10 [ 69.539256][ T5358] ? rcu_is_watching+0x15/0xb0 [ 69.541723][ T5358] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 69.544423][ T5358] __x64_sys_utimensat+0x14f/0x230 [ 69.546741][ T5358] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 69.549144][ T5358] ? do_syscall_64+0xbe/0x3b0 [ 69.551085][ T5358] do_syscall_64+0xfa/0x3b0 [ 69.553156][ T5358] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.555367][ T5358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.557778][ T5358] ? clear_bhb_loop+0x60/0xb0 [ 69.559651][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.562186][ T5358] RIP: 0033:0x7f6a5c98ebe9 [ 69.563816][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.572321][ T5358] RSP: 002b:00007f6a5d85c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 69.575970][ T5358] RAX: ffffffffffffffda RBX: 00007f6a5cbb6090 RCX: 00007f6a5c98ebe9 [ 69.579494][ T5358] RDX: 0000200000000040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 69.582818][ T5358] RBP: 00007f6a5ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 69.585922][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.589204][ T5358] R13: 00007f6a5cbb6128 R14: 00007f6a5cbb6090 R15: 00007ffeb0650658 [ 69.592685][ T5358] [ 69.594078][ T5358] Modules linked in: [ 69.596271][ T5358] ---[ end trace 0000000000000000 ]--- [ 69.604702][ T5358] RIP: 0010:__bch2_trans_commit+0x86e5/0x8870 [ 69.607962][ T5358] Code: 90 fd eb 0c e8 bc a1 90 fd eb 05 e8 b5 a1 90 fd 49 bd 00 00 00 00 00 fc ff df 4c 8b 64 24 48 e9 e1 af ff ff e8 9c a1 90 fd 90 <0f> 0b e8 94 a1 90 fd 90 0f 0b e8 8c a1 90 fd 90 0f 0b e8 84 a1 90 [ 69.617592][ T5358] RSP: 0018:ffffc9000fe17540 EFLAGS: 00010287 [ 69.620742][ T5358] RAX: ffffffff842f19a4 RBX: ffffffff842edb75 RCX: 0000000000100000 [ 69.624195][ T5358] RDX: ffffc9000e53b000 RSI: 00000000000035a2 RDI: 00000000000035a3 [ 69.627635][ T5358] RBP: ffffc9000fe17830 R08: 0000000000000000 R09: ffffffff842edb75 [ 69.631863][ T5358] R10: dffffc0000000000 R11: ffffed100a5d9309 R12: ffff88805610c020 [ 69.635542][ T5358] R13: dffffc0000000000 R14: ffff88805610e4d8 R15: 0000000000000001 [ 69.639635][ T5358] FS: 00007f6a5d85c6c0(0000) GS:ffff88808d20f000(0000) knlGS:0000000000000000 [ 69.643754][ T5358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.646764][ T5358] CR2: 00007f6a5d83afc8 CR3: 0000000042e0e000 CR4: 0000000000352ef0 [ 69.650759][ T5358] Kernel panic - not syncing: Fatal exception [ 69.653711][ T5358] Kernel Offset: disabled [ 69.655618][ T5358] Rebooting in 86400 seconds..