last executing test programs: 8m41.136443248s ago: executing program 3 (id=10): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x2, 0x401, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 8m37.334694273s ago: executing program 3 (id=14): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x482, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r6, &(0x7f0000001480)=[{&(0x7f0000000200)=""/59, 0x3b}], 0x1, 0x7fff, 0x9) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) io_uring_enter(0xffffffffffffffff, 0x1628, 0xf1c1, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r3, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_clone3(0x0, 0x0) sched_setattr(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffec4) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 8m29.036619203s ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd25, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) socket$netlink(0x10, 0x3, 0x8000000004) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xe0a0ffd997287dd5}, 0x40080) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@cgroup, r7, 0x12, 0x2, 0x0, @void, @value=r7}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) 8m26.526724342s ago: executing program 3 (id=24): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="18"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8m25.028354494s ago: executing program 3 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='adfs\x00', 0x1) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240488d5}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', 0x0}) 8m23.152392715s ago: executing program 3 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 8m7.010804152s ago: executing program 32 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 1m7.266816827s ago: executing program 2 (id=535): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000280)=0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 1m5.917564389s ago: executing program 2 (id=539): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) semget$private(0x0, 0x6, 0x0) 1m5.768974554s ago: executing program 2 (id=542): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e720c810102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x10, 0x4, "fb5b1ff5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m3.354081709s ago: executing program 2 (id=550): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x1000c00, &(0x7f0000002240)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@nodiscard}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x8}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x621f, &(0x7f000000c5c0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) 1m1.128436139s ago: executing program 2 (id=555): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) 1m0.107369081s ago: executing program 2 (id=561): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000083512158240000102030109026e000301ff8007080b0002012030230904000000010130000a2401100a000900000009040100fbffffff000904010101010230000905010960"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 59.528625709s ago: executing program 33 (id=561): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000083512158240000102030109026e000301ff8007080b0002012030230904000000010130000a2401100a000900000009040100fbffffff000904010101010230000905010960"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 13.812087418s ago: executing program 1 (id=747): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 13.552189136s ago: executing program 1 (id=750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 13.003794903s ago: executing program 1 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.487347367s ago: executing program 5 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0xffff, 0xfffffffffffffffc}) 6.04728536s ago: executing program 5 (id=779): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000031200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) 5.75001528s ago: executing program 4 (id=781): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x5c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x65}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 5.325000943s ago: executing program 0 (id=783): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0xffffffffffffffff, 0x0) 5.123380329s ago: executing program 0 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005980)={0xc, 0x13, &(0x7f0000005880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.852101788s ago: executing program 0 (id=785): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f626172726965722c747970653de6c0539c2c6e6c733d63703933322c706172743d3078303030303030303030303030303030332c63726561746f723d84913b122c706172743d3078303030303030303030303030303030362c6769643d", @ANYRESOCT=0x0, @ANYBLOB], 0x1, 0x61b, &(0x7f0000000680)="$eJzs3c1vXFfdB/DvHY8dO4+e1G2TNqBKWI1UEBaJ7VEKZuOAEPKiQlVZsLYSR7EySSt7itwKIfO+YMOif0BZeINYIbGPVBasYNetl5WQ2HRliUXRvXPHmTqTyZi4ngl8PtG555x77j33nN998dyxIgf4n7W+mOaDFFlffGO3rB/st9oH+617vXKSc0kaSbObpbifFB8lN9JN+VK5su6ueNxxPthafevjTw8+6daadaq2bwzbbzR7dcpCkqk6P63+bj51f8XRDMuAXekFDsbts0fsnWT3p7xvgUlQJFNzA9bPJ+eTzNafA1I/HRpnPLxTd6KnHAAAAEy+fw1a+dxhDrObC2c/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHj2tKa6eZFMdbMqNXrlhRS9v/8/U69LXX6mPRj3AAAAAAAAAADgFHzlMIfZzYW6WqSofuf/alW7WC3/L+9mJ5vZztXsZiOddLKd5STzfR3N7G50OtvLI+y5MnDPlTOaMAAAAAAAAAA8y5qPbfl51o9+/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOhSKa6WZUu9srzaTSTzCaZKbfbS/7eK0+sP3SeuMmDMxkIAAAAjNdzhznMbi706p8V1Tv/S9V7/2zezf10spVO2tnMreq7gO5bf+Ngv9U+2G/dK9Oj/X7nnycaRtVjut89DD7y5WqLudzOVrXmam7m7bRzK41qz9Ll3ngGj+tn5ZiKtbW1v06vra2NOLJbdV7O/Hd1fmbODV79/9VyvorI9FFEluqxldF4fngkTnh2jh9pOY2jb34ujhjzyojHO1/n5Xx+fdYxH+p4JFb6rr6Xhkci+eqf//ijO+37d+/c3lmcnCkNM/34puORaPVF4uX/vkgMsVRF4tJRfT3fzw+zmIW8me1s5cfZSCebWcj3qtJGfT2Xy/nhkbrxudqbTxrJTH1euk/Rk43p1WrfC9nKD/J2bmUzr1f/VrKcb+Z6rme17wxfGuGub5zsrr/ytbowl+Q3dX7Mb0fr6rSVcX2+L679z9z5qq1/zcMovXD6z8bml+tCeYxf1PlkOB6J5b5IvDg8Er+vljvt+3e372y8M+LxXqvz8j761UT9lCivlxfKk1XVPn91lG0vDmxbrtouHrU1Hmm7dNT2pDt1pv4M92hPK1XbywPbWlXb5b62QZ+3AJh4579+fmbuH3N/m/tw7pdzd+bemP3uuW+de2Um03+Z/nZzaeq1xivFn/Jhfvrw/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjP7bz3/t2NdntzW2EsheZkDGMshekkp9BP7y8SjnE6sxl7ME+9MPy5sXcWDyfgC3Wtc++dazvvvf+NrXsbvZt6dWn1+uuta7e32ptL3eW4Rwl8ER7+0B/3SAAAAAAAAAAAAIBRncV/Jxj3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBn2/pimg9SZHnp6lJZP9hvtcvUKydFvWUzSSNJ8ZOk+Ci5kW7KfF93xbHup3qFD7ZW3/r404NPHvbV7G3fGLDfCe3VKQv1MRdOsb+bT91fcTTDMmBXeoGDcft3AAAA///6Xgjb") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0xb) rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.442840971s ago: executing program 0 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xb) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000b000040000000000000000000000000000014"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) open(0x0, 0x14927e, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) 3.444886032s ago: executing program 5 (id=787): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000280)=0x8) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 2.952169107s ago: executing program 4 (id=788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7b8a832bbcf7dbc7247f2288aa14e69d0", 0x11) 1.925150269s ago: executing program 1 (id=789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) unshare(0x22020600) ioctl$SIOCSIFHWADDR(r0, 0x8943, 0x0) 1.820528912s ago: executing program 0 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.732026205s ago: executing program 1 (id=791): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x6218840, &(0x7f0000000040), 0x1, 0x9877, &(0x7f0000012f80)="$eJzs3QWcpWXBuP9Z2IUlBRTBAqTEJCVEkQ5FlBQlBGlJARFQOpRQQRFQQQEFEUUBAelu6e7u7o7/Z2EXcb2WF/+vP+Hd67o+7pw5MWfuc3+f+3HOPMM5yy+89PwDAxMNvNaI03901t63rrzMBItvfMyeg6/Zf7clHhh+8VivnUw87/DT+Yafzj8wMDBo+P0Meu2ywfMcfcwYA4MHhv3vH40/zrhjjD8wMO7ws8PvZ2CO107GO2TE7V4ZKR7oVMO+3a6v/Xu1CYbdybBPVlzlpQ0GBgaGvuHrh41rpn95oNKWn2+Rhf9h9brbGMOvHvSP6149Hfzav/EOGhgY74CBUW8fw2475A1f+99s2PecaJqBZW99G773/7mWn2+RxUbyH7YWxxx+2RzD1vjIa9DYyNv5bkuve9/wKRw0fOIGv2G9vB3b/f+vlp9v4cUHRr2OB5ZYaKt7X3l1vzl4wYGBwQsNDAxeeGBg8CJvt0f9Z3pbN76qqqp6W5pv/lmHPWcfY6SfB4aO+LmWfi4878WZ7xwYGLzEa88TB68y4rlgVVVVVVVVVb0zm2/+WReA5/8Tvdnz/6lO3HHinv9XVVVVVVVV/d9psfnmn3XYc/2Rnv9P/mbP/x+9//CDX/vb/3nneO2rXn57H0RVVVVVVVVVvWkLL4bP/6d6s+f/Fxw91cU9/6+qqqqqqqr6v9NSr7zyyjZveJ294RfPMOJ6ev5/8j03r/S2Dbiqqqqqqqqq/u1efuiEU/7xmu9TDIz0eu+vNvz3AoOOOO3SS9+2gb4zGvSvvw/Z9u0e0/+2Yc5DD5tqYGCDZd/uodTb0P+Z16qv/yfl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iRnH8//XX/z/5qNVGvBf8R6ab9doT/vGVr773/+AlFntou7dp6G9Ho+vx/4F1Bg0MDPedaJ2BgYEl5ltqmRkGBgZOuHbW6aYdeP26OYddN/ckY776BvEj/jORhSbmO9526tdOh20oA+95/T6OePX+F3vlwDEHjTSINzTxsQcfvPbyz8w28un0o34cY7z+2QTH3D/iv2UZY6QbDR3FF4+4/xGPZWTn4WOfYdjYZ9x0/Y1m3GSLLT+5zvqrrrXGWmtsMNcss88821xzzT77jGuus94aM732cVRzNtWrHxd4K3M2/shz9tB8b5yzkR/bqOZsqjefs1fvca/zh35+xJwN/jfnbIE3n7Op1hn+jSaed8jAKq/OzaCBgYkXHDKw+bAzM489MDDxQsNvO/mw2352kjEGBvb4xwMd9tnYr2+Dg7YddpvlF156/td2UwMD/zj9R6N4P/uxho983uGn8w0/nf+1bzPRwD82xcHzHH3MGMPm4p+mY/xxxh1j/IGBcYefHX4/A3O9djLuiSNuN4r3WR9poK++zMqur/17tQkGBgbGG/bJFKuevNOwqf8vvE/7/6////8XrzkHvb49Dhr+b/htXvOab5HF/vG9Xp2GYXM35vDL5hhm8h9+a/t/6l/GO9XQganeZLxv8ro4r0bb13onTLr9f+p1cWi8k7/JeN/kdXxHOd7l7tz3vtfu6j823pH2dYu/+nHet7KvG3jzfd2YdAdrXPShkfd1Xxz1EP9pdzlijsYe6Uaj2tdNvt+U2w67/3nffF+3+LCxD/mnfd0YAwMTLzBiXzdsx7fwkIE9hp2ZZdiZRYYMHDrszKyvnhln4LRhZz612obrrT7sgkX/dTuYYdA//YEmrLOFR1png97w2AeN9Pedg187He+gEe/hNIr95qDhD+t/3FfQdjvRm4z3Td5/Cud52GWrHzl00v/U+0/ReIe++XhH9X7Zoxzv7k+ffOt/eLyvr7Mhb5iuRd/KOpvqn9fZsIc45htWxlv9OWx1uP1rn0/++r1ttvX9r/9MMWSk+/2ffqZY9M3X2UTrjPR1uxwwMOjN5maRtzI3H/yXfdB2b5ybt/rz1gzTvHb9mG8yN2PPtfL0I+ZmrH9zbhb5d+dm3oEx/3luBg8sNDAwMO3w/cPCb2VuJn/zuXmr2824cPvXPl/j9YsW3O2wc0bMzchz8T/NzcL/7txM9fp2M+2r1009xsBYYw1svuqmm24882sfR5yd5bWPb74GF3wrcznRf2Yu3z94VHP5j011/DsvPuh/WIP/sk8fcf8L/rtzOfD6XA6sM/JiqXdq/f7PXf7u8neXv7v83eXvLn9xozj+//rr/+8z0dx7Dv/lxpCLp5xs57d7vG9zo/Xx/+G+/3T8f+fJprx4jIHXr3vT47Ov3eYdeXx2jtdOxjtkxO1GPj7IAx318dkD5ppjx//S8dn/X41Yq2/h93Dt/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iRnH8f6YRfwdwz8xLPj78QOiQB3ZYYcm3e7xvc6P18f/hvv90/H/JFXZ4YIyB16970+P/r93Gcfz/9hcW3v2dfPx/xFrt+H/9D+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJGcfx/3hF/B3D44ftuOeLvAa6ceNcT3u7xvs2Nrsf/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uKGH/8fGOntLb/SdoHB8f//243Cf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8f9q/pjFf/n8MYv/1/LHLP5fzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/zfyxyz+q+SPWfxXzR+z+H8zf8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bx/1b+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/3b+mMV/4/wxi/8m+WMW/03zxyz+38kfs/hvlj9m8f9u/pjFf/P8MYv/FvljFv8t88cs/t/LH7P4fz9/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/D/LHLP4/zB+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/4/yxyz+P84fs/j/JH/M4r9H/pjFf8/8MYv/T/PHLP4/yx+z+O+VP2bx/3n+mMV/7/wxi/8++WMW/33zxyz+v8gfs/j/Mn/M4v+r/DGL/375Yxb//fPHLP6/zh+z+P8mf8zif0D+mMX/wPwxi/9B+WMW/9/mj1n8f5c/ZvE/OH/M4n9I/pjF//f5Yxb/Q/PHLP5/yB+z+B+WP2bx/2P+mMX/T/ljFv/D88cs/n/OH7P4/yV/zOJ/RP6Yxf/I/DGL/1H5Yxb/v+aPWfyPzh+z+B+TP2bxPzZ/zOL/t/wxi/9x+WMW/+Pzxyz+J+SPWfxP/If/tm/HsN6pWfxPav1jFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/v+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Y6Op/5CRL74yf2w09X+1N67/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+T+A8ayB+z+A/KH7P4j5E/ZvEfM3/M4j84f8ziPyR/zOI/Vv6YxX/s/DGL/9D8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8zi/678MYv/RPljFv+J88cs/pPkj1n8350/ZvF/T/6YxX/S/DGL/3vzxyz+k+WPWfwnzx+z+L8vf8zi//78MYv/B/LHLP4fzB+z+H8of8ziP0X+mMV/yvwxi/9U+WMW/w/nj1n8px7hP/RtGtc7NIv/NK1/zOI/bf6YxX+6/DGL//T5Yxb/j+SPWfxnyB+z+H80f8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8zi/+n8MYv/7PljFv858scs/nPmj1n858ofs/h/Jn/M4j93/pjF/7P5Yxb/z+WPWfznyR+z+H8+f8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cPzYa+7+Re9Ai+WOjsf8/rf9F88cs/ovlj1n8v5A/ZvH/Yv6YxX/x/DGL/5f+Z//B/0/H9Q7N4r9E6x+z+H85f8zi/5X8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/9X8MYv/8vljFv+v5Y9Z/L+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/b+SPWfxXyR+z+K+aP2bx/2b+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/rfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/7fwxi//G+WMW/03yxyz+m+aPWfy/kz9m8d8sf8zi/938MYv/5vljFv8t8scs/lvmj1n8v5c/ZvH/fv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv8f5I9Z/H+YP2bx3yV/zOK/a/6YxX+3/N84H69n8d89f8zi/6P8MYv/j/PHLP4/yR+z+O+RP2bx3zN/zOL/0/wxi//P8scs/nvlj1n8f54/ZvHfO3/M4r9P/pjFf9/8MYv/L/LHLP6/zB+z+P8qf8ziv1/+mMV///wxi/+v88cs/r/JH7P4H5A/ZvE/MH/M4n9Q/pjF/7f5Yxb/3+WPWfwPzh+z+B+SP2bx//0/+9/9Xx/XOzSL/6Gtf8zi/4f8MYv/YfljFv8/5o9Z/P+UP2bxPzx/zOL/5/wxi/9f8scs/kfkj1n8j8wfs/gflT9m8f9r/pjF/+j8MYv/MfljFv9j88cs/n/LH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6YxP/V8v/XJP6DLswfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/mPRRda/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljEv9XP83/X7P4D8ofs/iP4fafd1RXWPzHdPuPMov/4Pwxi/+Q/DGL/1j5Yxb/sfPHLP5D88cs/uPkj1n8x80fs/iPlz82+vm/hP7j54+Nfv68/ifIH7P4T5g/ZvF/V/6YxX+i/DGL/8T5Yxb/SfLHLP7vzh+z+L8nf8ziP2n+mMX/vfljFv/J8scs/pPnj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvGfIn/M4j+lzh9f7utfsvhPpfN/a1n8P5w/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/h/JH7P4z5A/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW/xnzxyz+M+WPDTpr7yEDAwOjvf/M+WOW9T9L/pjFf9b8MYv/bPljFv9P549Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/zP5Yxb/ufPHLP6fzR+z+H8uf8ziP0/+mMX/8/ljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfy/kD9m8f9i/pjFf/H8MYv/l/LHLP5L5I9Z/L+cP2bx/0r+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/2r+mMV/+fwxi//X8scs/l/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/N/LHLP6r5I9Z/FfNHyfA4v/N/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/1v5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/9v5Yxb/jfPHLP6b5I9Z/DfNH7P4fyd/zOK/Wf6Yxf+7+WMW/83zxyz+W+SPWfy3zB+z+H8vf8zi//38MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+P8gfs/j/MH/M4r9L/pjFf9f8MYv/bvljFv/d88cs/j/KH7P4/zh/zOL/k/wxi/8e+WMW/z3zxyz+P80fs/j/LH/M4r9X/pjF/+f5Yxb/vfPHLP775I9Z/PfNH7P4/yJ/zOL/y/wxi/+v8scs/vvlj1n8988fs/j/On/M4v+b/DGL/wH5Yxb/A/PHLP4H5Y9Z/H+bP2bx/13+mMX/4Pwxi/8h+WMW/9/nj1n8D80fs/j/IX/M4n9Y/pjF/4/5Yxb/P+WPWfwPzx+z+P85f8zi/5f8MYv/EfljFv8j88cs/kflj1n8/5o/ZvE/On/M4n9M/pjF/9j8MYv/3/LHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bx/3v+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvVfufNsprLP6Xqf1HncX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj8m8R9zIH/M4j8of8ziP0b+mMV/zPwxi//g/DGL/5D8MYv/WPljFv+x88cs/kPzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/7vyxyz+E+WPWfwnzh+z+E+SP2bxf3f+mMX/PfljFv9J88cs/u/NH7P4T5Y/ZvGfPH/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/xT5Yxb/KfPHLP5T5Y9Z/D+cP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4fyR+z+M+QP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/0/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9M/pjFf+78MYv/Z/PHLP6fyx+z+M+TP2bx/3z+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/L+SPWfy/mD9m8V88f8zi/6X8MYv/EvljFv8v549Z/L+SP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+aP2bxXz5/zOL/tfwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8zi/438MYv/KvljFv9V88cs/t/MH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188dGa/9Bg0dcOuY6+WOjtf8/Lh3zW/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/2/ljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjF/7v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy9/zOL//fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP4/yB+z+P8wf8ziv0v+2Kv+g0Z//13zxyzrf7f8MYv/7vljFv8f5Y9Z/H+cP2bx/0n+mMV/j/wxi/+e+WMW/5/mj1n8f5Y/ZvHfK3/M4v/z/DGL/975Yxb/ffLHLP775o9Z/H+RP2bx/2X+mMX/V/ljFv/98scs/vvnj1n8f50/ZvH/Tf6Yxf+A/DGL/4H5Yxb/g/LHLP6/zR+z+P8uf8zif3D+mMX/kPwxi//v88cs/ofmj1n8/5A/ZvE/LH/M4v/H/DGL/5/yxyz+h+ePWfz/nD9m8f9L/pjF/4j8MYv/kfljFv+j8scs/n/NH7P4H50/ZvE/Jn/M4n9s/pjF/2/5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+P89f8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/If+BgYFx/uUSi/+N/6P/tv9vx/UOzeJ/U+sfs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/TOI/eCB/zOI/KH/M4j9G/pjFf8z8MYv/4Pwxi/+Q/DGL/1j5Yxb/sfPHLP5D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/+78scs/hPlj1n8J84fs/hPkj9m8X93/pjF/z35Yxb/SfPHLP7vzR+z+E+WP2bxnzx/zOL/vvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/8U+WMW/ynzxyz+U+WPWfw/nD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+H8kfs/jPkD9m8f9o/pjF/2P5Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfddT+Q/8r43qHZvGfrfWPWfw/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/8/kj1n8584fs/h/Nn/M4v+5/DGL/zz5Yxb/z+ePWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvH/Qv6Yxf+L+WMW/8Xzxyz+X8ofs/gvkT9m8f9y/pjF/yv5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/6v5Yxb/5fPHLP5fyx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+38gfs/ivkj9m8V81f8zi/838MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/W/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/2/ljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjF/7v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy9/zOL//fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP4/yB+z+P8wf8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+P8ofs/j/OH/M4v+T/DGL/x75Yxb/PfPHLP4/zR+z+P8sf8ziv1f+mMX/5/ljFv+988cs/vvkj1n8980fs/j/In/M4v/L/DGL/6/yxyz+++WPWfz3zx+z+P86f8zi/5v8MYv/AfljFv8D88cs/gflj1n8f5s/ZvH/Xf6Yxf/g/DGL/yH5Yxb/3+ePWfwPzR+z+P8hf8zif1j+mMX/j/ljFv8/5Y9Z/A/PH7P4/zl/zOL/l/wxi/8R+WMW/yPzxyz+R+WPWfz/mj9m8T86f8zif0z+mMX/2Pwxi//f8scs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvH/e/6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9NJv9t3/pNLf43m/z/jSz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9J/IcM5I9Z/Aflj1n8x8gfs/iPmT9m8R+cP2bxH5I/ZvEfK3/M4j92/pjFf2j+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxf1f+mMV/ovwxi//E+WMW/0nyxyz+784fs/i/J3/M4j9p/pjF/735Yxb/yfLHLP6T549Z/N+XP2bxf3/+mMX/A/ljFv8P5o9Z/D+UP2bxnyJ/zOI/Zf6YxX+q/DGL/4fzxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6Yxf8j+WMW/xnyxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/h/On/M4j97/pjFf478MYv/nPljFv+58scs/p/JH7P4z50/ZvH/bP6Yxf9z+WMW/3nyxyz+n88fs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOL/hfwxi/8X88cs/ovnj43u/mMO//xL+WOju//whiyRP2bx/3L+mMX/K/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/q/ljFv/l88cs/l/LH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP7fyB+z+K+SP2bxXzV/zOL/zfwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf9b+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf/b+WMW/43zxyz+m+SPWfw3zR+z+H8nf8ziv1n+mMX/u/ljFv/N88cs/lvkj1n8t8wfs/h/L3/M4v/9/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/j/IH7P4/zB/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP4/GoX/Of+tcb1Ds/j/uPWPWfx/kj9m8d8jf8ziv2f+mMX/p/ljFv+f5Y9Z/PfKH7P4/zx/zOK/d/6YxX+f/DGL/775Yxb/X+SPWfx/mT9m8f9V/pjFf7/8MYv//vljFv9f549Z/H+TP2bxPyB/zOJ/YP6Yxf+g/DGL/2/zxyz+v8sfs/gfnD9m8T8kf8zi//v8MYv/ofljFv8/5I9Z/A/LH7P4/zF/zOL/p/wxi//h+WMW/z/nj1n8/5I/ZvE/In/M4n9k/pjF/6j8MYv/X/PHLP5H549Z/I/JH7P4H5s/ZvH/W/6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+f88fs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxif9YA/ljFv9B+WMW/zHyxyz+Y+aPWfwH549Z/Ifkj1n8x8ofs/iPnT9m8R+aP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/N+VP2bxnyh/zOI/cf6YxX+S/DGL/7vzxyz+78kfs/hPmj9m8X9v/pjFf7L8MYv/5PljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/KfIH7P4T5k/ZvGfKn/M4v/h/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvH/SP6YxX+G/DGL/0dd/m/5oVr8P+byf8tZ/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv9P549Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/zP5Yxb/ufPHLP6fzR+z+H8uf8ziP0/+mMX/8/ljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfy/kD9m8f9i/pjFf/H8MYv/l/LHLP5L5I9Z/L+cP2bx/0r+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/2r+mMV/+fwxi//X8scs/l/PH7P4r5A/Npr6DxrJeqwV88dGU/9Xe+P6Xyl/zOK/cv6Yxf8b+WMW/1Xyxyz+q+aPWfy/mT9m8V8tf2zQWYOGz8zo7b96/phl/a+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/b+WPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/b+ePWfw3zh+z+G+SP2bx3zR/zOL/nfwxi/9m+WMW/+/mj1n8N88fs/hvkT9m8d8yf8zi/738MYv/9/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/j/IH/M4v/D/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4/yh/zOL/4/wxi/9P8scs/nvkj1n898wfs/j/NH/M4v+z/DGL/175Yxb/n+ePWfz3zh+z+O+TP2bx3zd/zOL/i/wxi/8v88cs/r/KH7P475c/ZvHfP3/M4v/r/DGL/2/yxyz+B+SPWfwPzB+z+B+UP2bx/23+mMX/d/ljFv+D88cs/ofkj1n8f58/ZvE/NH/M4v+H/DGL/2H5Yxb/P+aPWfz/lD9m8T88f8zi/+f8MYv/X/LHLP5H5I9Z/I/MH7P4H5U/ZvH/a/6Yxf/o/DGL/zH5Yxb/Y/PHLP5/yx+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/7/ljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/MfGAcus/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6YxH/sgfwxi/+g/DGL/xj5Yxb/MfPHLP6D88cs/kPyxyz+Y+WPWfzHzh+z+A/NH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/u/KH7P4T5Q/ZvGfOP/hDf2ncxb/SfLHLP7vzh+z+L8nf8ziP2n+mMX/vfljFv/J8scs/pPnj1n835c/ZvF/f/6Yxf8D+Y9oqdXecMbi/8H8MYv/h/LHLP5T5I9Z/KfMH7P4T5U/ZvH/cP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyR/zOI/Q/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/0/nj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/M/ljFv+588cs/p/NH7P4fy5/zOI/T/6Yxf/z+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/L+QP2bx/2L+mMV/8fwxi/+X8scs/kvkj1n8v5w/ZvH/Sv6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/av6YxX/5/DGL/9fyxyz+X88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/838scs/qvkj1n8V80fs/h/M3/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9W/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8f92/pjFf+P8MYv/JvljFv9N88cs/t/JH7P4b5Y/ZvH/bv6YxX/z/DGL/xb5Yxb/LfPHLP7fyx+z+H8/f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/E/q3RVj8d04bs/j/IH/M4v/D/DGL/y75Yxb/XfPHLP67veb/0itv17jeoVn8d2/9Yxb/H+WPWfx/nD9m8f9J/pjFf4/8MYv/nvljFv+f5o9Z/H+WP2bx3yt/zOL/8/wxi//e+WMW/33yxyz+++aPWfx/kT9m8f9l/pjF/1f5Yxb//fLHLP77549Z/H+dP2bx/03+mMX/gPwxi/+B+WMW/4Pyxyz+v80fs/j/Ln/M4n9w/pjF/5D8MYv/7/PHLP6H5o9Z/P+QP2bxPyx/zOL/x/wxi/+f8scs/ofnj1n8/5w/ZvH/S/6Yxf+I/DGL/5H5Yxb/o/LHLP5/zR+z+B+dP2bxPyZ/zOJ/bP6Yxf9v+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/j/PX/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8sck/kMH8scs/oPyxyz+Y+SPWfzHzB+z+A/OH7P4D8kfs/iPlT9m8R87f8ziPzR/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4vyt/zOI/Uf6YxX/i/DGL/yT5Yxb/d+ePWfzfkz9m8Z80f8zi/978MYv/ZPljFv/J88cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4T5E/ZvGfMn/M4j9V/pjF/8P5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+R/DGL/wz5Yxb/j+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfw/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/8/kj1n8584fs/h/Nn/M4v+5/DGL/zz5Yxb/z+ePWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvH/Qv6Yxf+L+WMW/8Xzxyz+X8ofs/gvkT9m8f9y/pjF/yv5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/6v5Yxb/5fPHLP5fyx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+38gfs/ivkj9m8V81f8zi/838MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/W/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/2/ljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjF/7v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy9/zOL//fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XPzaS/5C3ezz/60bhv33+mGX975A/ZvHfMX/M4r9T/pjFf+f8MYv/D/LHLP4/zB+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/4/yxyz+P84fs/j/JH/M4r9H/pjFf8/8MYv/T/PHLP4/yx+z+O+VP2bx/3n+mMV/7/wxi/8++WMW/33zxyz+v8gfs/j/Mn/M4v+r/DGL/375Yxb//fPHLP6/zh+z+P8mf8zif0D+mMX/wPwxi/9B+WMW/9/mj1n8f5c/ZvE/OH/M4n9I/pjF//f5Yxb/Q/PHLP5/yB+z+B+WP2bx/2P+mMX/T/ljFv/D88cs/n/OH7P4/yV/zOJ/RP6Yxf/I/DGL/1H5Yxb/v+aPWfyPzh+z+B+TP2bxPzZ/zOL/t/wxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efmPaKw3nrH4n58/ZvG/IH/M4v/3/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHXvcfa/T2vzt/zLL+78kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxwz+gwYPDH04f8zgP2z9P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SPybxH2cgf8ziPyh/zOI/Rv6YxX/M/DGL/+D8MYv/kPwxi/9Y+WMW/7Hzxyz+Q/PHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/u/LHLP4T5Y9Z/CfOH7P4T5I/ZvF/d/6Yxf89+WMW/0nzxyz+780fs/hPlj9m8Z88f8zi/778MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/FPljFv8p88cs/lPlj1n8P5w/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/h/JH7P4z5A/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW/xnzxyz+Mw0MbPN2DemdnMV/5tY/ZvGfJX/M4j9r/pjFf7b8MYv/p/PHLP6z549Z/OfIf0TjvPGMxX/O/DGL/1z5Yxb/z+SPWfznzh+z+H82f8zi/7n8MYv/PPljFv/P549Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8f9C/pjF/4v5Yxb/xfPHLP5fyh+z+C+RP2bx/3L+mMX/K/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/q/ljFv/l88cs/l/LH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP7fyB+z+K+SP2bxXzV/zOL/zfwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K9F/mP/F8f1Ds3iv3brH7P4r5M/ZvH/Vv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvH/dv6YxX/j/DGL/yb5Yxb/TfPHLP7fyR+z+G+WP2bx/27+mMV/8/wxi/8W+WMW/y3zxyz+38sfs/h/P3/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8P8scs/j/MH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/j/LHLP4/zh+z+P8kf8ziv0f+mMV/z/wxi/9P88cs/j/LH7P475U/ZvH/ef6YxX/v/DGL/z75Yxb/ffPHLP6/yB+z+P8yf8zi/6v8MYv/fm/mP9Z/YVzv0Cz++7f+MYv/r/PHLP6/yR+z+B+QP2bxPzB/zOJ/UP6Yxf+3+WMW/9/lj1n8D84fs/gfkj9m8f99/pjF/9D8MYv/H/LHLP6H5Y9Z/P+YP2bx/1P+mMX/8Pwxi/+f88cs/n/JH7P4H5E/ZvE/Mn/M4n9U/pjF/6/5Yxb/o/PHLP7H5I9Z/I/NH7P4/y1/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/7/nj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMR/3IH8MYv/oPwxi/8Y+WMW/zHzxyz+g/PHLP5D8scs/mPlj1n8x84fs/gPzR+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP7vyh+z+E+UP2bxnzh/zOI/Sf6Yxf/d+WMW//fkj1n8J80fs/i/N3/M4j9Z/pjFf/L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP5T5I9Z/KfMH7P4T5U/ZvH/cP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyR/zOI/Q/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/0/nj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/M/ljFv+588cs/p/NH7P4fy5/zOI/T/6Yxf/z+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/L+QP2bx/2L+2GjnP4j9F88fG+38R7H+v5Q/ZvFfIn/M4v/l/DGL/1fyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL/1fzxyz+y+ePWfy/lj9m8f96/pjFf4X8MYv/ivljFv+V8scM/l8YGBh35fwxg/+w9f+N/DGL/yr5Yxb/VfPHLP7fzB+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/L+VP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+dP2bx3zh/zOK/Sf6YxX/T/DGL/3fyxyz+m+WPWfy/mz9m8d88f8ziv0X+mMV/y/wxi//38scs/t/PH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/4P8MYv/D/PHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+j/DGL/4/zxyz+P8kfs/jvkT9m8d8zf8zi/9P8MYv/z/LHLP575Y9Z/H+eP2bx3zt/zOK/T/6YxX/f/DGL/y/yxyz+v8wfs/j/Kn/M4r9f/pjFf//8MYv/r/PHLP6/yR+z+B+QP2bxPzB/zOJ/UP6Yxf+3+WMW/9/lj1n8D84fs/gfkj9m8f99/pjF/9D8MYv/H/LHLP6H5Y9Z/P+YP2bx/1P+mMX/8Pwxi/+f88cs/n/JH7P4H5E/ZvE/Mn/M4n9U/pjF/6/5Yxb/o/PHLP7H5I9Z/I/NH7P4/y1/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/7/nj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMR/vIH8MYv/oPwxi/8Y+WMW/zHzxyz+g/PHLP5D8scs/mPlj1n8x84fs/gPzR+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP7vyh+z+E+UP2bxnzh/zOI/Sf6Yxf/d+WMW//fkj1n8J80fs/i/N3/M4j9Z/pjFf/L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP5T5I9Z/KfMH7P4T5U/ZvH/cP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyR/zOI/Q/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/0/nj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/M/ljFv+588cs/p/NH7P4fy5/zOI/T/6Yxf/z+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/L+QP2bx/2L+mMV/8fwxi/+X8scs/kvkj1n8v5w/ZvH/Sv6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/av6YxX/5/DGL/9fyxyz+X88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/838scs/qvkj1n8V80fs/h/M3/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f9W/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8f92/pjFf+P8MYv/JvljFv9N88cs/t/JH7P4b5Y/ZvH/bv6YxX/z/DGL/xb5Yxb/LfPHLP7fyx+z+H8/f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/w/yxyz+P8wfs/jvkj9m8d81f8ziv1v+mMV/9/wxi/+P8scs/j/OH7P4/yR/zOK/R/6YxX/P/DGL/0/zxyz+P8sfs/jvlT9m8f95/pjFf+/8MYv/PvljFv9988cs/r/IH7P4/zJ/zOL/q/wxi/9++WMW//3zxyz+v84fs/j/Jn/M4n9A/pjF/8D8MYv/QfljFv/f5o9Z/H+XP2bxPzh/zOJ/SP6Yxf/3+WMW/0Pzxyz+f8gfs/gflj9m8f9j/pjF/0/5Yxb/w/PHLP5/zh+z+P8lf8zif0T+mMX/yPwxi/9R+WOv+48xevv/NX/Msv6Pzh+z+B+TP2bxPzZ/zOL/t/wxi/9x+WMW/+Pzxyz+J+SPWfxPzB8b4T8wdGBgdPY/KX/Msv5Pzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv+/549Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljDv/kR5XDf2C8B9oKMIv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH5P4jz+QP2bxH5Q/ZvEfI3/M4j9m/pjFf3D+mMV/SP6YxX+s/DGL/9j5Yxb/ofljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMX/XfljFv+J8scs/hPnj1n8J8kfs/i/O3/M4v+e/DGL/6T5Yxb/9+aPWfwnyx+z+E+eP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+2Mj+A9u+3SP6XzYK/ynyxyzrf8r8MYv/VPljFv8P549Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/R/LHLP4z5I9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/D+ZP2bx/1T+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3T+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfw/kz9m8Z87f8zi/9n8MYv/5/LHLP7z5I9Z/D+fP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjF/wv5Yxb/L+aPWfwXzx+z+H8pf8ziv0T+mMX/y/ljFv+v5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv+v5o9Z/JfPH7P4fy1/zOL/9fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+H8jf8ziv0r+mMV/1fwxi/8388cs/qvlj1n8Vzf6v4UHbPFfw+j/FrL4r5k/ZvFfK3/M4r92/pjFf538MYv/t/LHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/t/PHLP4b549Z/DfJH7P4b5o/ZvH/Tv6YxX+z/DGL/3fzxyz+m+ePWfy3yB+z+G+ZP2bx/17+mMX/+/ljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx/kD9m8f9h/pjFf5f8MYv/rvljFv/d8scs/rvnj1n8f5Q/ZvH/cf6Yxf8n+WMW/z3yxyz+e+aPWfx/mj9m8f9Z/pjFf6/8MYv/z/PHLP57549Z/PfJH7P475s/ZvH/Rf6Yxf+X+WMW/1/lj1n898sfs/jvnz9m8f91/pjF/zf5Yxb/A/LHLP4H5o9Z/A/KH7P4/zZ/zOL/u/wxi//B+UNjDj8d/f0PyR+zrP/f549Z/A/NH7P4/yF/zOJ/WP6Yxf+P+WMW/z/lj1n8D88fs/j/OX/M4v+X/DGL/xH5Yxb/I/PHLP5H5Y9Z/P+aP2bxPzp/zOJ/TP6Yxf/Y/DGL/9/yxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f97/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v/CKP3n/e+M6x2axf/F1j9m8X8pf8zi/3L+mMX/lfwxif8EA/ljFv9B+WMW/zHyxyz+Y+aPWfwH549Z/Ifkj1n8x8ofs/iPnT9m8R+aP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/N+VP2bxnyh/zOI/cf6YxX+S/DGL/7vzxyz+78kfs/hPmj9m8X9v/pjFf7L8MYv/5PljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8PWfzH/fdubvGfwuL/b2bxnzJ/zOI/Vf6Yxf/D+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/kfwxi/8M+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8P50/ZvGfPX/M4j9H/pjFf878sX/yH37ZRG/zmP5XjcJ/rvwxy/r/TP6YxX/u/DGL/2fzxyz+n8sfs/jPkz9m8f98/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f0zgP3iY/yL5YwL/YU2waP6YxX+x/DGL/xfyxyz+X8wfs/gvnj9m8f9S/pjFf4n8MYv/l/PHLP5fyR+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP5fzR+z+C+fP2bx/1r+mMX/6/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f9G/pjFf5X8MYv/qvljFv9v5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/t/KH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/t/OH7P4b5w/ZvHfJH/M4r9p/pjF/zv5Yxb/zfT+4+ClFv/v6v05i//m+WMW/y3yxyz+W+aPWfy/lz9m8f9+/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/x/kj1n8f5g/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv8f5Y9Z/H+cP2bx/0n+mMV/j/wxi/+e+WOjq//Qkfx/mj82uvoPjOT/s/wxi/9e+WMW/5/nj1n8984fs/jvkz9m8d83f8zi/4v8MYv/L/PHLP6/yh+z+O+XP2bx3z9/zOL/6/wxi/9v8scs/gfkj1n8D8wfs/gflD9m8f9t/pjF/3f5Yxb/g/PHLP6H5I9Z/H+fP2bxPzR/zOL/h/wxi/9h+WMW/z/mj1n8/5Q/ZvE/PH/M4v/n/DGL/1/yxyz+R+SPWfyPzB+z+B+VP2bx/2v+mMX/6Pwxi/8x+WMW/2Pzxyz+f8sfs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/+/5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P43zOy/7b/5XG9Q7P439v6xyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMS/wkH8scs/oPyxyz+Y+SPWfzHzB+z+A/OH7P4D8kfs/iPlT9m8R87f8ziPzR/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4vyt/zOI/Uf6YxX/i/DGL/yT5Yxb/d+ePWfzfkz9m8Z80f8zi/978MYv/ZPljFv/J88cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4T5E/ZvGfMn/M4j9V/pjF/8P5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+R/DGL/wz5Yxb/j+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxwadNXT4Z6O3/2z5Y5b1/+n8MYv/7PljFv858scs/nPmj1n858ofs/h/Jn/M4j93/pjF/7P5Yxb/z+WPWfznyR+z+H8+f8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/xfyxyz+X8wfs/gvnj9m8f9S/pjFf4n8MYv/l/PHLP5fyR+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP5fzR+z+C+fP2bx/1r+mMX/6/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f9G/pjFf5X8MYv/qvljFv9v5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/t/KH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/t/OH7P4b5w/ZvHfJH/M4r9p/pjF/zv5Yxb/zfLHLP7fzR+z+G+eP2bx3yJ/zOK/Zf6Yxf97+WMW/+/nj1n8t8ofs/hvnT9m8d8mf8ziv23+2GjqP2SkSyfcLn9sNPV/tTeu/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOL/g/wxi/8P88cs/rvkj1n8d80fs/jvlj9m8d89f8zi/6P8MYv/j/PHLP4/yR+z+O+RP2bx3zN/zOL/0/wxi//P8scs/nvlj1n8f54/ZvHfO3/M4r9P/pjFf9/8MYv/L/LHLP6/zB+z+P8qf8ziv1/+mMV///wxi/+v88cs/r/JH7P4H5A/ZvE/MH/M4n9Q/pjF/7f5Yxb/3+WPWfwPzh+z+B+SP2bx/33+mMX/0Pwxi/8f8scs/oflj1n8/5g/ZvH/U/6Yxf/w/DGL/5/zxyz+f8kfs/gfkT9m8T8yf8zif1T+mMX/r/ljFv+j88cs/sfkj1n8j80fs/j/LX/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/v+ePWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6YxP9dA/ljFv9B+WMW/zHyxyz+Y+aPWfwH549Z/Ifkj1n8x8ofs/iPnT9m8R+aP2bxHyd/zOI/bv7/Hzv3H651Xd9x/OY3qaQf29SlDYfGXJuRyGjUQlQUjz9OmWjmb9QjkCDyQxJMxY1W6th0qZslm1o65mzVUoeb69eKhmXN1oitVU5xLYwxB4vM2dl14ByCszfn2vmy79eN9+PxB+fc9/F9pzyvl/ftxXUVytJ/b/1DWfrvo38oS/8R+oey9H+l/qEs/ffVP5Sl/376h7L0L/qHsvTfX/9Qlv6v0j+Upf9P6R/K0v+n9Q9l6X+A/qEs/Q/UP5Sl/0H6h7L0/xn9Q1n6v1r/UJb+B+sfytL/EP1DWfq/Rv9Qlv4/q38oS/+R+oey9D9U/1CW/j+nfyhL/1H6h7L0P0z/UJb+h+sfytL/tfqHsvQfrX8oS/+f1z+Upf8R+oey9P8F/UNZ+r9O/1CW/r+ofyhL/1/SP5Sl/5H6h7L0f73+oSz9x+gfytL/DfqHsvQ/Sv9Qlv5j9Q9l6X+0/qEs/cfpH8rS/5f1D2XpP17/UJb+b9Q/lKX/r+gfytJ/gv6hLP3fpH8oS/836x/K0v9X9Q9l6f8W/UNZ+k/UP5Sl/zH6h7L0n6R/KEv/Y/UPZel/nP6hLP2P1z+Upf9k/UNZ+p+gfyhL/xP1D2XpP0X/UJb+J+kfytK/Tf9Qlv4n6x/K0v8U/UN7XP+hcf9T9Q/tcf13sf/T9A9l6d+ufyhL/7fqH8rS/236h7L0P13/UJb+b9c/lKX/GfqHsvSfqn8oS/8z9Q9l6X+W/qEs/d+hfyhL/7P1D2Xp/079Q1n6n6N/KEv/c/UPZel/nv6hLP3P1z+Upf8F+oey9L9Q/1CW/hfpH8rSf5r+oSz9L9Y/lKX/JfqHsvS/VP9Qlv4d+oey9L9M/1CW/tP1D2XpP0P/UJb+M/UPZen/Lv1DWfpfrn8oS/9Z+oey9J+tfyhL/yv0D2XpP0f/UJb+V+ofytJ/rv6hLP3n6R/K0n++/qEs/RfoH8rS/yr9Q1n6L9Q/lKX/u/UPZel/tf6hLP0X6R/K0n+x/qEs/a/RP5Sl/3v0D2Xpf63+oSz9r9M/lKX/9fqHsvRfon8oS/8b9A9l6f9r+oey9P91/UNZ+i/VP5Sl/3v1D2Xp/xv6h7L0f5/+oSz9369/KEv/G/UPZel/k/6hLP1v1j+Upf9v6h/K0n+Z/qEs/X9L/1CW/r+tfyhL/1v0D2Xpf6v+oSz9f0f/UJb+H9A/lKX/bfqHsvS/Xf9Qlv536B/K0v939Q9l6f97+oey9L9T/1CW/h/UP5Sl/4f0D2Xpf5f+oSz9l+sfytL/9/UPZen/B/qHsvS/W/9Qlv736B/K0v9e/UNZ+n9Y/1CW/h/RP5Sl/336h7L0v1//UJb+f6h/KEv/FfqHsvT/I/1DWfo/oH8oS/8/1j+Upf+D+oey9P+o/qEs/f9E/1CW/h/TP5Sl/8f1D2Xp/wn9Q1n6/6n+oSz9P6l/KEv/h/QPZen/sP6hLP0f0T+Upf+f6R/K0n+l/qEs/R/VP5Sl/5/rH8rS/y/0D2Xp/5j+oSz9/1L/UJb+n9I/lKX/p/UPZen/Gf1DWfp/Vv9Qlv6f0z+Upf9f6R/K0v/z+oey9P+C/qEs/VfpH8rS/4v6h7L0/2v9Q1n6r9Y/lKX/4/qHsvT/kv6hLP2/rH8oS/8n9A9l6f8V/UNZ+n9V/1CW/n+jfyhL/yf1D2Xp/zX9Q1n6/63+oSz9v65/KEv/v9M/lKX/Gv1DWfp/Q/9Qlv5r9Q9l6f/3+oey9P8H/UNZ+n9T/1CW/v+ofyhL/2/pH8rS/9v6h7L0/47+oSz9n9I/lKX/P+kfytL/af1DWfo/o38oS/91+oey9H9W/1CW/v+sfyhL/+/qH8rS/1/0D2Xp/z39Q1n6r9c/lKX/c/qHsvT/vv6hLP036B/K0v9f9Q9l6b9R/1CW/v+mfyhL/+f1D2Xp/+/6h7L036R/KEv/zfqHsvT/D/1DWfr/QP9Qlv5b9A9l6f9D/UNZ+r+gfyhL/x/pH8rS/0X9Q1n6/6f+oSz9X9I/lKX/j/UPZenfqX8oSf/9WvqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvQfpn8oS//h+oey9H+F/qEs/ffSP5Sl/976h7L030f/UJb+I/QPZen/Sv1DWfrvq39oj+sPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf838RYsvnzZrVsc83/jGN77Z/s3L/W8mAADgf9tPPvS/3H8nAAAAAAAAAAAAAAAAAAAAkFcT/3diL/c/IwAAAAAAAAAAAAAA/H/X1n7shkEDdnpq0I4PXvNEx9av47acPeO++x4pPV+7f3xK8JIDd3zQ2dnZufz5iZO7Hw5rtVpd/2v7dT8e3vu46/WXjLzroG2PyqTP3/HUBVNHnDrv4VsHf2P5ze3PDdn67JDWRZfNnNXxhoGtVjl+SOvqrgdHDWi1yolDWrd0PRjb9WDKkNaKrgdHb33witZnuh68/pI5sy7teuKkyr9nsKdoa1/SGrTTYls7/dtgx/0vGfn0jJ6vfbxkz6sNbnXvf9TDXzqw18967GL/Pa9fju29/37/AwK71L/9v7C252sfL/nf3v8/vHrL4uhnu95/z+uX4+wf6hN8/t9po70/9/f6/H9o8JLb748Zvvq2rv23nfnAId1PDf6ffP7/yeuX43vvf+BOn/+7PsdP7vn8P6zVKifs5m8HpNLWfsOGvt7/+97/4Ff3uhmw4/7v/cq6fbr2f/+LraXdTw3p5/4n9/X+f2Ovv1egf9ra7+ns9f7fj/23RgcvuX3/6x8esfXz/7oHLzlgh5/1Z/8n9N7/mAWzrxwzf9HiI2fOnja9Y3rHFRPGjj9q3IQJ48eP2fqJYNuvu/mbAkns3vt/a69eNwNarY7t96seuHly1/43Prr0I91PDe/n/k/s8/3/UO//EBo1sDV0aOvqaQsWzDtq2689D8du+3XbXxbsvx///X/YEd1/Wc+fGQ5otQ7afj/6ggnDuvZ/zdyysvupof3c/5Q+9z9p5z+rBPpnN9//L+11s9P+j1l/3cKu/R/+g/3XdT/V3//+P6nP/d/t/R92R1t7q9Y30a79Hz3shpOrXZc2f/4H9Wli/yM33bK52nU52f6hPk3sf+qyN19c7bqcYv9Qnyb2/8jsC5dVuy6n2j/Up4n9v/SqzQdXuy6n2T/Up4n9P/ndZ++rdl3a7R/q08T+P3hn+9HVrstb7R/q08T+j7zqhxOrXZe32T/Up4n9X7b3GSuqXZfT7R/q08T+T+487oBq1+Xt9g/1aWL/A2743pJq1+UM+4f6NLH/Z6Ytm1Ptuky1f6hPE/tfMXL0C9Wuy5n2D/VpYv9Ln3vjlGrX5Sz7h/o0sf+v3n7Xk9WuyzvsH+rTxP4/cd7+d1W7LmfbP9Snif3/aNSje1W7Lu+0f6hPE/tfs2bFQ9Wuyzn2D/VpYv/LVwwaVe26nGv/UJ8m9n/9SdOfqHZdzrN/qE8T+x83/svnVrsu59s/1KeJ/R/0uW89W+26XGD/UJ8a9z+0+2vnGY8tnF/tJcqF9g/1aeL9f+HBH/9xtetykf1DfZrY/1s6Dp5R7bpMs3+oTxP7L7futabadbnY/qE+Tez/nI33TKp2XS6xf6hPE/tfue8XPlbtulxq/1CfJva/ae4VE6pdlw77h/o0sf/vvPf691W7LpfZP9Snif3f9uLXS7XrMt3+oT5N7H/92HPOq3ZdZtg/1KeJ/d9z6vOPV7suM+0f6tPE/petfGpBtevyLvuH+jSx/1WrTnm62nW53P6hPk3s//DRY0ZUuy6z7B/q08T+55y99EPVrsts+4f6NLH/4x+8/bXVrssV9g/1aWL/w7828ZPVrssc+4f6NLH/T098/6eqXZcr7R/q08T+N0867Ihq12Wu/UN9mtj/2ofG3lHtusyzf6hPE/v/wON3Vrwu8+0f6tPE/ue+7qWN1a7LAvuH+jSx/zdNPWtRtetylf1DfZrY/wF3T/liteuy0P6hPk3s//xvf//0atfl3fYP9Wli/4cdePEh1a7L1fYP9Wli/zNmrr6p2nVZZP9Qnyb2P3n52nHVrsti+4f6NLH/fZ+Zf2+163KN/UN9mtj/hkEHnlbturzH/qE+Tez//msf+2a163Kt/UN9mtj/TTd+tKPadbnO/qE+Tez/s1uGbqp2Xa63fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2IHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WQfRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAP//QrTe8A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x8000000000000000, 0x3}) 1.676604527s ago: executing program 4 (id=792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32, @ANYBLOB="060006000000000006000400"], 0x50}, 0x4, 0x700000000000000}, 0x0) 1.458776983s ago: executing program 0 (id=793): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4437, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 1.396114155s ago: executing program 5 (id=794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x28}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.303514368s ago: executing program 4 (id=795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x2, 0xac8, &(0x7f0000000080), 0x0}) 1.138238214s ago: executing program 5 (id=796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000004c0)={0x1, 0x12c, @pic={0xfc, 0x6, 0x2, 0x0, 0x7, 0x0, 0x8, 0x5, 0x5, 0x9, 0x6, 0x7, 0x1, 0x0, 0x0, 0xa8}}) 971.194949ms ago: executing program 4 (id=797): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{}, {@creator={'creator', 0x3d, "f992f5fd"}}, {@nls={'nls', 0x3d, 'macinuit'}}]}, 0x1, 0x5fa, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) unlink(&(0x7f0000000280)='./file1\x00') 676.262698ms ago: executing program 5 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xb) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000b000040000000000000000000000000000014"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) open(0x0, 0x14927e, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) 309.03496ms ago: executing program 4 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) 0s ago: executing program 1 (id=800): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,keep_last_dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=iso8859-15,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c0000636861727365743d6932e59609af561c78d0736f383835392d362c6e616d65636173653d312c6572726f72733d72656d6f756e7450726f2c6572726f72733d636f6e74696e75652c0084e6550322f0183e15b8ad32eef3ce753717560157bebc43b644835548020eb47aa9d13c5bb83c2f48c7fab53f5bead4d907fc9ae7e7a3f46c51e246c12d58cf7847a2738a56d923100eeca2cb2b9e2fc7a2da1708c25f2f5e7ba1a5c0a491a0d145779051f2920bddedb96090da131f26b5af169f667a848e494a82c83e607ea90830653bde5780014969b83e1ee45a36b8f684e5d20f58da947eecff32282b4200856859aad5f320fae91aa62877cdc6203dfb53e8a27f3a2f0ae19f"], 0x1, 0x1533, &(0x7f0000006800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x18) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ge0: port 1(bridge_slave_0) entered disabled state [ 236.519183][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.896289][ T6822] program syz.4.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.910755][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 237.061546][ T6821] loop1: detected capacity change from 0 to 128 [ 237.593997][ T6195] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.692541][ T6821] loop1: detected capacity change from 0 to 512 [ 237.712009][ T6195] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.752068][ T6829] loop4: detected capacity change from 0 to 256 [ 237.752586][ T6821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.825217][ T6821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 237.839401][ T6829] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 237.907161][ T6821] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.154: Invalid block bitmap block 0 in block_group 0 [ 238.100940][ T6821] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 238.162554][ T6821] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.154: attempt to clear invalid blocks 983261 len 1 [ 238.172338][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 238.235090][ T6821] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.154: Invalid inode table block 0 in block_group 0 [ 238.364842][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 238.375912][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 238.385089][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 238.394811][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 238.717462][ T6821] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 238.824597][ T6821] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 238.863587][ T6821] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.154: Invalid inode table block 0 in block_group 0 [ 238.945809][ T6821] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 239.010497][ T6821] EXT4-fs error (device loop1): ext4_truncate:4301: inode #11: comm syz.1.154: mark_inode_dirty error [ 239.051129][ T6821] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 239.096058][ T6821] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.154: Invalid inode table block 0 in block_group 0 [ 239.191668][ T6821] EXT4-fs (loop1): 1 truncate cleaned up [ 239.209956][ T6821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.307581][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.549466][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.571460][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.580638][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.299896][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.093265][ T23] usb 1-1: usb_control_msg returned -32 [ 241.099773][ T23] usbtmc 1-1:16.0: can't read capabilities [ 242.007358][ T6861] capability: warning: `syz.1.159' uses 32-bit capabilities (legacy support in use) [ 244.314547][ T5843] usb 1-1: USB disconnect, device number 2 [ 244.775477][ T6871] loop4: detected capacity change from 0 to 2048 [ 245.379070][ T6871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.502913][ T27] audit: type=1800 audit(1782171303.071:6): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.160" name="bus" dev="loop4" ino=1368 res=0 errno=0 [ 246.322891][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.337860][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.726200][ T6891] loop0: detected capacity change from 0 to 512 [ 247.737746][ T6891] ext4: Unknown parameter 'context' [ 249.135738][ T6904] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.161'. [ 249.856983][ T6909] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.234262][ T6917] loop0: detected capacity change from 0 to 256 [ 252.901768][ T6917] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 253.357928][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 254.169269][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 254.425296][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 254.485562][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 254.520812][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 257.585090][ T6944] ceph: No mds server is up or the cluster is laggy [ 257.596563][ T23] libceph: connect (1)[c::]:6789 error -101 [ 257.628017][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 260.445469][ T6980] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.044022][ T6993] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 262.066403][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 262.279216][ T6995] loop4: detected capacity change from 0 to 16 [ 264.272601][ T6996] misc userio: No port type given on /dev/userio [ 265.384576][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.396940][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.438865][ T6995] erofs: (device loop4): mounted with root inode @ nid 36. [ 265.693621][ T7001] loop2: detected capacity change from 0 to 256 [ 266.717991][ T7007] loop4: detected capacity change from 0 to 1024 [ 267.734644][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 267.746903][ T7007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.071708][ T7017] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 268.793351][ T7026] netlink: 'syz.2.187': attribute type 11 has an invalid length. [ 268.801326][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 269.240588][ T27] audit: type=1800 audit(1782695612.750:7): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.184" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 269.337985][ T6073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.226512][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 273.241965][ T5083] Bluetooth: hci4: command 0x0406 tx timeout [ 276.710875][ T7069] lo speed is unknown, defaulting to 1000 [ 276.717508][ T7069] lo speed is unknown, defaulting to 1000 [ 276.735479][ T7069] lo speed is unknown, defaulting to 1000 [ 276.767023][ T7069] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 276.810139][ T7069] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 276.919860][ T7069] lo speed is unknown, defaulting to 1000 [ 276.936518][ T7069] lo speed is unknown, defaulting to 1000 [ 276.949769][ T7069] lo speed is unknown, defaulting to 1000 [ 276.968081][ T7069] lo speed is unknown, defaulting to 1000 [ 285.018746][ T7102] loop4: detected capacity change from 0 to 512 [ 285.063644][ T7102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.153623][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 285.334542][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 286.067059][ T7102] EXT4-fs (loop4): 1 truncate cleaned up [ 286.121555][ T7102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.070057][ T6073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.254128][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 288.260308][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 288.607961][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 288.622591][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 289.166945][ T7119] ceph: No mds server is up or the cluster is laggy [ 289.196594][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 289.202775][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 290.657791][ T7148] comedi: valid board names for 8255 driver are: [ 290.664619][ T7148] 8255 [ 290.667478][ T7148] comedi: valid board names for vmk80xx driver are: [ 290.674553][ T7148] vmk80xx [ 290.677668][ T7148] comedi: valid board names for usbduxsigma driver are: [ 290.684834][ T7148] usbduxsigma [ 290.688290][ T7148] comedi: valid board names for usbduxfast driver are: [ 290.695278][ T7148] usbduxfast [ 290.698656][ T7148] comedi: valid board names for usbdux driver are: [ 290.705276][ T7148] usbdux [ 290.720593][ T7148] comedi: valid board names for ni6501 driver are: [ 290.727314][ T7148] ni6501 [ 290.730360][ T7148] comedi: valid board names for dt9812 driver are: [ 290.737003][ T7148] dt9812 [ 290.740036][ T7148] comedi: valid board names for ni_labpc_cs driver are: [ 290.747228][ T7148] ni_labpc_cs [ 290.750714][ T7148] comedi: valid board names for ni_daq_700 driver are: [ 290.757802][ T7148] ni_daq_700 [ 290.761177][ T7148] comedi: valid board names for labpc_pci driver are: [ 290.768084][ T7148] labpc_pci [ 290.771368][ T7148] comedi: valid board names for adl_pci9118 driver are: [ 290.800189][ T7148] pci9118dg [ 290.803605][ T7148] pci9118hg [ 290.806956][ T7148] pci9118hr [ 290.810321][ T7148] comedi: valid board names for 8255_pci driver are: [ 290.817126][ T7148] 8255_pci [ 290.820459][ T7148] comedi: valid board names for s526 driver are: [ 290.827597][ T7148] s526 [ 290.830676][ T7148] comedi: valid board names for multiq3 driver are: [ 290.837395][ T7148] multiq3 [ 290.840618][ T7148] comedi: valid board names for pcmuio driver are: [ 290.847282][ T7148] pcmuio48 [ 290.850631][ T7148] pcmuio96 [ 290.853897][ T7148] comedi: valid board names for pcmmio driver are: [ 290.860573][ T7148] pcmmio [ 290.863660][ T7148] comedi: valid board names for pcmda12 driver are: [ 290.870385][ T7148] pcmda12 [ 290.873592][ T7148] comedi: valid board names for pcmad driver are: [ 290.880156][ T7148] pcmad12 [ 290.883339][ T7148] pcmad16 [ 290.886675][ T7148] comedi: valid board names for ni_labpc driver are: [ 290.893513][ T7148] lab-pc-1200 [ 290.897032][ T7148] lab-pc-1200ai [ 290.900728][ T7148] lab-pc+ [ 290.903945][ T7148] comedi: valid board names for atmio16 driver are: [ 290.910774][ T7148] atmio16 [ 290.914033][ T7148] atmio16d [ 290.917276][ T7148] comedi: valid board names for ni_at_ao driver are: [ 290.924105][ T7148] at-ao-6 [ 290.927354][ T7148] at-ao-10 [ 290.930633][ T7148] comedi: valid board names for ni_at_a2150 driver are: [ 290.938473][ T7148] ni_at_a2150 [ 290.942142][ T7148] comedi: valid board names for adq12b driver are: [ 290.948839][ T7148] adq12b [ 290.951930][ T7148] comedi: valid board names for mpc624 driver are: [ 290.958745][ T7148] mpc624 [ 290.961834][ T7148] comedi: valid board names for c6xdigio driver are: [ 290.968711][ T7148] c6xdigio [ 290.971974][ T7148] comedi: valid board names for aio_iiro_16 driver are: [ 290.979076][ T7148] aio_iiro_16 [ 290.982621][ T7148] comedi: valid board names for aio_aio12_8 driver are: [ 290.989806][ T7148] aio_aio12_8 [ 290.993350][ T7148] aio_ai12_8 [ 290.996890][ T7148] aio_ao12_4 [ 291.000387][ T7148] comedi: valid board names for fl512 driver are: [ 291.006986][ T7148] fl512 [ 291.009987][ T7148] comedi: valid board names for dmm32at driver are: [ 291.016876][ T7148] dmm32at [ 291.020199][ T7148] comedi: valid board names for dt282x driver are: [ 291.026933][ T7148] dt2821 [ 291.030028][ T7148] dt2821-f [ 291.033316][ T7148] dt2821-g [ 291.036583][ T7148] dt2823 [ 291.039665][ T7148] dt2824-pgh [ 291.043807][ T7148] dt2824-pgl [ 291.047374][ T7148] dt2825 [ 291.050481][ T7148] dt2827 [ 291.053640][ T7148] dt2828 [ 291.056753][ T7148] dt2829 [ 291.060073][ T7148] dt21-ez [ 291.063314][ T7148] dt23-ez [ 291.066536][ T7148] dt24-ez [ 291.069717][ T7148] dt24-ez-pgl [ 291.073315][ T7148] comedi: valid board names for dt2817 driver are: [ 291.080005][ T7148] dt2817 [ 291.083099][ T7148] comedi: valid board names for dt2815 driver are: [ 291.089899][ T7148] dt2815 [ 291.092989][ T7148] comedi: valid board names for dt2814 driver are: [ 291.099750][ T7148] dt2814 [ 291.102853][ T7148] comedi: valid board names for dt2811 driver are: [ 291.109656][ T7148] dt2811-pgh [ 291.113113][ T7148] dt2811-pgl [ 291.116542][ T7148] comedi: valid board names for dt2801 driver are: [ 291.123229][ T7148] dt2801 [ 291.126314][ T7148] comedi: valid board names for das6402 driver are: [ 291.133096][ T7148] das6402-12 [ 291.136539][ T7148] das6402-16 [ 291.139984][ T7148] comedi: valid board names for das1800 driver are: [ 291.146719][ T7148] das-1701st [ 291.150176][ T7148] das-1701st-da [ 291.154612][ T7148] das-1702st [ 291.158237][ T7148] das-1702st-da [ 291.162000][ T7148] das-1702hr [ 291.165446][ T7148] das-1702hr-da [ 291.169227][ T7148] das-1701ao [ 291.172822][ T7148] das-1702ao [ 291.176277][ T7148] das-1801st [ 291.179721][ T7148] das-1801st-da [ 291.183495][ T7148] das-1802st [ 291.186907][ T7148] das-1802st-da [ 291.190623][ T7148] das-1802hr [ 291.194101][ T7148] das-1802hr-da [ 291.197812][ T7148] das-1801hc [ 291.201223][ T7148] das-1802hc [ 291.204685][ T7148] das-1801ao [ 291.208124][ T7148] das-1802ao [ 291.211558][ T7148] comedi: valid board names for das800 driver are: [ 291.218256][ T7148] das-800 [ 291.221430][ T7148] cio-das800 [ 291.224969][ T7148] das-801 [ 291.228128][ T7148] cio-das801 [ 291.232071][ T7148] das-802 [ 291.235278][ T7148] cio-das802 [ 291.307944][ T7148] cio-das802/16 [ 291.311651][ T7148] comedi: valid board names for isa-das08 driver are: [ 291.318454][ T7148] isa-das08 [ 291.321746][ T7148] das08-pgm [ 291.324986][ T7148] das08-pgh [ 291.328217][ T7148] das08-pgl [ 291.331478][ T7148] das08-aoh [ 291.334712][ T7148] das08-aol [ 291.337938][ T7148] das08-aom [ 291.341183][ T7148] das08/jr-ao [ 291.344629][ T7148] das08jr-16-ao [ 291.348212][ T7148] pc104-das08 [ 291.351625][ T7148] das08jr/16 [ 291.354998][ T7148] comedi: valid board names for das16m1 driver are: [ 291.361665][ T7148] das16m1 [ 291.364812][ T7148] comedi: valid board names for dac02 driver are: [ 291.372087][ T7148] dac02 [ 291.375035][ T7148] comedi: valid board names for rti802 driver are: [ 291.381582][ T7148] rti802 [ 291.384645][ T7148] comedi: valid board names for rti800 driver are: [ 291.391189][ T7148] rti800 [ 291.394175][ T7148] rti815 [ 291.397205][ T7148] comedi: valid board names for pcm3724 driver are: [ 291.403852][ T7148] pcm3724 [ 291.406947][ T7148] comedi: valid board names for pcl818 driver are: [ 291.413543][ T7148] pcl818l [ 291.416613][ T7148] pcl818h [ 291.419642][ T7148] pcl818hd [ 291.422761][ T7148] pcl818hg [ 291.425872][ T7148] pcl818 [ 291.428857][ T7148] pcl718 [ 291.431805][ T7148] pcm3718 [ 291.434833][ T7148] comedi: valid board names for pcl816 driver are: [ 291.441360][ T7148] pcl816 [ 291.444311][ T7148] pcl814b [ 291.447334][ T7148] comedi: valid board names for pcl812 driver are: [ 291.453865][ T7148] pcl812 [ 291.456856][ T7148] pcl812pg [ 291.460005][ T7148] acl8112pg [ 291.463212][ T7148] acl8112dg [ 291.466411][ T7148] acl8112hg [ 291.469661][ T7148] a821pgl [ 291.472693][ T7148] a821pglnda [ 291.475984][ T7148] a821pgh [ 291.479017][ T7148] a822pgl [ 291.482771][ T7148] a822pgh [ 291.485816][ T7148] a823pgl [ 291.488843][ T7148] a823pgh [ 291.491930][ T7148] pcl813 [ 291.494883][ T7148] pcl813b [ 291.497909][ T7148] acl8113 [ 291.500971][ T7148] iso813 [ 291.503940][ T7148] acl8216 [ 291.506977][ T7148] a826pg [ 291.509916][ T7148] comedi: valid board names for pcl730 driver are: [ 291.516444][ T7148] pcl730 [ 291.519388][ T7148] iso730 [ 291.522341][ T7148] acl7130 [ 291.525402][ T7148] pcm3730 [ 291.528483][ T7148] pcl725 [ 291.531420][ T7148] p8r8dio [ 291.534467][ T7148] acl7225b [ 291.537581][ T7148] p16r16dio [ 291.540779][ T7148] pcl733 [ 291.543756][ T7148] pcl734 [ 291.546764][ T7148] opmm-1616-xt [ 291.550260][ T7148] pearl-mm-p [ 291.553564][ T7148] ir104-pbf [ 291.556910][ T7148] comedi: valid board names for pcl726 driver are: [ 291.563426][ T7148] pcl726 [ 291.566420][ T7148] pcl727 [ 291.569366][ T7148] pcl728 [ 291.572419][ T7148] acl6126 [ 291.575449][ T7148] acl6128 [ 291.578560][ T7148] comedi: valid board names for pcl724 driver are: [ 291.585070][ T7148] pcl724 [ 291.588050][ T7148] pcl722 [ 291.591653][ T7148] pcl731 [ 291.594789][ T7148] acl7122 [ 291.597897][ T7148] acl7124 [ 291.600980][ T7148] pet48dio [ 291.604102][ T7148] pcmio48 [ 291.607153][ T7148] onyx-mm-dio [ 291.610573][ T7148] comedi: valid board names for pcl711 driver are: [ 291.617081][ T7148] pcl711 [ 291.620061][ T7148] pcl711b [ 291.623112][ T7148] acl8112hg [ 291.626405][ T7148] acl8112dg [ 291.629620][ T7148] comedi: valid board names for amplc_pc263 driver are: [ 291.636588][ T7148] pc263 [ 291.639446][ T7148] comedi: valid board names for amplc_pc236 driver are: [ 291.646451][ T7148] pc36at [ 291.649402][ T7148] comedi: valid board names for amplc_dio200 driver are: [ 291.656460][ T7148] pc212e [ 291.659423][ T7148] pc214e [ 291.662497][ T7148] pc215e [ 291.665449][ T7148] pc218e [ 291.668432][ T7148] pc272e [ 291.671385][ T7148] comedi: valid board names for comedi_parport driver are: [ 291.778661][ T7148] comedi_parport [ 291.784571][ T7148] comedi: valid board names for comedi_test driver are: [ 291.791982][ T7148] comedi_test [ 291.795402][ T7148] comedi: valid board names for comedi_bond driver are: [ 291.802532][ T7148] comedi_bond [ 292.058859][ T7155] loop1: detected capacity change from 0 to 128 [ 292.255529][ T7162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.206'. [ 294.365514][ T7155] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.417862][ T7155] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.808141][ T7174] loop4: detected capacity change from 0 to 128 [ 298.222306][ T7174] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 298.235175][ T7174] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 298.242984][ T7174] hpfs: You really don't want any checks? You are crazy... [ 298.250892][ T7174] hpfs: hpfs_map_sector(): read error [ 298.256333][ T7174] hpfs: code page support is disabled [ 298.263452][ T7174] hpfs: hpfs_map_4sectors(): unaligned read [ 298.269837][ T7174] hpfs: hpfs_map_4sectors(): unaligned read [ 298.275791][ T7174] hpfs: filesystem error: unable to find root dir [ 298.635985][ T7173] hpfs: hpfs_map_4sectors(): unaligned read [ 298.800841][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.816747][ T7178] loop0: detected capacity change from 0 to 512 [ 298.865155][ T7178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 298.924211][ T7178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 298.974934][ T7178] System zones: 1-12 [ 299.005960][ T7178] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 299.073972][ T7178] EXT4-fs (loop0): 1 truncate cleaned up [ 299.081821][ T7178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.474300][ T7197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.683141][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.798965][ T7200] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 304.770602][ T7226] loop4: detected capacity change from 0 to 256 [ 307.633462][ T7243] loop4: detected capacity change from 0 to 2048 [ 307.671515][ T7243] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.750701][ T7243] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 309.701853][ T7243] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 309.765213][ T7245] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 310.779691][ T7262] NILFS (nullb0): couldn't find nilfs on the device [ 311.541373][ T7266] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 311.584196][ T7265] IPVS: stopping master sync thread 7266 ... [ 313.608984][ T7289] loop1: detected capacity change from 0 to 128 [ 313.616483][ T7289] EXT4-fs: inline encryption not supported [ 315.161762][ T7289] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.193310][ T7289] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.235446][ T7285] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.230: checksumming directory block 0 [ 315.259667][ T7292] Can't find a SQUASHFS superblock on nullb0 [ 315.492949][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.545761][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 315.556586][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 315.564218][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.574325][ T5789] Workqueue: hci4 hci_rx_work [ 315.579095][ T5789] Call Trace: [ 315.582425][ T5789] [ 315.585405][ T5789] dump_stack_lvl+0x18c/0x250 [ 315.590152][ T5789] ? show_regs_print_info+0x20/0x20 [ 315.595424][ T5789] ? load_image+0x420/0x420 [ 315.599997][ T5789] sysfs_create_dir_ns+0x26e/0x2a0 [ 315.605165][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 315.610247][ T5789] ? sysfs_warn_dup+0xa0/0xa0 [ 315.614989][ T5789] ? do_raw_spin_unlock+0x121/0x230 [ 315.620263][ T5789] kobject_add_internal+0x617/0xc90 [ 315.625541][ T5789] kobject_add+0x164/0x240 [ 315.630030][ T5789] ? kobject_init+0x1d0/0x1d0 [ 315.634786][ T5789] ? get_device_parent+0x366/0x390 [ 315.639962][ T5789] device_add+0x3fa/0xc40 [ 315.644347][ T5789] hci_conn_add_sysfs+0xd5/0x1e0 [ 315.649344][ T5789] le_conn_complete_evt+0xe9f/0x1480 [ 315.654700][ T5789] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 315.661045][ T5789] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 315.666747][ T5789] ? mutex_unlock+0x10/0x10 [ 315.671315][ T5789] ? skb_pull_data+0xf0/0x1f0 [ 315.676069][ T5789] hci_le_conn_complete_evt+0x187/0x440 [ 315.681691][ T5789] ? hci_remote_host_features_evt+0x150/0x150 [ 315.687823][ T5789] hci_event_packet+0x7b4/0x1280 [ 315.692832][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 315.697916][ T5789] ? lock_chain_count+0x20/0x20 [ 315.702856][ T5789] ? bis_list+0x290/0x290 [ 315.707256][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 315.712528][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 315.717792][ T5789] hci_rx_work+0x43a/0xd60 [ 315.722267][ T5789] ? process_scheduled_works+0x975/0x1600 [ 315.728033][ T5789] process_scheduled_works+0xa60/0x1600 [ 315.733644][ T5789] ? worker_attach_to_pool+0x370/0x370 [ 315.739152][ T5789] ? assign_work+0x3cc/0x5d0 [ 315.743775][ T5789] worker_thread+0xa5e/0xfe0 [ 315.748412][ T5789] ? _raw_spin_unlock+0x40/0x40 [ 315.753301][ T5789] ? __kthread_parkme+0x71/0x1c0 [ 315.758275][ T5789] kthread+0x2fa/0x390 [ 315.762368][ T5789] ? pr_cont_work+0x550/0x550 [ 315.767072][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 315.771689][ T5789] ret_from_fork+0x48/0x80 [ 315.776139][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 315.780774][ T5789] ret_from_fork_asm+0x11/0x20 [ 315.785582][ T5789] [ 315.791614][ T5789] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 315.805786][ T5789] Bluetooth: hci4: failed to register connection device [ 315.876203][ T7301] loop2: detected capacity change from 0 to 64 [ 320.539577][ T7328] loop1: detected capacity change from 0 to 256 [ 320.551614][ T7328] exfat: Deprecated parameter 'namecase' [ 320.557936][ T7328] exfat: Deprecated parameter 'namecase' [ 320.563955][ T7328] exfat: Deprecated parameter 'namecase' [ 321.484991][ T7328] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 322.381887][ T5083] Bluetooth: hci4: command 0x0406 tx timeout [ 325.969999][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 329.659484][ T7379] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 331.020855][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.038230][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.294766][ T5789] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 331.354290][ T7393] veth0: entered promiscuous mode [ 331.367532][ T7394] veth0: left promiscuous mode [ 333.099691][ T7409] loop1: detected capacity change from 0 to 1024 [ 333.264759][ T7409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.261162][ T7415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 338.029602][ T7422] loop2: detected capacity change from 0 to 512 [ 338.036705][ T7422] EXT4-fs: Ignoring removed oldalloc option [ 338.081178][ T7422] EXT4-fs (loop2): Test dummy encryption mode enabled [ 338.127665][ T7422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.214529][ T7421] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 338.218811][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.260791][ T7421] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 339.014119][ T7434] loop0: detected capacity change from 0 to 16 [ 342.469948][ T7434] erofs: (device loop0): mounted with root inode @ nid 36. [ 342.618252][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.265908][ T7451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.254'. [ 345.732077][ T7476] loop2: detected capacity change from 0 to 256 [ 345.749732][ T7476] exfat: Deprecated parameter 'namecase' [ 345.755804][ T7476] exfat: Deprecated parameter 'namecase' [ 345.761824][ T7476] exfat: Deprecated parameter 'namecase' [ 345.824188][ T7476] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 348.093360][ T7495] loop4: detected capacity change from 0 to 256 [ 348.106461][ T7495] exfat: Deprecated parameter 'namecase' [ 348.113006][ T7495] exfat: Deprecated parameter 'namecase' [ 348.118823][ T7495] exfat: Deprecated parameter 'namecase' [ 348.270052][ T7495] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 351.553237][ T7515] loop1: detected capacity change from 0 to 256 [ 352.453621][ T7515] FAT-fs (loop1): Directory bread(block 64) failed [ 352.460940][ T7515] FAT-fs (loop1): Directory bread(block 65) failed [ 352.468040][ T7515] FAT-fs (loop1): Directory bread(block 66) failed [ 352.474724][ T7515] FAT-fs (loop1): Directory bread(block 67) failed [ 352.481736][ T7515] FAT-fs (loop1): Directory bread(block 68) failed [ 352.488421][ T7515] FAT-fs (loop1): Directory bread(block 69) failed [ 352.495445][ T7515] FAT-fs (loop1): Directory bread(block 70) failed [ 352.502174][ T7515] FAT-fs (loop1): Directory bread(block 71) failed [ 352.510440][ T7515] FAT-fs (loop1): Directory bread(block 72) failed [ 352.517110][ T7515] FAT-fs (loop1): Directory bread(block 73) failed [ 352.942418][ T7517] loop4: detected capacity change from 0 to 64 [ 353.463067][ T7515] syz.1.266: attempt to access beyond end of device [ 353.463067][ T7515] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 353.479592][ T7515] syz.1.266: attempt to access beyond end of device [ 353.479592][ T7515] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 353.773128][ T27] audit: type=1800 audit(1782695691.677:8): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=1048604 res=0 errno=0 [ 353.972524][ T27] audit: type=1800 audit(1782695692.164:9): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.266" name="file0" dev="loop1" ino=1048605 res=0 errno=0 [ 354.588198][ T6293] kworker/u4:21: attempt to access beyond end of device [ 354.588198][ T6293] loop4: rw=1048577, sector=161, nr_sectors = 1 limit=64 [ 356.902882][ T6293] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 356.911661][ T6293] kworker/u4:21: attempt to access beyond end of device [ 356.911661][ T6293] loop4: rw=1048577, sector=162, nr_sectors = 1 limit=64 [ 357.017249][ T6293] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 357.037766][ T6293] kworker/u4:21: attempt to access beyond end of device [ 357.037766][ T6293] loop4: rw=1048577, sector=163, nr_sectors = 1 limit=64 [ 357.311788][ T6293] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 357.492034][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 357.508003][ T6293] kworker/u4:21: attempt to access beyond end of device [ 357.508003][ T6293] loop4: rw=1048577, sector=167, nr_sectors = 1 limit=64 [ 357.536687][ T6293] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 357.563987][ T6293] kworker/u4:21: attempt to access beyond end of device [ 357.563987][ T6293] loop4: rw=1048577, sector=169, nr_sectors = 1 limit=64 [ 357.653270][ T6293] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 357.662202][ T6293] kworker/u4:21: attempt to access beyond end of device [ 357.662202][ T6293] loop4: rw=1048577, sector=171, nr_sectors = 1 limit=64 [ 357.840545][ T6293] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 358.009440][ T6293] kworker/u4:21: attempt to access beyond end of device [ 358.009440][ T6293] loop4: rw=1048577, sector=172, nr_sectors = 1 limit=64 [ 358.315644][ T6293] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 358.493882][ T6293] kworker/u4:21: attempt to access beyond end of device [ 358.493882][ T6293] loop4: rw=1048577, sector=173, nr_sectors = 1 limit=64 [ 358.712105][ T6293] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 358.724361][ T6293] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 358.733085][ T6293] Buffer I/O error on dev loop4, logical block 175, lost async page write [ 359.849194][ T7542] loop1: detected capacity change from 0 to 1024 [ 360.692740][ T7539] comedi comedi0: Minor 7 could not be opened [ 360.826755][ T7550] loop2: detected capacity change from 0 to 16 [ 360.903372][ T7550] erofs: (device loop2): mounted with root inode @ nid 36. [ 361.769912][ T6286] hfsplus: b-tree write err: -5, ino 25 [ 361.803837][ T6286] hfsplus: b-tree write err: -5, ino 4 [ 361.821668][ T6286] hfsplus: b-tree write err: -5, ino 2 [ 361.850077][ T6286] hfsplus: b-tree write err: -5, ino 22 [ 363.405303][ T7557] loop0: detected capacity change from 0 to 1024 [ 363.425836][ T7565] loop2: detected capacity change from 0 to 256 [ 368.776661][ T5789] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 371.183271][ T7618] loop1: detected capacity change from 0 to 512 [ 371.250934][ T7623] program syz.2.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.459597][ T7618] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 372.266265][ T7618] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.282: iget: bad i_size value: 38620345925642 [ 372.378230][ T7618] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.282: couldn't read orphan inode 15 (err -117) [ 372.405999][ T7618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.815318][ T28] IPVS: starting estimator thread 0... [ 373.972343][ T6291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:20: bg 0: block 5: invalid block bitmap [ 373.987078][ T7640] IPVS: using max 18 ests per chain, 43200 per kthread [ 374.029669][ T6291] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 374.061872][ T6291] EXT4-fs (loop1): This should not happen!! Data will be lost [ 374.061872][ T6291] [ 374.091808][ T6291] EXT4-fs (loop1): Total free blocks count 0 [ 374.123341][ T6291] EXT4-fs (loop1): Free/Dirty block details [ 374.144884][ T6291] EXT4-fs (loop1): free_blocks=0 [ 374.168046][ T6291] EXT4-fs (loop1): dirty_blocks=65 [ 374.173250][ T6291] EXT4-fs (loop1): Block reservation details [ 374.224514][ T6291] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 374.229589][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 374.261357][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.425771][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 374.446851][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.551208][ T7652] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 374.584396][ T7651] IPVS: stopping master sync thread 7652 ... [ 374.886074][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.846264][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 375.855405][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.882009][ T9] usb 3-1: config 0 descriptor?? [ 375.941380][ T9] usb 3-1: can't set config #0, error -71 [ 375.974880][ T9] usb 3-1: USB disconnect, device number 2 [ 377.939381][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 377.939381][ T5789] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 378.149831][ T7670] Can't find a SQUASHFS superblock on nullb0 [ 379.856806][ T7682] loop0: detected capacity change from 0 to 256 [ 381.275699][ T7682] exfat: Deprecated parameter 'namecase' [ 381.281467][ T7682] exfat: Deprecated parameter 'namecase' [ 381.287263][ T7682] exfat: Deprecated parameter 'namecase' [ 381.345846][ T7682] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 381.914816][ T7689] loop2: detected capacity change from 0 to 32768 [ 381.950140][ T7689] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 385.962449][ T7712] block device autoloading is deprecated and will be removed. [ 387.369011][ T7717] loop0: detected capacity change from 0 to 128 [ 387.437430][ T7717] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.234616][ T7717] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 391.646802][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.930233][ T5825] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 393.538911][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 393.772012][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.797194][ T5825] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 393.805052][ T5825] usb 3-1: can't read configurations, error -71 [ 393.856613][ T7747] veth0: entered promiscuous mode [ 393.863919][ T7747] veth0: left promiscuous mode [ 397.919894][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.929989][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.668052][ T7781] syz_tun: entered allmulticast mode [ 400.994865][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.313'. [ 401.199496][ T7396] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 401.452017][ T7396] usb 2-1: Using ep0 maxpacket: 16 [ 401.530297][ T7396] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.590430][ T7396] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.719486][ T7396] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 401.810056][ T7396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.235317][ T7396] usb 2-1: config 0 descriptor?? [ 404.258033][ T7396] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 404.495111][ T7806] netlink: 'syz.4.317': attribute type 11 has an invalid length. [ 404.524888][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 407.963194][ T7396] usb 2-1: USB disconnect, device number 3 [ 408.116057][ T7810] fido_id[7810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 410.271981][ T7844] fuse: Unknown parameter '0x0000000000000007' [ 412.657454][ T7848] netlink: 'syz.0.325': attribute type 13 has an invalid length. [ 412.733747][ T7842] comedi comedi0: Minor 7 could not be opened [ 412.763302][ T8] IPVS: starting estimator thread 0... [ 412.769541][ T7850] loop4: detected capacity change from 0 to 1024 [ 412.826092][ T7850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.871473][ T1190] IPVS: starting estimator thread 0... [ 412.952474][ T7852] IPVS: using max 28 ests per chain, 67200 per kthread [ 413.041728][ T7858] IPVS: using max 18 ests per chain, 43200 per kthread [ 413.151095][ T7854] netlink: 'syz.1.326': attribute type 13 has an invalid length. [ 413.163852][ T7854] netlink: 'syz.1.326': attribute type 17 has an invalid length. [ 413.675860][ T7854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.839556][ T7857] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 413.878350][ T6073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.109087][ T7874] veth0: entered promiscuous mode [ 415.116293][ T7874] veth0: left promiscuous mode [ 416.107331][ T7880] Cannot find set identified by id 0 to match [ 417.237510][ T7883] loop4: detected capacity change from 0 to 2048 [ 417.257334][ T7883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.308512][ T7939] loop1: detected capacity change from 0 to 1024 [ 429.507205][ T7939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.596226][ T5789] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 434.892014][ T7976] loop0: detected capacity change from 0 to 512 [ 435.079541][ T7976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.095667][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.100297][ T7976] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.724238][ T7989] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 437.491342][ T27] audit: type=1804 audit(1783220058.773:10): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.357" name="bus" dev="ramfs" ino=14482 res=1 errno=0 [ 441.044546][ T27] audit: type=1804 audit(1783220058.801:11): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.357" name="bus" dev="ramfs" ino=14482 res=1 errno=0 [ 441.696710][ T8015] 9pnet_virtio: no channels available for device syz [ 442.483326][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.929125][ T5789] Bluetooth: hci1: unexpected event for opcode 0x200b [ 449.494110][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 450.327699][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 450.501303][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.531542][ T23] usb 1-1: config 0 has no interfaces? [ 450.552225][ T23] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 450.577476][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.597522][ T23] usb 1-1: Product: syz [ 450.608894][ T23] usb 1-1: Manufacturer: syz [ 450.613684][ T23] usb 1-1: SerialNumber: syz [ 450.626538][ T23] usb 1-1: config 0 descriptor?? [ 450.849607][ T8062] overlayfs: missing 'lowerdir' [ 452.797154][ T5820] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 453.804985][ T5820] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.838976][ T5820] usb 5-1: not running at top speed; connect to a high speed hub [ 453.917417][ T5820] usb 5-1: string descriptor 0 read error: -71 [ 453.923895][ T5820] usb 5-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 453.981281][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.013350][ T5820] usb 5-1: can't set config #1, error -71 [ 454.028272][ T5820] usb 5-1: USB disconnect, device number 2 [ 454.148603][ T8075] netlink: 436 bytes leftover after parsing attributes in process `syz.2.372'. [ 454.158687][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.372'. [ 455.401138][ T8077] loop4: detected capacity change from 0 to 32768 [ 455.431561][ T8077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.373 (8077) [ 456.313807][ T8077] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.324246][ T8077] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 456.333049][ T8077] BTRFS error (device loop4): superblock checksum mismatch [ 456.347665][ T8077] BTRFS error (device loop4): open_ctree failed: -22 [ 456.390118][ T7396] usb 1-1: USB disconnect, device number 3 [ 456.677090][ T7940] udevd[7940]: incorrect btrfs checksum on /dev/loop4 [ 457.829219][ T8088] usb usb8: usbfs: process 8088 (syz.0.376) did not claim interface 0 before use [ 457.962007][ T8091] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 458.737621][ T8101] netlink: 277 bytes leftover after parsing attributes in process `syz.4.377'. [ 460.849226][ T8105] 9pnet_virtio: no channels available for device syz [ 462.312352][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.862418][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.187165][ T8114] loop0: detected capacity change from 0 to 256 [ 463.194555][ T8114] exfat: Deprecated parameter 'utf8' [ 463.228054][ T8114] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 464.789874][ T5817] IPVS: starting estimator thread 0... [ 464.836550][ T8122] loop4: detected capacity change from 0 to 4096 [ 465.224096][ T8127] IPVS: using max 18 ests per chain, 43200 per kthread [ 465.459424][ T7940] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 467.452472][ T8143] befs: (nullb0): invalid magic header [ 468.994786][ T5817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 469.144014][ T5789] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 469.158160][ T5817] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.255811][ T8166] loop4: detected capacity change from 0 to 16 [ 470.455939][ T8166] erofs: (device loop4): mounted with root inode @ nid 36. [ 470.473528][ T8165] loop2: detected capacity change from 0 to 2048 [ 470.529741][ T8170] 9pnet_virtio: no channels available for device syz [ 471.116438][ T8166] netlink: 'syz.4.395': attribute type 11 has an invalid length. [ 471.308104][ T8165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.324508][ T8166] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.395'. [ 471.635371][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 471.966779][ T5820] usb 5-1: Using ep0 maxpacket: 32 [ 471.981651][ T5820] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 472.127815][ T8180] netlink: 'syz.1.396': attribute type 13 has an invalid length. [ 472.630498][ T5820] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 472.639230][ T5820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 472.650113][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.659906][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 472.669769][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.679609][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.689516][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.702739][ T5820] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 472.712284][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.732130][ T5820] usb 5-1: config 0 descriptor?? [ 473.268547][ T5820] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 473.317457][ T5820] usb 5-1: USB disconnect, device number 3 [ 473.340820][ T5820] usblp0: removed [ 474.014711][ T8188] netlink: 'syz.2.407': attribute type 13 has an invalid length. [ 475.610457][ T7396] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 476.029721][ T7396] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 476.099851][ T7396] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 476.165017][ T7396] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 476.277054][ T7396] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.448235][ T7396] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.737479][ T7396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.236999][ T7396] usb 2-1: GET_CAPABILITIES returned 0 [ 478.096623][ T7396] usbtmc 2-1:16.0: can't read capabilities [ 478.129253][ T8208] loop4: detected capacity change from 0 to 128 [ 478.456651][ T8214] 9pnet_virtio: no channels available for device syz [ 479.290577][ T7396] usb 2-1: USB disconnect, device number 4 [ 479.339332][ T5789] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 480.831253][ T8242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 480.861225][ T8242] loop1: detected capacity change from 0 to 512 [ 480.869204][ T8242] EXT4-fs: Ignoring removed orlov option [ 482.389913][ T8242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 482.414855][ T8242] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #17: comm syz.1.412: corrupted in-inode xattr: invalid ea_ino [ 482.429238][ T8242] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.412: couldn't read orphan inode 17 (err -117) [ 482.443313][ T8242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.503463][ T8240] program syz.4.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.383114][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.007849][ T8272] hub 8-0:1.0: USB hub found [ 489.026849][ T8272] hub 8-0:1.0: 1 port detected [ 492.326752][ T8293] fuse: Unknown parameter '0x0000000000000007' [ 495.368740][ T8301] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8303] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8301] [ 496.306708][ T8308] loop1: detected capacity change from 0 to 512 [ 497.188031][ T8308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 497.330639][ T8308] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.427: iget: bad i_size value: 38620345925642 [ 497.391644][ T8308] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.427: couldn't read orphan inode 15 (err -117) [ 497.451378][ T8308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.985417][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.341757][ T8366] overlayfs: failed to resolve './bus': -2 [ 505.133760][ T8371] loop0: detected capacity change from 0 to 128 [ 505.320291][ T8361] comedi comedi0: comedi_config --init_data is deprecated [ 506.425512][ T8361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.667324][ T8384] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 508.409266][ T8390] tipc: Failed to remove unknown binding: 66,0,0/0:1740636262/1740636264 [ 508.419006][ T8390] tipc: Failed to remove unknown binding: 66,0,0/0:1740636262/1740636263 [ 508.520657][ T8380] tipc: Failed to remove unknown binding: 66,0,0/0:1740636262/1740636264 [ 508.531014][ T8380] tipc: Failed to remove unknown binding: 66,0,0/0:1740636262/1740636263 [ 508.640106][ T8394] loop4: detected capacity change from 0 to 164 [ 511.276043][ T8401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 513.020903][ T8404] loop2: detected capacity change from 0 to 512 [ 513.086096][ T8404] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.447: corrupted in-inode xattr: invalid size in ea xattr [ 513.110883][ T8404] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.447: couldn't read orphan inode 15 (err -117) [ 513.126245][ T8404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.184319][ T5789] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 513.250877][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.479635][ T8412] overlayfs: failed to resolve './bus': -2 [ 515.631846][ T8424] comedi comedi0: comedi_config --init_data is deprecated [ 516.814473][ T8432] binder: 8426:8432 ioctl c0306201 2000000003c0 returned -14 [ 518.288174][ T8424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.592266][ T8439] loop0: detected capacity change from 0 to 512 [ 518.763127][ T8439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 520.193121][ T8439] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.455: iget: bad i_size value: 38620345925642 [ 520.229493][ T8439] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.455: couldn't read orphan inode 15 (err -117) [ 520.290013][ T8439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.381794][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.423275][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.885839][ T8461] overlayfs: failed to resolve './bus': -2 [ 522.658050][ T8464] loop4: detected capacity change from 0 to 256 [ 522.915325][ T8467] overlayfs: missing 'lowerdir' [ 523.262485][ T5817] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 523.591960][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.699986][ T5817] usb 2-1: not running at top speed; connect to a high speed hub [ 523.892102][ T8469] loop4: detected capacity change from 0 to 64 [ 523.924058][ T5817] usb 2-1: string descriptor 0 read error: -22 [ 524.019846][ T5817] usb 2-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 524.198346][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.750064][ T5817] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 524.798142][ T8472] loop2: detected capacity change from 0 to 16 [ 524.978384][ T5817] usb 2-1: MIDIStreaming interface descriptor not found [ 525.040653][ T8472] erofs: (device loop2): mounted with root inode @ nid 36. [ 525.886891][ T8472] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 525.927767][ T8472] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.453'. [ 526.007397][ T8479] loop0: detected capacity change from 0 to 64 [ 526.027167][ T8472] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 526.051196][ T8479] hfs: get root inode failed [ 526.056901][ T5817] usb 2-1: USB disconnect, device number 5 [ 527.857382][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.863741][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.296825][ T8492] befs: (nullb0): invalid magic header [ 531.242184][ T8511] bio_check_eod: 119 callbacks suppressed [ 531.242233][ T8511] syz.0.472: attempt to access beyond end of device [ 531.242233][ T8511] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 531.335834][ T8511] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 532.615121][ T1190] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 532.703035][ T1190] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 532.741368][ T5789] Bluetooth: hci1: unexpected event for opcode 0x201c [ 533.346917][ T8520] loop0: detected capacity change from 0 to 32768 [ 533.395778][ T8520] jfs_mount: Mount Failure: superblock is corrupt! [ 533.412061][ T8520] Mount JFS Failure: -22 [ 533.416395][ T8520] jfs_mount failed w/return code = -22 [ 533.486725][ T8513] loop2: detected capacity change from 0 to 32768 [ 533.694090][ T8513] ERROR: (device loop2): diRead: i_ino != di_number [ 533.694090][ T8513] [ 533.834501][ T8533] overlayfs: missing 'lowerdir' [ 533.931515][ T1190] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 534.183103][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 534.749514][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 534.846023][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 535.379183][ T9] usb 1-1: string descriptor 0 read error: -22 [ 535.520556][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 535.644289][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.066941][ T1190] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 536.075444][ T1190] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 536.445588][ T1190] usb 2-1: config 8 has no interface number 0 [ 536.451794][ T1190] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 536.470427][ T1190] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 536.479766][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.498652][ T1190] usb 2-1: Product: syz [ 536.502888][ T1190] usb 2-1: Manufacturer: syz [ 536.507523][ T1190] usb 2-1: SerialNumber: syz [ 536.583475][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 536.694479][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 536.808511][ T1190] usb 2-1: USB disconnect, device number 6 [ 537.148939][ T9] usb 1-1: USB disconnect, device number 4 [ 537.710647][ T8541] loop1: detected capacity change from 0 to 4096 [ 537.766116][ T8541] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 537.927662][ T8541] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 537.967376][ T8541] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 537.991526][ T8541] ntfs3: loop1: Failed to load $Bitmap (-22). [ 538.003315][ T8541] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 539.272166][ T8551] loop1: detected capacity change from 0 to 8 [ 539.822740][ T8557] loop0: detected capacity change from 0 to 256 [ 539.856914][ T8557] FAT-fs (loop0): bogus logical sector size 13 [ 539.874297][ T8557] FAT-fs (loop0): Can't find a valid FAT filesystem [ 539.910737][ T5817] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 540.116544][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 540.126054][ T5817] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 540.172112][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.180231][ T5817] usb 2-1: Product: syz [ 540.198427][ T5817] usb 2-1: Manufacturer: syz [ 540.206411][ T5817] usb 2-1: SerialNumber: syz [ 540.634417][ T1190] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 540.658193][ T5817] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 540.673333][ T5817] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 540.890957][ T1190] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 540.958971][ T1190] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 541.126905][ T1190] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 541.267967][ T1190] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.585423][ T5817] usb 2-1: USB disconnect, device number 7 [ 541.620179][ T1190] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.673559][ T1190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.703736][ T8480] udevd[8480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.777753][ T5789] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 541.806749][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 542.001041][ T1190] usb 1-1: GET_CAPABILITIES returned 0 [ 542.011731][ T1190] usbtmc 1-1:16.0: can't read capabilities [ 542.068794][ T8570] futex_wake_op: syz.4.492 tries to shift op by 36; fix this program [ 542.257441][ T8572] loop2: detected capacity change from 0 to 512 [ 542.282605][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 542.294911][ T8559] usbtmc 1-1:16.0: Unable to send data, error -71 [ 542.365650][ T8572] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.493: dx entry: limit 0 != root limit 125 [ 542.484638][ T8572] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.493: Corrupt directory, running e2fsck is recommended [ 542.559075][ T8572] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 542.569108][ T8572] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.493: corrupted in-inode xattr: invalid ea_ino [ 542.606468][ T5825] usb 1-1: USB disconnect, device number 5 [ 542.646352][ T8572] EXT4-fs (loop2): Remounting filesystem read-only [ 542.670623][ T8572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.818332][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.057487][ T8581] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0000 with DS=0x91 [ 543.518196][ T5825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 544.079073][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 544.145233][ T5825] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 544.253802][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.286258][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.324958][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.368671][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.421266][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.436357][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.501942][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.534549][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.558489][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.579269][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.605157][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.621271][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.640001][ T8578] loop1: detected capacity change from 0 to 32768 [ 544.648726][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.659411][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.677017][ T8578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.502 (8578) [ 544.700501][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.711329][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.737498][ T8578] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 544.751727][ T5825] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 544.764953][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.784241][ T8578] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 544.793310][ T5825] usb 5-1: Product: syz [ 544.798341][ T5825] usb 5-1: Manufacturer: syz [ 544.803057][ T5825] usb 5-1: SerialNumber: syz [ 544.808035][ T8578] BTRFS info (device loop1): force zlib compression, level 3 [ 544.816240][ T8578] BTRFS info (device loop1): disabling free space tree [ 544.837700][ T8578] BTRFS info (device loop1): enabling ssd optimizations [ 544.848669][ T8578] BTRFS info (device loop1): allowing degraded mounts [ 544.860656][ T8578] BTRFS info (device loop1): trying to use backup root at mount time [ 544.892844][ T8578] BTRFS info (device loop1): enabling free space tree [ 544.904452][ T8578] BTRFS info (device loop1): using free space tree [ 544.997362][ T8591] loop2: detected capacity change from 0 to 4096 [ 545.077281][ T5825] usb 5-1: USB disconnect, device number 4 [ 545.096271][ T8578] BTRFS info (device loop1): auto enabling async discard [ 545.128774][ T8578] BTRFS info (device loop1): checking UUID tree [ 545.183027][ T8591] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 545.322415][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 545.535832][ T8589] loop0: detected capacity change from 0 to 32768 [ 545.589351][ T8477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (8477) [ 546.790306][ T8612] loop4: detected capacity change from 0 to 32768 [ 546.928298][ T8612] JBD2: Unrecognised features on journal [ 546.960240][ T8617] loop1: detected capacity change from 0 to 32768 [ 546.967089][ T8612] (syz.4.504,8612,1):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 547.005784][ T8612] (syz.4.504,8612,1):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 547.015284][ T8612] (syz.4.504,8612,1):ocfs2_check_volume:2488 ERROR: status = -22 [ 547.038740][ T8612] (syz.4.504,8612,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 547.067046][ T8612] (syz.4.504,8612,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 547.074930][ T8566] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 547.114188][ T8625] loop2: detected capacity change from 0 to 32768 [ 547.141446][ T8625] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.508 (8625) [ 547.175491][ T8631] loop0: detected capacity change from 0 to 4096 [ 547.196440][ T8625] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 547.240540][ T8631] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 547.251870][ T8625] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 547.325195][ T8625] BTRFS info (device loop2): disabling free space tree [ 547.348980][ T8631] ntfs: (device loop0): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 547.357313][ T8625] BTRFS info (device loop2): turning on async discard [ 547.398545][ T8625] BTRFS info (device loop2): doing ref verification [ 547.406355][ T8631] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 547.414483][ T8631] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 547.434466][ T8625] BTRFS error (device loop2): cannot disable free space tree [ 547.467045][ T8625] BTRFS error (device loop2): open_ctree failed: -22 [ 547.482752][ T8631] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 547.515086][ T7940] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (7940) [ 547.573170][ T8631] ntfs: volume version 3.1. [ 547.610778][ T8631] ntfs: (device loop0): ntfs_read_locked_inode(): Found unknown compression method or corrupt file. [ 547.660916][ T8631] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 547.676158][ T8631] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 549.567254][ T8640] loop2: detected capacity change from 0 to 32768 [ 549.578264][ T8640] (syz.2.513,8640,0):ocfs2_verify_volume:2364 ERROR: bad block number on superblock: found 0, should be 2 [ 549.615735][ T8640] (syz.2.513,8640,0):ocfs2_verify_volume:2387 ERROR: status = -22 [ 549.628931][ T8653] loop4: detected capacity change from 0 to 4096 [ 549.637058][ T8640] (syz.2.513,8640,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 549.654483][ T8640] (syz.2.513,8640,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 549.663775][ T8653] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 549.725901][ T7396] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 549.930239][ T7396] usb 1-1: Using ep0 maxpacket: 8 [ 549.948534][ T7396] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 549.975027][ T7396] usb 1-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=70.4b [ 550.006053][ T7396] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 550.036217][ T7396] usb 1-1: Product: syz [ 550.047149][ T7396] usb 1-1: Manufacturer: syz [ 550.069054][ T7396] usb 1-1: SerialNumber: syz [ 550.319503][ T7396] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 550.358441][ T7396] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 550.377014][ T8649] loop1: detected capacity change from 0 to 32768 [ 550.418566][ T7396] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 550.441982][ T8649] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 550.483109][ T8649] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 550.497755][ T7396] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 550.526905][ T8649] BTRFS info (device loop1): force clearing of disk cache [ 550.555231][ T7396] usb 1-1: USB disconnect, device number 6 [ 550.558904][ T8649] BTRFS info (device loop1): setting nodatacow, compression disabled [ 550.607958][ T7396] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 550.616173][ T8649] BTRFS info (device loop1): turning off barriers [ 550.646338][ T8649] BTRFS info (device loop1): disabling free space tree [ 550.671262][ T8649] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 550.683456][ T7396] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 550.710158][ T8649] BTRFS info (device loop1): trying to use backup root at mount time [ 550.726733][ T7396] visor 1-1:1.0: device disconnected [ 550.830412][ T6299] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 550.854524][ T8649] BTRFS warning (device loop1): couldn't read tree root [ 550.915942][ T8649] BTRFS warning (device loop1): try to load backup roots slot 1 [ 550.950975][ T6305] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 551.035761][ T8649] BTRFS warning (device loop1): couldn't read tree root [ 551.042795][ T8649] BTRFS warning (device loop1): try to load backup roots slot 2 [ 551.089660][ T6299] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 551.143596][ T8649] BTRFS warning (device loop1): couldn't read tree root [ 551.150631][ T8649] BTRFS warning (device loop1): try to load backup roots slot 3 [ 551.211295][ T8649] BTRFS info (device loop1): enabling ssd optimizations [ 551.241039][ T8649] BTRFS info (device loop1): auto enabling async discard [ 551.419068][ T8649] BTRFS info (device loop1): rebuilding free space tree [ 551.549138][ T8649] BTRFS info (device loop1): disabling free space tree [ 551.681819][ T8649] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 551.877570][ T8655] loop2: detected capacity change from 0 to 32768 [ 551.899988][ T8649] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 552.172982][ T8655] XFS: noattr2 mount option is deprecated. [ 552.178975][ T8655] XFS: attr2 mount option is deprecated. [ 552.260460][ T8655] XFS (loop2): attr2 and noattr2 cannot both be specified. [ 552.394490][ T8661] loop4: detected capacity change from 0 to 32768 [ 552.454482][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 552.598026][ T8661] JBD2: Ignoring recovery information on journal [ 552.645482][ T8689] loop0: detected capacity change from 0 to 512 [ 552.668755][ T8661] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 552.694305][ T8661] JBD2: bad block at offset 32 [ 552.722101][ T8689] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.526: dx entry: limit 0 != root limit 125 [ 552.758272][ T8689] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.526: Corrupt directory, running e2fsck is recommended [ 552.825635][ T8661] (syz.4.523,8661,1):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 552.849352][ T8689] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 552.883000][ T8689] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.526: corrupted in-inode xattr: invalid ea_ino [ 552.887742][ T8661] (syz.4.523,8661,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 552.929245][ T8689] EXT4-fs (loop0): Remounting filesystem read-only [ 552.949889][ T8689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.984881][ T8661] (syz.4.523,8661,0):ocfs2_check_volume:2460 ERROR: status = -22 [ 552.999130][ T8661] (syz.4.523,8661,0):ocfs2_check_volume:2488 ERROR: status = -22 [ 553.049787][ T8661] (syz.4.523,8661,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 553.200936][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.285308][ T8661] (syz.4.523,8661,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 553.775958][ T8688] loop2: detected capacity change from 0 to 32768 [ 553.841703][ T7396] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 553.866336][ T8688] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 553.904211][ T8688] XFS (loop2): totally zeroed log [ 553.932369][ T8688] XFS (loop2): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 553.976479][ T8688] XFS (loop2): log mount/recovery failed: error -22 [ 554.055279][ T8688] XFS (loop2): log mount failed [ 554.070884][ T7396] usb 1-1: Using ep0 maxpacket: 32 [ 554.089478][ T7396] usb 1-1: config 15 has an invalid interface number: 78 but max is 1 [ 554.097838][ T7396] usb 1-1: config 15 has an invalid interface number: 2 but max is 1 [ 554.170061][ T7396] usb 1-1: config 15 has no interface number 0 [ 554.193429][ T7396] usb 1-1: config 15 has no interface number 1 [ 554.204702][ T7396] usb 1-1: config 15 interface 78 has no altsetting 0 [ 554.320665][ T7396] usb 1-1: config 15 interface 2 has no altsetting 0 [ 554.367850][ T7396] usb 1-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 554.377147][ T7396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.394351][ T7396] usb 1-1: Product: syz [ 554.398597][ T7396] usb 1-1: Manufacturer: syz [ 554.403277][ T7396] usb 1-1: SerialNumber: syz [ 554.414807][ T8711] loop4: detected capacity change from 0 to 8192 [ 554.611435][ T8714] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.702521][ T7396] usb 1-1: selecting invalid altsetting 0 [ 554.725855][ T7396] usb 1-1: Could not set interface, error -22 [ 554.745173][ T5789] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 554.791987][ T7396] usb 1-1: USB disconnect, device number 7 [ 556.399048][ T8736] loop0: detected capacity change from 0 to 2048 [ 556.455132][ T8736] loop0: p1 p2 p3 [ 556.455132][ T8736] p1: [ 556.502092][ T8736] loop0: p3 start 65280 is beyond EOD, truncated [ 556.711382][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 556.817594][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 556.846173][ T8566] udevd[8566]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 556.938633][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 556.973999][ T8725] loop1: detected capacity change from 0 to 32768 [ 556.996289][ T28] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 557.008149][ T8725] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.538 (8725) [ 557.023192][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.041068][ T28] usb 3-1: Product: syz [ 557.047980][ T8725] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.050008][ T28] usb 3-1: Manufacturer: syz [ 557.077308][ T8725] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 557.083197][ T28] usb 3-1: SerialNumber: syz [ 557.105482][ T8725] BTRFS info (device loop1): using free space tree [ 557.137395][ T28] r8152-cfgselector 3-1: config 0 descriptor?? [ 557.185961][ T8752] jfs: Unrecognized mount option "discard" or missing value [ 557.268463][ T8725] BTRFS info (device loop1): enabling ssd optimizations [ 557.281820][ T8725] BTRFS info (device loop1): auto enabling async discard [ 557.577281][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.616681][ T28] r8152-cfgselector 3-1: Unknown version 0x0000 [ 557.641423][ T28] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 558.756174][ T8764] loop0: detected capacity change from 0 to 32768 [ 558.780199][ T8764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.547 (8764) [ 558.844815][ T8764] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.899028][ T8764] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 558.953244][ T8764] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 558.962566][ T8764] BTRFS info (device loop0): force lzo compression, level 0 [ 559.042595][ T8764] BTRFS info (device loop0): force zlib compression, level 3 [ 559.050490][ T8764] BTRFS info (device loop0): max_inline at 30 [ 559.087479][ T8764] BTRFS info (device loop0): use lzo compression, level 0 [ 559.115707][ T8764] BTRFS info (device loop0): max_inline at 0 [ 559.156175][ T8764] BTRFS info (device loop0): force lzo compression, level 0 [ 559.212203][ T8764] BTRFS info (device loop0): using free space tree [ 559.414772][ T8785] loop1: detected capacity change from 0 to 64 [ 559.427030][ T34] BTRFS error (device loop0): bad fsid on logical 1052672 mirror 1 [ 559.490295][ T8764] BTRFS error (device loop0): failed to read chunk root [ 560.657588][ T8772] loop2: detected capacity change from 0 to 32768 [ 560.908022][ T8764] BTRFS error (device loop0): open_ctree failed: -5 [ 560.927245][ T8477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (8477) [ 560.959957][ T5782] read_mapping_page failed! [ 560.979156][ T5782] ERROR: (device loop2): txCommit: [ 560.979156][ T5782] [ 561.012697][ T5782] read_mapping_page failed! [ 561.018027][ T5782] ERROR: (device loop2): txCommit: [ 561.018027][ T5782] [ 561.325623][ T5782] syz_tun (unregistering): left allmulticast mode [ 561.424166][ T7396] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 561.660853][ T7396] usb 5-1: Using ep0 maxpacket: 32 [ 561.667161][ T7396] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.669817][ T7396] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 561.669849][ T7396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.669872][ T7396] usb 5-1: Product: syz [ 561.669888][ T7396] usb 5-1: Manufacturer: syz [ 561.669917][ T7396] usb 5-1: SerialNumber: syz [ 561.678600][ T7396] usb 5-1: config 0 descriptor?? [ 561.733336][ T6182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.740494][ T8796] loop1: detected capacity change from 0 to 32768 [ 561.811364][ T8796] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 561.811500][ T8796] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 561.973455][ T6182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.076892][ T8810] loop0: detected capacity change from 0 to 256 [ 562.112820][ T7396] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro FD v12 fw v238.0.0 (2 channels) [ 562.139165][ T8796] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 562.178866][ T6182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.221557][ T8810] FAT-fs (loop0): Directory bread(block 64) failed [ 562.229550][ T5843] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 562.246017][ T5843] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 562.267746][ T8810] FAT-fs (loop0): Directory bread(block 65) failed [ 562.274482][ T8810] FAT-fs (loop0): Directory bread(block 66) failed [ 562.313837][ T8810] FAT-fs (loop0): Directory bread(block 67) failed [ 562.320546][ T8810] FAT-fs (loop0): Directory bread(block 68) failed [ 562.352201][ T8810] FAT-fs (loop0): Directory bread(block 69) failed [ 562.360659][ T7396] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 562.375141][ T8810] FAT-fs (loop0): Directory bread(block 70) failed [ 562.387169][ T7396] peak_usb 5-1:0.0: unable to tell PCAN-USB Pro FD driver is loaded (err -71) [ 562.396402][ T8810] FAT-fs (loop0): Directory bread(block 71) failed [ 562.407395][ T6182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.410001][ T8810] FAT-fs (loop0): Directory bread(block 72) failed [ 562.441235][ T8810] FAT-fs (loop0): Directory bread(block 73) failed [ 562.475747][ T5843] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 212ms [ 562.509411][ T5843] gfs2: fsid=syz:syz.0: jid=0: Done [ 562.516547][ T8796] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 562.532469][ T7396] peak_usb: probe of 5-1:0.0 failed with error -71 [ 562.577581][ T7396] usb 5-1: USB disconnect, device number 5 [ 562.860459][ T6182] tipc: Left network mode [ 563.370531][ T8822] loop0: detected capacity change from 0 to 1024 [ 563.401088][ T8822] EXT4-fs: Ignoring removed orlov option [ 563.438499][ T8822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.503009][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 563.613354][ T8822] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.565: bit already cleared for inode 15 [ 563.690044][ T8829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.701701][ T8829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.725690][ T8829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 563.736690][ T8829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 563.757613][ T8829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 563.764391][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 563.776255][ T8829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 563.783768][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 563.865193][ T9] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 563.874942][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.885093][ T9] usb 5-1: Product: syz [ 563.889322][ T9] usb 5-1: Manufacturer: syz [ 563.894580][ T9] usb 5-1: SerialNumber: syz [ 563.912945][ T9] usb 5-1: config 0 descriptor?? [ 563.934926][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 564.015224][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.249403][ T9] usb 5-1: USB disconnect, device number 6 [ 564.396342][ T8837] loop0: detected capacity change from 0 to 2048 [ 564.510561][ T8844] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 564.638897][ T8837] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 564.699915][ T8837] Remounting filesystem read-only [ 564.869240][ T8848] loop0: detected capacity change from 0 to 512 [ 564.895127][ T8848] EXT4-fs: Ignoring removed oldalloc option [ 564.965919][ T8848] EXT4-fs (loop0): filesystem is read-only [ 564.994462][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 565.008689][ T8848] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 565.052077][ T8848] EXT4-fs (loop0): filesystem is read-only [ 565.127380][ T8848] EXT4-fs (loop0): orphan cleanup on readonly fs [ 565.205010][ T8848] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.568: bg 0: block 64: padding at end of block bitmap is not set [ 565.240159][ T8848] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 565.253783][ T8848] EXT4-fs (loop0): 1 orphan inode deleted [ 565.272127][ T8848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.498822][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.608400][ T8841] loop1: detected capacity change from 0 to 32768 [ 565.662126][ T6182] hsr_slave_0: left promiscuous mode [ 565.695954][ T8841] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 566.071853][ T5789] Bluetooth: hci2: command tx timeout [ 566.449156][ T6182] hsr_slave_1: left promiscuous mode [ 566.483399][ T8841] XFS (loop1): Ending clean mount [ 566.552196][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.611557][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.710081][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.717571][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.966679][ T6182] bridge_slave_1: left allmulticast mode [ 566.978724][ T6182] bridge_slave_1: left promiscuous mode [ 566.984036][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 566.992967][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.015931][ T6182] bridge_slave_0: left allmulticast mode [ 567.021661][ T6182] bridge_slave_0: left promiscuous mode [ 567.199982][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.230260][ T23] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 567.544687][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 567.687820][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 567.735940][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.814498][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.884519][ T6182] veth1_macvtap: left promiscuous mode [ 567.892139][ T23] usb 1-1: string descriptor 0 read error: -22 [ 567.913601][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.927688][ T6182] veth0_macvtap: left promiscuous mode [ 567.954967][ T6182] veth1_vlan: left promiscuous mode [ 567.960438][ T6182] veth0_vlan: left promiscuous mode [ 567.966549][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.033151][ T23] usb 1-1: 0:2 : does not exist [ 568.214618][ T5843] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 568.324403][ T5789] Bluetooth: hci2: command tx timeout [ 568.439574][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 568.450663][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 568.489318][ T23] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 568.500258][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.511048][ T5843] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 568.524697][ T23] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 568.547651][ T23] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 568.560552][ T5843] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.594103][ T5843] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 568.603227][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.613758][ T5843] usb 2-1: Product: syz [ 568.618227][ T5843] usb 2-1: Manufacturer: syz [ 568.634173][ T5843] usb 2-1: SerialNumber: syz [ 568.693709][ T23] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 568.730542][ T23] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 568.750181][ T23] usb 1-1: USB disconnect, device number 8 [ 568.867905][ T8897] loop4: detected capacity change from 0 to 32768 [ 568.889598][ T8897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.577 (8897) [ 568.926630][ T5843] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 568.948783][ T8897] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 568.967533][ T8897] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 568.986574][ T5843] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 568.999086][ T8897] BTRFS info (device loop4): using free space tree [ 569.169834][ T5843] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 569.188496][ T5843] usb 2-1: USB disconnect, device number 8 [ 569.216786][ T8897] BTRFS info (device loop4): enabling ssd optimizations [ 569.240275][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.243583][ T8897] BTRFS info (device loop4): auto enabling async discard [ 569.293065][ T8915] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 569.587426][ T6073] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 570.197927][ T8919] loop0: detected capacity change from 0 to 32768 [ 570.410679][ T8919] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 570.619545][ T5789] Bluetooth: hci2: command tx timeout [ 570.737762][ T8919] XFS (loop0): Ending clean mount [ 571.362091][ T6182] team0 (unregistering): Port device team_slave_1 removed [ 571.458501][ T8941] loop1: detected capacity change from 0 to 256 [ 571.602096][ T6182] team0 (unregistering): Port device team_slave_0 removed [ 571.612189][ T8941] FAT-fs (loop1): Directory bread(block 64) failed [ 571.619118][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 571.636047][ T8941] FAT-fs (loop1): Directory bread(block 65) failed [ 571.658609][ T8941] FAT-fs (loop1): Directory bread(block 66) failed [ 571.691699][ T8941] FAT-fs (loop1): Directory bread(block 67) failed [ 571.699079][ T8941] FAT-fs (loop1): Directory bread(block 68) failed [ 571.713901][ T8941] FAT-fs (loop1): Directory bread(block 69) failed [ 571.726150][ T8941] FAT-fs (loop1): Directory bread(block 70) failed [ 571.732913][ T8941] FAT-fs (loop1): Directory bread(block 71) failed [ 571.740253][ T8941] FAT-fs (loop1): Directory bread(block 72) failed [ 571.756272][ T8941] FAT-fs (loop1): Directory bread(block 73) failed [ 571.793359][ T6182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.971244][ T8938] loop4: detected capacity change from 0 to 32768 [ 571.991623][ T8938] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.581 (8938) [ 572.042384][ T6182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.072806][ T8938] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.118044][ T8938] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 572.135836][ T8938] BTRFS info (device loop4): setting nodatasum [ 572.156950][ T8938] BTRFS info (device loop4): turning on sync discard [ 572.182051][ T8938] BTRFS info (device loop4): using free space tree [ 572.471506][ T8938] BTRFS info (device loop4): enabling ssd optimizations [ 572.518628][ T34] BTRFS warning (device loop4): checksum verify failed on logical 5308416 mirror 1 wanted 0x77808b7ecca445f549ae3d233ea0eb27adb628f92d0be59092c566b0ee5e6744 found 0x50a39f03e2657f7482b5bc78075a514288cfb896b7cca7e371ba127606b71438 level 0 [ 572.546476][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.587975][ T8938] BTRFS: error (device loop4) in btrfs_fill_super:1172: errno=-5 IO failure [ 572.611946][ T8938] BTRFS error (device loop4: state E): commit super ret -30 [ 572.831111][ T5789] Bluetooth: hci2: command tx timeout [ 572.894374][ T23] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 572.981034][ T8956] loop1: detected capacity change from 0 to 32768 [ 573.060512][ T8956] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 573.115104][ T23] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 573.138791][ T23] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 573.155867][ T8956] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 573.171864][ T23] usb 1-1: config 0 has no interface number 0 [ 573.202086][ T23] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 573.223355][ T23] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.246263][ T23] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 573.300894][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.378183][ T23] usb 1-1: config 0 descriptor?? [ 573.442706][ T8956] XFS (loop1): Ending clean mount [ 573.654806][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 573.798472][ T23] usb 1-1: USB disconnect, device number 9 [ 574.060972][ T6182] bond0 (unregistering): Released all slaves [ 574.797406][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.821964][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.829261][ T8828] bridge_slave_0: entered allmulticast mode [ 574.902194][ T8828] bridge_slave_0: entered promiscuous mode [ 574.928577][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.938802][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.947148][ T8828] bridge_slave_1: entered allmulticast mode [ 574.955585][ T8828] bridge_slave_1: entered promiscuous mode [ 575.111636][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.172999][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.382165][ T8828] team0: Port device team_slave_0 added [ 575.414002][ T8828] team0: Port device team_slave_1 added [ 575.439985][ T8999] netlink: 220 bytes leftover after parsing attributes in process `syz.1.595'. [ 575.455192][ T8999] tc_dump_action: action bad kind [ 575.537277][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.544333][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.620506][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.670511][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.705306][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.802279][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.030947][ T8828] hsr_slave_0: entered promiscuous mode [ 576.056334][ T8828] hsr_slave_1: entered promiscuous mode [ 576.961391][ T6182] IPVS: stop unused estimator thread 0... [ 577.297097][ T8828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 577.329119][ T8828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 577.374901][ T8828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.414375][ T8828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 577.445128][ T9007] loop0: detected capacity change from 0 to 32768 [ 577.486206][ T9007] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.598 (9007) [ 577.599795][ T9007] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 577.633483][ T9007] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 577.660231][ T9007] BTRFS info (device loop0): force zlib compression, level 3 [ 577.667717][ T9007] BTRFS info (device loop0): allowing degraded mounts [ 577.709084][ T9007] BTRFS info (device loop0): setting nodatasum [ 577.732066][ T9007] BTRFS info (device loop0): allowing degraded mounts [ 577.744849][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.757987][ T9007] BTRFS info (device loop0): using free space tree [ 577.774194][ T9015] loop1: detected capacity change from 0 to 32768 [ 577.825110][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.832379][ T9015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.602 (9015) [ 577.861521][ T9015] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 577.879169][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.886395][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.918737][ T9015] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 577.977309][ T9015] BTRFS info (device loop1): force clearing of disk cache [ 577.986350][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.993563][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.029675][ T9015] BTRFS info (device loop1): metadata ratio 0 [ 578.057880][ T9015] BTRFS info (device loop1): enabling ssd optimizations [ 578.081716][ T9007] BTRFS info (device loop0): auto enabling async discard [ 578.104071][ T9015] BTRFS info (device loop1): using spread ssd allocation scheme [ 578.111790][ T9015] BTRFS info (device loop1): using free space tree [ 578.314625][ T9028] loop4: detected capacity change from 0 to 32768 [ 578.369789][ T9028] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.604 (9028) [ 578.428449][ T9015] BTRFS info (device loop1): auto enabling async discard [ 578.487378][ T9015] BTRFS info (device loop1): rebuilding free space tree [ 578.548960][ T5774] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 578.654129][ T7940] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (7940) [ 578.904759][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 579.150015][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.170337][ T9071] loop4: detected capacity change from 0 to 32768 [ 581.015608][ T8828] veth0_vlan: entered promiscuous mode [ 581.147487][ T8828] veth1_vlan: entered promiscuous mode [ 581.280324][ T6305] read_mapping_page failed! [ 581.284908][ T6305] ERROR: (device loop4): txCommit: [ 581.284908][ T6305] [ 581.299040][ T8828] veth0_macvtap: entered promiscuous mode [ 581.310992][ T8828] veth1_macvtap: entered promiscuous mode [ 581.330443][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.342260][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.352179][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.362734][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.373161][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.383736][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.395516][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.409956][ T6305] ERROR: (device loop4): remounting filesystem as read-only [ 581.417396][ T6305] jfs_write_inode: jfs_commit_inode failed! [ 581.442836][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.458641][ T9084] loop0: detected capacity change from 0 to 32768 [ 581.465472][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.475933][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.506278][ T9084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.605 (9084) [ 581.518975][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.533214][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.546565][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.570839][ T9084] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 581.591831][ T9084] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 581.613569][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.622624][ T9084] BTRFS info (device loop0): setting nodatasum [ 581.646106][ T9084] BTRFS info (device loop0): enabling auto defrag [ 581.683855][ T9084] BTRFS info (device loop0): disabling tree log [ 581.706198][ T8828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.723431][ T9084] BTRFS info (device loop0): using free space tree [ 581.743857][ T8828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.752664][ T8828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.808486][ T8828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.177154][ T9084] BTRFS info (device loop0): enabling ssd optimizations [ 582.184191][ T9084] BTRFS info (device loop0): auto enabling async discard [ 582.372285][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.445961][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.730648][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.807134][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.884162][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 583.184142][ T9130] netlink: 'syz.4.614': attribute type 11 has an invalid length. [ 583.191947][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.614'. [ 585.181456][ T9167] loop5: detected capacity change from 0 to 1024 [ 585.299501][ T9167] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 585.517423][ T9178] kernel profiling enabled (shift: 63) [ 585.523637][ T9178] profiling shift: 63 too large [ 585.952881][ T9186] loop4: detected capacity change from 0 to 256 [ 586.069552][ T9186] FAT-fs (loop4): Directory bread(block 64) failed [ 586.110512][ T9186] FAT-fs (loop4): Directory bread(block 65) failed [ 586.119585][ T9186] FAT-fs (loop4): Directory bread(block 66) failed [ 586.126169][ T9186] FAT-fs (loop4): Directory bread(block 67) failed [ 586.173718][ T9186] FAT-fs (loop4): Directory bread(block 68) failed [ 586.180351][ T9186] FAT-fs (loop4): Directory bread(block 69) failed [ 586.217246][ T9186] FAT-fs (loop4): Directory bread(block 70) failed [ 586.223861][ T9186] FAT-fs (loop4): Directory bread(block 71) failed [ 586.249538][ T9186] FAT-fs (loop4): Directory bread(block 72) failed [ 586.256140][ T9186] FAT-fs (loop4): Directory bread(block 73) failed [ 587.093444][ T9206] comedi comedi0: Minor 2147483647 is invalid! [ 587.540034][ T27] audit: type=1326 audit(2000000125.387:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ce19ce59 code=0x7ffc0000 [ 587.604067][ T27] audit: type=1326 audit(2000000125.387:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ce19ce59 code=0x7ffc0000 [ 587.648825][ T9176] loop1: detected capacity change from 0 to 65536 [ 587.656340][ T9176] XFS: attr2 mount option is deprecated. [ 587.681474][ T9176] XFS: attr2 mount option is deprecated. [ 587.689058][ T27] audit: type=1326 audit(2000000125.424:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f96ce19ce59 code=0x7ffc0000 [ 587.747337][ T27] audit: type=1326 audit(2000000125.424:15): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ce19ce59 code=0x7ffc0000 [ 587.772120][ T27] audit: type=1326 audit(2000000125.424:16): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ce19ce59 code=0x7ffc0000 [ 587.837805][ T9176] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 588.052485][ T9176] XFS (loop1): Ending clean mount [ 588.055065][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 588.322927][ T5825] IPVS: starting estimator thread 0... [ 588.538394][ T9176] XFS (loop1): Quotacheck needed: Please wait. [ 588.721477][ T9246] IPVS: using max 17 ests per chain, 40800 per kthread [ 588.881795][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 588.900291][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 588.920637][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.965105][ T9176] XFS (loop1): Quotacheck: Done. [ 589.015049][ T9] usb 1-1: config 0 descriptor?? [ 589.078794][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 589.099790][ T5776] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 589.477616][ T5825] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 589.520366][ T9262] loop5: detected capacity change from 0 to 256 [ 589.555240][ T9] gspca_sunplus: reg_w_riv err -71 [ 589.568992][ T9] sunplus: probe of 1-1:0.0 failed with error -71 [ 589.598985][ T9] usb 1-1: USB disconnect, device number 10 [ 589.614245][ T9262] FAT-fs (loop5): Directory bread(block 64) failed [ 589.629132][ T9262] FAT-fs (loop5): Directory bread(block 65) failed [ 589.647543][ T9262] FAT-fs (loop5): Directory bread(block 66) failed [ 589.662810][ T9262] FAT-fs (loop5): Directory bread(block 67) failed [ 589.683388][ T9262] FAT-fs (loop5): Directory bread(block 68) failed [ 589.689987][ T9262] FAT-fs (loop5): Directory bread(block 69) failed [ 589.710731][ T5825] usb 5-1: config 0 has no interfaces? [ 589.730360][ T5825] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 589.749510][ T9262] FAT-fs (loop5): Directory bread(block 70) failed [ 589.761093][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 589.769219][ T5825] usb 5-1: Product: syz [ 589.780868][ T9262] FAT-fs (loop5): Directory bread(block 71) failed [ 589.791625][ T9262] FAT-fs (loop5): Directory bread(block 72) failed [ 589.798224][ T9262] FAT-fs (loop5): Directory bread(block 73) failed [ 589.806080][ T5825] usb 5-1: SerialNumber: syz [ 589.825722][ T5825] usb 5-1: config 0 descriptor?? [ 590.064989][ T5789] Bluetooth: hci4: Malformed LE Event: 0x02 [ 590.067304][ T5825] usb 5-1: USB disconnect, device number 7 [ 590.377185][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 590.522734][ T9283] loop0: detected capacity change from 0 to 164 [ 592.082338][ T9289] comedi comedi0: dt2815: I/O port conflict (0xffffffffffffffff,2) [ 592.769990][ T9279] loop5: detected capacity change from 0 to 32768 [ 592.842904][ T9279] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 593.003028][ T9279] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 593.106341][ T9279] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30 [ 593.179701][ T9279] XFS (loop5): Ending clean mount [ 593.296515][ T9329] overlayfs: missing 'lowerdir' [ 593.313042][ T5825] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 593.353665][ T9279] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x11d0, inode 0x1803 dinode [ 593.376892][ T9279] XFS (loop5): Unmount and run xfs_repair [ 593.382723][ T9279] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 593.406259][ T9279] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 593.421924][ T9333] loop1: detected capacity change from 0 to 164 [ 593.446365][ T9279] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.519739][ T5825] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 593.528702][ T9279] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 593.528860][ T9279] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 593.528878][ T9279] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.528894][ T9279] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 593.528910][ T9279] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 593.528926][ T9279] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 593.634088][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.664697][ T5825] usb 5-1: config 0 descriptor?? [ 593.879801][ T8828] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 594.717930][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.731333][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.424526][ T5825] [drm:udl_init] *ERROR* Selecting channel failed [ 595.465032][ T5825] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 595.472677][ T5825] [drm] Initialized udl on minor 2 [ 595.493035][ T5825] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 595.517739][ T5825] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 595.532167][ T5817] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 595.541697][ T5825] usb 5-1: USB disconnect, device number 8 [ 595.562080][ T5817] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 595.737918][ T9346] loop0: detected capacity change from 0 to 4096 [ 595.819043][ T9346] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 595.861410][ T9346] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 595.893620][ T9346] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 595.927143][ T9346] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 595.968598][ T9346] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 596.053573][ T9346] ntfs: volume version 3.1. [ 596.065990][ T9346] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 596.092973][ T9346] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 596.118900][ T9346] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 596.164159][ T9346] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 596.205065][ T9346] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 596.374506][ T8477] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 596.712912][ T9366] loop1: detected capacity change from 0 to 4096 [ 596.843748][ T9366] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 597.241069][ T9388] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 597.288763][ T9388] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 597.818129][ T5820] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 597.896690][ T9386] loop1: detected capacity change from 0 to 32768 [ 597.925274][ T9386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.689 (9386) [ 597.978207][ T9386] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.002186][ T9386] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 598.010926][ T9386] BTRFS info (device loop1): using free space tree [ 598.051516][ T5820] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 598.068746][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.102409][ T5820] usb 1-1: Product: syz [ 598.106650][ T5820] usb 1-1: Manufacturer: syz [ 598.121253][ T5820] usb 1-1: SerialNumber: syz [ 598.136357][ T5820] usb 1-1: config 0 descriptor?? [ 598.158168][ T9386] BTRFS info (device loop1): enabling ssd optimizations [ 598.160444][ T5820] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 598.186249][ T9386] BTRFS info (device loop1): auto enabling async discard [ 598.373754][ T5820] gspca_stk1135: reg_w 0x2 err -71 [ 598.388755][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.395743][ T5820] gspca_stk1135: Sensor write failed [ 598.401115][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.424530][ T5820] gspca_stk1135: Sensor write failed [ 598.436140][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.453637][ T5820] gspca_stk1135: Sensor read failed [ 598.464618][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.466878][ T9418] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.479068][ T5820] gspca_stk1135: Sensor read failed [ 598.500328][ T5820] gspca_stk1135: Detected sensor type unknown (0x0) [ 598.519460][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.533411][ T5820] gspca_stk1135: Sensor read failed [ 598.544734][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.573061][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.590940][ T5820] gspca_stk1135: Sensor read failed [ 598.607536][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.624202][ T5820] gspca_stk1135: Sensor write failed [ 598.640666][ T5820] gspca_stk1135: serial bus timeout: status=0x00 [ 598.662593][ T5820] gspca_stk1135: Sensor write failed [ 598.677029][ T9398] loop5: detected capacity change from 0 to 32768 [ 598.685185][ T5820] stk1135: probe of 1-1:0.0 failed with error -71 [ 598.705612][ T5820] usb 1-1: USB disconnect, device number 11 [ 598.757495][ T9398] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 598.794726][ T9398] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 599.123912][ T9398] XFS (loop5): Ending clean mount [ 599.184766][ T9433] loop1: detected capacity change from 0 to 2048 [ 599.192670][ T9433] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 599.318030][ T9433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.474630][ T8828] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 600.221985][ T9452] loop0: detected capacity change from 0 to 1024 [ 600.259166][ T9456] loop5: detected capacity change from 0 to 164 [ 600.346514][ T9452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.453589][ T9452] EXT4-fs error (device loop0): ext4_get_first_dir_block:3595: inode #11: comm syz.0.708: directory missing '.' [ 600.653214][ T9452] EXT4-fs (loop0): Remounting filesystem read-only [ 600.681279][ T9443] loop4: detected capacity change from 0 to 32768 [ 600.711471][ T9443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.705 (9443) [ 602.016028][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.327794][ T9443] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 602.368187][ T9443] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 602.376916][ T9443] BTRFS info (device loop4): using free space tree [ 602.655451][ T9443] BTRFS info (device loop4): enabling ssd optimizations [ 602.688037][ T9443] BTRFS info (device loop4): auto enabling async discard [ 602.861790][ T6073] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 603.166883][ T8477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (8477) [ 604.256723][ T9524] Cannot find del_set index 0 as target [ 604.273418][ T9502] loop4: detected capacity change from 0 to 32768 [ 604.386567][ T9502] __jfs_setxattr: xattr_size = 112, new_size = 13136 [ 604.855431][ T9515] loop5: detected capacity change from 0 to 32768 [ 605.123431][ T9515] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 605.344524][ T9515] XFS (loop5): Ending clean mount [ 605.755855][ T8828] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 605.797361][ T9533] loop0: detected capacity change from 0 to 32768 [ 606.007035][ T9533] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 606.172610][ T9533] XFS (loop0): Ending clean mount [ 606.430178][ T5774] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 606.477475][ T9556] loop4: detected capacity change from 0 to 32768 [ 606.774912][ T9556] JBD2: Ignoring recovery information on journal [ 606.920217][ T9556] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 607.119494][ T9587] netlink: 264 bytes leftover after parsing attributes in process `syz.5.738'. [ 607.171367][ T9587] netlink: 264 bytes leftover after parsing attributes in process `syz.5.738'. [ 607.202522][ T9587] netlink: 175 bytes leftover after parsing attributes in process `syz.5.738'. [ 607.497746][ T9595] netlink: 64 bytes leftover after parsing attributes in process `syz.5.740'. [ 607.659658][ T6073] ocfs2: Unmounting device (7,4) on (node local) [ 608.325666][ T5789] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 608.374739][ T9617] syz.4.748 (9617): drop_caches: 0 [ 608.492369][ T9596] loop0: detected capacity change from 0 to 32768 [ 608.499863][ T9619] loop4: detected capacity change from 0 to 128 [ 608.544674][ T9596] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 608.572394][ T9619] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 608.620084][ T9619] hpfs: filesystem error: improperly stopped [ 608.626175][ T9619] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 608.674665][ T8477] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 608.684885][ T9619] hpfs: You really don't want any checks? You are crazy... [ 608.692166][ T9619] hpfs: Code page index out of array [ 608.747326][ T9619] hpfs: code page support is disabled [ 608.768334][ T9619] hpfs: hpfs_map_4sectors(): unaligned read [ 608.800429][ T9619] hpfs: hpfs_map_4sectors(): unaligned read [ 608.822186][ T9619] hpfs: filesystem error: unable to find root dir [ 609.517864][ T9605] loop5: detected capacity change from 0 to 40427 [ 609.586329][ T9605] F2FS-fs (loop5): Found nat_bits in checkpoint [ 609.636244][ T5843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 609.685144][ T9605] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 609.744338][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 609.885564][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 609.897828][ T5843] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 609.905995][ T5843] usb 5-1: config 0 has no interface number 0 [ 609.929740][ T5843] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.949688][ T5843] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.970769][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 609.982317][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.001897][ T23] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 610.018172][ T5843] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 610.025618][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 610.029244][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.070566][ T23] usb 1-1: string descriptor 0 read error: -22 [ 610.079868][ T23] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 610.108897][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.113381][ T5843] usb 5-1: config 0 descriptor?? [ 610.634007][ T23] usb 1-1: Can't set UAC3 power state to 1 for id 10 [ 610.678062][ T23] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 610.707051][ T23] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 610.770307][ T23] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 610.801224][ T5843] uclogic 0003:28BD:0094.0004: failed retrieving string descriptor #100: -71 [ 610.821029][ T23] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 610.835884][ T5843] uclogic 0003:28BD:0094.0004: failed retrieving pen parameters: -71 [ 610.845515][ T5843] uclogic 0003:28BD:0094.0004: pen probing failed: -71 [ 610.863103][ T5843] uclogic 0003:28BD:0094.0004: failed probing parameters: -71 [ 610.888307][ T23] usb 1-1: USB disconnect, device number 12 [ 610.892533][ T5843] uclogic: probe of 0003:28BD:0094.0004 failed with error -71 [ 610.977560][ T5843] usb 5-1: USB disconnect, device number 9 [ 611.388315][ T9665] loop0: detected capacity change from 0 to 2048 [ 611.436178][ T9665] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 611.498664][ T9665] NILFS (loop0): mounting unchecked fs [ 611.560600][ T8477] udevd[8477]: incorrect nilfs2 checksum on /dev/loop0 [ 611.596587][ T9665] NILFS (loop0): recovery complete [ 611.625698][ T9671] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.136530][ T9689] loop4: detected capacity change from 0 to 164 [ 614.291040][ T9702] hid-generic 0000:0000:0000.0002: pid 9702 passed too short report [ 614.532898][ T9710] netlink: 'syz.4.769': attribute type 12 has an invalid length. [ 614.551883][ T9710] netlink: 'syz.4.769': attribute type 29 has an invalid length. [ 614.571421][ T9710] netlink: 'syz.4.769': attribute type 7 has an invalid length. [ 614.583221][ T9710] netlink: 'syz.4.769': attribute type 37 has an invalid length. [ 614.605296][ T9710] netlink: 80 bytes leftover after parsing attributes in process `syz.4.769'. [ 615.541274][ T9722] loop0: detected capacity change from 0 to 32768 [ 615.832007][ T9739] nftables ruleset with unbound set [ 617.343049][ T9773] loop0: detected capacity change from 0 to 1024 [ 617.423245][ T9773] hfsplus: xattr searching failed [ 617.433611][ T9748] loop5: detected capacity change from 0 to 32768 [ 617.452373][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 617.452476][ T27] audit: type=1800 audit(2000000152.991:17): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.785" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 617.494819][ T9748] (syz.5.779,9748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 617.545126][ T9748] (syz.5.779,9748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 617.629709][ T9748] JBD2: Ignoring recovery information on journal [ 617.896273][ T9748] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 618.707768][ T8828] ocfs2: Unmounting device (7,5) on (node local) [ 619.189417][ T9787] netlink: 'syz.0.786': attribute type 11 has an invalid length. [ 619.197279][ T9787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.786'. [ 620.105964][ T9635] Set syz1 is full, maxelem 65536 reached [ 621.224928][ T9815] loop1: detected capacity change from 0 to 32768 [ 621.239321][ T9834] loop4: detected capacity change from 0 to 1024 [ 621.272704][ T9834] hfsplus: invalid length 1280 has been corrected to 255 [ 621.287132][ T9815] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 621.296460][ T9834] hfsplus: invalid length 1280 has been corrected to 255 [ 621.367977][ T9843] hfsplus: invalid length 1280 has been corrected to 255 [ 621.404705][ T9820] loop0: detected capacity change from 0 to 32768 [ 621.427842][ T9815] XFS (loop1): Ending clean mount [ 621.500499][ T9820] JBD2: Ignoring recovery information on journal [ 621.919819][ T9820] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 622.072832][ T5776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 622.242222][ T9855] [ 622.244714][ T9855] ====================================================== [ 622.251756][ T9855] WARNING: possible circular locking dependency detected [ 622.258825][ T9855] syzkaller #0 Not tainted [ 622.263267][ T9855] ------------------------------------------------------ [ 622.270313][ T9855] syz.0.793/9855 is trying to acquire lock: [ 622.276235][ T9855] ffff888056725118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 622.289550][ T9855] [ 622.289550][ T9855] but task is already holding lock: [ 622.296941][ T9855] ffff888076f7dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 622.306497][ T9855] [ 622.306497][ T9855] which lock already depends on the new lock. [ 622.306497][ T9855] [ 622.316929][ T9855] [ 622.316929][ T9855] the existing dependency chain (in reverse order) is: [ 622.325977][ T9855] [ 622.325977][ T9855] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 622.333847][ T9855] down_read+0x46/0x2e0 [ 622.338705][ T9855] ocfs2_init_acl+0x30a/0x770 [ 622.343942][ T9855] ocfs2_mknod+0x1427/0x2310 [ 622.349124][ T9855] ocfs2_create+0x196/0x430 [ 622.354184][ T9855] path_openat+0x1705/0x3270 [ 622.359373][ T9855] do_filp_open+0x1f2/0x430 [ 622.364442][ T9855] do_sys_openat2+0x134/0x1d0 [ 622.369701][ T9855] __x64_sys_openat+0x139/0x160 [ 622.375115][ T9855] do_syscall_64+0x55/0xb0 [ 622.380137][ T9855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.386711][ T9855] [ 622.386711][ T9855] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 622.395277][ T9855] down_read+0x46/0x2e0 [ 622.400000][ T9855] ocfs2_start_trans+0x3a8/0x6f0 [ 622.405528][ T9855] ocfs2_mknod+0xf33/0x2310 [ 622.410595][ T9855] ocfs2_mkdir+0x196/0x430 [ 622.415578][ T9855] vfs_mkdir+0x2a5/0x470 [ 622.420377][ T9855] do_mkdirat+0x1dc/0x450 [ 622.425358][ T9855] __x64_sys_mkdirat+0x89/0xa0 [ 622.430682][ T9855] do_syscall_64+0x55/0xb0 [ 622.435664][ T9855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.442123][ T9855] [ 622.442123][ T9855] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 622.449668][ T9855] ocfs2_start_trans+0x2a9/0x6f0 [ 622.455165][ T9855] ocfs2_mknod+0xf33/0x2310 [ 622.460233][ T9855] ocfs2_mkdir+0x196/0x430 [ 622.465212][ T9855] vfs_mkdir+0x2a5/0x470 [ 622.470005][ T9855] do_mkdirat+0x1dc/0x450 [ 622.474888][ T9855] __x64_sys_mkdirat+0x89/0xa0 [ 622.480223][ T9855] do_syscall_64+0x55/0xb0 [ 622.485198][ T9855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.491660][ T9855] [ 622.491660][ T9855] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 622.502244][ T9855] down_write+0x97/0x200 [ 622.507051][ T9855] ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 622.513766][ T9855] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 622.520655][ T9855] ocfs2_mknod+0xed1/0x2310 [ 622.525744][ T9855] ocfs2_mkdir+0x196/0x430 [ 622.530721][ T9855] vfs_mkdir+0x2a5/0x470 [ 622.535525][ T9855] do_mkdirat+0x1dc/0x450 [ 622.540413][ T9855] __x64_sys_mkdirat+0x89/0xa0 [ 622.545729][ T9855] do_syscall_64+0x55/0xb0 [ 622.550733][ T9855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.557192][ T9855] [ 622.557192][ T9855] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 622.567777][ T9855] __lock_acquire+0x37ef/0x7d80 [ 622.573333][ T9855] lock_acquire+0x19e/0x420 [ 622.578408][ T9855] down_write+0x97/0x200 [ 622.583211][ T9855] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 622.589661][ T9855] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 622.596543][ T9855] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 622.602753][ T9855] ocfs2_xattr_set+0xc75/0x13a0 [ 622.608167][ T9855] __vfs_setxattr+0x437/0x470 [ 622.612508][ T9848] netlink: 'syz.5.798': attribute type 11 has an invalid length. [ 622.613400][ T9855] __vfs_setxattr_noperm+0x12a/0x5e0 [ 622.621181][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.798'. [ 622.626937][ T9855] vfs_setxattr+0x16b/0x2f0 [ 622.626964][ T9855] path_setxattr+0x33a/0x590 [ 622.626987][ T9855] __x64_sys_setxattr+0xbb/0xd0 [ 622.627010][ T9855] do_syscall_64+0x55/0xb0 [ 622.627032][ T9855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.627062][ T9855] [ 622.627062][ T9855] other info that might help us debug this: [ 622.627062][ T9855] [ 622.627069][ T9855] Chain exists of: [ 622.627069][ T9855] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 622.627069][ T9855] [ 622.690229][ T9855] Possible unsafe locking scenario: [ 622.690229][ T9855] [ 622.697801][ T9855] CPU0 CPU1 [ 622.703198][ T9855] ---- ---- [ 622.708593][ T9855] lock(&oi->ip_xattr_sem); [ 622.713227][ T9855] lock(&journal->j_trans_barrier); [ 622.721096][ T9855] lock(&oi->ip_xattr_sem); [ 622.728244][ T9855] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 622.735574][ T9855] [ 622.735574][ T9855] *** DEADLOCK *** [ 622.735574][ T9855] [ 622.743744][ T9855] 3 locks held by syz.0.793/9855: [ 622.748802][ T9855] #0: ffff888060bbe418 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 622.758135][ T9855] #1: ffff888076f7df58 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 622.768637][ T9855] #2: ffff888076f7dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 622.778635][ T9855] [ 622.778635][ T9855] stack backtrace: [ 622.784555][ T9855] CPU: 0 PID: 9855 Comm: syz.0.793 Not tainted syzkaller #0 [ 622.791880][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.801968][ T9855] Call Trace: [ 622.805361][ T9855] [ 622.808415][ T9855] dump_stack_lvl+0x18c/0x250 [ 622.813173][ T9855] ? load_image+0x420/0x420 [ 622.817779][ T9855] ? show_regs_print_info+0x20/0x20 [ 622.823057][ T9855] ? print_circular_bug+0x12b/0x1a0 [ 622.823093][ T9855] check_noncircular+0x2fc/0x400 [ 622.823138][ T9855] ? print_deadlock_bug+0x5d0/0x5d0 [ 622.823163][ T9855] ? lockdep_lock+0xf5/0x230 [ 622.823189][ T9855] ? _find_first_zero_bit+0xd6/0x100 [ 622.823259][ T9855] __lock_acquire+0x37ef/0x7d80 [ 622.823290][ T9855] ? verify_lock_unused+0x140/0x140 [ 622.823325][ T9855] ? __lock_acquire+0x7d80/0x7d80 [ 622.823348][ T9855] ? verify_lock_unused+0x140/0x140 [ 622.823378][ T9855] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 622.823407][ T9855] ? do_raw_spin_lock+0x11f/0x2b0 [ 622.823433][ T9855] ? mutex_unlock+0x10/0x10 [ 622.823462][ T9855] lock_acquire+0x19e/0x420 [ 622.823485][ T9855] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 622.823510][ T9855] ? ocfs2_get_system_file_inode+0x1f1/0x820 [ 622.823537][ T9855] ? __might_sleep+0xe0/0xe0 [ 622.823581][ T9855] ? read_lock_is_recursive+0x20/0x20 [ 622.823605][ T9855] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 622.823634][ T9855] ? verify_lock_unused+0x140/0x140 [ 622.823656][ T9855] ? check_noncircular+0x18a/0x400 [ 622.823683][ T9855] down_write+0x97/0x200 [ 622.823710][ T9855] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 622.823731][ T9855] ? down_read_killable+0x340/0x340 [ 622.823762][ T9855] ? deref_stack_reg+0x1ab/0x230 [ 622.823790][ T9855] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 622.823817][ T9855] ? mark_lock+0x94/0x320 [ 622.823842][ T9855] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 622.823867][ T9855] ? __lock_acquire+0x7d80/0x7d80 [ 622.823890][ T9855] ? lock_chain_count+0x20/0x20 [ 622.823933][ T9855] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 622.823966][ T9855] ? lockdep_hardirqs_on+0x98/0x150 [ 622.823998][ T9855] ? ocfs2_block_group_search+0x470/0x470 [ 622.824019][ T9855] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 622.824064][ T9855] ? _raw_spin_unlock+0x40/0x40 [ 622.824096][ T9855] ? stack_trace_save+0xaa/0x100 [ 622.824121][ T9855] ? stack_trace_snprint+0xf0/0xf0 [ 622.824165][ T9855] ? __stack_depot_save+0x575/0x660 [ 622.824201][ T9855] ? kasan_set_track+0x5f/0x70 [ 622.824224][ T9855] ? kasan_set_track+0x4e/0x70 [ 622.824247][ T9855] ? __kasan_kmalloc+0x8f/0xa0 [ 622.824288][ T9855] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 622.824310][ T9855] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 622.824339][ T9855] ? ocfs2_xattr_set+0xc75/0x13a0 [ 622.824366][ T9855] ? __vfs_setxattr+0x437/0x470 [ 622.824391][ T9855] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 622.824416][ T9855] ? vfs_setxattr+0x16b/0x2f0 [ 622.824440][ T9855] ? path_setxattr+0x33a/0x590 [ 622.824467][ T9855] ? __x64_sys_setxattr+0xbb/0xd0 [ 622.824493][ T9855] ? do_syscall_64+0x55/0xb0 [ 622.824516][ T9855] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.824572][ T9855] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 622.824599][ T9855] ? ocfs2_init_steal_slots+0x160/0x160 [ 622.824619][ T9855] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 622.824658][ T9855] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 622.824687][ T9855] ? _raw_spin_unlock+0x28/0x40 [ 622.824719][ T9855] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 622.824748][ T9855] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 622.824806][ T9855] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 622.824834][ T9855] ? down_write+0x16e/0x200 [ 622.824860][ T9855] ? down_read_killable+0x340/0x340 [ 622.824890][ T9855] ? up_write+0x1be/0x410 [ 622.824911][ T9855] ocfs2_xattr_set+0xc75/0x13a0 [ 622.824952][ T9855] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 622.825003][ T9855] ? __lock_acquire+0x1336/0x7d80 [ 622.825029][ T9855] ? verify_lock_unused+0x140/0x140 [ 622.825061][ T9855] ? ____kasan_slab_free+0x126/0x1f0 [ 622.825087][ T9855] ? aa_get_newest_label+0xfd/0x5c0 [ 622.825134][ T9855] ? end_current_label_crit_section+0x170/0x170 [ 622.825170][ T9855] ? posix_xattr_acl+0x93/0xb0 [ 622.825199][ T9855] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 622.825230][ T9855] __vfs_setxattr+0x437/0x470 [ 622.825264][ T9855] __vfs_setxattr_noperm+0x12a/0x5e0 [ 622.825302][ T9855] vfs_setxattr+0x16b/0x2f0 [ 622.825332][ T9855] ? xattr_permission+0x460/0x460 [ 622.825358][ T9855] ? __mnt_want_write+0x223/0x2a0 [ 622.825392][ T9855] ? path_setxattr+0x2ec/0x590 [ 622.825421][ T9855] path_setxattr+0x33a/0x590 [ 622.825454][ T9855] ? simple_xattrs_free+0x150/0x150 [ 622.825497][ T9855] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 622.825522][ T9855] ? rcu_is_watching+0x15/0xb0 [ 622.825551][ T9855] ? lock_chain_count+0x20/0x20 [ 622.825578][ T9855] __x64_sys_setxattr+0xbb/0xd0 [ 622.825608][ T9855] do_syscall_64+0x55/0xb0 [ 622.825632][ T9855] ? clear_bhb_loop+0x40/0x90 [ 622.825652][ T9855] ? clear_bhb_loop+0x40/0x90 [ 622.825673][ T9855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.825711][ T9855] RIP: 0033:0x7f879619ce59 [ 622.825787][ T9855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.825837][ T9855] RSP: 002b:00007f87943d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 622.825885][ T9855] RAX: ffffffffffffffda RBX: 00007f8796416090 RCX: 00007f879619ce59 [ 622.825901][ T9855] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 622.825917][ T9855] RBP: 00007f8796232e6f R08: 0000000000000000 R09: 0000000000000000 [ 622.825931][ T9855] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 622.825945][ T9855] R13: 00007f8796416128 R14: 00007f8796416090 R15: 00007ffdbb7975b8 [ 622.825969][ T9855] [ 623.304204][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 623.530403][ T9858] loop1: detected capacity change from 0 to 256 [ 623.548288][ T9858] exfat: Deprecated parameter 'utf8' [ 623.548394][ T9858] exfat: Deprecated parameter 'namecase' [ 623.558864][ T9858] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 624.011384][ C1] vkms_vblank_simulate: vblank timer overrun