last executing test programs:

16.598407142s ago: executing program 1 (id=2):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x1234', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0x5678', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='dummy_udc.0', 0xb)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)

16.317401449s ago: executing program 1 (id=6):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x16, 0x2)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100))
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000120))
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {0x2, 0x1}, 0x0, 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

14.881263355s ago: executing program 1 (id=11):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1a2, &(0x7f0000000840)="$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")
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='file0\x00', &(0x7f0000000300)='tmpfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='file0/mysys\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='file0/mysys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='file0/mysys/power/pm_test\x00', 0x1, 0x0)

14.759234828s ago: executing program 1 (id=12):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/instances/inst1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1/trace\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/200, 0x200)

13.923520288s ago: executing program 1 (id=13):
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a400010102030109022000010100c0320904000002ff0000000705010200020007058202000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x15, 0x2)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000200)="1100000001000000000400"/28})

13.574002137s ago: executing program 32 (id=13):
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a400010102030109022000010100c0320904000002ff0000000705010200020007058202000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x15, 0x2)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000200)="1100000001000000000400"/28})

12.007601406s ago: executing program 2 (id=18):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c00020001000000050000"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

11.671528214s ago: executing program 2 (id=21):
syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x553, 0x2, 0x100, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
syz_open_dev$video(&(0x7f0000000100), 0x2, 0x2)
syz_open_dev$video(&(0x7f0000000200), 0x3, 0x2)

9.057211308s ago: executing program 2 (id=25):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000940)=',', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="1a", 0x1}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

8.97814011s ago: executing program 2 (id=26):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='mem\n', 0x8)

6.717405685s ago: executing program 3 (id=34):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000300)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/f1\x00', 0x42, 0x1c0)
write(r0, &(0x7f0000000500)='hello world 1234567890\x00', 0x16)
fsync(r0)
fallocate(r0, 0x0, 0x0, 0x10000)
fsync(r0)
linkat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/f1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./mnt/f1_link\x00', 0x0)
fsync(r0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/f1_link\x00', 0x0)
fsync(r0)
close(r0)

6.704649466s ago: executing program 0 (id=35):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x8)
connect$inet(r1, 0x0, 0x0)
r2 = accept$inet(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b702000064000000bf6100000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000b704000001000000850000003c000000950000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20)
sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0)

6.53053312s ago: executing program 3 (id=36):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x13, {"ebfe"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x1)

6.153233619s ago: executing program 3 (id=37):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c00020001000000050000"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

5.964109554s ago: executing program 3 (id=38):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0})
write(r2, &(0x7f0000000100)="0100000000000000", 0x8)
nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0)

5.745612309s ago: executing program 0 (id=39):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x3, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}, {0x40000003, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2}, {0x40000004, 0x0, 0x0, 0x6, 0x1}]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x40000000, 0x0, 0x1}, {0x40000001, 0x0, 0x1}]})
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000000))
r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000400)=[@wrmsr={0x65, 0x20, {0x40000000, 0x1}}, @wrmsr={0x65, 0x20, {0x40000001, 0x1}}, @code={0xa, 0x21, {"4831d24931c048c7c1020000000f01c1"}}], 0x61})
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae05)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.485426575s ago: executing program 3 (id=40):
r0 = syz_usb_connect$uac2(0x5, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000002099045410400001020300"], 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

5.339581699s ago: executing program 0 (id=41):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(&(0x7f0000002000)=@filename='sysfs\x00', &(0x7f0000003000)='./sys\x00', &(0x7f0000004000)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000005000)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000006000)='core\n\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000009000)='mem\n\x00', 0x5)

4.517192159s ago: executing program 4 (id=42):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000940)=',', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}], 0x7)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="1a", 0x1}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

4.437381411s ago: executing program 4 (id=43):
syz_mount_image$xfs(&(0x7f000000bb00), &(0x7f000000bb40)='./file0\x00', 0x0, &(0x7f000000bb80), 0x1, 0xbaed, &(0x7f000000bbc0)="$eJzs2k9PHGUcB/DfLiwt9VDTm3qBVq0eFKg2hFt3TVpXEy5y4GSKLWIjtaZw6B8T8epJX0Jfg40xMTEefRXGN9CDiWfXzM4My/4RSoaHRfl8ku7MMzP7Y777e2a2yezq9Y9aEfXoqsWQjz/Z+ml2o/Xz9680v33ywYW1fOvOtWL3TLGcLZYXI+JsxE62XhR94drTp/WsdH1v3enps7XzES8Vw7LeYr7463F5XGdAsfnFcv9Efj7Fn6sPB2Bfq80b13ud7/ZtMiIaxe7anllRK/ZNRnz9S/6P/7rV5o32QP+za3Gq2JZdjzOD1+BpNOY2JVNkO5Pft2M6Is6N+7Pm+DRbK63sWi/HEdEq7u0t9/j/v2Zr5T39P73azdbKQP+z/9Mv5qO/x316AAAcsa2Hjz5f29xcv2/FihUruyvjvjNxHHpNH/eZMA7HcTsZd0b+XXu5+aze/9x/Ys/67p5bX/35++KPPzwul8XmD0eU7HsI3+l0Ot2HyTONmP/0zub6fLb7UiPezwYLWf3XG3EzG1zJBpcb8SAbvNMdTMd32eDtW/c2b2cb3jja8N38O1Hv/9nAiF9B5PnfvDf7W7ncp2RZbTJ6z9dOrMPlX/isXO5Tcqj/R3SqSYyY/3vPvzY47wfm/8xwxfND+bsbdud/9sdeLef/mYh4LUWu59Ve/ubZPv0/IP/ky8VxE733DufvK36z7/4ydu3lJ52B/h8if1weUXIo/9z23S/nth4+euvO3bWN9Y31L96dvzq/tLSwdHVprjsl8tcU8Q5Urf9xbuA9Wf/7Ps2h/v86+v6SxMV6TE3Fg7Xt7fsL+Ws5vJK/jsx/iOv/UvmFdKE8/qD5P9U79kSo2P/bA+85+Pr/4xj7/xzay2l/NXjyv//klz8d+eVPWL4y+eWXPx355U9YvjL55Zc/HfnlT1i+Mvnllz8d+eVPWL4y+eWXPx355U9YvjL55Zc/HfnlT1i+Mvnllz8d+eVPWL4y+eWXPx355U9YvjL55Zc/HfnlT1i+stOeHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KdjlYahKAzA516rtDgobuKib9J0aNHVJZOgiw9gHyCzm4/gK0gFwddyV0JuoERBB6VIv29K8sPJufwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8V/X8chaRu5v0Ob+6uXs5u529PpxU948XR9fd02Za4tP3gYgYRzRtVobuT1er3I7O63Mnk3E6iHT89VZvT9+sfdhf7HT7lNflH56aXl0t5qX5VHobRcRuidPaV5FKNopYPkcsm81tzW+pq8X5oP/WXt/78P/eVhst6Q+Vs32wd9fhmpUF3/f3DAypgohKGDQYdIfCDNKISigW0qGUgEpJ2KLS3d3d3d3d3d2d7zEw8CD+8OZ53/t5uR9/n89xzLX22te1r3We+7vWuvb8dY76zn17YPSBgYExPu7fNf//GTpsyWHDPzjf3R/+gT0wMDDzwMCYm7nH/+cbOmzJefXvtdDQYUsOvO9z/uMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8T/LmE6eeOWKt78EDA5sMfGC997eNWBd00NFnX331xzbQ/xkGLbP8uidPvMqw07aZcOgW+yw8znLvWzP9/1bDO4926EQDA2su9XEPhY/BoI97AHys9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/Yh+y/v88724vW+CtNUa8dPJxL9h78+FfrPaxjvhj9Z+6/v/AaoMGBkb0HXt438WGLr7kVAMDA5vvfcG4kwy899xsw5+bc5yRBkZ6+0enevtx8g9547Hfvx3y3nss+/b7L/TWPoMHfWAQ73PnMxuvsNFxJ876we2UHz6Pwe/fGXGsqYYfa9r11lh72nU32HDq1dZYbpWVVllpzZmmm3m62WeffvaZZ5925dVWX2m6dx4/ZI4Tvf046UeZ40gfnOMTQ98/x8EfcY4TfegUx0pznGi1d997oiED0709leEHnWzIwILDd6Yf9X3X7njDXzvXOIMHBmYb9O54Bg0a8fsf8ZrNhr9m6aELLPS/srx9jg+/J4wy4nuzDj/aW/8H/ct4Jxr09sEHRgzgg+NdaOiwJYd/+92fHxFu1nf23vzws+a/ST53Fn378cN6jv2B7b87d0b6kPf44LmzyIcPMZ07wwc4aMjA+8+d4S+b9N1zZ/gIphgysOzwnRmG70w5ZGD94Tszvr0z+sDWw3emWWGt1Vcc9Pb94F+6TTXovWv7Q86z+T9wno38zt3in37k3a9Hfuffpme+8+//u3SeffDg7x/v0GFLzvuB82zYiLEM++8a0//ueEf+9+Md9l+M9//o33//Mt6t/9fhRvzR8U/jHWGeEdtZ39k8v9F/cZh3L6ER18lmI975g3fcjzze967jIe97+6n+i4O/vR3tX67jzQe/bxgf9XNuxfD6d76OnwFjf/BvskF3Dwz6d3OZ8kOG9E9zGfXfz+Wjfp5NNeLDc5z/l3MZZWBgnH+ey8gD8w3/hBsx2ikGsn+ayyj/PV3GCK8fMZdBH2Uug85+r8tkbz83yeCBUUYZWH+59dZbZ/p3Ht/dneGdx39/Tk72UeY+8r+d+6CPOvcJRtxoRvrXuX+0c3LZgZHe+z/E//6lyf8Z/v/fTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvpX+xD1v/f7N31/6/YdehNI9bjHXL12avO8XGP92P2H73+/4i+/7T+/xyrnn314IH3nvvQdZxHfe81g95Z13v+JYa9t0JwuMP86+9xuM3eXff53SXTJx6xneSdlZXf/l2PeNMx5zn++MHD3/qfVpIdffTRBo01MDD+iN0PXUf6g+vNj/j2f9s60h+3d6/Vj7DOrvt/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv9iHrP9/9ojtZssdd9IuIxZCH7LX1qOs8HGP92P2H73+/4i+/7T+/wqjbL3X4IH3nvu36/+/8xrr//9P8O61av1//gv6d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn+xvP7/oBHbgbO3WWmWuYdvh++vO9GxQz7u8X7M/lPX/x/t0IkGBtZc6uMeCh8D9/9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/sRHr/w+8s/7/uwbN47yIwvr//3f7kP5D9Y9a+g/TP2rpP6/+UUv/b+kftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0/7b+UUv/xfSPWvp/R/+opf939Y9a+n9P/6il/+L6Ry39l9A/aum/pP5RS/+l9I9a+n9f/6il/w/0j1r6L61/1NL/h/pHLf1/pH/U0v/H+kct/X+if9TS/6f6Ry39l9E/aun/M/2jlv7L6h+19F9O/6il//L6Ry39V9A/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+q+oftfRfTf+opf/P9Y9a+v9C/6il/+r6Ry3919A/aum/pv5RS/+19I9a+q+tf9TS/5f6Ry3919E/aum/rv5RS//19I9a+v9K/6il/6/1j1r6/0b/qKX/+vpHLf030D9q6b+h/lFL/430j1r6b6x/1NL/t/pHLf030T9q6b+p/lFL/830j1r6b65/1NL/d/pHLf1/r3/U0v8P+kct/f+of9TS/0/6Ry39/6x/1NL/L/pHLf3/qn/U0n8L/aOW/n/TP2rp/3f9o5b+/9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf330D9q6b+n/lFL/730j1r6761/1NJ/H/2jlv776h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+h+oftfQ/TP+opf/h+kct/Y/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/sfqH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+p+tf9TS/xz9o5b+5+oftfQ/T/+opf/5+kct/S/QP2rpf6H+UUv/i/SPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv7X6h+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5b+z+oftfR/Tv+opf/z+kct/V/QP2rp/6L+UUv/l/SPWvq/rH/U0v8V/aOW/q/qH7X0f03/qKX/6/pHLf3f0D9q6f+m/lFL/7f0j0r6v/2l/v+qpf8g/aOW/oP1j1r6j6R/1NJ/ZP2jlv5D9I9a+o+if9TSf1T9o5b+o+kftfQfXf+opf8Y+kct/cfUP2rp/wn9o5b+n9Q/aun/Kf2jlv5j6R+19B9b/6il/6f1j1r6j6N/1NL/M/pHLf3H1T9q6f9Z/aOW/p/TP2rp/3n9o5b+4+kftfQfX/+opf8E+kct/SfUP2rp/wX9o5b+X9Q/aun/Jf2jlv5f1j9q6T+R/lFL/4n1j1r6T6J/1NJ/Uv2jlv6T6R+19J9c/6il/xT6Ry39p9Q/auk/lf5RS/+v6B+19P+q/lFL/6/pH7X0/7r+UUv/qfWPWvpPo3/U0n9a/aOW/tPpH7X0n17/qKX/DPpHLf1n1D9q6T+T/lFL/5n1j1r6z6J/1NJ/Vv2jlv6z6R+19J9d/6il/xz6Ry3959Q/auk/l/5RS/9v6B+19P+m/lFL/7n1j1r6z6N/1NJ/qP5RS/9h+kct/efVP2rp/y39o5b+8+kftfSfX/+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/t/WP2rpv5j+UUv/7+gftfT/rv5RS//v6R+19F9c/6il/xL6Ry39l9Q/aum/lP5RS//v6x+19P+B/lFL/6X1j1r6/1D/qKX/j/SPWvr/WP+opf9P9I9a+v9U/6il/zL6Ry39f6Z/1NJ/Wf2jlv7L6R+19F9e/6il/wr6Ry39V9Q/aum/kv5RS/+V9Y9a+q+if9TSf1X9o5b+q+kftfT/uf5RS/9f6B+19F9d/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+v9S/6il/zr6Ry3919U/aum/nv5RS/9f6R+19P+1/lFL/9/oH7X0X1//qKX/BvpHLf031D9q6b+R/lFL/431j1r6/1b/qKX/JvpHLf031T9q6b+Z/lFL/831j1r6/07/qKX/7/WPWvr/Qf+opf8f9Y9a+v9J/6il/5/1j1r6/0X/qKX/X/WPWvpvoX/U0v9v+kct/f+uf9TS/x/6Ry39t9Q/aum/lf5RS/+t9Y9a+m+jf9TSf1v9o5b+2+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6b+X/lFL/731j1r676N/1NJ/X/2jlv776R+19N9f/6il/wH6Ry39D9Q/aul/kP5RS/+D9Y9a+h+if9TS/1D9o5b+h+kftfQ/XP+opf8R+kct/Y/UP2rpf5T+UUv/o/WPWvofo3/U0v9Y/aOW/sfpH7X0P17/qKX/CfpHLf1P1D9q6X+S/lFL/5P1j1r6n6J/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfQ/X/+opf8F+kct/S/UP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf2v1D9q6X+V/lFL/6v1j1r6X6N/1NL/Wv2jlv7X6R+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/1b9o5b+t+kftfS/Xf+opf8d+kct/e/UP2rpf5f+UUv/u/WPWvrfo3/U0v9e/aOW/vfpH7X0v1//qKX/A/pHLf0f1D9q6f+Q/lFL/4f1j1r6P6J/1NL/Uf2jlv6P6R+19H9c/6il/xP6Ry39n9Q/aun/lP5RS/+n9Y9a+j+jf9TS/1n9o5b+z+kftfR/Xv+opf8L+kct/V/UP2rp/5L+UUv/l/WPWvq/on/U0v9V/aOW/q/pH7X0f13/qKX/G/pHLf3f1D9q6f+W/lFJ/5EG9I9a+g/SP2rpP1j/qKX/SPpHLf1H1j9q6T9E/6il/yj6Ry39R9U/auk/mv5RS//R9Y9a+o+hf9TSf0z9o5b+n9A/aun/Sf2jlv6f0j9q6T+W/lFL/7H1j1r6f1r/qKX/OPpHLf0/o3/U0n9c/aOW/p/VP2rp/zn9o5b+n9c/auk/nv5RS//x9Y9a+k+gf9TSf0L9o5b+X9A/aun/Rf2jlv5f0j9q6f9l/aOW/hPpH7X0n1j/qKX/JPpHLf0n1T9q6T+Z/lFL/8n1j1r6T6F/1NJ/Sv2jlv5T6R+19P+K/lFL/6/qH7X0/5r+UUv/r+sftfSfWv+opf80+kct/afVP2rpP53+UUv/6fWPWvrPoH/U0n9G/aOW/jPpH7X0n1n/qKX/LPpHLf1n1T9q6T+b/lFL/9n1j1r6z6F/1NJ/Tv2jlv5z6R+19P+G/lFL/2/qH7X0n1v/qKX/PPpHLf2H6h+19B+mf9TSf179o5b+39I/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rp/239o5b+i+kftfT/jv5RS//v6h+19P+e/lFL/8X1j1r6L6F/1NJ/Sf2jlv5L6R+19P++/lFL/x/oH7X0X1r/qKX/D/WPWvr/SP+opf+P9Y9a+v9E/6il/0/1j1r6L6N/1NL/Z/pHLf2X1T9q6b+c/lFL/+X1j1r6r6B/1NJ/Rf2jlv4r6R+19F9Z/6il/yr6Ry39V9U/aum/mv5RS/+f6x+19P+F/lFL/9X1j1r6r6F/1NJ/Tf2jlv5r6R+19F9b/6il/y/1j1r6r6N/1NJ/Xf2jlv7r6R+19P+V/lFL/1/rH7X0/43+UUv/9fWPWvpvoH/U0n9D/aOW/hvpH7X031j/qKX/b/WPWvpvon/U0n9T/aOW/pvpH7X031z/qKX/7/SPWvr/Xv+opf8f9I9a+v9R/6il/5/0j1r6/1n/qKX/X/SPWvr/Vf+opf8W+kct/f+mf9TS/+/6Ry39/6F/1NJ/S/2jlv5b6R+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TSf0f9o5b+O+kftfTfWf+opf8u+kct/XfVP2rpv5v+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X031v/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19D9Y/6il/yH6Ry39D9U/aul/mP5RS//D9Y9a+h+hf9TS/0j9o5b+R+kftfQ/Wv+opf8x+kct/Y/VP2rpf5z+UUv/4/WPWvqfoH/U0v9E/aOW/ifpH7X0P1n/qKX/KfpHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19D9b/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+l+gf9TS/0L9o5b+F+kftfS/WP+opf8l+kct/S/VP2rpf5n+UUv/y/WPWvpfoX/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf2v1T9q6X+d/lFL/+v1j1r636B/1NL/Rv2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+t+hf9TS/079o5b+d+kftfS/W/+opf89+kct/e/VP2rpf5/+UUv/+/WPWvo/oH/U0v9B/aOW/g/pH7X0f1j/qKX/I/pHLf0f1T9q6f+Y/lFL/8f1j1r6P6F/1NL/Sf2jlv5P6R+19H9a/6il/zP6Ry39n9U/aun/nP5RS//n9Y9a+r+gf9TS/0X9o5b+L+kftfR/Wf+opf8r+kct/V/VP2rp/5r+UUv/1/WPWvq/oX/U0v9N/aOW/m/pH5X0H3lA/6il/yD9o5b+g/WPWvqPpH/U0n9k/aOW/kP0j1r6j6J/1NJ/VP2jlv6j6R+19B9d/6il/xj6Ry39x9Q/aun/Cf2jlv6f1D9q6f8p/aOW/mPpH7X0H1v/qKX/p/WPWvqPo3/U0v8z+kct/cfVP2rp/1n9o5b+n9M/aun/ef2jlv7j6R+19B9f/6il/wT6Ry39J9Q/aun/Bf2jlv5f1D9q6f8l/aOW/l/WP2rpP5H+UUv/ifWPWvpPon/U0n9S/aOW/pPpH7X0n1z/qKX/FPpHLf2n1D9q6T+V/lFL/6/oH7X0/6r+UUv/r+kftfT/uv5RS/+p9Y9a+k+jf9TSf1r9o5b+0+kftfSfXv+opf8M+kct/WfUP2rpP5P+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/2/oH7X0/6b+UUv/ufWPWvrPo3/U0n+o/lFL/2H6Ry3959U/aun/Lf2jlv7z6R+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+39Y/aum/mP5RS//v6B+19P+u/lFL/+/pH7X0X1z/qKX/EvpHLf2X1D9q6b+U/lFL/+/rH7X0/4H+UUv/pfWPWvr/UP+opf+P9I9a+v9Y/6il/0/0j1r6/1T/qKX/MvpHLf1/pn/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1X1D9q6b+S/lFL/5X1j1r6r6J/1NJ/Vf2jlv6r6R+19P+5/lFL/1/oH7X0X13/qKX/GvpHLf3X1D9q6b+W/lFL/7X1j1r6/1L/qKX/OvpHLf3X1T9q6b+e/lFL/1/pH7X0/7X+UUv/3+gftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvr/Vv+opf8m+kct/TfVP2rpv5n+UUv/zfWPWvr/Tv+opf/v9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9f9Y9a+m+hf9TS/2/6Ry39/65/1NL/H/pHLf231D9q6b+V/lFL/631j1r6b6N/1NJ/W/2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf8e+kct/ffUP2rpv5f+UUv/vfWPWvrvo3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/UP2jlv6H6R+19D9c/6il/xH6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+x+kftfQ/Xv+opf8J+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/wX6Ry39L9Q/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfS/XP+opf8V+kct/a/UP2rpf5X+UUv/q/WPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r636J/1NL/Vv2jlv636R+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/1NL/Wf2jlv7P6R+19H9e/6il/wv6Ry39X9Q/aun/kv5RS/+X9Y9a+r+if9TS/1X9o5b+r+kftfR/Xf+opf8b+kct/d/UP2rp/5b+UUn/IQP6Ry39B+kftfQfrH/U0n8k/aOW/iPrH7X0H6J/1NJ/FP2jlv6j6h+19B9N/6il/+j6Ry39x9A/auk/pv5RS/9P6B+19P+k/lFL/0/pH7X0H0v/qKX/2PpHLf0/rX/U0n8c/aOW/p/RP2rpP67+UUv/z+oftfT/nP5RS//P6x+19B9P/6il//j6Ry39J9A/auk/of5RS/8v6B+19P+i/lFL/y/pH7X0/7L+UUv/ifSPWvpPrH/U0n8S/aOW/pPqH7X0n0z/qKX/5PpHLf2n0D9q6T+l/lFL/6n0j1r6f0X/qKX/V/WPWvp/Tf+opf/X9Y9a+k+tf9TSfxr9o5b+0+oftfSfTv+opf/0+kct/WfQP2rpP6P+UUv/mfSPWvrPrH/U0n8W/aOW/rPqH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6f0P/qKX/N/WPWvrPrX/U0n8e/aOW/kP1j1r6D9M/auk/r/5RS/9v6R+19J9P/6il//z6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfT/tv5RS//F9I9a+n9H/6il/3f1j1r6f0//qKX/4vpHLf2X0D9q6b+k/lFL/6X0j1r6f1//qKX/D/SPWvovrX/U0v+H+kct/X+kf9TS/8f6Ry39f6J/1NL/p/pHLf2X0T9q6f8z/aOW/svqH7X0X07/qKX/8vpHLf1X0D9q6b+i/lFL/5X0j1r6r6x/1NJ/Ff2jlv6r6h+19F9N/6il/8/1j1r6/0L/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NL/l/pHLf3X0T9q6b+u/lFL//X0j1r6/0r/qKX/r/WPWvr/Rv+opf/6+kct/TfQP2rpv6H+UUv/jfSPWvpvrH/U0v+3+kct/TfRP2rpv6n+UUv/zfSPWvpvrn/U0v93+kct/X+vf9TS/w/6Ry39/6h/1NL/T/pHLf3/rH/U0v8v+kct/f+qf9TSfwv9o5b+f9M/aun/d/2jlv7/0D9q6b+l/lFL/630j1r6b61/1NJ/G/2jlv7b6h+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TSfxf9o5b+u+oftfTfTf+opf/u+kct/ffQP2rpv6f+UUv/vfSPWvrvrX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/EP2jlv6H6h+19D9M/6il/+H6Ry39j9A/aul/pP5RS/+j9I9a+h+tf9TS/xj9o5b+x+oftfQ/Tv+opf/x+kct/U/QP2rpf6L+UUv/k/SPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6n61/1NL/HP2jlv7n6h+19D9P/6il//n6Ry39L9A/aul/of5RS/+L9I9a+l+sf9TS/xL9o5b+l+oftfS/TP+opf/l+kct/a/QP2rpf6X+UUv/q/SPWvpfrX/U0v8a/aOW/tfqH7X0v07/qKX/9fpHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv636h+19L9N/6il/+36Ry3979A/aul/p/5RS/+79I9a+t+tf9TS/x79o5b+9+oftfS/T/+opf/9+kct/R/QP2rp/6D+UUv/h/SPWvo/rH/U0v8R/aOW/o/qH7X0f0z/qKX/4/pHLf2f0D9q6f+k/lFL/6f0j1r6P61/1NL/Gf2jlv7P6h+19H9O/6il//P6Ry39X9A/aun/ov5RS/+X9I9a+r+sf9TS/xX9o5b+r+oftfR/Tf+opf/r+kct/d/QP2rp/6b+UUv/t/SPSvqPMqB/1NJ/kP5RS//B+kct/UfSP2rpP7L+UUv/IfpHLf1H0T9q6T+q/lFL/9H0j1r6j65/1NJ/DP2jlv5j6h+19P+E/lFL/0/qH7X0/5T+UUv/sfSPWvqPrX/U0v/T+kct/cfRP2rp/xn9o5b+4+oftfT/rP5RS//P6R+19P+8/lFL//H0j1r6j69/1NJ/Av2jlv4T6h+19P+C/lFL/y/qH7X0/5L+UUv/L+sftfSfSP+opf/E+kct/SfRP2rpP6n+UUv/yfSPWvpPrn/U0n8K/aOW/lPqH7X0n0r/qKX/V/SPWvp/Vf+opf/X9I9a+n9d/6il/9T6Ry39p9E/auk/rf5RS//p9I9a+k+vf9TSfwb9o5b+M+oftfSfSf+opf/M+kct/WfRP2rpP6v+UUv/2fSPWvrPrn/U0n8O/aOW/nPqH7X0n0v/qKX/N/SPWvp/U/+opf/c+kct/efRP2rpP1T/qKX/MP2jlv7z6h+19P+W/lFL//n0j1r6z69/1NJ/Af2jlv4L6h+19F9I/6il/8L6Ry39F9E/aum/qP5RS/9v6x+19F9M/6il/3f0j1r6f1f/qKX/9/SPWvovrn/U0n8J/aOW/kvqH7X0X0r/qKX/9/WPWvr/QP+opf/S+kct/X+of9TS/0f6Ry39f6x/1NL/J/pHLf1/qn/U0n8Z/aOW/j/TP2rpv6z+UUv/5fSPWvovr3/U0n8F/aOW/ivqH7X0X0n/qKX/yvpHLf1X0T9q6b+q/lFL/9X0j1r6/1z/qKX/L/SPWvqvrn/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf1/qX/U0n8d/aOW/uvqH7X0X0//qKX/r/SPWvr/Wv+opf9v9I9a+q+vf9TSfwP9o5b+G+oftfTfSP+opf/G+kct/X+rf9TSfxP9o5b+m+oftfTfTP+opf/m+kct/X+nf9TS//f6Ry39/6B/1NL/j/pHLf3/pH/U0v/P+kct/f+if9TS/6/6Ry39t9A/aun/N/2jlv5/1z9q6f8P/aOW/lvqH7X030r/qKX/1vpHLf230T9q6b+t/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/876Ry39d9E/aum/q/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfTfS/+opf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6X+o/lFL/8P0j1r6H65/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS//j9I9a+h+vf9TS/wT9o5b+J+oftfQ/Sf+opf/J+kct/U/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL//P0j1r6n69/1NL/Av2jlv4X6h+19L9I/6il/8X6Ry39L9E/aul/qf5RS//L9I9a+l+uf9TS/wr9o5b+V+oftfS/Sv+opf/V+kct/a/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/Dv2jlv536h+19L9L/6il/936Ry3979E/aul/r/5RS//79I9a+t+vf9TS/wH9o5b+D+oftfR/SP+opf/D+kct/R/RP2rp/6j+UUv/x/SPWvo/rn/U0v8J/aOW/k/qH7X0f0r/qKX/0/pHLf2f0T9q6f+s/lFL/+f0j1r6P69/1NL/Bf2jlv4v6h+19H9J/6il/8v6Ry39X9E/aun/qv5RS//X9I9a+r+uf9TS/w39o5b+b+oftfR/S/+opP+oA/pHLf0H6R+19B+sf9TSfyT9o5b+I+sftfQfon/U0n8U/aOW/qPqH7X0H03/qKX/6PpHLf3H0D9q6T+m/lFL/0/oH7X0/6T+UUv/T+kftfQfS/+opf/Y+kct/T+tf9TSfxz9o5b+n9E/auk/rv5RS//P6h+19P+c/lFL/8/rH7X0H0//qKX/+PpHLf0n0D9q6T+h/lFL/y/oH7X0/6L+UUv/L+kftfT/sv5RS/+J9I9a+k+sf9TSfxL9o5b+k+oftfSfTP+opf/k+kct/afQP2rpP6X+UUv/qfSPWvp/Rf+opf9X9Y9a+n9N/6il/9f1j1r6T61/1NJ/Gv2jlv7T6h+19J9O/6il//T6Ry39Z9A/auk/o/5RS/+Z9I9a+s+sf9TSfxb9o5b+s+oftfSfTf+opf/s+kct/efQP2rpP6f+UUv/ufSPWvp/Q/+opf839Y9a+s+tf9TSfx79o5b+Q/WPWvoP0z9q6T+v/lFL/2/pH7X0n0//qKX//PpHLf0X0D9q6b+g/lFL/4X0j1r6L6x/1NJ/Ef2jlv6L6h+19P+2/lFL/8X0j1r6f0f/qKX/d/WPWvp/T/+opf/i+kct/ZfQP2rpv6T+UUv/pfSPWvp/X/+opf8P9I9a+i+tf9TS/4f6Ry39f6R/1NL/x/pHLf1/on/U0v+n+kct/ZfRP2rp/zP9o5b+y+oftfRfTv+opf/y+kct/VfQP2rpv6L+UUv/lfSPWvqvrH/U0n8V/aOW/qvqH7X0X03/qKX/z/WPWvr/Qv+opf/q+kct/dfQP2rpv6b+UUv/tfSPWvqvrX/U0v+X+kct/dfRP2rpv67+UUv/9fSPWvr/Sv+opf+v9Y9a+v9G/6il//r6Ry39N9A/aum/of5RS/+N9I9a+m+sf9TS/7f6Ry39N9E/aum/qf5RS//N9I9a+m+uf9TS/3f6Ry39f69/1NL/D/pHLf3/qH/U0v9P+kct/f+sf9TS/y/6Ry39/6p/1NJ/C/2jlv5/0z9q6f93/aOW/v/QP2rpv6X+UUv/rfSPWvpvrX/U0n8b/aOW/tvqH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r676x/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rpf6D+UUv/g/SPWvofrH/U0v8Q/aOW/ofqH7X0P0z/qKX/4fpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv7H6h+19D9O/6il//H6Ry39T9A/aul/ov5RS/+T9I9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvqfrX/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0v0D9q6X+h/lFL/4v0j1r6X6x/1NL/Ev2jlv6X6h+19L9M/6il/+X6Ry39r9A/aul/pf5RS/+r9I9a+l+tf9TS/xr9o5b+1+oftfS/Tv+opf/1+kct/W/QP2rpf6P+UUv/m/SPWvrfrH/U0v8W/aOW/rfqH7X0v03/qKX/7fpHLf3v0D9q6X+n/lFL/7v0j1r6361/1NL/Hv2jlv736h+19L9P/6il//36Ry39H9A/aun/oP5RS/+H9I9a+j+sf9TS/xH9o5b+j+oftfR/TP+opf/j+kct/Z/QP2rp/6T+UUv/p/SPWvo/rX/U0v8Z/aOW/s/qH7X0f07/qKX/8/pHLf1f0D9q6f+i/lFL/5f0j1r6v6x/1NL/Ff2jlv6v6h+19H9N/6il/+v6Ry3939A/aun/pv5RS/+39I9K+o82oH/U0n+Q/lFL/8H6Ry39R9I/auk/sv5RS/8h+kct/UfRP2rpP6r+UUv/0fSPWvqPrn/U0n8M/aOW/mPqH7X0/4T+UUv/T+oftfT/lP5RS/+x9I9a+o+tf9TS/9P6Ry39x9E/aun/Gf2jlv7j6h+19P+s/lFL/8/pH7X0/7z+UUv/8fSPWvqPr3/U0n8C/aOW/hPqH7X0/4L+UUv/L+oftfT/kv5RS/8v6x+19J9I/6il/8T6Ry39J9E/auk/qf5RS//J9I9a+k+uf9TSfwr9o5b+U+oftfSfSv+opf9X9I9a+n9V/6il/9f0j1r6f13/qKX/1PpHLf2n0T9q6T+t/lFL/+n0j1r6T69/1NJ/Bv2jlv4z6h+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+s+uf9TSfw79o5b+c+oftfSfS/+opf839I9a+n9T/6il/9z6Ry3959E/auk/VP+opf8w/aOW/vPqH7X0/5b+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/2/rH7X0X0z/qKX/d/SPWvp/V/+opf/39I9a+i+uf9TSfwn9o5b+S+oftfRfSv+opf/39Y9a+v9A/6il/9L6Ry39f6h/1NL/R/pHLf1/rH/U0v8n+kct/X+qf9TSfxn9o5b+P9M/aum/rP5RS//l9I9a+i+vf9TSfwX9o5b+K+oftfRfSf+opf/K+kct/VfRP2rpv6r+UUv/1fSPWvr/XP+opf8v9I9a+q+uf9TSfw39o5b+a+oftfRfS/+opf/a+kct/X+pf9TSfx39o5b+6+oftfRfT/+opf+v9I9a+v9a/6il/2/0j1r6r69/1NJ/A/2jlv4b6h+19N9I/6il/8b6Ry39f6t/1NJ/E/2jlv6b6h+19N9M/6il/+b6Ry39f6d/1NL/9/pHLf3/oH/U0v+P+kct/f+kf9TS/8/6Ry39/6J/1NL/r/pHLf230D9q6f83/aOW/n/XP2rp/w/9o5b+W+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/7fSPWvpvr3/U0n8H/aOW/jvqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NJ/D/2jlv576h+19N9L/6il/976Ry3999E/aum/r/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/Q/RP2rpf6j+UUv/w/SPWvofrn/U0v8I/aOW/kfqH7X0P0r/qKX/0fpHLf2P0T9q6X+s/lFL/+P0j1r6H69/1NL/BP2jlv4n6h+19D9J/6il/8n6Ry39T9E/aul/qv5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/c/RP2rpf67+UUv/8/SPWvqfr3/U0v8C/aOW/hfqH7X0v0j/qKX/xfpHLf0v0T9q6X+p/lFL/8v0j1r6X65/1NL/Cv2jlv5X6h+19L9K/6il/9X6Ry39r9E/aul/rf5RS//r9I9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rpf6v+UUv/2/SPWvrfrn/U0v8O/aOW/nfqH7X0v0v/qKX/3fpHLf3v0T9q6X+v/lFL//v0j1r6369/1NL/Af2jlv4P6h+19H9I/6il/8P6Ry39H9E/aun/qP5RS//H9I9a+j+uf9TS/wn9o5b+T+oftfR/Sv+opf/T+kct/Z/RP2rp/6z+UUv/5/SPWvo/r3/U0v8F/aOW/i/qH7X0f0n/qKX/y/pHLf1f0T9q6f+q/lFL/9f0j1r6v65/1NL/Df2jlv5v6h+19H9L/6ik/+gD+kct/QfpH7X0H6x/1NJ/JP2jlv4j6x+19B+if9TSfxT9o5b+o+oftfQfTf+opf/o+kct/cfQP2rpP6b+UUv/T+gftfT/pP5RS/9P6R+19B9L/6il/9j6Ry39P61/1NJ/HP2jlv6f0T9q6T+u/lFL/8/qH7X0/5z+UUv/z+sftfQfT/+opf/4+kct/SfQP2rpP6H+UUv/L+gftfT/ov5RS/8v6R+19P+y/lFL/4n0j1r6T6x/1NJ/Ev2jlv6T6h+19J9M/6il/+T6Ry39p9A/auk/pf5RS/+p9I9a+n9F/6il/1f1j1r6f03/qKX/1/WPWvpPrX/U0n8a/aOW/tPqH7X0n07/qKX/9PpHLf1n0D9q6T+j/lFL/5n0j1r6z6x/1NJ/Fv2jlv6z6h+19J9N/6il/+z6Ry3959A/auk/p/5RS/+59I9a+n9D/6il/zf1j1r6z61/1NJ/Hv2jlv5D9Y9a+g/TP2rpP6/+UUv/b+kftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0/7b+UUv/xfSPWvp/R/+opf939Y9a+n9P/6il/+L6Ry39l9A/aum/pP5RS/+l9I9a+n9f/6il/w/0j1r6L61/1NL/h/pHLf1/pH/U0v/H+kct/X+if9TS/6f6Ry39l9E/aun/M/2jlv7L6h+19F9O/6il//L6Ry39V9A/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+q+oftfRfTf+opf/P9Y9a+v9C/6il/+r6Ry3919A/aum/pv5RS/+19I9a+q+tf9TS/5f6Ry3919E/aum/rv5RS//19I9a+v9K/6il/6/1j1r6/0b/qKX/+vpHLf030D9q6b+h/lFL/430j1r6b6x/1NL/t/pHLf030T9q6b+p/lFL/830j1r6b65/1NL/d/pHLf1/r3/U0v8P+kct/f+of9TS/0/6Ry39/6x/1NL/L/pHLf3/qn/U0n8L/aOW/n/TP2rp/3f9o5b+/9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf330D9q6b+n/lFL/730j1r6761/1NJ/H/2jlv776h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+h+oftfQ/TP+opf/h+kct/Y/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/sfqH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+p+tf9TS/xz9o5b+5+oftfQ/T/+opf/5+kct/S/QP2rpf6H+UUv/i/SPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv7X6h+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5b+z+oftfR/Tv+opf/z+kct/V/QP2rp/6L+UUv/l/SPWvq/rH/U0v8V/aOW/q/qH7X0f03/qKX/6/pHLf3f0D9q6f+m/lFL/7f0j0r6jzGgf9TSf5D+UUv/wfpHLf1H0j9q6T+y/lFL/yH6Ry39R9E/auk/qv5RS//R9I9a+o+uf9TSfwz9o5b+Y+oftfT/hP5RS/9P6h+19P+U/lFL/7H0j1r6j61/1NL/0/pHLf3H0T9q6f8Z/aOW/uPqH7X0/6z+UUv/z+kftfT/vP5RS//x9I9a+o+vf9TSfwL9o5b+E+oftfT/gv5RS/8v6h+19P+S/lFL/y/rH7X0n0j/qKX/xPpHLf0n0T9q6T+p/lFL/8n0j1r6T65/1NJ/Cv2jlv5T6h+19J9K/6il/1f0j1r6f1X/qKX/1/SPWvp/Xf+opf/U+kct/afRP2rpP63+UUv/6fSPWvpPr3/U0n8G/aOW/jPqH7X0n0n/qKX/zPpHLf1n0T9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19J9L/6il/zf0j1r6f1P/qKX/3PpHLf3n0T9q6T9U/6il/zD9o5b+8+oftfT/lv5RS//59I9a+s+vf9TSfwH9o5b+C+oftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/b+sftfRfTP+opf939I9a+n9X/6il//f0j1r6L65/1NJ/Cf2jlv5L6h+19F9K/6il//f1j1r6/0D/qKX/0vpHLf1/qH/U0v9H+kct/X+sf9TS/yf6Ry39f6p/1NJ/Gf2jlv4/0z9q6b+s/lFL/+X0j1r6L69/1NJ/Bf2jlv4r6h+19F9J/6il/8r6Ry39V9E/aum/qv5RS//V9I9a+v9c/6il/y/0j1r6r65/1NJ/Df2jlv5r6h+19F9L/6il/9r6Ry39f6l/1NJ/Hf2jlv7r6h+19F9P/6il/6/0j1r6/1r/qKX/b/SPWvqvr3/U0n8D/aOW/hvqH7X030j/qKX/xvpHLf1/q3/U0n8T/aOW/pvqH7X030z/qKX/5vpHLf1/p3/U0v/3+kct/f+gf9TS/4/6Ry39/6R/1NL/z/pHLf3/on/U0v+v+kct/bfQP2rp/zf9o5b+f9c/aun/D/2jlv5b6h+19N9K/6il/9b6Ry39t9E/aum/rf5RS//t9I9a+m+vf9TSfwf9o5b+O+oftfTfSf+opf/O+kct/XfRP2rpv6v+UUv/3fSPWvrvrn/U0n8P/aOW/nvqH7X030v/qKX/3vpHLf330T9q6b+v/lFL//30j1r6769/1NL/AP2jlv4H6h+19D9I/6il/8H6Ry39D9E/aul/qP5RS//D9I9a+h+uf9TS/wj9o5b+R+oftfQ/Sv+opf/R+kct/Y/RP2rpf6z+UUv/4/SPWvofr3/U0v8E/aOW/ifqH7X0P0n/qKX/yfpHLf1P0T9q6X+q/lFL/9P0j1r6n65/1NL/DP2jlv5n6h+19D9L/6il/9n6Ry39z9E/aul/rv5RS//z9I9a+p+vf9TS/wL9o5b+F+oftfS/SP+opf/F+kct/S/RP2rpf6n+UUv/y/SPWvpfrn/U0v8K/aOW/lfqH7X0v0r/qKX/1fpHLf2v0T9q6X+t/lFL/+v0j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aul/q/5RS//b9I9a+t+uf9TS/w79o5b+d+oftfS/S/+opf/d+kct/e/RP2rpf6/+UUv/+/SPWvrfr3/U0v8B/aOW/g/qH7X0f0j/qKX/w/pHLf0f0T9q6f+o/lFL/8f0j1r6P65/1NL/Cf2jlv5P6h+19H9K/6il/9P6Ry39n9E/aun/rP5RS//n9I9a+j+vf9TS/wX9o5b+L+oftfR/Sf+opf/L+kct/V/RP2rp/6r+UUv/1/SPWvq/rn/U0v8N/aOW/m/qH7X0f0v/qKT/mAP6Ry39B+kftfQfrH/U0n8k/aOW/iPrH7X0H6J/1NJ/FP2jlv6j6h+19B9N/6il/+j6Ry39x9A/auk/pv5RS/9P6B+19P+k/lFL/0/pH7X0H0v/qKX/2PpHLf0/rX/U0n8c/aOW/p/RP2rpP67+UUv/z+oftfT/nP5RS//P6x+19B9P/6il//j6Ry39J9A/auk/of5RS/8v6B+19P+i/lFL/y/pH7X0/7L+UUv/ifSPWvpPrH/U0n8S/aOW/pPqH7X0n0z/qKX/5PpHLf2n0D9q6T+l/lFL/6n0j1r6f0X/qKX/V/WPWvp/Tf+opf/X9Y9a+k+tf9TSfxr9o5b+0+oftfSfTv+opf/0+kct/WfQP2rpP6P+UUv/mfSPWvrPrH/U0n8W/aOW/rPqH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6f0P/qKX/N/WPWvrPrX/0H9cfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4cdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCtAAAA//96f2hv")
r0 = openat(0xffffffffffffff9c, &(0x7f00000176c0)='./file0\x00', 0x0, 0x0)
ioctl(r0, 0x40205844, &(0x7f0000017700)="0100"/32)
read(0x4, &(0x7f0000017740), 0x96)

3.854508095s ago: executing program 3 (id=44):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r2, 0x5514)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1f, 0x2)
ioctl$USBDEVFS_RESET(r3, 0x5514)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x2)
ioctl$USBDEVFS_RESET(r4, 0x5514)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x16, 0x2)
ioctl$USBDEVFS_RESET(r5, 0x5514)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x20, 0x2)
ioctl$USBDEVFS_RESET(r6, 0x5514)

1.545350282s ago: executing program 0 (id=45):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c000200010000000500000004"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

1.544977612s ago: executing program 2 (id=46):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x8)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept$inet(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b702000064000000bf6100000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000b704000001000000850000003c000000950000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20)
sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0)

1.353631917s ago: executing program 0 (id=47):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='intel_xhci_usb_sw\x00', 0x12)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='serial8250\x00', 0xb)

1.329227977s ago: executing program 4 (id=48):
r0 = socket(0x2, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10)
listen(r0, 0x1)
accept(r0, 0x0, 0x0)

1.22736773s ago: executing program 2 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000405a06090000010102000109021900010100c0320904000001ff00000007058102400000"], 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000600))

1.153082782s ago: executing program 0 (id=50):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}})
r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

249.235314ms ago: executing program 4 (id=51):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000940)=',', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}], 0x7)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="1a", 0x1}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

157.699766ms ago: executing program 4 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000e0)='./file0\x00', 0x1ed)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x18)
listen(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/rootcell\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='syz0:127.0.0.1+7003\n\x00', 0x18)
close(r1)
mount$afs(&(0x7f0000000400)=@cell={0x25, 'syz0:', 'syz0'}, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600), 0x0, 0x0)

0s ago: executing program 4 (id=53):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='2097152\x00', 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts.
[   64.711384][ T5760] cgroup: Unknown subsys name 'net'
[   64.833112][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.231368][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.300123][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.318229][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.337196][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.345674][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.353553][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   68.368206][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.377775][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.386042][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.417236][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.439772][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.456663][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.464763][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.487397][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.497009][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.504896][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   68.512348][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   68.519720][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.527178][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.613554][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.627360][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.635284][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.648231][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.655972][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   68.665088][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.805881][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   68.955698][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.962977][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.971647][ T5773] bridge_slave_0: entered allmulticast mode
[   68.988290][ T5773] bridge_slave_0: entered promiscuous mode
[   69.035765][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.043237][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.050846][ T5773] bridge_slave_1: entered allmulticast mode
[   69.057794][ T5773] bridge_slave_1: entered promiscuous mode
[   69.083552][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.106397][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.116460][ T5780] chnl_net:caif_netlink_parms(): no params data found
[   69.178925][ T5773] team0: Port device team_slave_0 added
[   69.185072][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   69.204147][ T5773] team0: Port device team_slave_1 added
[   69.211949][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   69.305213][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.312459][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.339106][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.380320][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.387335][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.413364][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.428596][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.435784][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.443139][ T5780] bridge_slave_0: entered allmulticast mode
[   69.449859][ T5780] bridge_slave_0: entered promiscuous mode
[   69.483900][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.491186][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.498706][ T5780] bridge_slave_1: entered allmulticast mode
[   69.505374][ T5780] bridge_slave_1: entered promiscuous mode
[   69.547260][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.554443][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.561928][ T5777] bridge_slave_0: entered allmulticast mode
[   69.568885][ T5777] bridge_slave_0: entered promiscuous mode
[   69.577072][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.584221][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.591508][ T5777] bridge_slave_1: entered allmulticast mode
[   69.598927][ T5777] bridge_slave_1: entered promiscuous mode
[   69.631732][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.639406][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.646597][ T5788] bridge_slave_0: entered allmulticast mode
[   69.653748][ T5788] bridge_slave_0: entered promiscuous mode
[   69.673154][ T5773] hsr_slave_0: entered promiscuous mode
[   69.680242][ T5773] hsr_slave_1: entered promiscuous mode
[   69.689157][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.702917][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.712217][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.719727][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.726989][ T5788] bridge_slave_1: entered allmulticast mode
[   69.733656][ T5788] bridge_slave_1: entered promiscuous mode
[   69.765823][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.786569][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.798173][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.838393][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.862752][ T5780] team0: Port device team_slave_0 added
[   69.897705][ T5777] team0: Port device team_slave_0 added
[   69.905206][ T5780] team0: Port device team_slave_1 added
[   69.913919][ T5788] team0: Port device team_slave_0 added
[   69.930861][ T5777] team0: Port device team_slave_1 added
[   69.955101][ T5788] team0: Port device team_slave_1 added
[   69.991765][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.999102][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.026029][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.071288][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.078520][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.105105][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.116823][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.126231][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.155068][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.166775][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.174011][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.200530][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.225888][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.233022][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.261472][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.273613][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.280953][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.307206][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.400779][ T5777] hsr_slave_0: entered promiscuous mode
[   70.407944][ T5777] hsr_slave_1: entered promiscuous mode
[   70.414150][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.422013][ T5777] Cannot create hsr debugfs directory
[   70.479018][ T5788] hsr_slave_0: entered promiscuous mode
[   70.485381][ T5788] hsr_slave_1: entered promiscuous mode
[   70.491714][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.500170][ T5788] Cannot create hsr debugfs directory
[   70.500185][ T5784] Bluetooth: hci0: command tx timeout
[   70.546108][ T5780] hsr_slave_0: entered promiscuous mode
[   70.553044][ T5780] hsr_slave_1: entered promiscuous mode
[   70.559406][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.567080][ T5780] Cannot create hsr debugfs directory
[   70.577071][ T5784] Bluetooth: hci2: command tx timeout
[   70.577130][   T51] Bluetooth: hci1: command tx timeout
[   70.653305][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.696310][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.730190][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.737248][   T51] Bluetooth: hci3: command tx timeout
[   70.770306][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.929551][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.939829][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.961626][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.972206][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.048652][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.065201][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.074870][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.084513][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.201104][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.209469][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.222870][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.233796][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.245246][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.295099][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   71.326227][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.333619][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.364828][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.390814][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.398072][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.435553][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   71.482925][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.490093][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.501829][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.523101][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.530240][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.597592][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   71.624240][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[   71.637187][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[   71.660221][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.667405][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.680511][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.687711][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.711302][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.749329][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[   71.805278][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.812521][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.846374][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.853641][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.969868][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.113635][ T5773] veth0_vlan: entered promiscuous mode
[   72.145690][ T5773] veth1_vlan: entered promiscuous mode
[   72.229314][ T5773] veth0_macvtap: entered promiscuous mode
[   72.264704][ T5773] veth1_macvtap: entered promiscuous mode
[   72.282792][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.321016][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.358699][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.372746][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.382765][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.394116][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.404174][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.432010][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.506541][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.521154][ T5777] veth0_vlan: entered promiscuous mode
[   72.575148][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.583357][   T51] Bluetooth: hci0: command tx timeout
[   72.591081][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.614959][ T5777] veth1_vlan: entered promiscuous mode
[   72.643180][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.652300][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.658203][   T51] Bluetooth: hci1: command tx timeout
[   72.662066][ T5784] Bluetooth: hci2: command tx timeout
[   72.681604][ T5788] veth0_vlan: entered promiscuous mode
[   72.745754][ T5788] veth1_vlan: entered promiscuous mode
[   72.769248][ T5777] veth0_macvtap: entered promiscuous mode
[   72.816557][ T5777] veth1_macvtap: entered promiscuous mode
[   72.822467][ T5784] Bluetooth: hci3: command tx timeout
[   72.841490][ T5780] veth0_vlan: entered promiscuous mode
[   72.889627][ T5788] veth0_macvtap: entered promiscuous mode
[   72.910038][ T5780] veth1_vlan: entered promiscuous mode
[   72.922662][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.934617][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.949167][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.965940][ T5788] veth1_macvtap: entered promiscuous mode
[   72.975635][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.990667][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.002912][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.013614][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.022735][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.031485][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.040249][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.066681][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.079338][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.091842][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.105164][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.116418][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.134497][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.145414][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.155908][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.157225][  T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   73.174781][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.186591][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.211977][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.222525][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.231831][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.240707][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.309224][ T5780] veth0_macvtap: entered promiscuous mode
[   73.334914][ T5780] veth1_macvtap: entered promiscuous mode
[   73.368130][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.375992][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.378922][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.394733][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.406492][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.418120][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.428306][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.430006][  T788] usb 4-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00
[   73.442972][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.448428][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.465945][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.474767][  T788] usb 4-1: Product: syz
[   73.485151][  T788] usb 4-1: Manufacturer: syz
[   73.497019][  T788] usb 4-1: SerialNumber: syz
[   73.522900][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.541519][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.544195][  T788] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[   73.552082][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.571615][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.581761][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.592241][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.603387][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.644540][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.646966][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.656385][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.670320][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.674981][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.686690][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.711576][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.742854][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.774023][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.784524][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.956201][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.973693][  T788] mos7840: probe of ttyUSB0 failed with error -71
[   73.987015][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.010718][  T788] mos7840: probe of ttyUSB1 failed with error -71
[   74.016039][ T5840] virtio-fs: tag <syz> not found
[   74.048175][ T5840] virtio-fs: tag <syz> not found
[   74.050513][  T788] mos7840: probe of ttyUSB2 failed with error -71
[   74.075633][  T788] mos7840: probe of ttyUSB3 failed with error -71
[   74.090454][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.116419][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.139188][  T788] usb 4-1: USB disconnect, device number 2
[   74.175207][  T788] mos7840 4-1:1.0: device disconnected
[   74.283748][ T5844] syz.2.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   74.352248][ T5846] UDC core: g1: couldn't find an available UDC or it's busy
[   74.377351][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.567429][ T5834] usb 1-1: Using ep0 maxpacket: 16
[   74.580082][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.599096][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   74.622373][ T5834] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   74.643952][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.657331][ T5784] Bluetooth: hci0: command tx timeout
[   74.674152][ T5834] usb 1-1: config 0 descriptor??
[   74.737176][ T5784] Bluetooth: hci1: command tx timeout
[   74.742640][ T5784] Bluetooth: hci2: command tx timeout
[   74.857568][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   74.897414][ T5784] Bluetooth: hci3: command tx timeout
[   75.047453][    T9] usb 2-1: Using ep0 maxpacket: 8
[   75.063161][    T9] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[   75.074874][    T9] usb 2-1: config 0 has no interface number 0
[   75.083247][    T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[   75.093035][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.113443][    T9] usb 2-1: config 0 descriptor??
[   75.232366][    T9] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002
[   75.284850][    T9] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[   75.296076][    T9] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[   75.353749][    T9] usb 2-1: USB disconnect, device number 2
[   75.686828][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'.
[   75.994195][ T5861] loop1: detected capacity change from 0 to 8
[   76.077033][ T5160] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   76.239234][ T5160] usb 4-1: device descriptor read/64, error -71
[   76.536991][ T5160] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   76.717094][ T5160] usb 4-1: device descriptor read/64, error -71
[   76.746991][ T5784] Bluetooth: hci0: command tx timeout
[   76.760673][ T5844] loop2: detected capacity change from 0 to 262144
[   76.779416][ T5844] BTRFS: device fsid 7d22f6b8-9c5a-477d-9e45-049f0dda9b8d devid 1 transid 8 /dev/loop2 scanned by syz.2.5 (5844)
[   76.811951][ T5844] BTRFS info (device loop2): first mount of filesystem 7d22f6b8-9c5a-477d-9e45-049f0dda9b8d
[   76.822518][ T5784] Bluetooth: hci1: command tx timeout
[   76.828303][ T5844] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   76.837940][ T5160] usb usb4-port1: attempt power cycle
[   76.843517][ T5844] BTRFS info (device loop2): using free space tree
[   76.902221][ T5844] BTRFS info (device loop2): enabling ssd optimizations
[   76.912754][ T5844] BTRFS info (device loop2): auto enabling async discard
[   76.978586][ T5784] Bluetooth: hci3: command tx timeout
[   77.024068][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.125563][ T5777] BTRFS info (device loop2): last unmount of filesystem 7d22f6b8-9c5a-477d-9e45-049f0dda9b8d
[   77.171595][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.258724][ T5160] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   77.311220][ T5160] usb 4-1: device descriptor read/8, error -71
[   77.351661][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.482520][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.609685][ T5160] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   77.673804][ T5160] usb 4-1: device descriptor read/8, error -71
[   77.817764][ T5160] usb usb4-port1: unable to enumerate USB device
[   78.101137][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.111409][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.120938][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.145374][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.153435][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.161757][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.009162][ T5784] Bluetooth: hci0: unexpected event 0x08 length: 5 > 4
[   79.012985][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'.
[   79.287103][ T5915] Zero length message leads to an empty skb
[   79.332296][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   79.587296][  T788] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   79.671928][   T12] hsr_slave_0: left promiscuous mode
[   79.684163][   T12] hsr_slave_1: left promiscuous mode
[   79.696845][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.705181][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.714280][ T5834] usbhid 1-1:0.0: can't add hid device: -32
[   79.720494][ T5834] usbhid: probe of 1-1:0.0 failed with error -32
[   79.729612][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.737678][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.747973][   T12] bridge_slave_1: left allmulticast mode
[   79.754439][   T12] bridge_slave_1: left promiscuous mode
[   79.767119][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.778963][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   79.788171][  T788] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[   79.793486][ T5834] usb 1-1: USB disconnect, device number 2
[   79.798834][  T788] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   79.834551][   T12] bridge_slave_0: left allmulticast mode
[   79.856158][   T12] bridge_slave_0: left promiscuous mode
[   79.877472][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.895279][  T788] usb 3-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice= 1.00
[   79.918210][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   79.929411][  T788] usb 3-1: Product: syz
[   79.948086][  T788] usb 3-1: Manufacturer: syz
[   79.968774][  T788] gspca_main: cpia1-2.14.0 probing 0553:0002
[   79.980936][   T12] veth1_macvtap: left promiscuous mode
[   79.987400][   T12] veth0_macvtap: left promiscuous mode
[   79.993692][   T12] veth1_vlan: left promiscuous mode
[   79.999665][   T12] veth0_vlan: left promiscuous mode
[   80.017738][ T5838] usb 4-1: Using ep0 maxpacket: 16
[   80.027683][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.048302][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   80.079311][ T5838] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.099155][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.124624][ T5838] usb 4-1: config 0 descriptor??
[   80.267217][ T5784] Bluetooth: hci2: command tx timeout
[   80.278467][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   80.479312][ T5834] usb 1-1: config index 0 descriptor too short (expected 75, got 18)
[   80.492814][ T5834] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[   80.512962][ T5834] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[   80.522300][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.533453][ T5834] usb 1-1: Product: syz
[   80.537734][ T5834] usb 1-1: Manufacturer: syz
[   80.542349][ T5834] usb 1-1: SerialNumber: syz
[   80.554949][ T5834] sisusb 1-1:1.0: Invalid USB2VGA device
[   80.561295][ T5834] sisusb: probe of 1-1:1.0 failed with error -22
[   80.595768][ T5838] HID 045e:07da: Invalid code 65791 type 1
[   80.623801][ T5838] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input5
[   80.701027][ T5838] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   80.796452][ T5834] usb 1-1: USB disconnect, device number 3
[   80.952204][   T12] team0 (unregistering): Port device team_slave_1 removed
[   80.989901][  T788] gspca_cpia1: usb_control_msg 05, error -110
[   80.997445][  T788] gspca_cpia1: usb_control_msg 01, error -32
[   81.005255][  T788] gspca_cpia1: usb_control_msg 01, error -32
[   81.014463][  T788] gspca_cpia1: usb_control_msg 01, error -32
[   81.014924][   T12] team0 (unregistering): Port device team_slave_0 removed
[   81.028624][  T788] gspca_cpia1: usb_control_msg 01, error -32
[   81.034640][  T788] cpia1 3-1:1.0: only firmware version 1 is supported (got: 0)
[   81.074935][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.122691][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.185150][ T5834] usb 3-1: USB disconnect, device number 2
[   81.413647][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.441144][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.462652][  T788] usb 4-1: USB disconnect, device number 7
[   81.532621][   T12] bond0 (unregistering): Released all slaves
[   81.659005][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.666214][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.675667][ T5889] bridge_slave_0: entered allmulticast mode
[   81.683382][ T5889] bridge_slave_0: entered promiscuous mode
[   81.721337][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.740708][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.753405][ T5889] bridge_slave_1: entered allmulticast mode
[   81.781961][ T5889] bridge_slave_1: entered promiscuous mode
[   81.875956][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.922593][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.981145][ T5950] PM: suspend entry (deep)
[   81.986657][ T5889] team0: Port device team_slave_0 added
[   82.009931][ T5889] team0: Port device team_slave_1 added
[   82.078458][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.102423][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.240958][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.295426][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.307049][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.346958][ T5784] Bluetooth: hci2: command tx timeout
[   82.423629][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.487481][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[   82.506717][ T5950] Filesystems sync: 0.507 seconds
[   82.640950][ T5889] hsr_slave_0: entered promiscuous mode
[   82.677075][ T5889] hsr_slave_1: entered promiscuous mode
[   82.686029][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.699175][ T5889] Cannot create hsr debugfs directory
[   82.727292][   T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   82.795201][ T5950] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   82.816410][ T5950] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   82.876260][ T5950] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   82.914342][ T5950] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   82.930853][   T27] usb 4-1: Using ep0 maxpacket: 8
[   82.941471][ T5950] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   82.958562][   T27] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[   82.972974][   T27] usb 4-1: config 0 has no interface number 0
[   82.983332][   T27] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[   83.028178][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.056568][ T5950] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   83.078851][   T27] usb 4-1: config 0 descriptor??
[   83.115756][ T5950] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   83.130723][ T5950] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   83.152980][ T5950] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   83.165768][ T5950] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   83.175197][ T5950] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   83.197466][ T5950] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   83.214239][   T27] viperboard 4-1:0.143: version 0.00 found at bus 004 address 008
[   83.252862][   T27] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[   83.265023][   T27] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[   83.291356][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   83.324885][   T27] usb 4-1: USB disconnect, device number 8
[   83.445503][ T5889] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.464692][ T5889] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.475363][ T5889] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.488246][ T5889] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.498558][ T5834] usb 1-1: Dual-Role OTG device on HNP port
[   83.504946][ T5834] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06
[   83.514641][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.523011][ T5834] usb 1-1: SerialNumber: 12345678
[   83.706454][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.776510][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   83.846876][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.854062][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.947739][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.954958][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.407007][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   84.582465][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.658292][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout
[   84.812055][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'.
[   84.977175][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout
[   85.137025][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout
[   85.196008][ T5889] veth0_vlan: entered promiscuous mode
[   85.218765][ T5784] Bluetooth: hci2: command 0x0419 tx timeout
[   85.242439][ T5889] veth1_vlan: entered promiscuous mode
[   85.362570][ T5889] veth0_macvtap: entered promiscuous mode
[   85.418876][ T5889] veth1_macvtap: entered promiscuous mode
[   85.470560][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.481363][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.498009][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.548727][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.564910][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.575590][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.594685][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.628688][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.645866][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.658890][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.677094][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.687522][ T5889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.705743][ T5889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.726583][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.746173][ T5889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.760378][ T5889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.764300][ T6047] PM: suspend entry (deep)
[   85.769407][ T5889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.783597][ T6047] PM: suspend exit
[   85.787551][ T5889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.884119][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.896202][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.972839][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.982835][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.132321][ T6057] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6
[   86.737336][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout
[   86.990415][   T23] cfg80211: failed to load regulatory.db
[   86.998522][ T5950] Freezing user space processes
[   87.057292][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout
[   87.190916][ T5950] Freezing user space processes completed (elapsed 0.183 seconds)
[   87.201409][ T5950] OOM killer disabled.
[   87.205498][ T5950] Freezing remaining freezable tasks
[   87.214926][ T5950] Freezing remaining freezable tasks completed (elapsed 0.003 seconds)
[   87.223868][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout
[   87.226193][ T5950] printk: Suspending console(s) (use no_console_suspend to debug)
[   87.298560][ T5784] Bluetooth: hci2: command 0x0419 tx timeout
[   87.349988][ T5950] vhci_hcd vhci_hcd.14: suspend vhci_hcd
[   87.387948][ T5950] vhci_hcd vhci_hcd.13: suspend vhci_hcd
[   87.428636][ T5950] vhci_hcd vhci_hcd.12: suspend vhci_hcd
[   87.468487][ T5950] vhci_hcd vhci_hcd.11: suspend vhci_hcd
[   87.510017][ T5950] vhci_hcd vhci_hcd.10: suspend vhci_hcd
[   87.558846][ T5950] vhci_hcd vhci_hcd.9: suspend vhci_hcd
[   87.608377][ T5950] vhci_hcd vhci_hcd.8: suspend vhci_hcd
[   87.648634][ T5950] vhci_hcd vhci_hcd.7: suspend vhci_hcd
[   87.689418][ T5950] vhci_hcd vhci_hcd.6: suspend vhci_hcd
[   87.732878][ T5950] vhci_hcd vhci_hcd.5: suspend vhci_hcd
[   87.768836][ T5950] vhci_hcd vhci_hcd.4: suspend vhci_hcd
[   87.808575][ T5950] vhci_hcd vhci_hcd.3: suspend vhci_hcd
[   87.850319][ T5950] vhci_hcd vhci_hcd.2: suspend vhci_hcd
[   87.888343][ T5950] vhci_hcd vhci_hcd.1: suspend vhci_hcd
[   87.927840][ T5950] vhci_hcd vhci_hcd.0: suspend vhci_hcd
[   87.999108][   T12] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   88.264655][ T5950] ACPI: PM: Preparing to enter system sleep state S3
[   88.265371][ T5950] ACPI: PM: Saving platform NVS memory
[   88.266666][ T5950] Disabling non-boot CPUs ...
[   88.293863][ T5950] smpboot: CPU 1 is now offline
[   88.322539][ T5950] ACPI: PM: Low-level resume complete
[   88.322589][ T5950] ACPI: PM: Restoring platform NVS memory
[   88.346067][ T5950] Enabling non-boot CPUs ...
[   88.351250][ T5950] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   88.364723][ T5950] CPU1 is up
[   88.365767][ T5950] ACPI: PM: Waking up from system sleep state S3
[   88.766743][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout
[   88.907047][ T6165] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[   89.139116][ T5950] OOM killer enabled.
[   89.139731][ T5950] Restarting tasks ... 
[   89.158323][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout
[   89.179169][ T5950] done.
[   89.182494][ T5950] random: crng reseeded on system resumption
[   89.192132][ T5950] PM: suspend exit
[   89.291075][ T6069] loop4: detected capacity change from 0 to 65536
[   89.317532][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout
[   89.351255][ T6069] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel.
[   89.396610][ T5784] Bluetooth: hci2: command 0x0419 tx timeout
[   89.566292][ T6187] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   89.760375][ T6187] usb 4-1: Using ep0 maxpacket: 16
[   89.775345][ T6187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.777315][ T6187] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   89.780401][ T6187] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   89.781764][ T6187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.786451][ T5834] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8
[   89.826076][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.833531][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.863063][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.866031][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.874309][ T6187] usb 4-1: config 0 descriptor??
[   90.086319][ T5816] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.269248][ T5816] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   90.273998][ T5816] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[   90.275268][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   90.283021][ T5816] usb 3-1: Product: syz
[   90.283673][ T5816] usb 3-1: Manufacturer: syz
[   90.291550][ T6209] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   90.295560][ T5816] opticon 3-1:1.0: opticon converter detected
[   90.301037][ T6187] HID 045e:07da: Invalid code 65791 type 1
[   90.306150][ T5816] usb 3-1: opticon converter now attached to ttyUSB0
[   90.321476][ T6187] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input9
[   90.334321][ T6187] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   90.924442][ T6237] ------------[ cut here ]------------
[   90.925615][ T6237] WARNING: CPU: 0 PID: 6237 at mm/page_alloc.c:4477 __alloc_pages+0x2e4/0x460
[   90.927240][ T6237] Modules linked in:
[   90.927857][ T6237] CPU: 0 PID: 6237 Comm: syz.4.53 Not tainted syzkaller #0
[   90.928906][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.930329][ T6237] RIP: 0010:__alloc_pages+0x2e4/0x460
[   90.931159][ T6237] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 88 0c a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff
[   90.933894][ T6237] RSP: 0018:ffffc90003a97a20 EFLAGS: 00010246
[   90.934863][ T6237] RAX: ffffc90003a97a00 RBX: 1ffff92000752f48 RCX: 0000000000000000
[   90.936025][ T6237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003a97a88
[   90.937228][ T6237] RBP: ffffc90003a97b20 R08: ffffc90003a97a87 R09: 0000000000000000
[   90.938362][ T6237] R10: ffffc90003a97a60 R11: fffff52000752f51 R12: 000000000000000b
[   90.939508][ T6237] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000
[   90.940633][ T6237] FS:  00007f94bab3b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[   90.941936][ T6237] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.942914][ T6237] CR2: 0000001b34723ffc CR3: 000000005cc02000 CR4: 00000000003506f0
[   90.944076][ T6237] Call Trace:
[   90.944602][ T6237]  <TASK>
[   90.945105][ T6237]  ? zone_statistics+0x170/0x170
[   90.945889][ T6237]  ? __mutex_lock+0x30d/0xc80
[   90.946770][ T6237]  ? max_vclocks_store+0x18e/0x3f0
[   90.947591][ T6237]  ? mutex_lock_nested+0x20/0x20
[   90.948358][ T6237]  __kmalloc_large_node+0x8c/0x1f0
[   90.949134][ T6237]  ? max_vclocks_store+0x226/0x3f0
[   90.949897][ T6237]  __kmalloc+0x114/0x240
[   90.950589][ T6237]  max_vclocks_store+0x226/0x3f0
[   90.951354][ T6237]  ? lockdep_hardirqs_on+0x98/0x150
[   90.952146][ T6237]  ? max_vclocks_show+0x90/0x90
[   90.952884][ T6237]  ? sysfs_kf_read+0x360/0x360
[   90.953596][ T6237]  ? max_vclocks_show+0x90/0x90
[   90.954413][ T6237]  ? sysfs_kf_read+0x360/0x360
[   90.955152][ T6237]  kernfs_fop_write_iter+0x3a4/0x520
[   90.955996][ T6237]  vfs_write+0x474/0x9a0
[   90.957066][ T6237]  ? file_end_write+0x250/0x250
[   90.957863][ T6237]  ? __fget_files+0x3fc/0x460
[   90.958616][ T6237]  ? __fdget_pos+0x2a3/0x330
[   90.959323][ T6237]  ? ksys_write+0x74/0x260
[   90.960006][ T6237]  ksys_write+0x151/0x260
[   90.960679][ T6237]  ? __ia32_sys_read+0x90/0x90
[   90.961496][ T6237]  ? lockdep_hardirqs_on+0x98/0x150
[   90.962315][ T6237]  do_syscall_64+0x55/0xb0
[   90.963029][ T6237]  ? clear_bhb_loop+0x40/0x90
[   90.963753][ T6237]  ? clear_bhb_loop+0x40/0x90
[   90.964468][ T6237]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.965342][ T6237] RIP: 0033:0x7f94b9b9e0d9
[   90.966026][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.968848][ T6237] RSP: 002b:00007f94bab3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   90.970087][ T6237] RAX: ffffffffffffffda RBX: 00007f94b9e25fa0 RCX: 00007f94b9b9e0d9
[   90.971256][ T6237] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[   90.972414][ T6237] RBP: 00007f94b9c35024 R08: 0000000000000000 R09: 0000000000000000
[   90.973573][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.974757][ T6237] R13: 00007f94b9e26038 R14: 00007f94b9e25fa0 R15: 00007ffd65a49458
[   90.976037][ T6237]  </TASK>
[   90.976609][ T6237] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   90.977632][ T6237] CPU: 0 PID: 6237 Comm: syz.4.53 Not tainted syzkaller #0
[   90.978726][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.980170][ T6237] Call Trace:
[   90.980672][ T6237]  <TASK>
[   90.981136][ T6237]  dump_stack_lvl+0x18c/0x250
[   90.981840][ T6237]  ? show_regs_print_info+0x20/0x20
[   90.982607][ T6237]  ? load_image+0x420/0x420
[   90.983296][ T6237]  panic+0x2ca/0x720
[   90.983907][ T6237]  ? bpf_jit_dump+0xd0/0xd0
[   90.984583][ T6237]  __warn+0x2e0/0x470
[   90.985203][ T6237]  ? __alloc_pages+0x2e4/0x460
[   90.985892][ T6237]  ? __alloc_pages+0x2e4/0x460
[   90.986585][ T6237]  report_bug+0x2be/0x4f0
[   90.987246][ T6237]  ? __alloc_pages+0x2e4/0x460
[   90.987929][ T6237]  ? __alloc_pages+0x2e4/0x460
[   90.988651][ T6237]  ? __alloc_pages+0x2e6/0x460
[   90.989378][ T6237]  handle_bug+0xcf/0x120
[   90.990035][ T6237]  exc_invalid_op+0x1a/0x50
[   90.990699][ T6237]  asm_exc_invalid_op+0x1a/0x20
[   90.991400][ T6237] RIP: 0010:__alloc_pages+0x2e4/0x460
[   90.992185][ T6237] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 88 0c a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff
[   90.994900][ T6237] RSP: 0018:ffffc90003a97a20 EFLAGS: 00010246
[   90.995798][ T6237] RAX: ffffc90003a97a00 RBX: 1ffff92000752f48 RCX: 0000000000000000
[   90.996924][ T6237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003a97a88
[   90.998067][ T6237] RBP: ffffc90003a97b20 R08: ffffc90003a97a87 R09: 0000000000000000
[   90.999214][ T6237] R10: ffffc90003a97a60 R11: fffff52000752f51 R12: 000000000000000b
[   91.000367][ T6237] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000
[   91.001523][ T6237]  ? zone_statistics+0x170/0x170
[   91.002248][ T6237]  ? __mutex_lock+0x30d/0xc80
[   91.002983][ T6237]  ? max_vclocks_store+0x18e/0x3f0
[   91.003731][ T6237]  ? mutex_lock_nested+0x20/0x20
[   91.004450][ T6237]  __kmalloc_large_node+0x8c/0x1f0
[   91.005197][ T6237]  ? max_vclocks_store+0x226/0x3f0
[   91.005938][ T6237]  __kmalloc+0x114/0x240
[   91.006569][ T6237]  max_vclocks_store+0x226/0x3f0
[   91.007300][ T6237]  ? lockdep_hardirqs_on+0x98/0x150
[   91.008058][ T6237]  ? max_vclocks_show+0x90/0x90
[   91.008804][ T6237]  ? sysfs_kf_read+0x360/0x360
[   91.009537][ T6237]  ? max_vclocks_show+0x90/0x90
[   91.010269][ T6237]  ? sysfs_kf_read+0x360/0x360
[   91.011003][ T6237]  kernfs_fop_write_iter+0x3a4/0x520
[   91.011824][ T6237]  vfs_write+0x474/0x9a0
[   91.012459][ T6237]  ? file_end_write+0x250/0x250
[   91.013241][ T6237]  ? __fget_files+0x3fc/0x460
[   91.013968][ T6237]  ? __fdget_pos+0x2a3/0x330
[   91.014739][ T6237]  ? ksys_write+0x74/0x260
[   91.015406][ T6237]  ksys_write+0x151/0x260
[   91.016072][ T6237]  ? __ia32_sys_read+0x90/0x90
[   91.016805][ T6237]  ? lockdep_hardirqs_on+0x98/0x150
[   91.017572][ T6237]  do_syscall_64+0x55/0xb0
[   91.018234][ T6237]  ? clear_bhb_loop+0x40/0x90
[   91.018983][ T6237]  ? clear_bhb_loop+0x40/0x90
[   91.019662][ T6237]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.020526][ T6237] RIP: 0033:0x7f94b9b9e0d9
[   91.021207][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.023816][ T6237] RSP: 002b:00007f94bab3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   91.025033][ T6237] RAX: ffffffffffffffda RBX: 00007f94b9e25fa0 RCX: 00007f94b9b9e0d9
[   91.026134][ T6237] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[   91.027245][ T6237] RBP: 00007f94b9c35024 R08: 0000000000000000 R09: 0000000000000000
[   91.028357][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.029451][ T6237] R13: 00007f94b9e26038 R14: 00007f94b9e25fa0 R15: 00007ffd65a49458
[   91.030573][ T6237]  </TASK>
[   91.031146][ T6237] Kernel Offset: disabled
[   91.031810][ T6237] Rebooting in 86400 seconds..