last executing test programs: 15m50.015568741s ago: executing program 32 (id=8403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x128, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [0xffffff00], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 15m45.49027016s ago: executing program 33 (id=8445): r0 = syz_io_uring_setup(0x5009, &(0x7f0000000200)={0x0, 0x84e3, 0x40, 0x1, 0x3ba}, &(0x7f0000000140), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x402}, 0x1) 8m38.408771507s ago: executing program 34 (id=14428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) 8m27.025981399s ago: executing program 0 (id=14591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000006500)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1d}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xd8) 8m26.667559529s ago: executing program 0 (id=14597): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_gettime(r0, &(0x7f0000000680)) 8m26.419218507s ago: executing program 0 (id=14602): r0 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) 8m26.238154247s ago: executing program 0 (id=14606): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000380)={[{@discard_sync}, {@notreelog}, {@compress_force}, {@compress}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5142, &(0x7f0000005140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m24.20887662s ago: executing program 0 (id=14637): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) 8m24.094398348s ago: executing program 4 (id=14640): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002600010025bd5500fcdbdf2509"], 0x14}}, 0x20006004) 8m23.937658083s ago: executing program 4 (id=14643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005ec0)=ANY=[@ANYBLOB="6802000000050104000000000000000007000004540201000200000003000000060102000500fe"], 0x268}, 0x1, 0x0, 0x0, 0x20000080}, 0x40040) 8m23.830222014s ago: executing program 4 (id=14645): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100)=0xfff, 0x3) 8m23.627385667s ago: executing program 0 (id=14649): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x7f) 8m23.593600739s ago: executing program 4 (id=14650): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000380)={[{@discard_sync}, {@notreelog}, {@compress_force}, {@compress}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5142, &(0x7f0000005140)="$eJzs3U+IVVUcB/Dz5s0/FZyXENgqi0CqhYObiIieMkFF0SsXgxE4tQjShZMg0UIQW/Rv4SspaiG5klokszCC2riQwgjchoa5cKMYSC7aacy797x579x5972ZZhrRz0dm7j33d8+55z3u4n2fc+8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEJ48Y/Pj7VWhhevn7s1deHSdH3vkR3T1w9NbTofQqW1vZLX9+x87tW3du15aTx2mHklW9ZqvQ6Zdb2cNUa7Ns736/55I4QwkgxQzZfPbiiM2rl6oDhgqdtX95/cdrC+9fTxZvXmtYtniy+deeNrPYG1kp9XVxbOpXrr91CyR7vdcepVuk7RrH96wv0vLwIAWJLJRmvR/jiaf8Rttw+n9aRdT9rNpB0/ITQ7G8uRjTvaa55b0voazbOeRYWxnvNM6vn732430v5JO4kaS5hn9655pBnvNc/ZpL5W8wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kzz6zvDDZfVzt6YuXJqu7z2yY/r6oalN50OotbZXsnJl/QfH639/t/PUkZ+2f336yguPV/N+cTncsXP4Pa48ORHCmx2VK3HYqxtDaHQXWs3wVbHwdmvl+VgAAADgbvJA6/dQu53FwZGudqWVJiutf1EWFm9f3X9y28H61tPHm9Wb1y6eXf54jR7jrVt0vHa7tvBT6QjGMf6m4y3U464HCuOUS0dM8/wTlyf/KetfyP+18vwf3zn5HwAAgGUbXc38X1nSeL3yf33R+d25+f/71//8tKx/If9v6TpkIf/HGcf8PxSWl/8BAADgTrba+b9eGKdcv/w/9vLIN2X9C/l/crD8P9w57bjxtzjhfRMhTPabOgAAANBD/H/3ha8WYl7PvjlI8/rTjx29VDZeIf/XB8v/Iyv6qgAAAID/4sSXux8pqxfyf2Ow/D+2qrMGAAAAluLdj8Y/LKsX8v/MYPl/fb7Mr3zIOv0c/wrh2EQI4/Mrs1nhl9B8pl0AAAAAVkjM6X99tvfHsv0K+X+2/P7/8U4H8fr/rvv/Fa7/7yhkd/17yo0BAAAAuBcVr+ePt8fPnlzQ6/n7g17//+C6o6+VHb+Q/w8Plv+rncuVfP4fAAAALMNKP/9/te//v7swTrl+9/+//+P3fi3rX8j/zcHyf1xu6Hx5ZyqV7P15fyKEzfMr+d0Ev42H25cU5kY6Ci2NpMeu2CMvzI11FFpmkx7bJ0J4aH7lcFK4LxaaSeHGxrxwIimcj4X8fGgXTiWFM/FM+2JjPt208EMs5BdYzMUrKDa0L4lIetzs1WO+sGiPi+2DAwAA3FNieM6z7Eh3M6RRdq7Sb4f1/XYY6rdDtd8Ow8kO6Y69toeZ7kLc3rywdWnP/z8xWP6Pb8Votuh1/X+I1//nzzVsX/8/Ewu1pDAXC430jgGNeIws7H4Sj1Fr5D1ubG4XAAAA4K4WvxeorvE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9eY+S66gOAn9nXeB/e3QQqQopggTrGgNdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRJ8KIojhGo+JLVIENAkihsJo6h5oFSNSKJEpHWCiELTAAqFVKSavffM3jl352F71/Gmv5/knTPzP4977sxcz7mPcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/+HY5z/5N63i9/z2kkcev3zyYwc3Xf7MZy4594EQpuZer2ThysC1X5v8+c0X33Lw9g033nbi0rf05eXyeBis/enKn3wu1npiZQjfqYTQkwbWDmWB3vz5UKzvNUMhnBPmA/US0wNZibTh8P3+EA6H+UC9qu/1hzBUCFz24N13fbGWuKE/hFUhhGraxmPVrI3+NHBBXxYYSAO7erLAr17M1APf7coCcNril6H+oT861ZhhdOFyTT5/vYu2YC+ttHvdMTHaPN/PNi3xQhX0pS9MndbbVqqOJVH6ehzzbWv1bRv+3+z/vgXynclvW2k9X+9tK/6Qyn+hvDgfqoau7dM7tl41uy++0hXGx7ub1bREW9WHn/v0tpNJn+1b/dJ/1qOL8jn80v2rbu5e8977blu76qkjbz309Oku5o8Kq7SYXmrVkH/mls37GE3anqTde/PZ97aVfiWN+dEVQtjx0d97X6t4afw/2nr8Hz/O8bGrIXes9YXhbGweXxmKiWeHs7E5AAAALBvLYa/prvE731koPlJN6iuN/8c6O/4fD/nng/mst8dCmJxLHBoJ4by517PAN2NzHxkJ4fVzqanGwKYkcCyEV88l1tSrSkqsiCXGksBPhvPAZBI4HgNTSeAbMXB9EvhcDBxNAtti4FgSuDgGwkxjP948nPej40B/DGzJVuLReBbCL4Zja8m6erReFQAAwCLJR4e9jU8L5zqcboY4vDza3y5DPAO7aYZqUkM6gq0Pq5rW0NOqhq4Qjna1q6He7wOtu19atkq7mkunYVQaM3ztl3/9/tBCafw/0Xr8X11gQSql4/8hbJ77G3N35ZHZenzLVEMGAAAA4DQM/s8TX28VL43/Jzs7/z/uE+kuZA73xt0QO0dCmGgMZNX+QTmQHfUezAMAAACwHNSPx9ePhc/kj9kp2ul4upx/6iTzxwP/kwvm7zt2x5ZWy1sa/091dv7/QONjthDH41J8eSSEFYXAD+JS1gJzxmLgx+9qDOT9Px5XwHWxqvzEhHpV18USW2JgIgkcblbih/US5zUG8jer3vihej9m8hKFAAAAAJxxcXdAPC4fz/9/w282fLJVudL4f8vJnf8/Nw4und4/OxjCup4QutMLA+4dyCYGjIGhSp64cyCrqzut6pqBEC6qdSyt6ol8/v+edI7BB/uzqmLgvDccee6CWuLr/SGsKwYe+uBNb6sl9iWBeuN/0R/C62q9TRv/9oqs8d608a+sCOG1hUC9qo+sCKHWWF9a1d3V/D4GaVX/VA3hFYVAvaq3V0PYHwBYpuJ/pduLL+7df/XOrbOz03uWMBH34feHHTOz0+Pbds1urzZZpu3JMjdMY3RNuU+d3vnm0XyKog/cunmok3T9OsGJYlv5fvzSiYP58/hbqHeunxt6G55uTLv8pjeWmwiFX1LNuty1xF0eKFYy/yaW6o/5+8JgWHHV3uk945/aum/fnvXZ306zb8j+xsNM2bpan66rgYWWrYOPR9PZshKnuq5WFytZt+/K3ev27r967cyVW6+YvmL64+vfvmHiwomNE++4cF2tVxPZ3zZdXb1Q1UlXX7ypw34tYlfP7ylUcia2GhISEsstsWtwdcv/k0vj/92tx/9xqxO3/Pn8DM2O/4/Gw/zZ6/OH+bfEwOFOj/+PNjuaXz8xYCwJHIiBAw7zAwAA8PIQB/lxb2bcK/3TNd9+qlW50vj/QGfX/y/S/P/1qesvbTbN/5pYYqLZ/P/pNP/1+f8PNJv///rYx7yX9fn/D78E8/9fVQ8kq+QX5v8HAABeDs7c/P9tp/dPbxBQytB2ev/0BgGlDG2n8e/0BgEnPf//Y//xl/8VWiiN/6/vbPxv4n4AAAA4e3z2Tz/5O63ipfH/4c7G/2d+/r/Q7Pz/sWaBqWYTA5r/DwAAgGWq2fx/o9cOfLhVudL4/2hn4/942kVXQ+5Y6wvD2Zx2IZ3T7tnh+iUDAAAAsDx0hfHx3g7zNsyMuunU23w4nwq0VbroiT8+cXLn/x/rbPzfcF3Gl+5fdXP3mvfe98Jta1c9deSth56eP/4PAAAALJ1O90sAAAAAAAAAAAAAAAAvvSf+/eDGVvHS9f9h89zrza7/j/f9i9cXvLIhd6y1/fx/+fPL3nPL/rkpC+8dDuGNxcDOgzvPCfm9+VcXA3d9aM2raomDaYk7Hr/4yVriw2ng3WvPfb6WuCgJbImTJL46DcS7Kj6/MgnE6RX/LQ3E9XE0DfTlgS+szPpRSdfVT4eydVVJ19UjQyGMFAL1dfWdoayNStrBG5JAvYOfSAOxg3+WB7ryQP22jrcMZksVA0Ox6I2D2VIBAHDWir8Ce8OOmdnpifgbLz6e39P4GDVMWXZNudpKh80/mk9N9oFbNw91ku5OfyHP32u8N1RrXVjf1SpLZa6Xi1NLm1X3yiZdbjfbW1eTcqmTXXV9zXvUn/VofNuu2e29bTu+sX2WDT1ts6wvDXaKWbrmVmkHtXSwLB30qMN108Eix+ddYXy8O8n1+zE4Ghq0+0R0er1+cZ6/Zp+CYp6Pnzj0q1b1lcb/o52N/6vFfj2f3wzgQLyz3t+OmOYfAAAAltYXNv36q/Hf+6+956FWeUvj/7HOxv9xD1Z+KDjb23Es3v//0EgIc7fWH80C34zNfWQkhNfPpaZiieyG+pfGEhNZ4Jtxh8maWGLLVGNVK2LgaBL4yXAeOJYEjsdAvpfiSMh35fzdcAhvm0ttbiyxO5YYTQLvi4GxJDAeAxOhca/PyhiYTEo8szIPTCWBf42BMNO4rm5dma8rAACAk5EPUXobn4Z0nHe0p12GSrsMA+0ydLXLUG2XoVkv4vNvxQy9yckrlUKm3rTW/qSWUoZ4M/yTXq5ShvDDxpxpwVLT8fyD+vkGlcYMt7+zpxpaKI3/Jzob/w80PmatH4/j//n7/2WBH8TF+3I8dXwsBn78rsZAvmPgeBzsXlevaiovkQ/ar4slJmNgLAnsjoHJJLBlcx44/KrGQD7Srjd+qN74TF6iEAAAAIDF13IUH8fr8/fcj+P/G/d+frBVudL4f7Kz8X/cITFYbOxzsdYTK0P4TiWEnjSwdigLxP0YQ/Hy+NcMhXBOYQdHvcT0QFaiL2k4fL8/u0K9L63qe/3ZxQfx+WUP3n3XF2uJG/pDWFVYlfU2HqtmbfSngQv6ssBAGtjVkwXinp964LtdWQBOW32vYPxA5ae61I0uXK7J5+/lck/QtHulfaAL5FvomqulUtpU5/tU607ubWuz5WeRlL4ex3zbluO3bdS3rfhDKv+F8uJ8qBq6tk/v2HrV7L74SvFK1pIlep+LV6l2kl6Ez+GBU1/a9qrpAkwkm4+Jhcst/DmsxOq+dP+qm7vXvPe+29aueurIWw893fFiNBEvFL77M/8y9KPC6l1q1ZB/5pbd9mTK9mRZ/DeQfLvHvG0hhM3PfOW6VvHS+H+qs/F/T/I459dxZe4dCeFNhZV7b1z9fzSSbQcLgWwr+YpyIDvk/p/DTbecAAAAsNjquzvq+wtm8sfshPB0nFzOP3WS+eP+iskF8zdbznS/xcBffWhVq36Vxv9bWo//VySL6fi/4/8sEcf/F3S274pekb5w4LR2RZeqa88G6BQ4/r+gs/3b1tHx/wW+Qy/zAz+O/zv+vxDH/9tw/H9BZ/vbVtrC7z7TP7rOSk/94Z2PtIqXxv+7Oxv/m/9v4Un76vP/bUkC9fn/djeb/++A+f8AAIAl1WSiuXScV5q9r5Qhnb2vlKHtBIFtpxhMDz6fyfn/KvO7D5fT/H9Pnv/Yb0ILpfH/gc7G//HjMFhsfbnM/ze2uUlV18fAbhMDAgAAcDZqtoMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl9btf//f21vF7/ntJY88fvnkxw5uuvyZz1xy7gMhzMy9XsnClYFrvzb585svvuXg7RtuvO3EpW+p5uV688ffbcgda31hOITDhVeGYuLZ4dqT+cBl77llf08tce9wCG8sBnYe3HlOLfGN4RBWFwN3fWjNq2qJg2mJOx6/+Mla4sNp4N1rz32+lrgoD1TSxf2HldniVtLF/eLKEEYKgfrifmxlY1X1Nv4kD3SlbfzjUNZGDAzFol8dytqIgdlYYmZFCOt6QuhOq7qnmlXVnVb1z9Wsqu60qs9WQ7gohNCTVvV4X1ZVT9rzB/qyqmLgvDccee6CWuJwXwjrioGHPnjT22qJTySBeuN/3hfC62ofmbTxb/Vmjfemjd/QG8JrQwh9aYlf9mQl+tIST/SE8IpCoN74R3tC2B94WYgbn4Yt2t79V+/cOjs7vWcJE315W/1hx8zs9Pi2XbPbq8kyNVMppF+85tT7/uhzn95We/zArZuHOkn35OV65xZ5Q2/D041n+9LH5RooVjL/fpTqj/n7wmBYcdXe6T3jn9q6b9+e9dnfTrNvyP5259FsXa1fLutqdbGSdfuu3L1u7/6r185cufWK6SumP77+7RsmLpzYOPGOC9fVejWR/V2Mrt506l0dOMWunt9TqORMbAAkJCSWW6KrYes2cbZvyEs/9OcXtDdU5zbQpWFFMUtlrpeL0elNp9jjU/md0rZH60sDh1KWDQtkuaYxy8bSYGK+lv4sy9zvutLgsNhY19wqjc+7wvh4d7P1MNr4tLh6f3Yaq/fhfNV1mgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91GD0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwKQAA//91qClF") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m23.203315046s ago: executing program 35 (id=14649): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x7f) 8m21.860651998s ago: executing program 4 (id=14671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m20.626318813s ago: executing program 4 (id=14684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 8m20.415402391s ago: executing program 36 (id=14684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 5m4.486496244s ago: executing program 7 (id=17651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00.'], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000001}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m3.991025017s ago: executing program 7 (id=17657): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x4004012, r0, 0x0) ftruncate(r0, 0x0) 5m3.794093887s ago: executing program 7 (id=17660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='workqueue_activate_work\x00', r0, 0x0, 0x8}, 0x18) syz_genetlink_get_family_id$nl802154(&(0x7f0000001ec0), 0xffffffffffffffff) 5m3.503554579s ago: executing program 7 (id=17665): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000b00)=""/205, 0xcd}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000f40)=""/192, 0xc0}, {&(0x7f0000001040)=""/4071, 0xfe7}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f0000000a00)=""/208, 0xd0}], 0x9}, 0x122) 5m3.210675994s ago: executing program 7 (id=17669): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 5m2.879595389s ago: executing program 7 (id=17670): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) 4m46.768824762s ago: executing program 37 (id=17670): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) 2m19.420497521s ago: executing program 8 (id=19761): acct(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 2m18.757580454s ago: executing program 8 (id=19766): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x97a4, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZVERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrAb3ve98P7z3nPM/uTFdX11T/f11VM1M93UvMvegcAwOjDwxt8oERu+XOORbcaIc5rthnxz1PmXzM8ScbNnnYDSYZdnGSQcM+jjQwMDDSsOUMmzbWoyeeNNLAKO9O/3tjjTHmoHEGBqYddnG2YR9nHPphoseGz/fOCI24ooP+dnHQdkP/vdt4Q77EkE+WuvnCcwYGBsZ/z+2H3GTqf7qj0paYfZ65/271N7chVoOHff7ef6MO/TfRAwMDE907wI+P98476EO4S0O+5vg7PDj6Oh/C1/4f1xKzzzPvCP5DtsWRh02bccg2PuI2aGzEx/nNK8+y+7AhfPfxNjAwZBf3D9vK/4iWmH3u+Qfefz8/8PCY457xzrv7zbGeHRgY67mBgbGeHxgY64WBgbFeHBgY66UP26X+75p9junmGLK9D788jH34Y3l8elzss9qLew8MDIw2dJ6x3h56vBh78uHHhKqqqvrPbvY5ppsTjv+jf9Dxf8utZr+1439VVdX/3OadfY7phhzHRzj+j/1Bx//v33jj6kN/9z/bjENv9faHeyeqqqrqv9Tc8+Lxf/wPOv6Pt/31+3f8r6qq+p/bIgu8e/wfe4Tj/8QfdPxffb47Lxs23/DvG956zyLfff7YsOlvvGf6yO+Z/vp7pg9+z3LeO/+o75n+6numjz4wMNajw6a/+ffJYz075Db/vJyxXv7783EmGeU90195z/RR3zP91WHrNGT6aO+Z/tZ75h/979PHHvLf5MO+7msfMNRVVVX/MS0y3dxzDrznefbDJg9/Yj8+L/SYY7a668Na36qqqqqqqqr6r/f2U6ef/fe/+f7UwHv+dvVvf8M67PcCg44999prP7QV/c9o0D//PmTzD3ud/m8b4jz64ZMPDKy5+Ie9KvUh9D/mb9Xr/0n5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+49zn//7e//x+498vbD5t15knvvG/Rv99ykoFVh312y51zLLjqh7DuH0L/W8//D6w6aGBgmO/4QywXnH2RxaYcGBhY9L47J51h4G/XzTTkulkmHPndP+YcGJjy3f8HT/I+Sx72LgvvvrnDxH9bxrHvLn/ed/YbedAIK/GeZj3n/oNWWeKV6Uf8+MX3vx9/e3+JJV/eb4rhf8sy0ggzjf4+Nx6+/OH3ZUTnYes+5ZB1n2r9Ndaear2NNv7aqmsst/KKK6+45rTTTjP9dDNMP+03Zp5qpVVXX3Hqof+/z5gNfeuKkf+dMRt7xDF7avb3jtmI922Ckw/CMfvnd/X4h0W8u8TzZn348uFjNsq/OWbDv97IHzxmk6867AtNMjB4YNl3h2bQwMAkowwe2HDIhWlGGxiYZPCweScZMu+3JhxpYGCHv9/RQcNebHToPIM2HzLPf9j7lsw8bEQ2GT7fiK+zPuKK/qv3LTlh7J3vHOF9S/5f9X90/P8nr5kG/W2ghr8BwrB5hnp9yO8z8U/rO/ko7x7k3m99P+B1cd6NHl9rrPLY4v9dr4tD6zv2B6zvB7yO3/uu75TTPLPH0EX9t63vCPu6+Yde+e/s6wY+eF83Mt1+xasmG3FfN9/7r+I/bMfDx2i0EWZ6v33dDvOdt9mQ5Q988L5u/lWHvXjA3/d1Iw0MTDLy8H3dkB3fqIMHdhhyYdohF0YbPHDokAvTvXthjIFzh1z4+vJrrb7CoHdfZmDYcqcestzZJhw0dAO66aBVRtv5nXdGGbYuL4/1j+s67PEx+XuP57NPOGwwh912+HKHzDp8ua9uPfS6UYct95X/wnKH35bWd5Kzhl432rDlvjrCcgd/wHKH3/aftocpB/3DE1Vhf/Ohvq8Rbb+jf8D6fsDrcOPj7V33KZZ5+L/hdbgHvd/6jvLB6/t+7xvyvuv7+OVP7Pvf9brh9Di7d5+hj5XRhz3O3vovPH6H33bE/djQFwIZutsf/d/Zj03+T/uxLUYeaYTBfk/v933uCjD/sC3ib0tb4cBXVh0+9oNHWO6/+j73PfdlEOzHxh/h57lBm+07MIjG/NHVX9jg7Z0+eMwHD/zjzxbDx3z4bT9ozEf7d8b8kx885iN+n/x+Yz7l54ZeP3iE9X/vmC+862w3DR/zUUdY7r8a89E++Njxz2M+MDCYxnyHSYeO2wftT99vzIffdviYD/k6s0w4ysBcAwMDUwwb81H/nTGf5L/ncT4mzD/08xX/NunZGRb66vAxH3GM/9WYj/pfHPNN7/3b43yKd6/77EgDo446sOFy66+/7jRD/x9+cdqh//O+6NkVho7zBx1L389o+G0/aLsY5d8xGv/fMhr0r4wmHeX9jP6+aY180CLP/Z/ui0b5rxqdy/uiU+cZOm4f9H3R+4358NvScXDi99x+xJ9DP+D1s/A+vTs+820z/Oe9/4TXzxr+8+7/yNfPGv47yVVH3MnXv1u//3eXv7v83eXvLn9x73P+f/Lh5//fGfuAjw77oXPwVTPdOtuHvb4fcv+rz/8P8/2H8/+z3TrTVUN+tBp23Qeenx06z3/k+dkZh36Y6LHh8414fnDEFf1X52f32WX9q/5/Oj/7f9TwbfXf+Lm4/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Puc/596+PMAHlpswR8MOxE6eJNpjtrkw17fD7n/1ef/h/n+w/n/TY6aZpORBv523Qee/x86j+P8//0LbLb0f/L5/+Hbauf/61+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/7MNfx7AEbPO9fnhzwe4Ydv99viw1/dD7n/r+f/e/99b+393+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uGHn/wdGeJvEhXpcYHD+/3927+O/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/H+YP2bx/1H+mMV/ifwxi/+S+WMW/x/nj1n8f5I/ZvFfKn/M4r90/pjFf5n8MYv/T/PHLP7L5o9Z/JfLH7P4/yx/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/ef6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv9f5I9Z/H+ZP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/X+WPWfx/nT9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+v8kfs/hvmT9m8f9t/pjFf6v8MYv/7/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/7/DGL/x/yxyz+2+ePWfz/mD9m8f9T/pjFf4f8MYv/jvljFv8/549Z/HfKH7P475w/ZvHfJX/M4v+X/DGL/1/zxyz+u+aPWfx3yx+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4v/R/DGL/8fyxyz+k+SPWfw/nj9m8Z80f8zi/4n8MYv/J/PHLP6T5Y9Z/D+VP2bx/3T+mMV/8vwxi/9n8scs/p/NH7P4fy5/zOI/Rf6Yxf/z+WMW/y/kj1n8v5g/ZvGfMn/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/zfyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOL/zfwxi/8s+WMW/2/lj1n8Z80fs/h/O3/M4v+d/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4fzd/zOI/V/6YxX/u/DGL/zz5Yxb/7+WPWfznzR+z+H8/f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+P8gfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+P8wfs/j/KH/M4r9E/pjFf8n8MYv/j/PHLP4/yR+z+C+VP2bxXzp/zOK/TP6Yxf+n+WMW/2Xzxyz+y+WPWfx/lj9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+P88f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/y/yxyz+v8wfs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/+v8scs/r/OH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv/f5I9Z/LfMH7P4/zZ/zOK/Vf6Yxf93+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/33+mMX/D/ljFv/t88cs/n/MH7P4/yl/zOK/Q/6YxX/H/DGL/5/zxyz+O+WPWfx3zh+z+O+SP2bx/0v+mMX/r/ljFv9d88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/sf53/fux/Uf7Y/zr/99n+L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzv+9bTH8E4v/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljEv93P83/n7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/5H8MYv/R/PHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/p/MH7P4T5Y/ZvH/VP6Yxf/T+WMW/8nzxyz+n8kfs/h/Nn/M4v+5/DGL/xT5Yxb/z+ePWfy/kD9m8f9i/pjFf8r8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP7fyB+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/zfzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/d/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4v/d/DGL/1z5Yxb/ufPHLP7z5I9Z/L+XP2bxnzd/zOL//fwxi/98+WMW//nzxyz+C+SPWfwXzB+z+P8gf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+P8wf8zi/6P8MYv/EvljFv8l88cs/j/OH7P4/yR/zOK/VP6YxX/p/DGL/zL5Yxb/n+aPWfyXzR+z+C+XP2bx/1n+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/8/wxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP6/yB+z+P8yf8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+v8ofs/j/On/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8f5M/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/3+WMW/z/kj1n8t88fs/j/MX/M4v+n/DGL/w75Yxb/HfPHLP5/zh+z+O+UP2bx3zl/zOK/S/6Yxf8v+WMW/7/mj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPSfxHHsgfs/gPyh+z+I+UP2bxHzl/zOI/Sv6YxX9w/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94Fv/B/7XZLf7jW/z/i1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv+P5o9Z/D+WP2bxnyR/zOL/8fwxi/+k+WMW/0/kj1n8P5k/ZvGfLH/M4v+p/DGL/6fzxyz+k+ePWfw/kz9m8f9s/pjF/3P5Yxb/KfLHLP6fzx+z+H8hf8zi/8X8MYv/lPljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/L+RP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/b+aPWfxnyR+z+H8rf8ziP2v+mMX/2/ljFv/v5I9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/7v5Yxb/ufLHLP5z549Z/OfJH7P4fy9/zOI/b/6Yxf/7+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/0H+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/2H+mMX/R/ljFv8l8scs/kvmj1n8f5w/ZvH/Sf6YxX+p/DGL/9L5Yxb/ZfLHLP4/zR+z+C+bP2bxXy5/zOL/s/wxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/n+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+RP2bx/2X+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/lT9m8f91/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/j/Jn/M4r9l/pjF/7f5Yxb/rfLHLP6/yx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/+/zxyz+f8gfs/hvnz9m8f9j/pjF/0/5Yxb/HfLHLP475o9Z/P+cP2bx3yl/zOK/c/6YxX+X/DGL/1/yxyz+f80fs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n+4yv+d8f7dOS3+R6j8//0s/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/ykD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfw/mj9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bx/2T+mMV/svwxi/+n8scs/p/OH7P4T54/ZvH/TP6Yxf+z+Q9ty3+8aPH/XP6YxX+K/DGL/+fzxyz+X8gfs/h/MX/M4j9l/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/b+SPWfxnyB+z+M+YP2bxnyl/zOI/c/6Yxf+b+WMW/1nyxyz+38ofs/jPmj9m8f92/pjF/zv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvH/bv6YxX+u/DGL/9z5Yxb/efLHLP7fyx+z+M+bP2bx/37+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfx/kD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfx/mD9m8f9R/pjFf4n8MYv/kvljFv8f549Z/H+SP2bxXyp/zOK/dP6YxX+Z/DGL/0/zxyz+y+aPWfyXyx+z+P8sf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/3n+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/X+SPWfx/mT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/1/lj1n8f50/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/r/JH7P4b5k/ZvH/bf6YxX+r/DGL/+/yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/+/wxi/8f8scs/tvnj1n8/5g/ZvH/U/6YxX+H/DGL/475Yxb/P+ePWfx3yh+z+O+cP2bx30XtP8b7XmPx/4va//2z+P81f8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX8/qf9o/+J6i//+Uv9/lcX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aPzai/ygf9gr93/Y+/oflj1m2/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8P5o/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8f9k/pjFf7L8MYv/p/LHLP6fzh+z+E+eP2bx/0z+mMX/s/ljFv/P5Y9Z/KfIH7P4fz5/zOL/hfwxi/8X88cs/lPmj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvH/Rv6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/L+ZP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8v5M/ZvGfLX/M4j97/pjFf478MYv/nPljFv/v5o9Z/OfKH7P4z50/ZvGfJ3/M4v+9/DGL/7z5Yxb/7+ePWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf8H+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6Yxf+H+WMW/x/lj1n8l8gfs/gvmT9m8f9x/pjF/yf5Yxb/pfLHLP5L549Z/JfJH7P4/zR/zOK/bP6YxX+5/DGL/8/yxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/n+ePWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Rf6Yxf+X+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/1X+mMX/1/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/5v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zx+z+P8hf8ziv33+mMX/j/ljFv8/5Y9Z/HfIH7P475g/ZvH/c/6YxX+n/DGL/875Yxb/XfLHLP5/yR+z+P81f8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/6kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfw/mj9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bx/2T+mMV/svwxi/+n8scs/p/OH7P4T54/ZvH/TP6Yxf+z+WMW/8/lj1n8p8gfs/h/Pn/M4v+F/DGL/xfzxyz+U+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8f9G/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8v5k/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfy/kz9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/+/mj1n858ofs/jPnT9m8Z8nf8zi/738MYv/vPljFv/v549Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/wf5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/4f5Yxb/H+WPWfyXyB+z+C+ZP2bx/3H+mMX/J/ljFv+l8scs/kvnj1n8l8kfs/j/NH/M4r9s/pjFf7n8MYv/z/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+f549Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9F/pjF/5f5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/Vf6Yxf/X+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOL/m/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjFf5v8MYv/tvljFv/t8scs/r/PH7P4/yF/zOK/ff6Yxf+P+WMW/z/lj1n8d8gfs/jvmD9m8f9z/pjFf6f8MYv/zvljFv9d8scs/n/JH7P4/zV/zOK/a/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/aQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/D+aP2bx/1j+mMV/kvwxi//H88cs/pPmj1n8P5E/ZvH/ZP6YxX+y/DGL/6fyxyz+n84fs/hPnj9m8f9M/pjF/7P5Yxb/z+WPWfynyB+z+H8+f8zi/4X8MYv/F/PHLP5T5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bx/0b+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfy/mT9m8Z8lf8zi/638MYv/rPljFv9v549Z/L+TP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/7+aPWfznyh+z+M+dP2bxnyd/zOL/vfwxi/+8+WMW/+/nj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/B/ljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMX/h/ljFv8f5Y9Z/JfIH7P4L5k/ZvH/cf6Yxf8n+WMW/6Xyxyz+S+ePWfyXyR+z+P80f8ziv2z+mMV/ufwxi//P8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/5/nj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/0X+mMX/l/ljFv8N8scs/hvmj1n8N8ofs/hvnD9m8f9V/pjF/9f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v+b/DGL/5b5Yxb/3+aPWfy3yh+z+P8uf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+v88fs/j/IX/M4r99/pjF/4/5Yxb/P+WPWfx3yB+z+O+YP2bx/3P+mMV/p/wxi//O+WMW/13yxyz+f8kfs/j/NX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP6HY/53N3v86i/9EYv8PyuI/cf6Yxf8j+WMW/4/mj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfw/mT9m8Z8sf8zi/6n8MYv/p/PHLP6T549Z/D+TP2bx/2z+mMX/c/ljFv8p8scs/p/PH7P4fyF/zOL/xfwxi/+U+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8v5E/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9v5o9Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/+/kj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/u/ljFv+58scs/nPnj1n858kfs/h/L3/M4j9v/pjF//v5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/Qf6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/Yf6Yxf9H+WMW/yXyxyz+S+aPWfx/nD9m8f9J/pjFf6n8MYv/0vljFv9l8scs/j/NH7P4L5s/ZvFfLn/M4v+z/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+f5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5E/ZvH/Zf6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/H+VP2bx/3X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+P8mf8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/7/PHLP5/yB+z+G+fP2bx/2P+mMX/T/ljFv8d8scs/jvmj1n8/5w/ZvHfKX/M4r9z/pjFf5f8MYv/X/LHLP5/zR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JHxt0y0gDAv8xBvLHJNv/GIPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8kf8zi/9H8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/8n88cs/pPlj1n8P5U/ZvH/dP6YxX/y/DGL/2fyxyz+n80fs/h/Ln/M4j9F/pjF//P5Yxb/L+SPWfy/mD9m8Z8yf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/N/LHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4v/N/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8zi/538MYv/bPljFv/Z88cs/nPkj1n858wfs/h/N3/M4j9X/pjFf+78MYv/PPljFv/v5Y9Z/OfNH7P4fz9/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4/yB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP4/zB+z+P8of8ziv0T+mMV/yfwxi/+P88cs/j/JH7P4L5U/ZvFfOn/M4r9M/pjF/6f5Yxb/ZfPHLP7L5Y9Z/H+WP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4/zx/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/L/LHLP6/zB+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/6/yxyz+v84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/9/kj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvH/ff6Yxf8P+WMW/+3zxyz+f8wfs/j/KX/M4r9D/pjFf8f8MYv/n/PHLP475Y9Z/HfOH7P475I/ZvH/S/6Yxf+v+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+2D/6j/S/1v/o/DHL9n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/zIH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/h/NH/M4v+x/DGL/yT5Yxb/j+ePWfwnzR+z+H8if8zi/8n8MYv/ZPljFv9P5Y9Z/D+dP2bxnzx/zOL/mfwxi/9n88cs/p/LH7P4T5E/ZvH/fP6Yxf8L+WMW/y/mj1n8p8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+N/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4fzN/zOI/S/6Yxf9b+WMW/1nzxyz+384fs/h/J3/M4j9b/pjFf/b8MYv/HPljFv8588cs/t/NH7P4z5U/ZvGfO3/M4j9P/pjF/3v5Yxb/efPHLP7fzx+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/w/yxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/w/zxyz+P8ofs/gvkT9m8V8yf8zi/+P8MYv/T/LHLP5L5Y9Z/JfOH7P4L5M/ZvH/af6YxX/Z/DGL/3L5Yxb/n+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4/zx+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+L/DGL/y/zxyz+G+SPWfw3lPmP9m/OZ/HfSOb/72bx3zh/zOL/q/wxi/+v88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMX/N/ljFv8t88cs/r/NH7P4b5U/ZvH/Xf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/H+fP2bx/0P+mMV/+/wxi/8f88cs/n/KH7P475A/ZvHfMX/M4v/n/DGL/075Yxb/nfPHLP675I9Z/P+SP2bx/2v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH+sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyR+z+H80f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOL/yfwxi/9k+WMW/0/lj1n8P50/ZvGfPH/M4v+Z/DGL/2fzxyz+n8sfs/hPkT9m8f98/pjF/wv5Yxb/L+aPWfynzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/438MYv/DPljFv8Z88cs/jPlj1n8Z84fs/h/M3/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+H8nf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+380fs/jPlT9m8Z87f8ziP0/+mMX/e/ljFv9588cs/t/PH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/D/LHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/D/PHLP4/yh+z+C+RP2bxXzJ/zOL/4/wxi/9P8scs/kvlj1n8l84fs/gvkz9m8f9p/pjFf9n8MYv/cvljFv+f5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/j/PH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4v8MYv/L/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+r/DGL/6/zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6Yxf83+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8f58/ZvH/Q/6YxX/7/DGL/x/zxyz+f8ofs/jvkD9m8d8xf8zi/+f8MYv/TvljFv+d88cs/rvkj1n8/5I/ZvH/a/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjEf+yB/DGL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4f/R9/d9+5513/v9ZtQ+lLcf8wKst/h9r+8cs/pPkj1n8P54/ZvGfNH/M4v+J/DGL/yfzxyz+k+WPWfw/lT9m8f90/pjFf/L8MYv/Z/LHLP6fzR+z+H8uf8ziP0X+mMX/8/ljFv8v5I9Z/L+YP2bxnzJ/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/838scs/jPkj1n8Z8wfs/jPlD9m8Z85f8zi/838MYv/LPljFv9v5Y9Z/GfNH7P4fzt/zOL/nfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+H83f8ziP1f+mMV/7vwxi/88+WMW/+/lj1n8580fs/h/P3/M4j9f/pjFf/78MYv/AvljFv8F88cs/j/IH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/j/MH7P4/yh/zOK/RP6YxX/J/DGL/4/zxyz+P8kfs/gvlT9m8V86f8ziv0z+mMX/p/ljFv9l88cs/svlj1n8f5Y/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/j/PH/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8v8scs/r/MH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/r/LHLP6/zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/3+SPWfy3zB+z+P82f8ziv1X+mMX/d/ljFv+t88cs/tvkj1n8t80fs/hvlz9m8f99/pjF/w/5Yxb/7fPHLP5/zB+z+P8pf8ziv0P+mMV/x/wxi/+f88cs/jvlj1n8d84fs/jvkj9m8f9L/pjF/6/5Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/kMaNOIYWPwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2cgf8ziPyh/zOI/Uv6YxX/k/DGL/yj5Yxb/wfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/0fyxyz+H80fs/h/LH/M4j9J/pjF/+P5Yxb/SfPHLP6fyB+z+H8yf8ziP1n+mMX/U/ljFv9P549Z/CfPH7P4fyZ/zOL/2fwxi//n8scs/lPkj1n8P58/ZvH/Qv6Yxf+L+WMW/ynzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/I3/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/t/MH7P4z5I/ZvH/Vv6YxX/W/DGL/7fzxyz+38kfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9388cs/nPlj1n8584fs/jPkz9m8f9e/pjFf978MYv/9/PHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+D/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v/D/DGL/4/yxyz+S+SPWfyXzB+z+P84f8zi/5P8MYv/UvljFv+l88cs/svkj1n8f5o/ZvFfNn/M4r9c/pjF/2f5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/z/PHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+1/6T/6/9v1+g/N4r9O2z9m8V83f8ziv17+mMV//fwxi/8v8scs/r/MH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/r/LHLP6/zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/3+SPWfy3zB+z+P82f8ziv1X+mMX/d/ljFv+t88cs/tvkj1n8t80fs/hvlz9m8f99/pjF/w/5Yxb/7fPHLP5/zB+z+P8pf8ziv0P+mMV/x/wxi/+f88cs/jvlj1n8d84fs/jvkj9m8f9L/pjF/6/5Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljEv9xB/LHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4v/R/DGL/8fyxyz+k+SPWfw/nj9m8Z80f8zi/4n8MYv/J/PHLP6T5Y9Z/D+VP2bx/3T+mMV/8vwxi/9n8scs/p/NH7P4fy5/zOI/Rf6Yxf/z+WMW/y/kj1n8v5g/ZvGfMn/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/zfyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOL/zfwxi/8s+WMW/2/lj1n8Z80fs/h/O3/M4v+d/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4fzd/zOI/V/6YxX/u/DGL/zz5Yxb/7+WPWfznzR+z+H8/f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+P8gfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+P8wfs/j/KH/M4r9E/pjFf8n8MYv/j/PHLP4/yR+z+C+VP2bxXzp/zOK/TP6Yxf+n+WMW/2Xzxyz+y+WPWfx/lj9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+P88f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/y/yxyz+v8wfs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/+v8scs/r/OH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv/f5I9Z/LfMH7P4/zZ/zOK/Vf6Yxf93+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/33+mMX/D/ljFv/t88cs/n/MH7P4/yl/zOK/Q/6YxX/H/DGL/5/zxyz+O+WPWfx3zh+z+O+SP2bx/0v+mMX/r/ljFv9d88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxi/87+WMS//EG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wn/P/boaQkUw4AC4G1728bJTGzbtm3btm3btm3btm3bNt4z5wtydn9h/Uct/8P6j1r+h/MftfwP7z9q+R/Bf9TyP6L/qOV/JP9Ry//I/qOW/1H8Ry3/o/qPWv5H8x+1/I/uP2r5H8N/1PI/pv+o5X8s/1HL/9j+o5b/cfxHLf/j+o9a/sfzH7X8j+8/avmfwH/U8j+h/6jlfyL/Ucv/xP6jlv9J/Ect/5P6j1r+J/MftfxP7j9q+Z/Cf9TyP6X/qOV/Kv9Ry//U/qOW/2n8Ry3/0/qPWv6n8x+1/E/vP2r5n8F/1PI/o/+o5X8m/1HL/8z+o5b/WfxHLf+z+o9a/mfzH7X8z+4/avmfw3/U8j+n/6jlfy7/Ucv/3P6jlv95/Ect//P6j1r+5/MftfzP7z9q+V/Af9Tyv6D/qOV/If9Ry//C/qOW/0X8Ry3/i/qPWv4X8x+1/C/uP2r5X8J/1PK/pP+o5X8p/1HL/9L+o5b/ZfxHLf/L+o9a/pfzH7X8L+8/avlfwX/U8r+i/6jlfyX/Ucv/yv6jlv9V/Ect/6v6j1r+V/Mftfyv7j9q+V/Df9Tyv6b/qOV/Lf9Ry//a/qOW/3X8Ry3/6/qPWv7X8x+1/K/vP2r538B/1PK/of+o5X8j/1HL/8b+o5b/TfxHLf+b+o9a/jfzH7X8b+4/avnfwn/U8r+l/6jlfyv/Ucv/1v6jlv9t/Ect/9v6j1r+t/Mftfxv7z9q+d/Bf9Tyv6P/qOV/J/9Ry//O/qOW/138Ry3/u/qPWv538x+1/O/uP2r538N/1PK/p/+o5X8v/1HL/97+o5b/ffxHLf/7+o9a/vfzH7X87+8/avk/wH/U8n+g/6jl/yD/Ucv/wf6jlv9D/Ect/4f6j1r+D/Mftfwf7j9q+T/Cf9Tyf6T/qOX/KP9Ry//R/qOW/2P8Ry3/x/qPWv6P8x+1/B/vP2r5P8F/1PJ/ov+o5f8k/1HL/8n+o5b/U/xHLf+n+o9a/k/zH7X8n+4/avk/w3/U8n+m/6jl/yz/Ucv/2f6jlv9z/Ect/+f6j1r+z/Mftfyf7z9q+b/Af9Tyf6H/qOX/Iv9Ry//F/qOW/0v8Ry3/l/qPWv4v8x+1/F/uP2r5v8J/1PJ/pf+o5f8q/1HL/9X+o5b/a/xHLf/X+o9a/q/zH7X8X+8/avm/wX/U8n+j/6jl/yb/Ucv/zf6jlv9b/Ect/7f6j1r+b/Mftfzf7j9q+b/Df9Tyf6f/qOX/Lv9Ry//d/qOW/3v8Ry3/9/qPWv7v8x+1/N/vP2r5f8B/1PL/oP+o5f8h/1HL/8P+o5b/R/xHLf+P+o9a/h/zH7X8P+4/avl/wn/U8v+k/6jl/yn/Ucv/0/6jlv9n/Ect/8/6j1r+n/Mftfw/7z9q+X/Bf9Ty/6L/qOX/Jf9Ry//L/qOW/1f8Ry3/r/qPWv5f8x+1/L/uP2r5f8N/1PL/pv+o5f8t/1HL/9v+o5b/d/xHLf/v+o9a/t/zH7X8v+8/avn/wH/U8v+h/6jl/yP/Ucv/x/6jlv9P/Ect/5/6/7uBA4r+P/Mftfx/7j9q+f/Cf9Ty/6X/qOX/K/9Ry//X/qOW/2/8Ry3/3/qPWv6/8x+1/H/vP2r5/8F/1PL/o/+o5f8n/1HL/8/+o5b/X/xHLf+/+o9a/n/zH7X8/+4/avn/w3/U8v+n/6jkf5gB/qOW/3/5j1r+/+0/avn/j/+o5X+g/6jl/7/+o5b///mPWv7/7z9q+R/Ef9TyP6j/qOV/MP9Ry//g/qOW/yH8Ry3/Q/qPWv6H8h+1/A/tP/rH/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX+zdbWxeZeHH8dO13dOf/bs5h9eQwWDTTVzZ2pXJYPOhPhZM1bEYMIFsYWVUCnMPwQ3UalBiMIbJSBBRt6mbQGLMeDFMQFhJVOJUNE5EQxyCuoipYSIjGpeau+1d2ntts171uvZin8+L9j6n/E63Jd+dU7ZmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApbd52yw1rOzraNnnhhRdeDLw41b8zAam9Fv2p/pEAAAAAAAAAAAAAAAAjyfHtRKf65wgAAAAAAKebltZ3dVdXDTlVPfhgzs/bet83vXrl9Xuef3xl+X3/hy8f5pITBh/09PT0vNTcNbP/cFJRFKXPNr3/eHLluHT9zq7Lt/cdheK3zza3btvefHDnV77+8Nyp0+fU9p6tLdZc197RtmRCUYTq2mJr6aChqijCxNpie+mgsXQwqba4v3SwtPdgSnGgdHDhtRs61pVOnPCp4bTT0vrZonpIscWQ3w0G99/ZtWlX+f0olyxfrabo77+u+Yd7Kz5WNkL/5euHqsr+x/wTBEY0tv5vX1h+P8olT7j/P9pet2q4j43cf/n6YYL+IZ1hnv+HNNr7vL9n/4wRnv/nDnPJgf1P/7Kyq9T/Tb98ob7/VM3JPP+XPl/fUaiu7H/CkOf/0nN8Tfn5f1JRhNpx/nLAaaWl9XPdo93/K7sf2n/NWRWbqsH9H121p7rU/+G7Hnh//6nak+p/4PqhZpT7f9VnDgz9sQJj09K6u6fi/j+G/osFw1xyoP/5u49dVer/jJ1H9g362Fj6r63sf/GWGz+xePO2W+rbb1y7vm19202NjQ1NS5c1NV60fHHvI0Hf23H+qsDpYXz3/2JqxaaqKNoG9os+vOylUv8Hz/3H3/pPTR5j/xNHvf8/5/4Pwzp/QjFxYrF17ZYtmxr63pYPG/ve9v1nw/R/4tf/I/Y/r/z/Actfd5e+IB/Y/+adX/1Iqf97J616oP/UxDH2P2m0/jtf+7xAhHHe/9dVbIb03/7qd9aV+v/TK8cP9Z8a69f/k0ftf5f7P4xHS2vFX/j5Hyv1v/pfh4f7c4KTEKb48z9IJ0f/W6f94ptx6zBV/5BOjv6Xbm6L/Mu24f/0D+nk6P9XO6qOxK3DGfqHdHL0/7XuBzfGrcM0/UM6OfrfP/uRp+LW4f/1D+nk6P/4+ulXxa1Dnf4hnRz9X/alvavj1mG6/iGdHP1XvTLtibh1mKF/SCdH//VVZ38qbh1ep39IJ0f/13U+/GLcOszUP6STo//P7/x15PfphNfrH9LJ0f9Tf9y6I24dZukf0snR/wuz2uvj1uFM/UM6Ofq//4YnHolbhzfoH9LJ0f/T3/rgsbh1CPqHdHL0/41nj6yJW4fZ+od0cvS/b+GxP8Stw1n6h3Ry9P/vj179gbh1eKP+IZ0c/Yf9y78btw5n6x/SydH/FU/e1RC3DnP0D+nk6L9zxW13xq3DOfqHdHL039S8cHbcOpyrf0gnR/8z/vz3u+PWYa7+IZ0c/X/svvdW/rvfJymcp39IJ0f/N29Y/WjcOpyvf0gnR/8rZ/RcELcO8/QP6eTo//DR+34Utw7z9Q/p5Oj/7juXXBG3Dm/SP6STo/8f3Hped9w6vFn/kE6O/l+uvePWuHVYoH9IJ0f/X/5ZzbK4dViof0gnR/8/fuj7u+LW4S36h3Ry9P/i+x47J24dLtA/pJOj/90Xz/pi3Dq8Vf+QTo7+3/3MxvVx67BI/5BOjv4n7/390bh1qNc/pJOj//mrDn4obh0u1D+kk6P/DYvW/C5uHRbrH9LJ0f8zB54+FLcOS/QP6eTof8djn26OW4cG/UM6Ofp//LKO/8StQ6P+IZ0c/f+z6Scfj1uHpfqHdHL0f+ahb38hbh2a9A/p5Oj/6gcnz4xbh4v0D+nk6H/jNbO/F7cOy/QP6eTo/5K5D10atw5v0z+kk6P/9/x1xc1x63Cx/iGdHP3X3XPPc3HrsFz/kE6O/udde/s1cetwif4hnRz9Xz+n/sm4dbhU/5BOjv7vON6yIG4dVugf0snRf9dtz++LW4eV+od0cvTf/cmX6+LW4e36h3Ry9L93ypX3xq3DO/QPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAA//81CtIG") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x4010586e, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00 ']) 2m16.552047222s ago: executing program 8 (id=19781): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_int(r0, 0x0, 0x0) 2m15.046751661s ago: executing program 8 (id=19794): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c7320000000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m13.823218522s ago: executing program 8 (id=19801): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) 2m12.898893537s ago: executing program 8 (id=19807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 2m11.992102696s ago: executing program 38 (id=19807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 17.883364654s ago: executing program 2 (id=20703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x0) 17.383861484s ago: executing program 2 (id=20710): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000580)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 16.775788058s ago: executing program 2 (id=20712): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast1}, 0x1c) 16.488321454s ago: executing program 2 (id=20715): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a26f2c6a42c1df48b34291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$eJzs3UuPHFfZB/Cnr3PxG2eURZTXQmjihEsI8TUYQ4AkC1iwyQJ5i2xNJpGFA8g2yIksPNFsWLDiE4CQWCLEErHgA2TBlh0rVliykUBZUahmzvFUt7vdY8bT1Z7z+0njqqdO9fSp+Xf1xVXVJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+O53vne2ExGXf5oWrEX8X/QiuhErdb0eESvra3n9fkS8EDvN8XxEDJYi6tvv/PNsxOsR8cnxiHv3b2/Ui8/tsx/f/v1ff/P9Y+/85XeD0//+w83eG9PWu3XrF//6452DbTMAAACUpqqqqpM+5p9In++7bXcKAJiL/PpfJXn5ka9/+fd3/rRI/VGr1Wq1eg51UzXZnWYREVvN29TvGRyOB4CnzFZ82nYXaJH8i9aPiGNtdwJYaJ22O8ChuHf/9kYn5dtpvh6s77bnc0FG8t/qPLi+Y9p0lvFzTOb1+NqOXjw3pT8rc+rDIsn5d8fzv7zbPkzrHXb+8zIt/+HupU/Fyfn3xvMfc3Ty707Mv1Q5//5j5d+TPwAAAAAALLD8//9rLR//XTr4puzLo47/rs+pDwAAAAAAAADwpB10/L8HjP8HAAAAC6v+rF771fG9ZdO+i61efqkT8czY+kBh0sUyq233AwAAAAAAAAAAAABK0t89h/dSJ2IQEc+srlZVVf80jdeP66C3f9qVvv1Qsraf5AEAYNcnx8eu5e9ELEfEpfRdf4PV1dWqWl5ZrVarlaX8fna4tFytND7X5mm9bGm4jzfE/WFV/7Llxu2aZn1entU+/vvq+xpWvX107AkZpL/mlOaWwgaAZPfV6J5XpCOmqp6d9uYDRtj/jx77P/vR9uMUAAAAOHxVVVWd9HXeJ9Ix/27bnQIA5iK//o8fFziUOuJwf79arVar1epH1k3VZHeaRURsNW9Tv2cwHD8APGW24tO2u0CL5F+0fkS80HYngIXWabsDHIp7929vdFK+nebrQRrfPZ8LMpL/Vmfndvn2k6azjJ9jMq/H13b04rkp/Xl+Tn1YJDn/7nj+l3fbh2m9w85/XqblX2/nWgv9aVvOvzee/5ijk393Yv6lyvn3Hyv/nvwBAAAAAGCB5f//X3P8N28yAAAAAAAAADx17t2/vZGve83H/z8zYT3Xfx5NOf+O/IuU8++O5f/FsfV6jfm7b+/l/8/7tzd+e/Mf/5+n+81/Kc900iOrkx4RnXRPnX6aHmTrHrY96A3rexp0ur1+OuenGrwXV+NabMaZkXW76e+x1352pL3u6WCk/dxIe/+h9vMj7YP0vQPVSm4/FRvxo7gW7+60121LM7Z/eUZ7NaM959+z/xcp599v/NT5r6b2zti0dvfj7kP7fXM66X7euvrZn585/M2ZaTt6D7atqd6+ky30Z+dvcmwYP7mxef3UrSs3b14/G2kysvRcpMkTlvMf7Pws7T3/v7Tbnp/3m/vr3Y+Hj53/otiO/tT8X2rM19v7ypz71oac/zD95PzfTe2T9/+nOf/p+/+rLfQHAAAAAAAAAAAAAAAAHqWqqp1LRN+KiAvp+p+2rs0EAOYrv/5XSV6uVqvVarX66NVN1WRvNouI+HPzNvV7hp9N+mUAwCL7T0T8re1O0Br5Fyx/3189fbntzgBzdePDj35w5dq1zes32u4JAAAAAAAAAPC/yuN/rjfGf345ItbG1hsZ//XtWD/o+J/9PPNggNEnPND3FNvdYa/bGG78xdgZn/vUtPG/T8ajx//uz7i/wYz24Yz2pRntyxOX7qU18UKPhpz/i43xzuv8T4wNv17C+K/jY96XIOd/svF4rvP/wth6zfyrXy9c/lv7XXE7uiP5n775wY9P3/jwo9eufnDl/c33N394/uzZM+cvXLh48eLp965e2zyz++/h9HoB5Pzz2NfOAy1Lzj9nLv+y5Pw/l2r5lyXn//lUy78sOf/8fk/+Zcn5588+8i9Lzv+VVMu/LDn/L6Va/mXJ+b+aavmXJef/5VTLvyw5/9dSLf+y5PxPpVr+Zcn5n071PvL39fBHSM4/H+Gy/5cl55/PbJB/WXL+51It/7Lk/M+nWv5lyfm/nmr5lyXn/5VUy78sOf8LqZZ/WXL+X021/MuS87+YavmXJef/tVTLvyw5/6+nWv5lyfm/kWr5lyXn/41Uy78sOf9vplr+Zcn5fyvV8i9Lzv/NVMu/LHvf/2/GjBkzeabtZyYAAAAAAAAAAAAAYNw8TiduexsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1rjFxnfT/wM3ux1w4hBkJw8jewSYwxzpJdX+IL/7qYcG2AUiCh0Au2612bBd/w2iVQJJsGSiSMiiqqpi/aAkJtpKrCqnhBK0rzourlVWlf0DcVVSWkRlVAAQmprShbzZzneTwznp2z9o7Xs+f5fKT45905M+fMmWdm97vOdwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2975x7rONoiia/7X+2FQUL2j+fcPkptbnXnerjxAAAABYqf9t/fn8HekTh5ZxpbZt/u4V//j1xcXFxeL9o787/sXFxXTBZFGMry+K1mXRlX//QKN9m+CJYqIx0vbxSMXuRysuH6u4fLzi8nUVl6+vuHyi4vJrTsA1NpQ/j2nd2NbWXzeVp7S4sxhvXba1x7WeaKwfGYk/y2lptK6zOH68mC9OFnPFTMf25baN1vbfvLe5r7cVcV8jbfva0lwhP/zksXgMjXCOt3bs6+ptRt9/QzH5ox9+8tgfn3/u7l6z8jR03F55nNvvax7np8NnymNtFOvTOYnHOdJ2nFt6PCajHcfZaF2v+ffu43x+mcc5evUwV1X3Yz5RjLT+/u3WeRpr/7FeOk9bwuf+6/6iKC5dPezuba7ZVzFSbOz4zMjVx2eiXJHN22gupRcXY9e1Tu9dxjptztmtneu0+zkRH/97w/XGljiG9ofp+59ad83jfr3rNGre66WeK91rcNDPlWFZg3FdfLt1p5/suQa3hvv/yW1Lr8Gea6fHGkz3u20N3le1BkfWjbaOOT0IjdZ1rq7BnR3bj7b21GjNZ7f1X4PT50+dnV74+CdeO3/q6Im5E3Ond+/cObN77979+/dPH58/OTdT/nmDZ3v4bSxG0nPgvnDu4nPg1V3bti/VxS8P7nk40ed5uKlr20E/D8e671xjdZ6Q167p8rnxaPOkT1weKZZ4jrUenx0rfx6m+932PBxrex72/JrS43k4toznYXObszuW9z3LWNt/vY7hZn0t2NS2Bru/H+leg4P+fmRY1uBEWBf/umPprwVbwvE+OXW934+MXrMG090Nrz3Nz6Tv9yf2t0avdXlP84Lb1hUXFubOPfj40fPnz+0swlgVL2lbK93rdWPbfSquWa8j171eD82/4sl7enx+UzhXE69t/jGx5GPV3GbPg/0fq9ZXt97ns+Ozu4owBmy1z2evr+bN85myZJ/z2dzm09Mr/1485dK219/xJV5/Y+7/abm/dFNPjI6Plc/f0XR2xjtejzsfqrHWa1ejte/np5f3ejwe/lvt1+M7+7web+7adtCvx+Pddy6+HjeqftqxMt2P50RYJydn+r8eN7fZvOt61+RY39fj+8NshPP/mpAUUi5qWztLrdu0r7Gx8XC/xuIeOtfp7o7tx0M2a+7r6V03tk6331/e1mi6d1et1jqd7Np20Os0vV4ttU4bVT99uzHdj+dEWBd37u6/TpvbPLNn5a+dG+Jf214711WtwfHRdc1jHk+LsHy9X9wQ1+CDxbHiTHGymG1duq61nhqtfU09tLw1uC78t9qvlZv7rMHtXdsOeg2mr2NLrb3G2LV3fgC6H8+JsC6eeqj/Gmxu86Z9g/3edXv4TNqm7XvX7p+vLfUzr3u6TtPN/JlX8zj/Zl//n802tzm5/3pzZv/z9ED4zG09zlP383ep59RssTrnaXM4zuf2L32emsfT3OaLB5a5ng4VRXHxow+3ft4b/n3lzy985+sd/+7S6990Ln704R/cfvxvr+f4AVj7flqOjeXXurZ/mVrOv/8DAAAAa0LM/SNhJvI/AAAA1EbM/fH/Ck/kfwAAAKiNmPvHwkwyyf+b3/Tc/E8vFqmZvxjEy9NpeKTcLnZcZ8LHk4tXNT//8FfnfvyXF5e375GiKH7yyG/03H7zI/G4SpPhOK+8ufPz117x4rL2f+Sxq9u199e/FG4/3p/lLoNeFdyZoii+ecfnW/uZ/MDl1nzmkSOt+Z5LTz7R3Ob5A+XH8frPvqTc/g9C+ffQ8aMd1382nIfvhTnz9t7nI17va5dfs2Xf+67uL16vcd8LW3f7qQ+Wtxt/T84Xnii3j+d5qeP/q889/bXm9o+/qvfxXxzpffxPh9v9apj//fJy+/bHoPlxvN5nwvHH/cXrPfiVb/U8/iufLbc/+5ZyuyNhxv1vDx9vfctz8+3n6/HG0Y77Vby13C7uf+Y7v926PN5evP3u4584fLnjfHSvj2f+ubyd6a7t4+fjfqK/6Np/83ba12fc/9O/daTjPFft/8p7nn1583a79/9A13ajXdfv/o1Nf/iZz/fcXzyeQ392tuP+HHp3eB6H/T/1wbAew+X/c+XzHfuNjry78/Unbv+lTRc77k/0th+V+7/y+hOt+R+TP/79215w+wsvvbJ57ori2+8tb69q/yf+6EzH8X/5rh2txyNeHjv63ftfStz/uY9NnT6zcGF+tu2stn53zjvK41k/sWFj83jvCK+t3R8fPnP+Q3PnJmcmZ4pisr6/Qu+GfSXMH5Tj0vVef8dj4fG85/e+uXHbP30ufv5fHi0/f/nt5detV4ftvhA+v6l8/BYbK9z/U/fe1Xp+N54pP+7osQ/Alq3/uX9ZG4b73/19QVzvZ1/6odZ5aF7W+roRn9crPP7vzpa3841wXhfDb2a+766r+2vfPv5uhMvvLZ/vKz5/4WUuPq5/Eh7vd36vvP14XPH+fjd8H/OtzZ2vd3F9fOPiSPftt36Lx6XwelJcKi+PW8Xzffn5u3oeXvw9JMWlu1sf/066nbuv624uZeHjC9Mn509feHz6/NzC+emFj3/i8KkzF06fP9z6XZ6HP1x1/auvTxtbr0+zc3v3FDMbiqI4U8yswgvWzTn+5t+Wd/xnHzs2u29m2+zc8aMXjp9/7OzcuRPHFhaOzc0ubDt6/Pjcx6quPz97cOeuA7v37Zo6MT97cP+BA7sPTM2fPtM8jPKgKuyd+cjU6XOHW1dZOLjnwM6HHtozM3XqzOzcwX0zM1MXqq7f+to01bz2r0+dmzt59Pz8qbmphflPzB3ceWDv3l2Vvw3w1NnjC5PT5y6cnr6wMHduurwvk+dbn25+7au6PvW08G/l97PdGuUv4ive9cDe9PtZm776qSVvqtyk6xeIPhd+F80/vOjs/uV8HHP/eJhJJvkfAAAAchBz/7owE/kfAAAAaiPm/vVhJvI/AAAA1EbM/RNhJpnkf/1//f/l9f/Ly/X/8+r/n/1o2Std6/3/2J/X/8/DLe7/r3j/+v/6//Xr/y+/P7/Wj1//X/+faw1b/z/m/g1FkWX+BwAAgBzE3L8xzET+BwAAgNqIuf+2MBP5HwAAAGoj5v4XhJlkkv/1/5fV/99VVbiqf//f+//r/xdrs/8fHxz9/2xcd//+fY92fKj/H+j/6//r/+v/6/+zYuNLXnKr+v8x998eZpJJ/gcAAIAcxNz/wjAT+R8AAABqI+b+O8JM5H8AAACojZj7N4WZZJL/9f+9/7/+v/5/rfv/K33//7aD0f9fG7z/f3/6/xVuuP8/of+/Fvv/44M9/uHu/1cevv4/N8Wwvf9/zP0vCjPJJP8DAABADmLuf3GYifwPAAAAtRFz/0vCTOR/AAAAqI2Y++8MM8kk/+v/6//r/+v/6//33n/1+/+Xf9P/Hy76//3p/1fw/v959f8HfPzD3f8f9Pv/j7+5+/r6//QybP3/mPtfGmaSSf4HAACAHMTcf1eYifwPAAAAtRFz/8vCTOR/AAAAqI2Y+zeHmWSS//X/9f/1//X/9f9777+6/1/S/x8u+v/96f9X0P/X/9f/X17/v8c3v/r/9DJs/f+Y++8OM8kk/wMAAEAOYu6/J8xE/gcAAIDaiLn//4WZyP8AAABQGzH3bwkzyST/6//r/+v/59X/f2Cd/r/+f73p//en/19B/1//X/9/me//f63r6f+vr7oxamPY+v8x9788zCST/A8AAAA5iLn/FWEm8j8AAADURsz9rwwzkf8BAACgNmLunwwzyST/6//Xq///p3/91CsL/X/9/4r917T/H5eB/n/m9P/70/+voP+v/6//vyr9f/IxbP3/mPvvDTPJJP8DAABADmLuvy/MRP4HAACA2oi5//4wE/kfAAAAaiPm/q1hJpnkf/3/evX/I/1//f9++69p/z/R/8+b/n8PbU9S/f8K+v/6/9n3/+N3v/r/DMaw9f9j7n9VmEkm+R8AAAByEHP/tjAT+R8AAABqI+b+V4eZyP8AAABQGzH3bw8zyST/6//r/+v/6//r//fev/7/2qT/35/+fwX9f/3/7Pv/3v+fwRq2/n/M/a8JM8kk/wMAAEAOYu7fEWYi/wMAAEBtxP9/s/z/XuV/AAAAqKOY+6fCTDLJ//r/+v859f8b+v/6//r/taf/35/+fwX9f/1//X/9fwZq2Pr/Mfe/Nswkk/wPAAAAOYi5/8EwE/kfAAAAaiPm/ukwE/kfAAAAaiPm/pkwk0zyv/6//n9O/X/v/6//r/9ff/r//en/V9D/1/+vW/+/KPT/uaWGrf8fc//OMJNM8j8AAADkIOb+XWEm8j8AAADURsz9u8NM5H8AAACojZj794SZZJL/9f/1//X/9f/1/3vvX/9/bdL/70//v4L+v/5/3fr/3v+fW2zY+v8x9z8UZpJJ/gcAAIAcxNy/N8xE/gcAAIDaiLl/X5iJ/A8AAAC1EXP//jCTTPK//n9N+v+/+fcd+9b/1//vt//B9P836P+Hqf8/XGra/+9+Wtww/f8K+v/6//r/+v8M1LD1/2PuPxBmkkn+BwAAgBzE3P+6MBP5HwAAAGoj5v7/H2Yi/wMAAEBtxNz/M2EmmeR//f+a9P+76P/r//fbv/f/1/+vs5r2/wdG/7+C/r/+v/6//j8DdfP7//Fvy+v/x9x/MMwkk/wPAAAAOYi5/2fDTOR/AAAAqI2Y+18fZiL/AwAAQG3E3H8ozCST/K//r/+v/6//f3P6/68vug1j/7+5ePT/60X/vz/9/wr6//r/+v/6/wzUsL3/f8z9bwgzyST/AwAAQA5i7n84zET+BwAAgNqIuf+NYSbyPwAAANRGzP1vCjPJJP/r/+v/6/+vTv9/PLv+v/f/76b/vzr0//vT/6+g/6//r/+v/89ADVv/P+b+N4eZZJL/AQAAIAcx978lzET+BwAAgNqIuf+tYSbyPwAAANRGzP1vCzPJJP/r/+v/6/97/3/9/9771/9fm/T/+9P/L40sdQD6//r/+v/6/wzUsPX/Y+7/uTCTTPI/AAAA5CDm/kfCTOR/AAAAqI2Y+98eZiL/AwAAQG3E3P+OMJNM8r/+v/6//r/+v/5/7/3r/69N+v/96f9X0P/X/9f/1/9noIat/x9z/zvDTDLJ/wAAAJCDmPt/PsxE/gcAAIDaiLn/XWEm8j8AAADURsz9vxBmkkn+1//X/9f/1/8feP+/KIpLw9b/b15J/z8L+v/96f9X6NH/X6//r/+v/6//zw0btv5/zP3vDjPJJP8DAABADmLuf0+YifwPAAAAtRFz/3vDTOR/AAAAqI2Y+x8NM8kk/+v/Z9n/T3dZ/7+k/+/9/3vtX/9/bdL/70//v4L3/9f/1//X/2eghq3/H3P/Y2EmmeR/AAAAyEHM/e8LM5H/AQAAoDZi7v/FMBP5HwAAAGoj5v73h5lkkv/1/7Ps/3v//1Xr/491rI+c+v8TbY9nWpf6//r/q0D/vz/9/wr6//r/w9z/D6t5wxLX1/9nGA1b/z/m/g+EmWSS/wEAACAHMff/UpiJ/A8AAAC1EXP/L4eZyP8AAABQGzH3/0qYSSb5X/9f/1//3/v/e///3vvX/1+b9P/70/+voP+v/z/M/f8K+v8Mo2Hr/8fc/6thJpnkfwAAAMhBzP0fDDOR/wEAAKA2Yu4/HGYi/wMAAEBtxNx/JMwkk/yv/9/d/4/vqKr/r/+v/6//r/+/Fg2u//+y24tC/1//X/9f/1//X/+flRi2/n/M/UfDTDLJ/wAAAJCDmPt/LcxE/gcAAIDaiLn/WJiJ/A8AAAC1EXP/bJhJJvlf/9/7/w+q//8T/X/9/0D/vzf9/9Xh/f/70/+voP+v/6//r//PQA1b/z/m/rkwk0zyPwAAANRY+nFwzP3Hw0zkfwAAAKiNmPtPhJnI/wAAAFAbMfd/KMwkk/yv/6//7/3/b0X/f6xje/3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fDjOR/wEAAKA2Yu7/SJiJ/A8AAAC1EXP/yTCTTPK//r/+f+79/0ZRXPL+//r/vfav/7826f/3p/9fQf9f/1//X/+fgRq2/n/M/afCTDLJ/wAAAJCDmPtPh5nI/wAAAFAbMfefCTOR/wEAAKA2Yu4/G2aSSf7X/9f/z73/X9yS9///P/buo0nOs+rjcNslW9IKPgJrVixhA1+BLTuqWFIsAJODMTmDyTmYnHNOJuecs8k5mmioEsXonKPQraclTXv6ee5zXZvzSoXcIzSvXX9cv7rP/c/r/0/T/+v/d2Gtvz92ab/+gv3/He54zd31/zvo/zf9E/MM/b/+f8lfv/5f/8+6ufX/ufvvHbc02f8AAADQQe7++8Qt9j8AAAAMI3f/feMW+x8AAACGkbv/mrilyf7X/+v/9f/6/3P6/xv1//r/ZfP+/7T99//T9P/6/yV//fp//T/r5tb/5+6/X9zSZP8DAABAB7n77x+32P8AAAAwjNz9D4hb7H8AAAAYRu7+B8YtTfa//l//r//X/3v/f/Pn6/+XSf8/Tf+/hf5f/6//1/+zU3Pr/3P3PyhuabL/AQAAoIPc/Q+OW+x/AAAAGEbu/ofELfY/AAAADCN3/0Pjlib7X/+v/9f/6//1/5s/X/+/TDeszvw9Qf+/Tv+/xZb+f7XS/0+56H5+829vOV//Bej/9f+sm1v/n7v/YXFLk/0PAAAAHeTuf3jcYv8DAADAMHL3Xxu32P8AAAAwjNz9j4hbmux//b/+X/+v/9f/b/58/f8yef9/2uH7/9vf9l736Nv/e/9/mvf/9f/6f843t/4/d/91cUuT/Q8AAAAd5O5/ZNxi/wMAAMAwcvc/Km6x/wEAAGAYufsfHbc02f/6/zb9/0Htov/X/+v/9f+j0/9P8/7/Fgd/mztZP9T/6//1//p/Dmdu/X/u/sfELU32PwAAAHSQu/+xcYv9DwAAAMPI3f+4uMX+BwAAgGHk7n983NJk/+v/2/T/3v/X/+v/9f8t6P+n6f+3GOX9/8v8rtl3P39Y+/769f/6f9bNrf/P3f+EuKXJ/gcAAIAOcvc/MW6x/wEAAGAYufufFLfY/wAAADCM3P1Pjlua7H/9v/5/Gf1/foL+X/+v/9f/T9P/T9P/bzFK/3+Z9t3PL/3r1//r/1k3t/4/d/9T4pYm+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv/1//r/ZfT/3v/X/+v/9f8XR/8/Tf+/hf5f/6//1/+zU3Pr/3P3Xx+3NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/82fr/9fJv3/NP3/Fvp//b/+X//PTs2o/z/rV51YPTtuabL/AQAAoIPc/c+JW+x/AAAAGEbu/ufGLfY/AAAADCN3//Pilib7X/8/m/7/IOcbq/8/uVqt9P+rpv3/ybP+POv7Uv+v/z8C+v9pnfr/O+v/L9m++/mlf/36f/0/62bU/x/8OHf/8+OWJvsfAAAAOsjd/4K4xf4HAACAYeTuf2HcYv8DAADAMHL3vyhuabL/9f+z6f8PjNX/e////O+PTv2/9//X6f+Phv5/Wqf+/3I+X/+v/9f/6//Zrbn1/7n7Xxw3XX3VZf8WAQAAgJnJ3f+SuKXJv/8HAACADnL3vzRusf8BAABgoa5f+5nc/S+LW5rsf/3/bvv/q8/6Of2//v/87w/9v/5f/3/r0/9P0/9vof/X/+v/9f/s1Nz6/9z9L49bmux/AAAA6CB3/w1xi/0PAAAAw8jd/4q4xf4HAACAYeTuf2Xc0mT/6/+9/6//1//r/zd/vv5/mfT/0/T/W+j/9f/77f+Pn/k/9f+M4RL6/1OnTl17q/f/uftfFbc02f8AAADQQe7+V8ct9j8AAAAMI3f/a+IW+x8AAACGkbv/tXFLk/2v/2/a/+e3uv7/gP5f/7/p8/X/y6T/n6b/30L/r//3/r/+n52a2/v/uftfF7c02f8AAADQQe7+18ct9j8AAAAMI3f/G+IW+x8AAACGkbv/jXFLk/2v/2/a/3v/X/+v/z/q/v+Wlf7/SCyi/z954c+fe/9/nf5f/z+hXf9/1zud80P9v/6fdXPr/3P3vyluabL/AQAAoIPc/W+OW+x/AAAAGEbu/rfELfY/AAAADCN3/1vjpmNN9r/+X/+v/9f/6/83f/4Rv/9/9Wq10v/vwCL6/wlz7/+9/6//n9Ku/z+P/l//z7q59f+5+98WtzTZ/wAAANBB7v63xy32PwAAAAwjd/874hb7HwAAAIaRu/+dcUuT/a//1//r//X/w/f/1y2i//f+/47o/6fp/7fQ/+v/9f/6f47Evvr/3P3vilua7H8AAADoIHf/u+MW+x8AAACGkbv/PXGL/Q8AAADDyN3/3rilyf7X/+v/9f/6/+Oz6/9PnPPXa/L+v/5/R/T/0/T/W+j/9f/6/+v1/+zS3N7/z93/vrilyf4HAACADnL3vz9u/U+39j8AAAAMI3f/B+IW+x8AAACGkbv/g3FLk/2v/9f/6//1/8O//6//b0X/P03/v4X+X/+v//f+Pzs1t/4/d/+H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvffGLc02f/6f/2//l//r/8//Weo/x+D/n/a0fT/J/X/+v/q56+I/y/Q/+v/t/16xjS3/j93/0fjlib7HwAAADrI3f+xuMX+BwAAgGHk7v943GL/AwAAwCId2/Bzufs/Ebc02f/6f/2//n8u/f+JtT9H/f9p3v/X/18K/f807/9vof+/xH7+duf8aGnv/5//zy/9v/6f3Ztb/5+7/5NxS5P9DwAAAB3k7v9U3GL/AwAAwDBy9386brH/AQAAYBi5+z8TtzTZ//p//b/+fy79v/f/9f/6/13Q/0/T/2+h/9/r+/lL//r1//p/1s2t/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBi5+z8ft9j/AAAAMIyD3Z9xWcP9r//X/+v/9f/6/82fr/9fJv3/NP3/Fvp//b/+X//PTs2t///Cwa86sfpi3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+X/+/jP7/1KlT1+r/9f/n/n7O9P836f8p+v9p+v8t9P/6f/2//p+dmlv/n7v/q3FLk/0PAAAAHeTu/1rcYv8DAADAMHL3fz1usf8BAABgGLn7vxG3NNn/+v8Z9P8n9P/e/9f/r7z/r//fEf3/NP3/FiP2/ycu/re/737+sPb99ev/9f+sm1v/n7v/m3FLk/0PAAAAHeTu/1bcYv8DAADAMHL3fztusf8BAABgGLn7vxO3NNn/+v+j6////99dl/f/T642f/36f/2//l//f2vT/0/T/28xYv9/Cfbdzy/969f/6/9ZN7f+P3f/d+OWJvsfAAAAOsjd/724xf4HAACAYeTu/37cYv8DAADAMHL3/yBuabL/9f8zeP9/wP7f+/+bvz/0/7Pu/6/U/49B/z9N/7+F/l//r//fUf+f3836/+7m1v/n7v9h3NJk/wMAAEAHuft/FLfY/wAAADCM3P0/jlvsfwAAABhG7v6b4paz9v+mtnsU+n/9v/5f/6//3/z5+v9l0v9Pu9j+//jqcP1/0v/r//X/Xft/7/9z2tz6/9z9P4lb/Pt/AAAAWJyrLvDzuft/GrfY/wAAADCM3P0/i1vsfwAAABhG7v6fxy03X7mvL+lI6f/1//p//b/+f/Pn6/+XSf8/zfv/W+j/d9HP30X/P0b/v1rp/zm8ufX/uft/Ebf49/8AAAAwjNz9v4xb7H8AAAAYRu7+X8Ut9j8AAAAMI3f/r+OWJvtf/6//P2T/f5Bm6v9P0/+fpv/fTP9/NPT/0/T/W+j/vf+v//f+Pzs1t/4/d/9v4pYm+x8AAAA6yN3/27jF/gcAAIBh5O7/Xdxi/wMAAMAwcvf/Pm5psv/31v/Hf9X6/8X3/97/1//r//X/s6L/n6b/30L/r//X/+v/2alL6f9PTv+ldtL/5+7/Q9zSZP8DAABAB7n7/xi32P8AAAAwjNz9f4pb7H8AAAAYRu7+P8ctTfa/9//1//p//b/+f/Pn6/+XSf8/Tf+/Wf1B6f/1//p//T87Nbf3/3P3/yVuabL/AQAAoIPc/X+NW+x/AAAAGEbu/pvjFvsfAAAAhpG7/29xS5P937f/P7bS/+v/k/5f/7/p8/X/y6T/n7bP/v9ut9n+sd7/33v/n1+C/l//r/9nJ+bW/+fu/3vc0mT/AwAAQAe5+/8Rt9j/AAAAMIzc/f+MW+x/AAAAGEbu/n/FLU32/5b+/3j9B4fr/73/v9L/F/2//n/T5+v/l0n/P837/1vo/73/r//faf9/hf6/vcvp/++5+S+1k/4/d/+/45Ym+x8AAAA6yN1/S9xi/wMAAMAwcvf/J26x/wEAAGAYufv/G7c02f993//X/6/0/0X/r//f9Pn6/2XS/0/T/2+h/9f/6/+9/89Oze39/9z9/wsAAP//wqZYgw==") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 14.983859681s ago: executing program 2 (id=20722): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x7a, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 14.302363837s ago: executing program 2 (id=20726): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) 13.501918098s ago: executing program 39 (id=20726): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) 4.207367637s ago: executing program 5 (id=20795): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xfffffffc}, 0xc) 4.051320316s ago: executing program 6 (id=20797): r0 = syz_io_uring_setup(0xee9, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x7}, &(0x7f00000011c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 3.869720824s ago: executing program 5 (id=20799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) 3.788746044s ago: executing program 6 (id=20801): r0 = semget(0x0, 0x5, 0x6b4) semop(r0, &(0x7f0000000140)=[{0x4, 0xfffc}, {0x1, 0x7fff, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x101, 0x7, 0x3ff, 0xf]) 3.442565016s ago: executing program 6 (id=20803): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 3.268045827s ago: executing program 5 (id=20805): r0 = getegid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r0, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 3.160765551s ago: executing program 1 (id=20806): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.976149013s ago: executing program 5 (id=20807): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000a00)={r1}) 2.492456668s ago: executing program 6 (id=20810): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write(r0, 0x0, 0x0) 2.480049412s ago: executing program 1 (id=20811): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r0, 0x8910, 0xbffffffffffffffb) 2.427853267s ago: executing program 9 (id=20812): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r0, 0x0) 2.423403099s ago: executing program 5 (id=20813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.27651762s ago: executing program 3 (id=20814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.108277054s ago: executing program 9 (id=20815): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) 1.980549924s ago: executing program 5 (id=20816): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@flushoncommit}, {@compress}, {@nospace_cache}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@compress}, {@user_subvol_rm}, {@ssd}, {@enospc_debug}, {@clear_cache}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@skip_balance}, {@nodiscard}, {@commit={'commit', 0x3d, 0x5f}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 1.887979462s ago: executing program 3 (id=20817): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x5, 0x0) 1.773225151s ago: executing program 1 (id=20818): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) 1.752912749s ago: executing program 9 (id=20819): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x2) 1.474696833s ago: executing program 6 (id=20820): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x1, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x92) getdents64(r0, 0x0, 0x0) 1.378531999s ago: executing program 3 (id=20821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40448c0) 1.240857269s ago: executing program 9 (id=20822): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x218008de, &(0x7f0000002c40)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 938.422442ms ago: executing program 3 (id=20823): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) 924.218046ms ago: executing program 1 (id=20824): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x1000000}) write$sndseq(r0, &(0x7f0000000880)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result={0x5}}], 0x1c) 766.94542ms ago: executing program 6 (id=20825): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000640)={0x0, 0x0, 0x2, "1b3b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 615.619286ms ago: executing program 3 (id=20826): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2000006, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x0, 0x1, 0x4, 0x10, 0x7, {0x77359400}, {0x3, 0x1, 0x3, 0x6, 0x7, 0x8, "b5cc4fbb"}, 0x8, 0x4, {0x0}, 0x9}) 577.45288ms ago: executing program 1 (id=20827): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[], 0x110) 486.430079ms ago: executing program 9 (id=20828): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) 258.866075ms ago: executing program 3 (id=20829): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) 223.38694ms ago: executing program 1 (id=20830): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r1, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 0s ago: executing program 9 (id=20831): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20) bind$l2tp6(r0, &(0x7f000000a000)={0xa, 0x0, 0xcc5, @loopback, 0x8, 0x2}, 0x20) kernel console output (not intermixed with test programs): left allmulticast mode [ 1866.596508][ T6694] usb 10-1: USB disconnect, device number 33 [ 1866.629567][T21658] bridge_slave_1: left promiscuous mode [ 1866.644694][ T6694] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1866.676285][T21658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.783458][T21658] bridge_slave_0: left allmulticast mode [ 1866.798697][ T6220] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1866.835242][T21658] bridge_slave_0: left promiscuous mode [ 1866.841463][T21658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.883923][T25039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1866.947733][ T7307] syz-executor: attempt to access beyond end of device [ 1866.947733][ T7307] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1867.048540][ T7307] syz-executor: attempt to access beyond end of device [ 1867.048540][ T7307] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 1867.109368][ T7307] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1867.234477][ T7307] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 1867.621957][T20207] vimc link validate: Scaler:src:16x16 (0x33424752, 3, 1, 6, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 1867.808731][T17505] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1867.816350][T17505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1867.824585][T17505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1867.834309][T17505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1867.842718][T17505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1868.590893][T20226] loop9: detected capacity change from 0 to 512 [ 1868.634842][T20226] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1868.718284][T20226] ext4 filesystem being mounted at /820/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1868.945941][ T7226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1868.968928][T21658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.003661][T21658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.030950][T21658] bond0 (unregistering): Released all slaves [ 1869.077495][T20204] pim6reg: entered allmulticast mode [ 1869.249893][T20209] lo speed is unknown, defaulting to 1000 [ 1869.526753][T21658] tipc: Disabling bearer [ 1869.573327][T21658] tipc: Left network mode [ 1869.967294][T20248] loop2: detected capacity change from 0 to 4096 [ 1870.067020][T26332] Bluetooth: hci1: command tx timeout [ 1870.185860][T20248] ntfs3(loop2): failed to convert "0000" to iso8859-7 [ 1870.224544][T20248] ntfs3(loop2): failed to convert name for inode 1e. [ 1870.270866][T20248] ntfs3(loop2): ino=1f, mi_enum_attr [ 1870.412594][T21658] hsr_slave_0: left promiscuous mode [ 1870.456906][T21658] hsr_slave_1: left promiscuous mode [ 1870.499226][T21658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.523576][T21658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.759393][T21658] team0 (unregistering): Port device team_slave_1 removed [ 1870.810113][T21658] team0 (unregistering): Port device team_slave_0 removed [ 1871.141953][T20209] chnl_net:caif_netlink_parms(): no params data found [ 1871.285922][T20209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.293688][T20209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.304887][T20209] bridge_slave_0: entered allmulticast mode [ 1871.313212][T20209] bridge_slave_0: entered promiscuous mode [ 1871.325144][T20209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.335153][T20209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.344940][T20209] bridge_slave_1: entered allmulticast mode [ 1871.353027][T20209] bridge_slave_1: entered promiscuous mode [ 1871.416502][T20209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.434856][T20209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.524253][T20209] team0: Port device team_slave_0 added [ 1871.536420][T20209] team0: Port device team_slave_1 added [ 1871.593328][T20209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.603556][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.637260][T20209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.655639][T20209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.664777][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.698215][T20209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.714251][T21658] IPVS: stop unused estimator thread 0... [ 1871.791072][T20209] hsr_slave_0: entered promiscuous mode [ 1871.799809][T20209] hsr_slave_1: entered promiscuous mode [ 1872.289194][T26332] Bluetooth: hci1: command tx timeout [ 1872.510700][T20209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1872.530068][T20209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1872.564839][T20209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1872.612463][T20209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1872.864672][T20209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1872.897851][T20209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1872.915839][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.924016][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1872.956031][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.965572][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.480872][T20209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1873.597846][T20209] veth0_vlan: entered promiscuous mode [ 1873.646773][T20209] veth1_vlan: entered promiscuous mode [ 1873.699083][T20209] veth0_macvtap: entered promiscuous mode [ 1873.716855][T20209] veth1_macvtap: entered promiscuous mode [ 1873.742667][T20209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1873.763952][T20209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1873.785336][T21658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.803777][T21658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.825616][T21658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.840569][T21658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.978087][T20209] ieee80211 phy86: Selected rate control algorithm 'minstrel_ht' [ 1874.067877][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.084935][T20209] ieee80211 phy87: Selected rate control algorithm 'minstrel_ht' [ 1874.101311][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.192654][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.215540][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.507331][T26332] Bluetooth: hci1: command tx timeout [ 1875.387718][T20323] loop3: detected capacity change from 0 to 256 [ 1875.411646][T20325] netlink: 104 bytes leftover after parsing attributes in process `syz.6.19826'. [ 1875.467606][T20323] exfat: Deprecated parameter 'utf8' [ 1875.474209][T20323] exfat: Deprecated parameter 'namecase' [ 1875.587783][T20323] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1876.729660][T26332] Bluetooth: hci1: command tx timeout [ 1876.905690][T20353] ipvlan2: entered promiscuous mode [ 1877.949219][T20383] loop1: detected capacity change from 0 to 64 [ 1878.379430][T20391] can0: slcan on ptm0. [ 1878.894644][T20390] can0 (unregistered): slcan off ptm0. [ 1878.966235][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1878.974953][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19862'. [ 1879.429013][T20407] loop1: detected capacity change from 0 to 2048 [ 1879.487726][T20409] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1879.494792][T20409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1879.579142][T20409] vhci_hcd vhci_hcd.0: Device attached [ 1879.640721][T20410] vhci_hcd: connection closed [ 1879.641363][ T1152] vhci_hcd: stop threads [ 1879.666365][T20407] Alternate GPT is invalid, using primary GPT. [ 1879.686499][T20372] loop2: detected capacity change from 0 to 40427 [ 1879.696919][ T1152] vhci_hcd: release socket [ 1879.707938][T20407] loop1: p2 p3 p7 [ 1879.727681][ T1152] vhci_hcd: disconnect device [ 1879.754961][T20372] F2FS-fs (loop2): build fault injection rate: 5 [ 1879.778089][ T24] vhci_hcd: vhci_device speed not set [ 1879.805871][T20372] F2FS-fs (loop2): invalid crc value [ 1880.271500][T20372] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1880.330131][T20431] loop9: detected capacity change from 0 to 128 [ 1880.367502][T20372] F2FS-fs (loop2): Start checkpoint disabled! [ 1880.434658][T20372] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1880.490689][T20435] loop1: detected capacity change from 0 to 8 [ 1880.537080][T20372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1880.667113][T20435] SQUASHFS error: Unable to read directory block [247:50] [ 1881.032289][T20446] loop5: detected capacity change from 0 to 512 [ 1881.055045][T20447] loop6: detected capacity change from 0 to 256 [ 1881.129416][T20446] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1881.201148][T20446] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.19876: invalid indirect mapped block 8 (level 2) [ 1881.222974][ T24] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1881.259337][T20447] FAT-fs (loop6): Directory bread(block 64) failed [ 1881.300971][T20447] FAT-fs (loop6): Directory bread(block 65) failed [ 1881.308416][T20446] EXT4-fs (loop5): Remounting filesystem read-only [ 1881.349380][T20447] FAT-fs (loop6): Directory bread(block 66) failed [ 1881.356725][T20447] FAT-fs (loop6): Directory bread(block 67) failed [ 1881.364285][T20446] EXT4-fs (loop5): 1 truncate cleaned up [ 1881.404216][T20446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1881.432659][T20447] FAT-fs (loop6): Directory bread(block 68) failed [ 1881.466151][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1881.495920][T20447] FAT-fs (loop6): Directory bread(block 69) failed [ 1881.509266][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.573012][T20447] FAT-fs (loop6): Directory bread(block 70) failed [ 1881.580231][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.632762][T20447] FAT-fs (loop6): Directory bread(block 71) failed [ 1881.651696][ T24] usb 10-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1881.672042][T20447] FAT-fs (loop6): Directory bread(block 72) failed [ 1881.719687][T20446] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 1881.731071][T20447] FAT-fs (loop6): Directory bread(block 73) failed [ 1881.746154][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.794478][T20446] EXT4-fs: user quota file already specified [ 1881.813351][ T24] usb 10-1: config 0 descriptor?? [ 1882.058404][T14800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1882.260575][T20466] loop1: detected capacity change from 0 to 1024 [ 1882.372870][ T24] hid-retrode 0003:0403:97C1.0046: hidraw0: USB HID v0.01 Device [HID 0403:97c1] on usb-dummy_hcd.9-1/input0 [ 1882.432057][T20463] loop3: detected capacity change from 0 to 4096 [ 1882.487586][T20463] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 1882.654033][T20463] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1882.681206][ T24] usb 10-1: USB disconnect, device number 34 [ 1882.716437][T20463] ntfs3(loop3): ino=5, mi_enum_attr [ 1883.143935][T20482] loop1: detected capacity change from 0 to 64 [ 1884.098938][T20505] loop9: detected capacity change from 0 to 256 [ 1884.220707][T20510] loop5: detected capacity change from 0 to 512 [ 1884.381512][T20510] EXT4-fs (loop5): 1 orphan inode deleted [ 1884.461805][T20510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1884.571463][T20510] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1885.101393][T14800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1885.259842][T20527] loop6: detected capacity change from 0 to 256 [ 1885.565730][ C0] sched: DL replenish lagged too much [ 1886.307221][T20550] loop1: detected capacity change from 0 to 128 [ 1886.371800][T20550] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1886.389843][T20515] loop3: detected capacity change from 0 to 32768 [ 1886.431464][T20555] netlink: 88 bytes leftover after parsing attributes in process `syz.2.19915'. [ 1886.458199][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19916'. [ 1886.471850][T20550] hpfs: filesystem error: improperly stopped [ 1886.519438][T20550] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1886.583195][T20550] hpfs: You really don't want any checks? You are crazy... [ 1886.645878][T20550] hpfs: hpfs_map_sector(): read error [ 1886.711857][T20550] hpfs: code page support is disabled [ 1886.769166][T20550] hpfs: hpfs_map_4sectors(): unaligned read [ 1886.811201][T20550] hpfs: hpfs_map_4sectors(): unaligned read [ 1886.851129][T20550] hpfs: filesystem error: unable to find root dir [ 1886.935390][T20566] loop6: detected capacity change from 0 to 256 [ 1886.962178][T20560] loop9: detected capacity change from 0 to 4096 [ 1887.105542][T20568] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1887.604955][ T30] audit: type=1326 audit(2000000632.201:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20575 comm="syz.1.19923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366f18f6c9 code=0x7ffc0000 [ 1887.629255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1887.869730][ T30] audit: type=1326 audit(2000000632.201:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20575 comm="syz.1.19923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366f18f6c9 code=0x7ffc0000 [ 1888.055039][ T30] audit: type=1326 audit(2000000632.258:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20575 comm="syz.1.19923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f366f18f6c9 code=0x7ffc0000 [ 1888.230078][T20589] mkiss: ax0: crc mode is auto. [ 1888.269939][ T30] audit: type=1326 audit(2000000632.258:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20575 comm="syz.1.19923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366f18f6c9 code=0x7ffc0000 [ 1888.510771][ T30] audit: type=1326 audit(2000000632.258:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20575 comm="syz.1.19923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366f18f6c9 code=0x7ffc0000 [ 1888.538471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1888.859718][ T30] audit: type=1326 audit(2000000632.276:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20575 comm="syz.1.19923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f366f18f6c9 code=0x7ffc0000 [ 1889.051815][T20602] loop2: detected capacity change from 0 to 512 [ 1889.096473][ T30] audit: type=1326 audit(2000000632.295:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20575 comm="syz.1.19923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366f18f6c9 code=0x7ffc0000 [ 1889.258713][T20602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1889.274128][T20602] ext4 filesystem being mounted at /872/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1889.359513][T20602] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.19933: corrupted inode contents [ 1889.446015][T20602] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.19933: mark_inode_dirty error [ 1889.552962][T20602] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.19933: corrupted inode contents [ 1889.648760][T20616] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.19933: corrupted inode contents [ 1889.800308][T20616] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.19933: mark_inode_dirty error [ 1889.824137][ T6344] kworker/0:6 (6344) used greatest stack depth: 17944 bytes left [ 1890.007609][T20616] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.19933: corrupted inode contents [ 1890.165130][T20626] nvme_fabrics: missing parameter 'transport=%s' [ 1890.189332][T20636] loop1: detected capacity change from 0 to 512 [ 1890.236231][T20626] nvme_fabrics: missing parameter 'nqn=%s' [ 1890.339476][T20636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1890.411589][T20628] nvme_fabrics: missing parameter 'transport=%s' [ 1890.420092][T20628] nvme_fabrics: missing parameter 'nqn=%s' [ 1890.427090][T20636] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1890.548530][ T7307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1890.646306][T20209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1892.007917][T20677] loop1: detected capacity change from 0 to 256 [ 1892.736360][T20647] loop9: detected capacity change from 0 to 40427 [ 1892.772632][T20647] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 1892.788282][T20647] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1893.494088][T20647] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1893.568165][T20715] loop3: detected capacity change from 0 to 256 [ 1893.604080][T20647] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1893.631459][T20647] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1893.644254][T20715] exfat: Deprecated parameter 'utf8' [ 1893.683229][T20715] exfat: Deprecated parameter 'namecase' [ 1893.744127][T20715] exfat: Deprecated parameter 'namecase' [ 1893.772707][T20715] exfat: Deprecated parameter 'utf8' [ 1893.824715][T20715] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 1895.520856][T20752] netlink: 'syz.9.19978': attribute type 6 has an invalid length. [ 1895.570127][T20726] loop1: detected capacity change from 0 to 32768 [ 1895.589330][T20754] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19989'. [ 1895.618459][T20752] netlink: 'syz.9.19978': attribute type 6 has an invalid length. [ 1895.658964][T20754] netlink: 72 bytes leftover after parsing attributes in process `syz.2.19989'. [ 1895.687100][T20726] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1895.980275][T20726] XFS (loop1): Ending clean mount [ 1896.066796][T20726] XFS (loop1): Quotacheck needed: Please wait. [ 1896.163281][T20726] XFS (loop1): Quotacheck: Done. [ 1896.673953][T20209] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1896.695617][T20784] loop6: detected capacity change from 0 to 256 [ 1896.789682][T20783] loop2: detected capacity change from 0 to 2048 [ 1896.914371][T20783] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1897.000370][T20789] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1897.135589][ T30] audit: type=1800 audit(2000000641.112:1881): pid=20783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19997" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1897.160747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1897.867202][T20776] loop5: detected capacity change from 0 to 32768 [ 1897.946188][T20809] loop9: detected capacity change from 0 to 512 [ 1897.960620][T20808] netlink: 256 bytes leftover after parsing attributes in process `syz.3.20008'. [ 1897.971607][T20776] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.19994 (20776) [ 1898.029330][T20809] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1898.047850][T20808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20008'. [ 1898.112947][T20776] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1898.182968][T20776] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1898.190651][T20809] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1898.822484][T20776] BTRFS info (device loop5): enabling ssd optimizations [ 1898.869288][ T7226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1898.909819][T20776] BTRFS info (device loop5): turning on async discard [ 1898.916855][T20776] BTRFS info (device loop5): enabling free space tree [ 1898.984781][T20776] BTRFS info (device loop5): use lzo compression, level 1 [ 1899.113883][T20857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20020'. [ 1899.143402][T20858] loop6: detected capacity change from 0 to 16 [ 1899.200633][T20858] erofs (device loop6): mounted with root inode @ nid 36. [ 1899.293140][ T30] audit: type=1800 audit(2000000643.132:1882): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.19994" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1899.545815][T14800] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1899.565228][T20865] Bluetooth: MGMT ver 1.23 [ 1899.960472][T20866] loop3: detected capacity change from 0 to 4096 [ 1900.001282][T20866] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 1900.343823][ T9856] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1900.575386][ T9856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.625196][ T9856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.673740][T20893] loop2: detected capacity change from 0 to 64 [ 1900.706973][ T9856] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1900.765889][ T9856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.868070][ T9856] usb 2-1: config 0 descriptor?? [ 1901.168970][T20900] netlink: 184 bytes leftover after parsing attributes in process `syz.3.20038'. [ 1901.415483][ T9856] viewsonic 0003:2133:0018.0047: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.1-1/input0 [ 1901.919018][T20917] loop3: detected capacity change from 0 to 32768 [ 1901.978307][ T9856] usb 2-1: USB disconnect, device number 40 [ 1902.083225][T20915] loop5: detected capacity change from 0 to 4096 [ 1902.094984][T20917] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1902.164635][T20917] XFS (loop3): Metadata corruption detected at xfs_dinode_verify.part.0+0x93e/0x1760, inode 0x1802 dinode [ 1902.178483][T20917] XFS (loop3): Unmount and run xfs_repair [ 1902.185521][T20917] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1902.196041][T20917] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 f2 IN.............. [ 1902.207654][T20917] 00000010: ff ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 ................ [ 1902.218527][T20917] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 1902.228154][T20917] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 1902.238056][T20917] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1902.247414][T20917] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1902.256630][T20917] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 1902.266747][T20917] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 1902.277716][T20917] XFS (loop3): metadata inode 0x1802 type 6 is corrupt [ 1902.285628][T20917] XFS (loop3): failed to read RT inodes [ 1902.291644][T20917] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 1902.439311][T20915] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1902.507425][T20915] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1902.609476][T20915] System zones: 0-5 [ 1902.645852][T20915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1903.106048][T20943] loop6: detected capacity change from 0 to 512 [ 1903.132447][T20936] loop9: detected capacity change from 0 to 4096 [ 1903.215529][T20943] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.20046: inode has both inline data and extents flags [ 1903.280802][T14800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1903.291114][T20936] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1903.327336][T20943] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.20046: couldn't read orphan inode 15 (err -117) [ 1903.475591][T20943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1903.491161][T20936] ntfs3(loop9): ino=1a, mi_enum_attr [ 1903.529124][T20936] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1903.807643][T20954] loop2: detected capacity change from 0 to 1024 [ 1904.015170][T25039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1904.327221][T20967] loop3: detected capacity change from 0 to 128 [ 1904.443324][T20967] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1904.559582][T20973] loop1: detected capacity change from 0 to 4096 [ 1904.575297][T20967] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1904.589678][ T9856] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1904.628613][T20978] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1904.799690][ T9856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1904.890104][ T9856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1904.981922][ T9856] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1905.033305][T20981] loop2: detected capacity change from 0 to 512 [ 1905.083409][ T9856] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1905.111737][T20981] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1905.167246][ T9856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.190578][T20981] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1905.245690][ T9856] usb 6-1: config 0 descriptor?? [ 1905.387866][T20981] FAT-fs (loop2): FAT read failed (blocknr 128) [ 1905.593468][T20989] loop1: detected capacity change from 0 to 1024 [ 1905.637172][T20989] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1905.694331][T20989] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1905.800315][T20989] jbd2_journal_init_inode: Cannot locate journal superblock [ 1905.807987][T20989] EXT4-fs (loop1): Could not load journal inode [ 1905.819551][ T9856] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1906.115741][ T24] usb 6-1: USB disconnect, device number 36 [ 1907.459442][ T24] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 1907.660472][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1907.742729][ T24] usb 10-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1907.782917][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.843121][ T24] usb 10-1: config 0 descriptor?? [ 1907.889938][T21027] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1908.208914][T21046] loop6: detected capacity change from 0 to 64 [ 1908.421503][ T24] nti 0003:0757:0A00.0049: unknown main item tag 0x0 [ 1908.498082][ T24] nti 0003:0757:0A00.0049: item fetching failed at offset 3/5 [ 1908.550987][ T24] nti 0003:0757:0A00.0049: probe with driver nti failed with error -22 [ 1908.685630][ T24] usb 10-1: USB disconnect, device number 35 [ 1908.780972][T21052] loop2: detected capacity change from 0 to 4096 [ 1908.813058][T21058] loop5: detected capacity change from 0 to 256 [ 1908.844845][T21058] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1909.606973][ T7742] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1909.651337][T21071] loop1: detected capacity change from 0 to 1024 [ 1909.689051][T21071] EXT4-fs: Ignoring removed orlov option [ 1909.727928][T21071] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1909.773133][T21074] loop2: detected capacity change from 0 to 1024 [ 1909.815443][T21074] EXT4-fs: Ignoring removed orlov option [ 1909.832881][ T7742] usb 6-1: Using ep0 maxpacket: 8 [ 1909.842757][T21071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1909.880435][ T7742] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1909.916382][ T7742] usb 6-1: config 179 has no interface number 0 [ 1909.928230][T21074] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1909.945697][ T7742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1909.945761][ T7742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1909.945810][ T7742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1910.016834][T21083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.20110'. [ 1910.110815][T21074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1910.133543][ T7742] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1910.164674][T21083] veth3: entered promiscuous mode [ 1910.199514][ T7742] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1910.286237][ T7742] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1910.338521][T21090] loop3: detected capacity change from 0 to 512 [ 1910.345911][ T7742] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1910.392266][T20209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1910.410463][ T7742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.423021][T21090] EXT4-fs: Ignoring removed mblk_io_submit option [ 1910.452199][T21090] EXT4-fs: inline encryption not supported [ 1910.473432][T21067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1910.499027][T21090] EXT4-fs: Ignoring removed mblk_io_submit option [ 1910.550630][ T7742] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input136 [ 1910.589165][T21090] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1910.648272][T21090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1910.787450][T21090] EXT4-fs (loop3): 1 truncate cleaned up [ 1910.809129][T21090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1911.093908][T21100] netlink: 56 bytes leftover after parsing attributes in process `syz.6.20117'. [ 1911.152699][ T24] usb 6-1: USB disconnect, device number 37 [ 1911.159680][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1911.202459][ T7307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1911.266628][ T6220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1911.425559][T21106] can0: slcan on ttyS3. [ 1911.471087][T21106] can0 (unregistered): slcan off ttyS3. [ 1911.626426][ T7742] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1911.649579][T21111] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 1911.754377][T21112] loop9: detected capacity change from 0 to 4096 [ 1911.808327][ T7742] usb 2-1: Using ep0 maxpacket: 32 [ 1911.820380][ T7742] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1911.837166][ T7742] usb 2-1: config 0 has no interface number 0 [ 1911.858276][ T7742] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1911.876223][ T7742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.896055][ T7742] usb 2-1: Product: syz [ 1911.907407][T21112] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1911.922338][ T7742] usb 2-1: Manufacturer: syz [ 1911.944104][ T7742] usb 2-1: SerialNumber: syz [ 1911.964625][T21112] ntfs3(loop9): Failed to load $Extend (-22). [ 1911.981446][ T7742] usb 2-1: config 0 descriptor?? [ 1911.986840][T21112] ntfs3(loop9): Failed to initialize $Extend. [ 1912.003246][ T7742] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1912.058555][ T7742] usb 2-1: selecting invalid altsetting 1 [ 1912.081216][T21114] loop2: detected capacity change from 0 to 4096 [ 1912.099081][ T7742] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1912.166441][ T7742] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1912.178717][T21114] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1912.243221][ T7742] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1912.264796][ T7742] usb 2-1: media controller created [ 1912.344275][T21114] ntfs3(loop2): ino=19, mi_enum_attr [ 1912.359284][ T7742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1912.380354][T21114] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1912.589838][T21114] ntfs3(loop2): failed to convert "c46c" to iso8859-13 [ 1912.750484][T21114] ntfs3(loop2): ino=20, mi_enum_attr [ 1912.790138][ T7742] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1912.973540][ T7742] usb 2-1: USB disconnect, device number 41 [ 1913.085287][T21133] loop9: detected capacity change from 0 to 256 [ 1913.149417][T21133] exfat: Deprecated parameter 'namecase' [ 1913.181712][T21133] exfat: Deprecated parameter 'namecase' [ 1913.262140][T21133] exfat: Deprecated parameter 'namecase' [ 1913.300586][T21133] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1913.357432][T21133] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1913.384384][T21140] loop6: detected capacity change from 0 to 512 [ 1913.429283][T21140] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1913.534201][T21140] EXT4-fs (loop6): 1 truncate cleaned up [ 1913.601220][T21144] loop2: detected capacity change from 0 to 128 [ 1913.653177][T21140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1913.671633][T21144] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1913.725039][T21144] ext4 filesystem being mounted at /912/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1914.027421][T21152] loop5: detected capacity change from 0 to 512 [ 1914.070113][T25039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.084208][ T7307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1914.162174][T21152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1914.218789][T21152] ext4 filesystem being mounted at /351/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1914.463506][T14800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.814438][ T30] audit: type=1326 audit(2000000657.633:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21163 comm="syz.3.20146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe06d38f6c9 code=0x0 [ 1914.860178][T21168] loop5: detected capacity change from 0 to 512 [ 1914.894689][T21168] EXT4-fs error (device loop5): ext4_iget_extra_inode:5074: inode #15: comm syz.5.20145: corrupted in-inode xattr: e_value size too large [ 1914.943395][T21168] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.20145: couldn't read orphan inode 15 (err -117) [ 1914.967249][T21168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1915.202218][T14800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1915.486807][T21160] loop6: detected capacity change from 0 to 32768 [ 1915.745854][ T7742] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1915.971531][ T7742] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.005074][ T7742] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1916.075791][ T7742] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1916.148076][ T7742] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.196299][ T7742] usb 10-1: config 0 descriptor?? [ 1916.220724][ T7742] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1916.268602][ T7742] dvb-usb: bulk message failed: -22 (3/0) [ 1916.306116][ T7742] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1916.354985][ T7742] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1916.397850][ T7742] usb 10-1: media controller created [ 1916.425787][ T7742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1916.438517][ T24] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1916.489073][T21176] dvb-usb: bulk message failed: -22 (2/0) [ 1916.548406][ T7742] dvb-usb: bulk message failed: -22 (6/0) [ 1916.579722][ T7742] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1916.627381][ T7742] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input137 [ 1916.652383][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1916.687359][ T7742] dvb-usb: schedule remote query interval to 150 msecs. [ 1916.694957][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.727094][ T7742] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1916.746822][ T24] usb 3-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 1916.773091][ T7742] usb 10-1: USB disconnect, device number 36 [ 1916.786798][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.823204][ T24] usb 3-1: config 0 descriptor?? [ 1916.856563][T21205] loop1: detected capacity change from 0 to 512 [ 1916.944018][T21205] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1916.965432][ T7742] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1917.068007][T21205] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.20162: bg 0: block 248: padding at end of block bitmap is not set [ 1917.085353][T21205] Quota error (device loop1): write_blk: dquota write failed [ 1917.100247][T21205] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1917.111389][T21205] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.20162: Failed to acquire dquot type 1 [ 1917.174933][T21205] EXT4-fs (loop1): 1 truncate cleaned up [ 1917.285904][ T24] thrustmaster 0003:044F:B300.004A: unknown main item tag 0x0 [ 1917.304038][T21213] loop6: detected capacity change from 0 to 256 [ 1917.337991][T21205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1917.361057][ T24] thrustmaster 0003:044F:B300.004A: unknown main item tag 0x0 [ 1917.388213][T21213] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1917.426065][ T24] thrustmaster 0003:044F:B300.004A: unknown main item tag 0x0 [ 1917.452895][ T24] thrustmaster 0003:044F:B300.004A: unknown main item tag 0x0 [ 1917.505824][T21215] loop5: detected capacity change from 0 to 64 [ 1917.514263][ T24] thrustmaster 0003:044F:B300.004A: unknown main item tag 0x0 [ 1917.557372][ T24] thrustmaster 0003:044F:B300.004A: hidraw0: USB HID vff.fd Device [HID 044f:b300] on usb-dummy_hcd.2-1/input0 [ 1917.609712][ T24] thrustmaster 0003:044F:B300.004A: no inputs found [ 1917.641111][ T24] usb 3-1: USB disconnect, device number 54 [ 1917.687711][T21205] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1917.709610][T21205] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1917.763931][T21205] ext4 filesystem being remounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1917.854003][T21205] Quota error (device loop1): write_blk: dquota write failed [ 1917.894034][T21205] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1917.922881][T21205] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.20162: Failed to acquire dquot type 1 [ 1918.039386][ T9856] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1918.120444][T20209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1918.289477][ T9856] usb 10-1: Using ep0 maxpacket: 16 [ 1918.380598][T21233] xt_HMARK: spi-set and port-set can't be combined [ 1918.478870][ T9856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.504136][ T9856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.513011][T21238] loop3: detected capacity change from 0 to 2048 [ 1918.552019][T21238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1918.685963][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1918.719795][ T9856] usb 10-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1918.737396][ T9856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.805567][ T9856] usb 10-1: config 0 descriptor?? [ 1918.856382][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1918.884024][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1918.904663][ T24] usb 6-1: config 248 has an invalid interface number: 47 but max is 0 [ 1918.948885][ T24] usb 6-1: config 248 has no interface number 0 [ 1918.981281][ T24] usb 6-1: config 248 interface 47 has no altsetting 0 [ 1919.018013][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=68.43 [ 1919.052642][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.093934][ T24] usb 6-1: Product: syz [ 1919.124518][ T24] usb 6-1: Manufacturer: syz [ 1919.145578][ T24] usb 6-1: SerialNumber: syz [ 1919.353250][ T9856] vrc2 0003:07C0:1125.004B: fixing up VRC-2 report descriptor [ 1919.394234][ T9856] input: HID 07c0:1125 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:07C0:1125.004B/input/input138 [ 1919.453742][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1919.502151][ T24] usb 6-1: unknown interface protocol 0x5a, assuming v1 [ 1919.529890][T21255] loop6: detected capacity change from 0 to 16 [ 1919.551688][ T24] usb 6-1: cannot find UAC_HEADER [ 1919.553094][ T9856] vrc2 0003:07C0:1125.004B: input,hidraw0: USB HID v10.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.9-1/input0 [ 1919.577305][T21255] erofs (device loop6): mounted with root inode @ nid 36. [ 1919.613433][ T24] snd-usb-audio 6-1:248.47: probe with driver snd-usb-audio failed with error -22 [ 1919.648826][T21255] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1919.666162][ T24] usb 6-1: USB disconnect, device number 38 [ 1919.713203][T21255] erofs (device loop6): failed to decompress -23 in[64, 4032] out[1851] [ 1919.743509][T21255] erofs (device loop6): read error -117 @ 43 of nid 36 [ 1919.801187][T21255] PM: Image not found (code -6) [ 1919.843488][ T9856] usb 10-1: USB disconnect, device number 37 [ 1919.990891][T21248] loop3: detected capacity change from 0 to 32768 [ 1920.024093][T21248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.20180 (21248) [ 1920.104291][T21248] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1920.161956][T21248] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1920.318395][T21248] BTRFS info (device loop3): enabling ssd optimizations [ 1920.338487][T21274] loop5: detected capacity change from 0 to 64 [ 1920.360648][T21248] BTRFS info (device loop3): turning on async discard [ 1920.403894][T21274] hfs: small file entry [ 1920.418633][T21248] BTRFS info (device loop3): enabling free space tree [ 1920.469774][T21248] BTRFS info (device loop3): use lzo compression, level 1 [ 1920.876931][ T6220] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1921.263939][T21289] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1921.295400][T21288] loop5: detected capacity change from 0 to 64 [ 1921.752833][T21279] loop2: detected capacity change from 0 to 32768 [ 1921.761032][T21294] loop5: detected capacity change from 0 to 4096 [ 1921.806229][T21298] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1921.839485][T21279] jfs_lookup: iget failed on inum 4 [ 1921.855105][T21279] jfs_lookup: iget failed on inum 4 [ 1922.185666][T21302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20200'. [ 1922.652145][T21311] loop2: detected capacity change from 0 to 64 [ 1923.191052][T21660] kworker/u8:9: attempt to access beyond end of device [ 1923.191052][T21660] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 1923.241964][T21660] buffer_io_error: 6 callbacks suppressed [ 1923.241994][T21660] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 1923.378084][T21660] kworker/u8:9: attempt to access beyond end of device [ 1923.378084][T21660] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 1923.449183][T21660] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 1923.515201][T21660] kworker/u8:9: attempt to access beyond end of device [ 1923.515201][T21660] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 1923.599906][T21305] loop5: detected capacity change from 0 to 32768 [ 1923.637132][T21660] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 1923.670674][T21660] kworker/u8:9: attempt to access beyond end of device [ 1923.670674][T21660] loop2: rw=1, sector=68, nr_sectors = 1 limit=64 [ 1923.698331][T21305] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.20199 (21305) [ 1923.761442][T21660] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 1923.821414][T21325] loop3: detected capacity change from 0 to 256 [ 1923.841386][T21660] kworker/u8:9: attempt to access beyond end of device [ 1923.841386][T21660] loop2: rw=1, sector=72, nr_sectors = 1 limit=64 [ 1923.863744][T21305] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1923.908734][T21325] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1923.939230][T21305] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1923.959340][T21660] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 1924.012311][T21660] kworker/u8:9: attempt to access beyond end of device [ 1924.012311][T21660] loop2: rw=1, sector=73, nr_sectors = 1 limit=64 [ 1924.040458][T21329] loop1: detected capacity change from 0 to 2048 [ 1924.087215][T21660] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 1924.152802][T21660] kworker/u8:9: attempt to access beyond end of device [ 1924.152802][T21660] loop2: rw=1, sector=76, nr_sectors = 1 limit=64 [ 1924.200700][T21329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1924.255209][T21660] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 1924.293032][T21305] BTRFS info (device loop5): enabling ssd optimizations [ 1924.303582][T21329] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1924.339323][T21660] kworker/u8:9: attempt to access beyond end of device [ 1924.339323][T21660] loop2: rw=1, sector=77, nr_sectors = 1 limit=64 [ 1924.366559][T21305] BTRFS info (device loop5): turning on async discard [ 1924.419294][T21305] BTRFS info (device loop5): enabling free space tree [ 1924.426992][T21305] BTRFS info (device loop5): use lzo compression, level 1 [ 1924.452079][T21660] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 1924.501767][T21660] kworker/u8:9: attempt to access beyond end of device [ 1924.501767][T21660] loop2: rw=1, sector=78, nr_sectors = 363 limit=64 [ 1924.695665][T20209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1924.835702][ T30] audit: type=1326 audit(2000000667.011:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1924.863057][T21355] loop3: detected capacity change from 0 to 4096 [ 1924.891141][T14800] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1925.000982][ T30] audit: type=1326 audit(2000000667.011:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1925.138177][ T30] audit: type=1326 audit(2000000667.086:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1925.273434][ T30] audit: type=1326 audit(2000000667.086:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1925.456059][ T30] audit: type=1326 audit(2000000667.086:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1925.617390][ T30] audit: type=1326 audit(2000000667.086:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1925.787446][ T30] audit: type=1326 audit(2000000667.086:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1925.974788][ T30] audit: type=1326 audit(2000000667.086:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="syz.2.20210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1926.137752][T21352] loop6: detected capacity change from 0 to 32768 [ 1926.240366][ T30] audit: type=1326 audit(2000000668.330:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21384 comm="syz.3.20228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d38f6c9 code=0x7ffc0000 [ 1926.344209][ T30] audit: type=1326 audit(2000000668.367:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21384 comm="syz.3.20228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d38f6c9 code=0x7ffc0000 [ 1926.367922][ T6694] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1926.587355][ T6694] usb 2-1: Using ep0 maxpacket: 16 [ 1926.613666][ T6694] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1926.653835][ T6694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.718601][ T6694] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1926.750743][ T6694] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1926.776041][ T6694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.841852][ T6694] usb 2-1: config 0 descriptor?? [ 1926.961944][T21401] loop5: detected capacity change from 0 to 1024 [ 1926.988037][T21399] loop9: detected capacity change from 0 to 4096 [ 1927.018204][T21401] EXT4-fs: Ignoring removed nobh option [ 1927.098225][T21401] EXT4-fs: Ignoring removed bh option [ 1927.243606][T21401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1927.417615][ T6694] hid-led 0003:1D34:000A.004C: item fetching failed at offset 1/5 [ 1927.451959][ T6694] hid-led 0003:1D34:000A.004C: probe with driver hid-led failed with error -22 [ 1927.516514][T21401] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1927.571752][T21401] EXT4-fs (loop5): Remounting filesystem read-only [ 1927.705790][ T6694] usb 2-1: USB disconnect, device number 42 [ 1927.849834][T14800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1928.119344][T21420] netlink: 108 bytes leftover after parsing attributes in process `syz.5.20242'. [ 1928.157217][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20242'. [ 1928.435579][T21425] loop3: detected capacity change from 0 to 2048 [ 1928.519582][T21425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1928.580694][T21424] loop9: detected capacity change from 0 to 4096 [ 1928.649887][T21424] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 1929.155802][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1929.326954][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1929.356207][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1929.383391][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.447651][ T24] usb 2-1: config 0 has no interface number 0 [ 1929.492974][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1929.536891][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.580951][ T24] usb 2-1: Product: syz [ 1929.619908][ T24] usb 2-1: Manufacturer: syz [ 1929.624968][ T24] usb 2-1: SerialNumber: syz [ 1929.684961][ T24] usb 2-1: config 0 descriptor?? [ 1929.741725][ T24] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1929.758307][T21456] loop5: detected capacity change from 0 to 256 [ 1929.776046][ T6343] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1929.801410][T21456] exfat: Deprecated parameter 'utf8' [ 1929.816708][ T24] uvcvideo 2-1:0.105: No valid video chain found. [ 1929.855494][T21456] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1929.947329][T26332] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 1929.956970][T26332] Bluetooth: hci3: command 0x0406 tx timeout [ 1929.990930][ T6343] usb 4-1: Using ep0 maxpacket: 8 [ 1929.999253][ T6343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1930.053752][ T6343] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1930.089858][ T24] usb 2-1: USB disconnect, device number 43 [ 1930.098501][ T6343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.145146][ T6343] usb 4-1: config 0 descriptor?? [ 1930.373044][T21468] loop5: detected capacity change from 0 to 256 [ 1930.417943][T27267] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1930.456693][T21468] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 1930.651569][T27267] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.691706][ T6343] corsair 0003:1B1C:1B09.004D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.3-1/input0 [ 1930.704159][T21472] loop6: detected capacity change from 0 to 64 [ 1930.720442][T27267] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1930.750280][T27267] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.797047][T27267] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1930.898323][T21472] syz.6.20268: attempt to access beyond end of device [ 1930.898323][T21472] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1930.958854][ T6343] usb 4-1: USB disconnect, device number 79 [ 1931.050738][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20271'. [ 1931.304792][T21484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1931.441182][T21490] loop2: detected capacity change from 0 to 128 [ 1931.782035][T21494] loop5: detected capacity change from 0 to 1024 [ 1931.886678][T21494] EXT4-fs (loop5): filesystem is read-only [ 1931.921298][T21494] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1932.001749][T27267] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1932.019318][T21494] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 1932.040811][T21494] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1932.040968][T21494] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.20279: inode #1: comm syz.5.20279: iget: illegal inode # [ 1932.041312][T21494] EXT4-fs (loop5): no journal found [ 1932.041340][T21494] EXT4-fs (loop5): can't get journal size [ 1932.054924][T21494] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz.5.20279: iget: bad extra_isize 65535 (inode size 1024) [ 1932.108871][T27267] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 1932.119865][T27267] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 1932.263103][T21494] EXT4-fs (loop5): get root inode failed [ 1932.273814][T21494] EXT4-fs (loop5): mount failed [ 1932.417520][T21512] loop3: detected capacity change from 0 to 512 [ 1932.487195][T27267] usb 10-1: USB disconnect, device number 38 [ 1932.655816][T21512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1932.719549][T21512] ext4 filesystem being mounted at /3342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1932.819543][T21521] netlink: 92 bytes leftover after parsing attributes in process `syz.1.20289'. [ 1932.854911][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20289'. [ 1933.399919][ T6220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1934.450270][T21560] loop9: detected capacity change from 0 to 64 [ 1934.566556][T21560] hfs: walked past end of dir [ 1935.238267][T21576] loop2: detected capacity change from 0 to 1024 [ 1935.271134][T21546] loop5: detected capacity change from 0 to 32768 [ 1935.314517][T21581] loop9: detected capacity change from 0 to 256 [ 1935.356827][ T30] audit: type=1800 audit(2000000676.848:1894): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20315" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1935.359790][T21576] syz.2.20315: attempt to access beyond end of device [ 1935.359790][T21576] loop2: rw=34817, sector=58, nr_sectors = 2048 limit=1024 [ 1935.394153][T21576] syz.2.20315: attempt to access beyond end of device [ 1935.394153][T21576] loop2: rw=34817, sector=2106, nr_sectors = 454 limit=1024 [ 1935.419102][T21578] loop3: detected capacity change from 0 to 2048 [ 1935.435585][T21581] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 1935.468638][T21546] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1935.546151][T21546] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1935.589672][T21578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1935.661867][T21578] ext4 filesystem being mounted at /3347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1935.794300][T21590] loop6: detected capacity change from 0 to 64 [ 1935.798929][T21578] fs-verity (loop3, inode 18): Unknown hash algorithm number: 0 [ 1935.842845][T14800] ocfs2: Unmounting device (7,5) on (node local) [ 1936.039322][ T6220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1936.119439][ T7742] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1936.325600][ T7742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.353578][ T7742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.392804][ T7742] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1936.414275][ T7742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.434710][ T7742] usb 2-1: config 0 descriptor?? [ 1936.529111][ T30] audit: type=1326 audit(2000000677.951:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21603 comm="syz.9.20326" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7f9b8f6c9 code=0x0 [ 1936.909500][ T7742] elecom 0003:056E:00E6.004E: item fetching failed at offset 2/5 [ 1936.935768][ T30] audit: type=1326 audit(2000000678.325:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21612 comm="syz.5.20331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2de358f6c9 code=0x0 [ 1936.985581][ T7742] elecom 0003:056E:00E6.004E: probe with driver elecom failed with error -22 [ 1937.060239][T21618] netlink: 40 bytes leftover after parsing attributes in process `syz.6.20332'. [ 1937.167316][ T7742] usb 2-1: USB disconnect, device number 44 [ 1937.399711][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20334'. [ 1937.447985][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20334'. [ 1937.473508][T21622] netlink: 'syz.6.20334': attribute type 11 has an invalid length. [ 1937.546584][T21622] netlink: 'syz.6.20334': attribute type 13 has an invalid length. [ 1937.571318][T21615] loop2: detected capacity change from 0 to 32768 [ 1937.620911][T21615] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1937.781812][T21615] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1937.799290][T17505] Bluetooth: hci0: hcon ffff88804e14c000 sent 1 < count 5 [ 1937.813695][T26332] Bluetooth: hci0: link tx timeout [ 1938.063441][T21635] loop5: detected capacity change from 0 to 256 [ 1938.141930][T21635] exfat: Deprecated parameter 'utf8' [ 1938.148480][ T7307] ocfs2: Unmounting device (7,2) on (node local) [ 1938.212886][T21635] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1938.228333][ T7005] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1938.434993][ T7005] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.455822][ T7005] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.494213][ T7005] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1938.582571][ T7005] usb 10-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1938.655970][ T7005] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.733886][ T7005] usb 10-1: config 0 descriptor?? [ 1938.988272][ T7742] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1939.205670][ T7005] pantherlord 0003:0810:0002.004F: unknown main item tag 0x0 [ 1939.253532][ T7005] pantherlord 0003:0810:0002.004F: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.9-1/input0 [ 1939.275877][ T7005] pantherlord 0003:0810:0002.004F: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1939.401855][ T6694] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1939.471511][ T7742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.505849][ T7005] usb 10-1: USB disconnect, device number 39 [ 1939.512659][ T7742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.575121][ T7742] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1939.577131][ T6694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.605097][ T7742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.624998][ T6694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.647181][ T6694] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1939.659655][ T6694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.672989][ T6694] usb 6-1: config 0 descriptor?? [ 1939.707853][ T7742] usb 2-1: config 0 descriptor?? [ 1940.134319][ T6694] cm6533_jd 0003:0D8C:0022.0050: unknown main item tag 0x0 [ 1940.172844][ T6694] cm6533_jd 0003:0D8C:0022.0050: unknown main item tag 0x0 [ 1940.192332][ T6694] cm6533_jd 0003:0D8C:0022.0050: unknown main item tag 0x0 [ 1940.212049][ T6694] cm6533_jd 0003:0D8C:0022.0050: item fetching failed at offset 3/5 [ 1940.226347][ T6694] cm6533_jd 0003:0D8C:0022.0050: parse failed [ 1940.232911][ T7742] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 1940.253270][ T6694] cm6533_jd 0003:0D8C:0022.0050: probe with driver cm6533_jd failed with error -22 [ 1940.446266][T21683] loop9: detected capacity change from 0 to 512 [ 1940.488113][ T6694] usb 6-1: USB disconnect, device number 39 [ 1940.548950][ T7742] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0051/input/input139 [ 1940.573658][T21683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1940.628376][T21683] ext4 filesystem being mounted at /904/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 1940.736278][ T7742] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1940.780376][ T7742] usb 2-1: USB disconnect, device number 45 [ 1940.961007][ T7226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1941.329016][T17505] Bluetooth: hci5: command 0x0405 tx timeout [ 1941.458340][T21703] devpts: Bad value for 'max' [ 1941.605013][ T9856] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1941.715671][T21691] loop3: detected capacity change from 0 to 32768 [ 1941.766249][T21712] netlink: 'syz.2.20371': attribute type 10 has an invalid length. [ 1941.778607][ T9856] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1941.787203][ T9856] usb 6-1: config 0 has no interface number 0 [ 1941.794140][ T9856] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1941.804597][ T9856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.825437][ T9856] usb 6-1: config 0 descriptor?? [ 1941.835037][ T9856] cp210x 6-1:0.255: cp210x converter detected [ 1942.027532][T21691] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1942.131419][T21691] XFS (loop3): Ending clean mount [ 1942.304787][ T9856] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 1942.368063][ T9856] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1942.391166][ T9856] usb 6-1: USB disconnect, device number 40 [ 1942.409863][ T9856] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1942.458615][ T6220] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1942.485188][ T9856] cp210x 6-1:0.255: device disconnected [ 1942.761101][T21735] loop9: detected capacity change from 0 to 128 [ 1942.802511][T21735] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1942.860907][T21735] hpfs: filesystem error: improperly stopped [ 1942.913266][T21735] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1942.945897][T21735] hpfs: You really don't want any checks? You are crazy... [ 1942.977887][T21735] hpfs: hpfs_map_sector(): read error [ 1942.997174][T21735] hpfs: code page support is disabled [ 1943.034898][T21735] hpfs: hpfs_map_4sectors(): unaligned read [ 1943.147928][T21735] hpfs: hpfs_map_4sectors(): unaligned read [ 1943.185559][T21735] hpfs: filesystem error: unable to find root dir [ 1943.576669][T21752] loop3: detected capacity change from 0 to 1024 [ 1943.666126][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20389'. [ 1943.755752][T21759] loop6: detected capacity change from 0 to 128 [ 1943.821321][T21759] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1943.848809][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1943.873229][T21759] hpfs: filesystem error: improperly stopped [ 1943.908183][T21759] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1943.945658][T21759] hpfs: You really don't want any checks? You are crazy... [ 1943.990929][T21759] hpfs: hpfs_map_sector(): read error [ 1944.026282][T21759] hpfs: code page support is disabled [ 1944.062917][T21759] hpfs: hpfs_map_4sectors(): unaligned read [ 1944.114054][T21759] hpfs: hpfs_map_4sectors(): unaligned read [ 1944.165239][T21759] hpfs: filesystem error: unable to find root dir [ 1944.585111][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1944.848559][T21780] loop2: detected capacity change from 0 to 128 [ 1944.895672][T21776] loop6: detected capacity change from 0 to 4096 [ 1944.915653][T21780] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1944.940372][T21776] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1945.118565][T21776] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1945.162594][T21776] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1945.171050][T21784] macsec0: entered promiscuous mode [ 1945.182316][T21784] macsec0: entered allmulticast mode [ 1945.231083][T21785] veth1_macvtap: entered allmulticast mode [ 1945.290172][T21785] macsec0: left promiscuous mode [ 1945.327381][T21785] macsec0: left allmulticast mode [ 1945.366288][T21785] veth1_macvtap: left allmulticast mode [ 1945.676521][T21772] loop5: detected capacity change from 0 to 32768 [ 1945.789739][T21795] loop9: detected capacity change from 0 to 2048 [ 1945.916581][T21803] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1945.940770][T21772] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 1945.982864][T21805] ieee802154 phy1 wpan1: encryption failed: -22 [ 1946.018927][T21803] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1946.075619][T21803] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1946.097335][ T9856] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 1946.159540][T21803] Remounting filesystem read-only [ 1946.295627][ T9856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1946.329593][ T9856] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1946.355683][ T7226] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 1946.373979][ T9856] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 1946.394902][T14800] ocfs2: Unmounting device (7,5) on (node local) [ 1946.418558][ T9856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.472184][ T9856] usb 4-1: config 0 descriptor?? [ 1946.508808][T21800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1946.993793][ T9856] waltop 0003:172F:0502.0052: item fetching failed at offset 4/5 [ 1947.032689][ T9856] waltop 0003:172F:0502.0052: probe with driver waltop failed with error -22 [ 1947.238283][T21827] loop5: detected capacity change from 0 to 2048 [ 1947.274942][ T9856] usb 4-1: USB disconnect, device number 80 [ 1947.312758][T21827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1947.857567][T21823] loop9: detected capacity change from 0 to 32768 [ 1947.917537][T21823] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.20419 (21823) [ 1948.026396][T21823] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1948.062996][T21823] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 1948.220923][T21843] loop3: detected capacity change from 0 to 1024 [ 1948.271239][T21823] BTRFS info (device loop9): enabling ssd optimizations [ 1948.298486][T21843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1948.322098][T21823] BTRFS info (device loop9): turning on async discard [ 1948.347654][T21823] BTRFS info (device loop9): enabling free space tree [ 1948.355752][T21834] loop1: detected capacity change from 0 to 32768 [ 1948.378062][T21834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.20423 (21834) [ 1948.453829][T21843] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.20428: missing EA_INODE flag [ 1948.481429][T21834] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1948.489858][T21843] EXT4-fs (loop3): Remounting filesystem read-only [ 1948.543567][T21834] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1948.692936][ T7226] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1948.749599][T21878] vlan2: entered allmulticast mode [ 1948.759560][ T6220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1948.800492][T21834] BTRFS info (device loop1): enabling ssd optimizations [ 1948.818687][T21834] BTRFS info (device loop1): turning on async discard [ 1948.853614][T21834] BTRFS info (device loop1): enabling free space tree [ 1948.932210][ T6694] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1949.133375][ T6694] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1949.156901][ T6694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.187575][ T6694] usb 3-1: config 0 descriptor?? [ 1949.202137][T21888] loop3: detected capacity change from 0 to 8 [ 1949.229269][T20209] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1949.233985][ T6694] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1949.430403][T21889] [U]  [ 1949.747246][ T6694] gspca_cpia1: usb_control_msg 03, error -32 [ 1949.782678][ T6694] gspca_cpia1: usb_control_msg 03, error -71 [ 1949.822920][T21895] loop9: detected capacity change from 0 to 2048 [ 1949.840819][ T6694] gspca_cpia1: usb_control_msg 01, error -71 [ 1949.875462][ T6694] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1949.920852][T21895] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1949.965581][ T6694] usb 3-1: USB disconnect, device number 55 [ 1950.077689][T21895] NILFS error (device loop9): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1950.097184][T21902] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1950.127679][T21895] Remounting filesystem read-only [ 1950.521576][T21910] loop9: detected capacity change from 0 to 512 [ 1950.681666][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20446'. [ 1951.137011][T21925] loop3: detected capacity change from 0 to 1024 [ 1951.172001][T21925] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1951.267228][T21925] hfsplus: bad catalog entry type [ 1951.724066][ T30] audit: type=1326 audit(2000000692.154:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.2.20460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1951.792732][ T30] audit: type=1326 audit(2000000692.154:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.2.20460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1951.897875][ T30] audit: type=1326 audit(2000000692.172:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.2.20460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1952.035949][ T30] audit: type=1326 audit(2000000692.172:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.2.20460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1952.207700][ T30] audit: type=1326 audit(2000000692.172:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.2.20460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910838f6c9 code=0x7ffc0000 [ 1952.345311][T21927] loop9: detected capacity change from 0 to 32768 [ 1952.387732][T21927] XFS (loop9): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 1952.686965][T21956] loop2: detected capacity change from 0 to 2048 [ 1952.778259][T21956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1953.394950][T21969] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 1953.568967][T21971] loop9: detected capacity change from 0 to 256 [ 1953.694898][T21971] FAT-fs (loop9): Directory bread(block 64) failed [ 1953.768833][T21971] FAT-fs (loop9): Directory bread(block 65) failed [ 1953.820441][T21971] FAT-fs (loop9): Directory bread(block 66) failed [ 1953.905813][T21971] FAT-fs (loop9): Directory bread(block 67) failed [ 1953.949016][T21971] FAT-fs (loop9): Directory bread(block 68) failed [ 1953.987888][T21971] FAT-fs (loop9): Directory bread(block 69) failed [ 1954.081356][T21971] FAT-fs (loop9): Directory bread(block 70) failed [ 1954.111893][T21971] FAT-fs (loop9): Directory bread(block 71) failed [ 1954.152333][T21971] FAT-fs (loop9): Directory bread(block 72) failed [ 1954.177622][T21971] FAT-fs (loop9): Directory bread(block 73) failed [ 1954.229619][T21987] loop1: detected capacity change from 0 to 1024 [ 1954.749544][ T6694] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1954.767810][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1954.940619][T21999] loop9: detected capacity change from 0 to 1024 [ 1954.981343][ T6694] usb 3-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 1955.044493][ T6694] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1955.157874][ T6694] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1955.212084][ T6694] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 1955.234013][T22006] loop5: detected capacity change from 0 to 64 [ 1955.266350][ T6694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.315539][ T6694] usb 3-1: config 0 descriptor?? [ 1955.835319][ T6694] aquacomputer_d5next 0003:0C70:F001.0053: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.2-1/input0 [ 1956.201514][T22019] loop5: detected capacity change from 0 to 4096 [ 1956.211416][T22002] loop6: detected capacity change from 0 to 32768 [ 1956.223090][ T9856] usb 3-1: USB disconnect, device number 56 [ 1956.289429][T22019] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1956.335037][T22002] ERROR: (device loop6): dtSearch: stack overrun! [ 1956.335037][T22002] [ 1956.376631][T22002] ERROR: (device loop6): remounting filesystem as read-only [ 1956.420164][T22002] btstack dump: [ 1956.433733][T22002] bn = 0, index = 0 [ 1956.448010][T22025] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1956.449175][T22002] bn = 72c, index = 96 [ 1956.507402][T22002] bn = 0, index = 0 [ 1956.589028][T22019] ntfs3(loop5): Failed to load $Extend (-22). [ 1956.613203][T22002] bn = 72c, index = 96 [ 1956.637783][T22019] ntfs3(loop5): Failed to initialize $Extend. [ 1956.648638][T22002] bn = 0, index = 0 [ 1956.681118][T22002] bn = 72c, index = 96 [ 1956.702836][T22002] bn = 0, index = 0 [ 1956.717385][T22002] bn = 0, index = 0 [ 1957.475029][T22041] loop5: detected capacity change from 0 to 4096 [ 1957.720995][T22041] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1957.790418][T22049] loop9: detected capacity change from 0 to 1024 [ 1957.824772][T22041] NILFS (loop5): trying rollback from an earlier position [ 1957.893923][T22041] NILFS (loop5): recovery complete [ 1957.913327][T22049] hfsplus: bad catalog entry type [ 1957.946446][T22052] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1958.132062][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1958.434863][T22061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20516'. [ 1958.463486][T22062] tipc: Enabled bearer , priority 17 [ 1958.572048][T22064] loop6: detected capacity change from 0 to 2048 [ 1958.689244][T22069] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1958.779512][T22064] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1958.790544][ T30] audit: type=1800 audit(2000000698.745:1902): pid=22064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.20517" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1958.902628][T22064] Remounting filesystem read-only [ 1960.076339][T22103] loop9: detected capacity change from 0 to 2048 [ 1960.086963][ T6694] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1960.144693][T22103] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1960.245039][T22108] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1960.245193][T22103] syz.9.20537: attempt to access beyond end of device [ 1960.245193][T22103] loop9: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1960.310995][ T6694] usb 2-1: Using ep0 maxpacket: 16 [ 1960.344742][ T6694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1960.382575][ T6694] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1960.475429][ T6694] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1960.552403][T22103] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1960.572358][ T6694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.604084][T22103] Remounting filesystem read-only [ 1960.619793][ T6694] usb 2-1: config 0 descriptor?? [ 1960.637709][T22103] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1960.731884][T22103] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1960.857763][T22103] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 16777227 [ 1960.869179][ T30] audit: type=1800 audit(2000000700.700:1903): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.20537" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 1960.939438][T22103] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1961.015221][T22103] NILFS (loop9): error -5 truncating bmap (ino=16) [ 1961.107841][T22128] netlink: 348 bytes leftover after parsing attributes in process `syz.2.20546'. [ 1961.156882][ T6694] hid_mf 0003:0079:1803.0054: item fetching failed at offset 1/5 [ 1961.184960][ T6694] hid_mf 0003:0079:1803.0054: HID parse failed. [ 1961.206978][ T6694] hid_mf 0003:0079:1803.0054: probe with driver hid_mf failed with error -22 [ 1961.424634][ T9856] usb 2-1: USB disconnect, device number 46 [ 1961.611894][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20548'. [ 1961.624870][T22132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20548'. [ 1961.636527][T22132] netlink: 'syz.3.20548': attribute type 11 has an invalid length. [ 1961.646898][T22132] netlink: 'syz.3.20548': attribute type 12 has an invalid length. [ 1961.845086][T22138] loop2: detected capacity change from 0 to 1024 [ 1961.875159][T22138] EXT4-fs: inline encryption not supported [ 1961.882683][ T7226] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 1961.926129][T22138] EXT4-fs: Ignoring removed nobh option [ 1961.931800][T22138] EXT4-fs: Ignoring removed bh option [ 1962.038197][T22138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1962.075039][T22140] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1962.521849][ T7307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1962.837631][T27267] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1963.028266][T27267] usb 4-1: Using ep0 maxpacket: 16 [ 1963.057956][T27267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1963.180583][T27267] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1963.252069][T27267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.556313][T22173] loop9: detected capacity change from 0 to 40427 [ 1963.588510][T22173] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1963.596579][T22173] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1963.608024][T22173] F2FS-fs (loop9): invalid crc value [ 1963.620040][T22173] F2FS-fs (loop9): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:6 [ 1963.639498][T22173] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-117) [ 1963.653148][T27267] usb 4-1: config 0 descriptor?? [ 1964.250519][T27267] hkems 0003:2006:0118.0055: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 1964.311385][T27267] hkems 0003:2006:0118.0055: no inputs found [ 1964.320840][T27267] hkems 0003:2006:0118.0055: force feedback init failed [ 1964.489893][T27267] usb 4-1: USB disconnect, device number 81 [ 1964.708317][T22186] caif:caif_disconnect_client(): nothing to disconnect [ 1964.977198][T22191] loop6: detected capacity change from 0 to 256 [ 1965.008779][T22191] exfat: Deprecated parameter 'utf8' [ 1965.050568][T22191] exfat: Deprecated parameter 'utf8' [ 1965.057547][T22191] exfat: Deprecated parameter 'namecase' [ 1965.162776][T22191] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1965.301431][T22174] loop2: detected capacity change from 0 to 32768 [ 1965.448569][T22174] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1965.509732][T22185] loop1: detected capacity change from 0 to 32768 [ 1965.533101][T22185] (syz.1.20572,22185,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1965.589866][T22174] XFS (loop2): Ending clean mount [ 1965.606063][T22185] (syz.1.20572,22185,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1965.631449][T22174] XFS (loop2): Quotacheck needed: Please wait. [ 1965.664342][T22174] XFS (loop2): Quotacheck: Done. [ 1965.689696][T22185] JBD2: Ignoring recovery information on journal [ 1965.852133][T22185] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1966.111672][ T7307] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1966.198190][T22185] (syz.1.20572,22185,1):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume. [ 1966.260199][T22185] (syz.1.20572,22185,1):ocfs2_group_add:511 ERROR: status = -22 [ 1966.341616][T22223] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1966.623972][T20209] ocfs2: Unmounting device (7,1) on (node local) [ 1966.757569][T22230] loop5: detected capacity change from 0 to 736 [ 1967.188228][T22239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20585'. [ 1968.432986][T22263] netlink: 240 bytes leftover after parsing attributes in process `syz.6.20604'. [ 1969.043854][T22273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20609'. [ 1969.524191][T22254] loop3: detected capacity change from 0 to 32768 [ 1969.587740][T22254] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1969.638321][T22254] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1969.734289][T27267] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1969.908314][ T6220] ocfs2: Unmounting device (7,3) on (node local) [ 1969.948161][T27267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1969.986331][T27267] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1970.060622][T27267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.129688][T27267] usb 3-1: config 0 descriptor?? [ 1970.472028][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1970.600278][T27267] prodikeys 0003:041E:2801.0056: hidraw0: USB HID v0.02 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 1970.663926][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1970.679329][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1970.715327][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.752579][ T24] usb 2-1: config 0 descriptor?? [ 1970.778232][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1970.874831][T27267] usb 3-1: USB disconnect, device number 57 [ 1971.016054][T22307] base_sock_release(ffff88801222a840) sk=ffff888031551000 [ 1971.363756][T22301] loop3: detected capacity change from 0 to 32768 [ 1971.378869][T22311] loop9: detected capacity change from 0 to 4096 [ 1971.408033][T22311] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1971.423672][T22301] lbmIODone: I/O error in JFS log [ 1971.450704][T22301] *** Log Format Error ! *** [ 1971.476355][T22301] lmLogInit: exit(-22) [ 1971.489340][T27267] usb 2-1: USB disconnect, device number 47 [ 1971.504318][T22301] lmLogOpen: exit(-22) [ 1971.598746][T22311] ntfs3(loop9): ino=1a, mi_enum_attr [ 1971.629021][T22311] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1971.656620][T22311] ntfs3(loop9): ino=1a, mi_enum_attr [ 1971.684564][T22311] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 1972.396224][ T24] kernel write not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 1972.575017][T22331] tipc: Enabling of bearer rejected, failed to enable media [ 1972.610910][ T9856] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1972.943229][ T9856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.986106][ T9856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1973.066568][ T9856] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1973.163691][ T9856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.275054][ T9856] usb 3-1: config 0 descriptor?? [ 1973.336214][T22346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20641'. [ 1973.439578][T22352] loop1: detected capacity change from 0 to 256 [ 1973.489197][T22352] exfat: Deprecated parameter 'namecase' [ 1973.532721][T22352] exfat: Deprecated parameter 'utf8' [ 1973.581864][T22352] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1973.736879][ T9856] pyra 0003:1E7D:2C24.0057: unknown main item tag 0x0 [ 1973.796484][ T9856] pyra 0003:1E7D:2C24.0057: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.2-1/input0 [ 1974.017455][ T9856] usb 3-1: USB disconnect, device number 58 [ 1974.325320][T22370] netlink: 104 bytes leftover after parsing attributes in process `syz.6.20653'. [ 1974.737068][T22381] loop6: detected capacity change from 0 to 256 [ 1974.768492][T22381] exfat: Deprecated parameter 'namecase' [ 1974.852345][T22381] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1974.870834][T22383] loop5: detected capacity change from 0 to 128 [ 1974.904787][T22387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20660'. [ 1974.917949][T22383] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1974.964056][T22383] hpfs: filesystem error: improperly stopped [ 1974.987767][T22383] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1975.045550][T22383] hpfs: You really don't want any checks? You are crazy... [ 1975.084395][T22383] hpfs: hpfs_map_sector(): read error [ 1975.127176][T22383] hpfs: code page support is disabled [ 1975.145511][T22383] hpfs: hpfs_map_4sectors(): unaligned read [ 1975.182025][T22383] hpfs: hpfs_map_4sectors(): unaligned read [ 1975.218153][T22383] hpfs: filesystem error: unable to find root dir [ 1975.346024][T22383] hpfs: hpfs_map_4sectors(): unaligned read [ 1975.391852][T22383] hpfs: hpfs_map_sector(): read error [ 1976.486366][T22395] loop1: detected capacity change from 0 to 32768 [ 1976.552881][T22395] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.20661 (22395) [ 1976.614298][T22411] virtio-fs: tag not found [ 1976.647771][T22395] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1976.718475][T22395] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 1977.030742][T22395] BTRFS info (device loop1): setting nodatasum [ 1977.068631][T22395] BTRFS info (device loop1): setting nodatacow [ 1977.105180][T22395] BTRFS info (device loop1): turning on async discard [ 1977.162710][T22395] BTRFS info (device loop1): enabling free space tree [ 1977.220279][T22395] BTRFS info (device loop1): enabling auto defrag [ 1977.238576][T22395] BTRFS info (device loop1): max_inline set to 0 [ 1977.614649][T20209] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1977.771033][T22453] loop3: detected capacity change from 0 to 2048 [ 1977.824619][T22455] tmpfs: Cannot disable swap on remount [ 1977.840367][ T6694] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 1977.925255][T22456] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1978.080736][ T6694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1978.140627][ T6694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1978.185151][ T6694] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1978.253711][T22437] loop2: detected capacity change from 0 to 32768 [ 1978.271051][ T6694] usb 10-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1978.316113][T22437] JBD2: Ignoring recovery information on journal [ 1978.326592][ T6694] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.361913][ T6694] usb 10-1: config 0 descriptor?? [ 1978.384065][T22449] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1978.608149][T22437] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1978.792185][ T6359] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1978.881463][ T6694] aureal 0003:0755:2626.0058: unknown main item tag 0x6 [ 1978.911092][ T6694] aureal 0003:0755:2626.0058: report_id 29495 is invalid [ 1978.935191][ T6694] aureal 0003:0755:2626.0058: item 0 2 1 8 parsing failed [ 1978.963892][ T6694] aureal 0003:0755:2626.0058: probe with driver aureal failed with error -22 [ 1979.008196][ T6359] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1979.027377][ T6359] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1979.059495][ T6359] usb 4-1: Product: syz [ 1979.063935][ T6359] usb 4-1: Manufacturer: syz [ 1979.096058][ T6359] usb 4-1: SerialNumber: syz [ 1979.130237][ T6359] usb 4-1: config 0 descriptor?? [ 1979.160617][ T6359] ch341 4-1:0.0: ch341-uart converter detected [ 1979.209901][ T9856] usb 10-1: USB disconnect, device number 40 [ 1979.394907][T22480] loop1: detected capacity change from 0 to 1024 [ 1979.592418][T22480] hfsplus: bad catalog entry type [ 1979.602193][ T7307] ocfs2: Unmounting device (7,2) on (node local) [ 1979.828090][ T6359] usb 4-1: failed to send control message: -71 [ 1979.848009][ T6359] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1979.908849][ T6359] usb 4-1: USB disconnect, device number 82 [ 1979.922717][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1979.946305][ T6359] ch341 4-1:0.0: device disconnected [ 1980.013935][T22486] loop9: detected capacity change from 0 to 512 [ 1980.057431][T22486] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1980.062697][T22465] loop6: detected capacity change from 0 to 32768 [ 1980.157198][T22465] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1980.167209][T22486] EXT4-fs (loop9): shut down requested (0) [ 1980.197594][T22465] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1980.312322][ T7226] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1980.376123][T22465] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 1 34, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 1980.399617][T22465] gfs2: fsid=syz:syz.s: G: s:SH n:2/22 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:9 [ 1980.418350][T22465] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:22465 [syz.6.20691] init_inodes+0x113b/0x2eb0 [ 1980.446746][T22465] gfs2: fsid=syz:syz.s: I: n:1/34 t:8 f:0x00 d:0x00000200 s:167772160 p:0 [ 1980.465995][T22465] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 1980.482807][T22465] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 1980.503685][T22465] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 1980.511339][T22465] gfs2: fsid=syz:syz.s: File system withdrawn [ 1980.528651][T22465] CPU: 1 UID: 0 PID: 22465 Comm: syz.6.20691 Not tainted syzkaller #0 PREEMPT(full) [ 1980.528705][T22465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1980.528729][T22465] Call Trace: [ 1980.528744][T22465] [ 1980.528760][T22465] dump_stack_lvl+0x16c/0x1f0 [ 1980.528818][T22465] gfs2_withdraw+0xa8b/0x1130 [ 1980.528875][T22465] ? __pfx_gfs2_withdraw+0x10/0x10 [ 1980.528931][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.528981][T22465] gfs2_jdesc_check+0x2b0/0x2f0 [ 1980.529041][T22465] check_journal_clean+0x13c/0x350 [ 1980.529087][T22465] ? __pfx_check_journal_clean+0x10/0x10 [ 1980.529135][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.529181][T22465] ? do_raw_spin_lock+0x12c/0x2b0 [ 1980.529231][T22465] ? init_inodes+0x113b/0x2eb0 [ 1980.529282][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.529328][T22465] ? do_raw_spin_unlock+0x172/0x230 [ 1980.529380][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.529427][T22465] ? _raw_spin_unlock+0x28/0x50 [ 1980.529468][T22465] ? gfs2_jdesc_find+0xbf/0x100 [ 1980.529525][T22465] init_inodes+0x113b/0x2eb0 [ 1980.529584][T22465] ? __pfx_init_inodes+0x10/0x10 [ 1980.529638][T22465] ? gfs2_fill_super+0x1be2/0x2d30 [ 1980.529687][T22465] ? init_sb+0xa50/0x10d0 [ 1980.529741][T22465] ? __pfx_snprintf+0x10/0x10 [ 1980.529794][T22465] ? gfs2_fill_super+0x1be2/0x2d30 [ 1980.529844][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.529890][T22465] gfs2_fill_super+0x1be2/0x2d30 [ 1980.529948][T22465] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1980.529999][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.530050][T22465] ? gfs2_fill_super+0x1875/0x2d30 [ 1980.530102][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.530147][T22465] ? set_blocksize+0x406/0x500 [ 1980.530215][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.530263][T22465] ? sb_set_blocksize+0x176/0x1d0 [ 1980.530328][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.530390][T22465] get_tree_bdev_flags+0x38c/0x620 [ 1980.530450][T22465] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1980.530507][T22465] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1980.530567][T22465] ? rcu_is_watching+0x12/0xc0 [ 1980.530619][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.530669][T22465] ? aa_get_newest_label+0xd2/0x250 [ 1980.530730][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.530779][T22465] ? apparmor_capable+0x114/0x1d0 [ 1980.530843][T22465] gfs2_get_tree+0x4e/0x280 [ 1980.530896][T22465] vfs_get_tree+0x8e/0x340 [ 1980.530944][T22465] path_mount+0x7b9/0x23a0 [ 1980.530988][T22465] ? __pfx_path_mount+0x10/0x10 [ 1980.531029][T22465] ? putname+0x154/0x1a0 [ 1980.531073][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.531121][T22465] ? putname+0x154/0x1a0 [ 1980.531163][T22465] ? __x64_sys_mount+0x293/0x310 [ 1980.531199][T22465] __x64_sys_mount+0x293/0x310 [ 1980.531235][T22465] ? __pfx___x64_sys_mount+0x10/0x10 [ 1980.531270][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.531319][T22465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1980.531378][T22465] do_syscall_64+0xcd/0xfa0 [ 1980.531427][T22465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.531465][T22465] RIP: 0033:0x7fc405190e6a [ 1980.531495][T22465] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1980.531533][T22465] RSP: 002b:00007fc4033f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1980.531569][T22465] RAX: ffffffffffffffda RBX: 00007fc4033f5ef0 RCX: 00007fc405190e6a [ 1980.531597][T22465] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fc4033f5eb0 [ 1980.531625][T22465] RBP: 000020000001f680 R08: 00007fc4033f5ef0 R09: 0000000000000084 [ 1980.531651][T22465] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 1980.531678][T22465] R13: 00007fc4033f5eb0 R14: 000000000001f707 R15: 00002000000000c0 [ 1980.531722][T22465] [ 1980.531737][T22465] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 1980.778462][T22506] netlink: 'syz.9.20708': attribute type 142 has an invalid length. [ 1981.037047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1981.201495][T22511] loop5: detected capacity change from 0 to 128 [ 1981.241437][T22506] netlink: 16 bytes leftover after parsing attributes in process `syz.9.20708'. [ 1981.263779][ T9856] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1981.275586][ T6359] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1981.447563][ T6359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.466109][ T9856] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1981.494947][ T6359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.526352][ T9856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.576077][ T9856] usb 4-1: config 0 descriptor?? [ 1981.592450][ T6359] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1981.641002][ T9856] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1981.669282][ T6359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.715800][ T6359] usb 2-1: config 0 descriptor?? [ 1982.192340][ T6359] konepure 0003:1E7D:2DBE.0059: unknown main item tag 0x1 [ 1982.235373][ T6359] konepure 0003:1E7D:2DBE.0059: unknown main item tag 0x2 [ 1982.277004][ T6359] konepure 0003:1E7D:2DBE.0059: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 1982.297513][ T9856] gp8psk: usb out operation failed. [ 1982.317505][ T9856] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1982.398488][ T9856] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1982.493842][ T9856] usb 4-1: USB disconnect, device number 83 [ 1982.542392][T27267] usb 2-1: USB disconnect, device number 48 [ 1982.816475][T22519] loop2: detected capacity change from 0 to 32768 [ 1982.861417][T22519] overlayfs: upper fs needs to support d_type. [ 1982.878051][T22519] overlayfs: upper fs does not support tmpfile. [ 1982.910932][ T6359] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 1982.942953][T22519] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1982.963989][ T7005] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1983.138186][ T7005] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 1983.148641][ T6359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1983.190111][ T7005] usb 6-1: config 0 has no interface number 0 [ 1983.209924][ T6359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.241787][ T7005] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1983.276456][ T6359] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1983.301955][ T7005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.336533][ T6359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.355064][ T7005] usb 6-1: Product: syz [ 1983.381799][ T7005] usb 6-1: Manufacturer: syz [ 1983.387771][ T7005] usb 6-1: SerialNumber: syz [ 1983.426682][ T6359] usb 10-1: config 0 descriptor?? [ 1983.453837][ T7005] usb 6-1: config 0 descriptor?? [ 1983.507129][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20724'. [ 1983.937199][ T7005] usb 6-1: Firmware version (0.0) predates our first public release. [ 1983.954020][ T6359] zydacron 0003:13EC:0006.005A: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.9-1/input0 [ 1983.992282][ T7005] usb 6-1: Please update to version 0.2 or newer [ 1984.099574][ T7005] usb 6-1: USB disconnect, device number 41 [ 1984.145622][ T6359] usb 10-1: USB disconnect, device number 41 [ 1984.821914][T21660] bridge_slave_1: left allmulticast mode [ 1984.859251][T21660] bridge_slave_1: left promiscuous mode [ 1984.866214][T21660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.017380][T21660] bridge_slave_0: left allmulticast mode [ 1985.034605][T21660] bridge_slave_0: left promiscuous mode [ 1985.056357][T21660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.205977][T22553] loop3: detected capacity change from 0 to 2048 [ 1985.236651][T22553] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1985.279644][T22555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1985.724528][T22558] loop6: detected capacity change from 0 to 1024 [ 1985.910875][T22564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1985.934630][T21658] hfsplus: b-tree write err: -5, ino 4 [ 1985.942779][T22564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1985.956714][T22564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1985.993234][T22564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1986.049369][T22564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1986.104386][T22570] loop1: detected capacity change from 0 to 512 [ 1986.115977][T22570] EXT4-fs: Ignoring removed nobh option [ 1986.146799][T22570] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1986.175659][T22570] EXT4-fs error (device loop1): ext4_clear_blocks:874: inode #13: comm syz.1.20738: attempt to clear invalid blocks 1 len 1 [ 1986.251478][T22570] EXT4-fs (loop1): Remounting filesystem read-only [ 1986.269079][T22570] EXT4-fs (loop1): 1 truncate cleaned up [ 1986.282519][T21660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1986.305701][T22570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1986.329697][T21660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1986.359407][T21660] bond0 (unregistering): Released all slaves [ 1986.452870][T22563] lo speed is unknown, defaulting to 1000 [ 1986.492943][ T6694] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1986.630181][T21660] tipc: Left network mode [ 1986.648959][T20209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1986.692230][ T6694] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1986.739357][ T6694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.797020][ T6694] usb 6-1: Product: syz [ 1986.834003][ T6694] usb 6-1: Manufacturer: syz [ 1986.851461][ T6694] usb 6-1: SerialNumber: syz [ 1986.905838][ T6694] usb 6-1: config 0 descriptor?? [ 1986.956648][ T6694] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1987.459179][ T6694] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input141 [ 1987.820358][ T7005] usb 6-1: USB disconnect, device number 42 [ 1987.926951][T22597] loop6: detected capacity change from 0 to 512 [ 1987.999033][T22597] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1988.080294][T22563] chnl_net:caif_netlink_parms(): no params data found [ 1988.159879][T22597] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 1988.233002][T22597] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.20751: inode #15: comm syz.6.20751: iget: illegal inode # [ 1988.253553][T22605] loop9: detected capacity change from 0 to 256 [ 1988.265580][T22605] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 1988.300257][T26332] Bluetooth: hci3: command tx timeout [ 1988.399410][T22597] EXT4-fs (loop6): Remounting filesystem read-only [ 1988.447400][T22597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1988.514132][T21660] hsr_slave_0: left promiscuous mode [ 1988.554687][T21660] hsr_slave_1: left promiscuous mode [ 1988.579186][T21660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1988.665562][T21660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1988.832076][T25039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1989.262121][T22593] loop3: detected capacity change from 0 to 32768 [ 1989.318426][T22593] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.20749 (22593) [ 1989.362555][T22625] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.20760' resets device [ 1989.421581][T22621] IPVS: persistence engine module ip_vs_pe_t not found [ 1989.454681][T22593] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1989.517192][T22627] loop5: detected capacity change from 0 to 512 [ 1989.526354][T22593] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1989.559373][T22593] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1989.600253][T22627] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1989.647353][T22627] EXT4-fs (loop5): 1 truncate cleaned up [ 1989.665604][T22627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1989.689325][T22636] loop6: detected capacity change from 0 to 512 [ 1989.716870][T22636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1989.740872][T22627] EXT4-fs error (device loop5): ext4_generic_delete_entry:2667: inode #2: block 13: comm syz.5.20761: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1989.764854][T22627] EXT4-fs (loop5): Remounting filesystem read-only [ 1989.774338][T22627] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.20761: Deleting old file: nlink 5, error=-117 [ 1989.800540][T22636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1989.841174][T22593] BTRFS info (device loop3): rebuilding free space tree [ 1989.850546][T22636] ext4 filesystem being mounted at /2055/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1989.891638][T22593] BTRFS info (device loop3): disabling free space tree [ 1989.939489][T22593] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1989.952112][T22593] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1989.967989][T22593] BTRFS info (device loop3): enabling ssd optimizations [ 1989.980723][T22593] BTRFS info (device loop3): turning on async discard [ 1989.989677][T22593] BTRFS info (device loop3): enabling disk space caching [ 1990.003025][T22593] BTRFS info (device loop3): force clearing of disk cache [ 1990.016121][T22593] BTRFS info (device loop3): use zstd compression, level 3 [ 1990.028365][T14800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1990.046474][T22636] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1990.060858][T21660] team0 (unregistering): Port device team_slave_1 removed [ 1990.139417][T21660] team0 (unregistering): Port device team_slave_0 removed [ 1990.217607][T25039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1990.359375][ T6220] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1990.524764][T26332] Bluetooth: hci3: command tx timeout [ 1990.947679][T22665] netlink: 116 bytes leftover after parsing attributes in process `syz.6.20770'. [ 1991.727646][T22563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1991.769062][T22563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1991.815605][T22563] bridge_slave_0: entered allmulticast mode [ 1991.857696][T22563] bridge_slave_0: entered promiscuous mode [ 1991.912467][T22684] sp0: Synchronizing with TNC [ 1991.971722][T22563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1991.998269][T22563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.050129][T22563] bridge_slave_1: entered allmulticast mode [ 1992.085190][T22563] bridge_slave_1: entered promiscuous mode [ 1992.186508][T22693] tipc: Enabled bearer , priority 10 [ 1992.399049][ T6694] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1992.461593][T22699] input input142: cannot allocate more than FF_MAX_EFFECTS effects [ 1992.555268][T22563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1992.604955][ T6694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1992.631155][T22563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1992.640055][T22705] loop1: detected capacity change from 0 to 256 [ 1992.654622][ T6694] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 1992.681754][T22705] exfat: Deprecated parameter 'namecase' [ 1992.711809][ T6694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.721736][T22705] exfat: Deprecated parameter 'utf8' [ 1992.750493][T26332] Bluetooth: hci3: command tx timeout [ 1992.773466][ T6694] usb 4-1: config 0 descriptor?? [ 1992.842363][T22705] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1993.248208][ T6694] wacom 0003:056A:00E3.005B: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0 [ 1993.294017][T22717] loop6: detected capacity change from 0 to 1024 [ 1993.363166][T21660] IPVS: stop unused estimator thread 0... [ 1993.372146][T22563] team0: Port device team_slave_0 added [ 1993.399083][ T6694] tipc: Node number set to 4269801488 [ 1993.440405][T22563] team0: Port device team_slave_1 added [ 1993.586735][T27267] usb 4-1: USB disconnect, device number 84 [ 1993.593851][T22721] loop6: detected capacity change from 0 to 256 [ 1993.595767][T22721] exfat: Deprecated parameter 'namecase' [ 1993.609379][T22721] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1993.650387][T22563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1993.671144][T22720] loop1: detected capacity change from 0 to 2048 [ 1993.680633][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1993.720784][T22720] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1993.787474][T22563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1993.802898][T22724] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1993.885998][T22563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1993.930593][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1994.005164][T22563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1994.316114][T22563] hsr_slave_0: entered promiscuous mode [ 1994.349466][T22563] hsr_slave_1: entered promiscuous mode [ 1994.395023][T22733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20800'. [ 1994.414356][T22563] debugfs: 'hsr0' already exists in 'hsr' [ 1994.434682][T22563] Cannot create hsr debugfs directory [ 1994.883309][T22744] loop6: detected capacity change from 0 to 512 [ 1994.973972][T22564] Bluetooth: hci3: command tx timeout [ 1995.015191][T22751] loop5: detected capacity change from 0 to 256 [ 1995.034906][T22751] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 1995.077192][T22744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1995.224153][T22754] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 1995.270242][T22754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1995.274564][T22744] EXT4-fs error (device loop6): ext4_readdir:222: inode #12: comm syz.6.20803: path /2070/file0/file0: directory fails checksum at offset 0 [ 1995.561747][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20808'. [ 1995.597413][T25039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1995.868586][T22765] can0: slcan on ptm0. [ 1995.886773][T22769] : entered promiscuous mode [ 1996.047325][T22764] can0 (unregistered): slcan off ptm0. [ 1996.708915][T22563] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1996.810963][T22563] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1996.859166][T22792] loop6: detected capacity change from 0 to 64 [ 1996.938551][T22563] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1997.021280][T22563] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1997.037140][T22798] loop9: detected capacity change from 0 to 256 [ 1997.207626][T22564] Bluetooth: hci3: command 0x0405 tx timeout [ 1997.248254][T22798] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1997.708092][T22781] loop5: detected capacity change from 0 to 32768 [ 1997.768143][T22781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.20816 (22781) [ 1997.911068][T22781] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1997.965573][T22781] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 1998.003957][T22781] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1998.221682][T22563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1998.367221][T22563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1998.429350][T22781] BTRFS info (device loop5): rebuilding free space tree [ 1998.480507][T22781] BTRFS info (device loop5): disabling free space tree [ 1998.525825][T22781] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1998.597444][T22781] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1998.636778][T21658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.644315][T21658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1998.689195][T22781] BTRFS info (device loop5): enabling ssd optimizations [ 1998.733648][T22781] BTRFS info (device loop5): turning off barriers [ 1998.745719][T21658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.753625][T21658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1998.808335][T22781] BTRFS info (device loop5): turning on flush-on-commit [ 1998.835721][T22781] BTRFS info (device loop5): enabling disk space caching [ 1998.868978][T22781] BTRFS info (device loop5): force clearing of disk cache [ 1998.876320][T22781] BTRFS info (device loop5): use zlib compression, level 3 [ 1998.941253][T22563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1998.971298][T22563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1999.469101][T14800] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1999.722804][T22872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20842'. [ 2000.283756][T22563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2000.425312][T22563] veth0_vlan: entered promiscuous mode [ 2000.479356][T22563] veth1_vlan: entered promiscuous mode [ 2000.507406][T22868] loop9: detected capacity change from 0 to 32768 [ 2000.552615][T22868] JBD2: Ignoring recovery information on journal [ 2000.606759][T22563] veth0_macvtap: entered promiscuous mode [ 2000.650911][T22563] veth1_macvtap: entered promiscuous mode [ 2000.671747][T22868] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 2000.730071][T22563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2000.833883][T22868] OCFS2: ERROR (device loop9): ocfs2_validate_gd_parent: Group descriptor #32 has bit count of 1024 [ 2000.933826][T22868] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2000.944906][T22563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2000.979575][T21658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.990096][T22868] OCFS2: File system is now read-only. [ 2001.012985][T21658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.024261][T22868] (syz.9.20839,22868,0):ocfs2_trim_mainbm:7629 ERROR: status = -30 [ 2001.128135][T21658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.152655][T21658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.313211][T22563] ieee80211 phy88: Selected rate control algorithm 'minstrel_ht' [ 2001.358594][ T7226] ocfs2: Unmounting device (7,9) on (node local) [ 2001.436141][T21658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.456714][T22563] ieee80211 phy89: Selected rate control algorithm 'minstrel_ht' [ 2001.467066][T21658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.596542][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.627202][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.296471][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2076.007996][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2089.180513][T22564] Bluetooth: hci1: command 0x0406 tx timeout [ 2122.033675][T26332] Bluetooth: hci3: command 0x0405 tx timeout [ 2141.717614][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2207.433949][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2273.146484][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2291.205127][ T85] ================================================================== [ 2291.214621][ T85] BUG: KASAN: null-ptr-deref in drop_buffers.constprop.0+0x89/0x340 [ 2291.223915][ T85] Read of size 4 at addr 0000000000000060 by task kswapd0/85 [ 2291.233005][ T85] [ 2291.235391][ T85] CPU: 0 UID: 0 PID: 85 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 2291.235447][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2291.235473][ T85] Call Trace: [ 2291.235487][ T85] [ 2291.235505][ T85] dump_stack_lvl+0x116/0x1f0 [ 2291.235565][ T85] kasan_report+0xe0/0x110 [ 2291.235607][ T85] ? drop_buffers.constprop.0+0x89/0x340 [ 2291.235662][ T85] kasan_check_range+0x100/0x1b0 [ 2291.235712][ T85] drop_buffers.constprop.0+0x89/0x340 [ 2291.235760][ T85] try_to_free_buffers+0x21c/0x2d0 [ 2291.235804][ T85] ? __pfx_try_to_free_buffers+0x10/0x10 [ 2291.235845][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.235902][ T85] ? __pfx_folio_referenced_one+0x10/0x10 [ 2291.235949][ T85] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 2291.236000][ T85] ? __pfx_invalid_folio_referenced_vma+0x10/0x10 [ 2291.236053][ T85] filemap_release_folio+0x219/0x280 [ 2291.236098][ T85] shrink_folio_list+0x28a5/0x4800 [ 2291.236158][ T85] ? __pfx_shrink_folio_list+0x10/0x10 [ 2291.236205][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.236266][ T85] ? trace_mm_vmscan_lru_isolate+0x1bc/0x230 [ 2291.236315][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.236364][ T85] ? isolate_folios+0x26ae/0x2f20 [ 2291.236448][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.236499][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.236552][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.236603][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.236660][ T85] evict_folios+0x79c/0x1b30 [ 2291.236722][ T85] ? __pfx_evict_folios+0x10/0x10 [ 2291.236768][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.236819][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.236869][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.236922][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.236976][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.237031][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.237089][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.237139][ T85] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 2291.237186][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.237236][ T85] ? sc_swappiness+0xd4/0x190 [ 2291.237284][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.237339][ T85] try_to_shrink_lruvec+0x585/0x9b0 [ 2291.237400][ T85] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 2291.237459][ T85] shrink_one+0x3e3/0x7a0 [ 2291.237508][ T85] ? shrink_node+0x26ab/0x3d80 [ 2291.237561][ T85] shrink_node+0x26cb/0x3d80 [ 2291.237611][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.237668][ T85] ? shrink_node+0x241b/0x3d80 [ 2291.237725][ T85] ? __pfx_shrink_node+0x10/0x10 [ 2291.237776][ T85] ? lock_acquire+0x2cd/0x350 [ 2291.237840][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.237891][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.237954][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.238009][ T85] ? balance_pgdat+0xbb8/0x1a50 [ 2291.238060][ T85] balance_pgdat+0xbb8/0x1a50 [ 2291.238113][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.238172][ T85] ? __pfx_balance_pgdat+0x10/0x10 [ 2291.238224][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.238288][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.238338][ T85] ? trace_sched_exit_tp+0xd1/0x120 [ 2291.238385][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.238435][ T85] ? __schedule+0x11a3/0x5de0 [ 2291.238480][ T85] ? debug_object_free+0x295/0x550 [ 2291.238536][ T85] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 2291.238619][ T85] ? lock_acquire+0x2cd/0x350 [ 2291.238686][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.238738][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.238792][ T85] ? __pfx___might_resched+0x10/0x10 [ 2291.238843][ T85] ? set_pgdat_percpu_threshold+0xd0/0x360 [ 2291.238906][ T85] kswapd+0x590/0xb90 [ 2291.238963][ T85] ? __pfx_kswapd+0x10/0x10 [ 2291.239015][ T85] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2291.239078][ T85] ? lockdep_hardirqs_on+0x7c/0x110 [ 2291.239126][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.239178][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.239228][ T85] ? __kthread_parkme+0x19e/0x250 [ 2291.239302][ T85] ? __pfx_kswapd+0x10/0x10 [ 2291.239352][ T85] kthread+0x3c5/0x780 [ 2291.239391][ T85] ? __pfx_kthread+0x10/0x10 [ 2291.239431][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2291.239481][ T85] ? rcu_is_watching+0x12/0xc0 [ 2291.239534][ T85] ? __pfx_kthread+0x10/0x10 [ 2291.239574][ T85] ret_from_fork+0x675/0x7d0 [ 2291.239640][ T85] ? __pfx_kthread+0x10/0x10 [ 2291.239679][ T85] ret_from_fork_asm+0x1a/0x30 [ 2291.239752][ T85] [ 2291.239767][ T85] ================================================================== [ 2292.258140][ T85] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 2292.274789][ T85] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 2292.285014][ T85] CPU: 0 UID: 0 PID: 85 Comm: kswapd0 Tainted: G B syzkaller #0 PREEMPT(full) [ 2292.299502][ T85] Tainted: [B]=BAD_PAGE [ 2292.307195][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2292.319843][ T85] RIP: 0010:drop_buffers.constprop.0+0x90/0x340 [ 2292.328143][ T85] Code: 4d 8b 76 08 4c 39 f3 0f 84 84 00 00 00 e8 f8 28 72 ff 4d 8d 66 60 be 04 00 00 00 4c 89 e7 e8 d7 cc d9 ff 4c 89 e0 48 c1 e8 03 <0f> b6 0c 28 4c 89 e0 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 2d [ 2292.353713][ T85] RSP: 0018:ffffc9000239f0b0 EFLAGS: 00010216 [ 2292.363421][ T85] RAX: 000000000000000c RBX: ffff888057ccd3e0 RCX: ffffffff817b40ef [ 2292.373980][ T85] RDX: ffff88801ef18000 RSI: ffffffff82246d87 RDI: 0000000000000007 [ 2292.383832][ T85] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 2292.396002][ T85] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: 0000000000000060 [ 2292.407168][ T85] R13: ffffea0000a77880 R14: 0000000000000000 R15: ffffea0000a778a8 [ 2292.421654][ T85] FS: 0000000000000000(0000) GS:ffff888124a07000(0000) knlGS:0000000000000000 [ 2292.433041][ T85] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2292.440800][ T85] CR2: 000055e34233c168 CR3: 0000000030ecb000 CR4: 0000000000350ef0 [ 2292.452110][ T85] Call Trace: [ 2292.456741][ T85] [ 2292.460721][ T85] try_to_free_buffers+0x21c/0x2d0 [ 2292.466942][ T85] ? __pfx_try_to_free_buffers+0x10/0x10 [ 2292.473457][ T85] ? rcu_is_watching+0x12/0xc0 [ 2292.481014][ T85] ? __pfx_folio_referenced_one+0x10/0x10 [ 2292.489465][ T85] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 2292.498143][ T85] ? __pfx_invalid_folio_referenced_vma+0x10/0x10 [ 2292.508751][ T85] filemap_release_folio+0x219/0x280 [ 2292.515518][ T85] shrink_folio_list+0x28a5/0x4800 [ 2292.521730][ T85] ? __pfx_shrink_folio_list+0x10/0x10 [ 2292.528687][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.536797][ T85] ? trace_mm_vmscan_lru_isolate+0x1bc/0x230 [ 2292.546022][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.553716][ T85] ? isolate_folios+0x26ae/0x2f20 [ 2292.562296][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.569891][ T85] ? rcu_is_watching+0x12/0xc0 [ 2292.576461][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.584428][ T85] ? rcu_is_watching+0x12/0xc0 [ 2292.590153][ T85] evict_folios+0x79c/0x1b30 [ 2292.597199][ T85] ? __pfx_evict_folios+0x10/0x10 [ 2292.604325][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.611199][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.619676][ T85] ? rcu_is_watching+0x12/0xc0 [ 2292.628426][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.636695][ T85] ? rcu_is_watching+0x12/0xc0 [ 2292.642770][ T85] ? rcu_is_watching+0x12/0xc0 [ 2292.648850][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.658281][ T85] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 2292.666649][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.673599][ T85] ? sc_swappiness+0xd4/0x190 [ 2292.681381][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.690280][ T85] try_to_shrink_lruvec+0x585/0x9b0 [ 2292.696659][ T85] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 2292.704506][ T85] shrink_one+0x3e3/0x7a0 [ 2292.710852][ T85] ? shrink_node+0x26ab/0x3d80 [ 2292.717328][ T85] shrink_node+0x26cb/0x3d80 [ 2292.723675][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.731745][ T85] ? shrink_node+0x241b/0x3d80 [ 2292.738142][ T85] ? __pfx_shrink_node+0x10/0x10 [ 2292.747559][ T85] ? lock_acquire+0x2cd/0x350 [ 2292.755567][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.763899][ T85] ? rcu_is_watching+0x12/0xc0 [ 2292.770455][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.780588][ T85] ? balance_pgdat+0xbb8/0x1a50 [ 2292.789076][ T85] balance_pgdat+0xbb8/0x1a50 [ 2292.794836][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.803088][ T85] ? __pfx_balance_pgdat+0x10/0x10 [ 2292.814616][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.823431][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.832635][ T85] ? trace_sched_exit_tp+0xd1/0x120 [ 2292.840425][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.848796][ T85] ? __schedule+0x11a3/0x5de0 [ 2292.856424][ T85] ? debug_object_free+0x295/0x550 [ 2292.863618][ T85] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 2292.871637][ T85] ? lock_acquire+0x2cd/0x350 [ 2292.879699][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.887920][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.897771][ T85] ? __pfx___might_resched+0x10/0x10 [ 2292.904357][ T85] ? set_pgdat_percpu_threshold+0xd0/0x360 [ 2292.912419][ T85] kswapd+0x590/0xb90 [ 2292.917525][ T85] ? __pfx_kswapd+0x10/0x10 [ 2292.925059][ T85] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2292.932520][ T85] ? lockdep_hardirqs_on+0x7c/0x110 [ 2292.940823][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.950326][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.959518][ T85] ? __kthread_parkme+0x19e/0x250 [ 2292.967610][ T85] ? __pfx_kswapd+0x10/0x10 [ 2292.975339][ T85] kthread+0x3c5/0x780 [ 2292.982803][ T85] ? __pfx_kthread+0x10/0x10 [ 2292.990154][ T85] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2292.996615][ T85] ? rcu_is_watching+0x12/0xc0 [ 2293.003578][ T85] ? __pfx_kthread+0x10/0x10 [ 2293.009661][ T85] ret_from_fork+0x675/0x7d0 [ 2293.014831][ T85] ? __pfx_kthread+0x10/0x10 [ 2293.021274][ T85] ret_from_fork_asm+0x1a/0x30 [ 2293.028682][ T85] [ 2293.032366][ T85] Modules linked in: [ 2293.040731][ T85] ---[ end trace 0000000000000000 ]--- [ 2293.058115][ T85] RIP: 0010:drop_buffers.constprop.0+0x90/0x340 [ 2293.069061][ T85] Code: 4d 8b 76 08 4c 39 f3 0f 84 84 00 00 00 e8 f8 28 72 ff 4d 8d 66 60 be 04 00 00 00 4c 89 e7 e8 d7 cc d9 ff 4c 89 e0 48 c1 e8 03 <0f> b6 0c 28 4c 89 e0 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 2d [ 2293.124597][ T85] RSP: 0018:ffffc9000239f0b0 EFLAGS: 00010216 [ 2293.134482][ T85] RAX: 000000000000000c RBX: ffff888057ccd3e0 RCX: ffffffff817b40ef [ 2293.155712][ T85] RDX: ffff88801ef18000 RSI: ffffffff82246d87 RDI: 0000000000000007 [ 2293.187276][ T85] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 2293.216502][ T85] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: 0000000000000060 [ 2293.237720][ T85] R13: ffffea0000a77880 R14: 0000000000000000 R15: ffffea0000a778a8 [ 2293.266562][ T85] FS: 0000000000000000(0000) GS:ffff888124a07000(0000) knlGS:0000000000000000 [ 2293.301571][ T85] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2293.325310][ T85] CR2: 000055e34233c168 CR3: 0000000030ecb000 CR4: 0000000000350ef0 [ 2293.348270][ T85] Kernel panic - not syncing: Fatal exception [ 2293.356678][ T85] Kernel Offset: disabled [ 2293.365004][ T85] Rebooting in 86400 seconds..