last executing test programs: 5.637767615s ago: executing program 0: socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = mq_open(&(0x7f0000000140)='freezer.state\x00', 0x40, 0x3f, &(0x7f0000000180)={0x0, 0x400, 0x2d0000000000}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000800)={'tunl0\x00', {0x2, 0x0, @empty}}) 5.517446633s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000005c80)=ANY=[@ANYBLOB="100004"], 0x10}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e"], 0xfdef) 5.228470729s ago: executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x5, 0x401, 0x9}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000001580)="c49a1ec6e4916d943bb29cf4f6dbf6d99e721e4fd13c9791e7f27ac0d311e4c516933c9fe9f45645c6168636e2b59202fd16c02935c904bc9e455aab0cc35157aae34fb729b5e9670d8e24bac2c1e3305dd6e46aa9e75db20c027a07ec0260a7d0c9a818ba6cb09a8365b9fb385bd9bc3555f6cf5b7dfced9ab085dac1e91d6d75948db713", 0x85}], 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "23fcb273b504badcdb52587dbdfe7da40ef525"}) 4.092445274s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffffffffffe65) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) writev(r0, 0x0, 0x0) 3.150552296s ago: executing program 2: r0 = memfd_create(&(0x7f0000000080)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)w\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x86p\x98\x9d\x1a\x8b\x88\xff\x05\x86\x9d\xe5.\xfc\xa2v\xb1\xff\xc6\xbd\xfa\xa5\x96|\xcb\xa5[\xabZ\xbd\a\xa1\x8a\xd0\x8b\xebG\xde\x82\xdb\xe3\x9f\x11\xea\x0e}\xeb\x8cX\xeft$\aW\xe7\xe5cL\xf4\xbd9\xcd,\x0fd{', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 2.732918314s ago: executing program 1: r0 = open(0x0, 0x40401, 0x0) dup2(0xffffffffffffffff, r0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x5451, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') r1 = msgget(0x2, 0x3be) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x8906, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_SET(0x0, 0xb, 0x0) shmctl$IPC_RMID(r1, 0x0) getresuid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x3a}, {0x0, 0x6616, 0x0, 0x20}, {0x0, 0x0, 0xa6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d2, 0x3c}, 0xa, @in6=@remote, 0x0, 0x0, 0x2, 0xa, 0x7, 0xcd20, 0x7f}}, 0xe8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) 2.620866117s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d011fe4"}, @main]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000001a80)={0x3}) 2.278276815s ago: executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x5450, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1}, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(r0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 2.165257655s ago: executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0xb) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000480)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0xfb, 0x15, 0x6, 0xff, "8d99866a4e7e665205a6b6372c4f1863"}, 0x15, 0x0) read$eventfd(r1, 0x0, 0x0) 2.077209489s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.998982688s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000005c80)=ANY=[@ANYBLOB="100004"], 0x10}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e"], 0xfdef) 1.77403934s ago: executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x5452, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x116, 0xa, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8906, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = eventfd(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r2) ioctl$TIOCGSERIAL(r0, 0x5450, 0x0) 1.686163726s ago: executing program 2: memfd_create(&(0x7f0000000b40)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba\x1b\xc7%\x88 \xeeQR\x9f\x81\x8b\xae@\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x05\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8dn\xf4i\xfd\x98\xbc\x19U&\xd7e\xb7m\xcb%K\x1d\xe7_\xde\x87\xbf\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x17{\x02\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\x01\x00\x00\x00\x00\x00\x00\x00\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bG\xaf\xb6\xf4WzZ\xbf\xed\xed\xcd\xeb\x8a:\x9e\x86\x87\x8c\x94\xd0\x13\xdb\x1cp\x82Z\xf0\xe9\x04;(\x12\xfd\xd1W\x90C\xc7\x13y \x96[)\xee\xc1\xa2\x04\xf8xws\x1f\nOZ}\x173\xff?\xcdL+\xaa\xcf0\xa6\xdd$\x10\xeae\xb6p6\a\xa8\x97:\a\xa8\x8e\xea\xa4=\xc3X\xf6\x92\xcb\nd\x00\xca\x96L\xf8\xca\x91|\xf0\x1b\x91\xe1\xe7\xf8\buR\xff\xe10\x03.\xd5\xda5\\\xc1x\xd2\x8a\xb2\xc2;\xce\xf0\xd0\x0f\xff\x9a\x10\x168d\xa5\xf7r\x92\x93gk\xa5\xe9F\xcb\x11t\x11\x83\xe7\xe8\"P_\x01\x1c\x86DD\xa9\xe3\x10\xcdP\x9e\xa1\xf6\x00\xa51\xd1\x11\x96Je!q\xaaB\xcc`m\x19\xda\xd8\xd6X>\xe5\x1c^\xb8\x89\x87 \xdd4\x95\x9ae\x9b\xd8\xa7\x86y\xc3\x1a\x11~\xc8\xcd\xbe\x965\x03\x11\xd0)\x1aW\xe7\xe9\xa9\x10Z\xd5F\x1f\xdd&r.\x86\xccVr\x9a\xbb\xcb\x17\x01\x17ZS\xce\xd3\xc5~\xab\x01\xe9l\xc0w%\xde\x81R\xdc;\x85\xe9$\x83\x91\xd0\xc7\xbc\x8d\xb5\x02\xe4l\x87z\xf70\x89)\b}N\xc2\xf2J\x16:\xea\x9f\xaf~D\x06\xee\xe2\x83\xdd\x95\xc9S\x8ez\xc2\xb9\\\xbbO\xa3AN\xf5I\ra\x87\x87O4\xb3\xe2EbY\x01\x04\x8cX\xda1&g*\r@\x9b8p\x1a\xde\r\n\xcc\xb0\xf2\xcf]\xff\xbe\xe9\xb1\xc5S*\xe9\x10T\x8e\xc0r\x82\xc2oo\n\xc2\xaf\xaa\"\x93\xc8\xe8R\x84Z7g \x80Y\xda<\x94T\x99\n$LyC\xa6}u#%\x1a\x1e\x8bxLTS\x97\x88\xdf|\xac/$\xca}\xe0\x101\xa1\xa0\xe8\xf3\xb2s\x9fT\a\x1c\aBX\xe8\x12=\x139\xc9\v\x01\xf6\x11\xc8\x96;X\x10;k\xf12\x87uH\x1f\xba\xc8\x8a0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) rt_sigreturn() r2 = getpgid(0x0) process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/21, 0x7ffff000}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/136, 0x7ffff000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 1.455715637s ago: executing program 2: eventfd(0x0) r0 = memfd_create(&(0x7f0000000680)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\xefGOA\xc8\x80kR\xfc\xcb[\xdc\xdem\xbe\x7f2\x11)W.\xd1=\xcf\xbf\x81\b\x8d%K\x1d\xfb_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+\x00\x02X\xb7KV\x90\xc3D\x82`\xea\x16\xc6\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x98\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\a\x00\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc3\x0e\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\x8d~\x01\t\x00\x00\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xcd\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/\x00\x00\x00\x00\x00\x00\x00\b2.{\xc1\xbe\x9bth~\xcb\xb9\x16\xb2\xf9>\xfa\xea\x86\xe7c\x8b-\x10PE\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\xdem\xe3)q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{U\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x8bz\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xaa\xa4\xb67\x89\bD\x93L\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xf6\xf6\xa6\x88\xfd\xc2\xa9\x14\xf3\xe1}\r.\a\x97~A\x16lR\x96\xf0\xaa,;+\xa6\x1eD\xbb1\xe3\xb7-\x96\xc1\x19\x85\xe8\x9b\xfb4\x97\x9d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xbf\xf5\x8b9:X\b<\xf2|\xd7\xd9\xe1\xd7\x02\xa2\xadP#\x15W\xab\xeb\x03f\xac\x86\x9d\xd8\xb3\xb2\x9b\xad\x7f\x86l\xad=cP\xba\xdf\xd7x\xbd\x93\xc1\x92#\\\a\x00\x00\x00\x00#\x94\v\xbe,\x13\xdf\xc6\x94!\x86\x9f\xbat\xad\x7f\x90\x8e\xf3\xe8v<\x1aY8\x92K\xab=\xa6jS\xf2\xdf\xdc\xc7\xf7\x87\xa5\xb1\xe5\x86\xdb\x02\"0\x01\xaf|\xc0\xb0E[\x05\vB\xde\xc5\x90V\xc0j\xc0!r!\x9b\xd8\x8b\xef+\x98\x86\xdb\x11ck\xd99\xf2\x88\x91-X{q\x84VkzD\xe7\xe0\xe2;\xccI\xcfW\xa2\x13)\x9fV\x99\xf1\tPS\x1e&\xab0\x1ax\x83A=\xa3\xa4So\xfe:&\x01\xfd)\x8c\xab%\x1a\xcd\xd87\xee\xa3\xd9\xd0\\p\xe6\xc3j\x00\x00\x00\x00\x00\x00\x00\x80\x89\xbb\xc2\f\xcd\x15 f3\x05\xf7\xe7\x85\xacu\xd56X\xda\xe1\xbdq\x7fk\xc6B\x8e\xd77_\x1c\x97\x85\x83\x02\xce\x92@\xd3\x9d:c\x1bS\x85\xcaj*\x04}\xd7\x9a\xa3i\x89\x027@', 0x0) r1 = dup(0xffffffffffffffff) fstat(r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_LSEEK(r4, 0x0, 0x0) getsockname(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000000c0)=0x19) close(r5) r6 = dup2(r2, r2) getdents64(r6, &(0x7f0000000280)=""/220, 0xdc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8901, &(0x7f00000001c0)) 1.370011738s ago: executing program 2: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") getsockname$unix(0xffffffffffffffff, &(0x7f0000002600), &(0x7f0000001380)=0x1fa) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000380)) r2 = ioctl$NS_GET_PARENT(r1, 0x5450, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x102, 0x7, 0x0, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() accept$unix(0xffffffffffffffff, &(0x7f0000004040)=@abs, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r6 = dup3(r5, r4, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x8901, &(0x7f0000000100)={'sit0\x00', 0x0}) write$cgroup_pressure(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000002d80)={0x2, 0x0, @loopback}, 0x10) readv(r0, 0x0, 0x0) 1.259879765s ago: executing program 0: creat(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000"], 0x0}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000016c0), 0x3af4701e) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000dc74585ecc0849004301159a295af4e5390db39f5fdd6f16db7479b7c858ac5dc1a8d3f3822c256b68fe3bba6726657cba7cbaa9e55c0e280508718ad4fece0785379099ec49272c436cf2c105b04b6d96373ad118456ee88a51334be8bfaa28ccad7147f8c08198fe55598cfcaf54de04dc73c162461dad82f79e7193505dbed4ed7bed916747fd991d7e3b85ec9fee941656c155670df85a8a9a00685781844ecd0f590b8fcf131b8068db65c3c7aab110d560fd9dad78", @ANYRES16=r9, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab000000000008000b000000000006001100ffff0000"], 0x4c}}, 0x0) 1.21027613s ago: executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x5, 0x401, 0x9}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000001580)="c49a1ec6e4916d943bb29cf4f6dbf6d99e721e4fd13c9791e7f27ac0d311e4c516933c9fe9f45645c6168636e2b59202fd16c02935c904bc9e455aab0cc35157aae34fb729b5e9670d8e24bac2c1e3305dd6e46aa9e75db20c027a07ec0260a7d0c9a818ba6cb09a8365b9fb385bd9bc3555f6cf5b7dfced9ab085dac1e91d6d75948db713", 0x85}], 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "23fcb273b504badcdb52587dbdfe7da40ef525"}) 849.635279ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}}, 0x0) 829.37287ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000005c80)=ANY=[@ANYBLOB="100004"], 0x10}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e8000"], 0xfdef) 785.44995ms ago: executing program 1: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x46) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r4 = dup(r3) write$P9_RGETATTR(r4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) socket$inet(0xa, 0x2, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) rt_sigreturn() shmget(0x3, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) msgget$private(0x0, 0x0) 659.336335ms ago: executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x14, 0x0, 0x0) rt_sigreturn() mlockall(0x0) msgctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 523.684682ms ago: executing program 3: futex(&(0x7f0000004580)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") r0 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001340)={0x10}, 0x10}], 0x1}, 0x0) 516.372637ms ago: executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x0, 0xe4, 0xc6, 0x5a, 0x0, 0x12d1, 0x1442, 0x7268, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0x6, 0x3}}, {{0x9, 0x5, 0xa, 0x3}}]}}]}}]}}, 0x0) 439.229009ms ago: executing program 1: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") poll(0x0, 0x0, 0x64) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5421, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r1, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) setpriority(0x0, 0x0, 0x0) 388.260185ms ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fallocate(r1, 0x0, 0x0, 0x8020003) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) dup3(r3, r2, 0x0) 307.292001ms ago: executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 289.612255ms ago: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000005dc0)='./file1\x00', 0x480, &(0x7f00000000c0)=ANY=[], 0x1, 0x5e05, &(0x7f00000119c0)="$eJzs3X2QHOWZGPDumVntrlYfK1k2KyTEYoQdccEWKBDLd0Qb5+zYjmxkYQEWp5NkWNk6C0nWBwLpEgTkMMFOSlVQB4E4pQOXc5W6SnDpEuI7pUrGGF/5qihkx39w5Ouow/njfER1ljgiOd6r3e3enentt3t2ZlZI+Per2p15e9553ufpeae/dnc2AgAA4JfCi7+z981PX/rRHzwwfOa+j//RXfdHfdWx5T1ph/7k9p63K0Nm0oofnmt4ZbtrA2O32XlxyR8verP/wbWfemT1x3645U8WDC1bPnzDt47d9NCDz9/48+cff3Jt2TjpfLp6sh3/VRxFy14/9vhD3/vTS0aXxaPjx/2HowUL4oXfWRBnQqw8G0XRnRN5Nj547MyqbaO393+1u2H5/EwQ8/2XW08yzw5t/vzTJ7409L1jg7tX/fT09bsOT3aJe+rmUxTN21L//K4oinqTr1HpbBtIn5zcrouiaHbd8z5UkteV2QXd+f2uCbSXJrezktu+kvHSx6/ItGslz4sy/WrF6XZMZYbjZ2XXX3ZjNFPSOuclt88lt1dPM041/YqjShzVJtLfEU/OkajudYujeGxu90y0K2PtaKIdZdtxpl3JtKtdmbrGxk1WbDWOG5en/TLL081xLVl+Rf22Osf6wPLFyW1P8kZ9K21H2Tvj+qbcmawjqsvr1PmaGAGVwHsvXT6RXvJi9CXL+uKFU54zkiN97NT3t25845WDz/UH8oifjZP4cUvxh4afOvHN244vHgjF31JJ4ldaiv9i9aWz3zg9MCcY/0gav9pS/A2/+MnDD9x8YFFw/ZxK10+tpfjLvzbn0JkD67sHQ/GPpvF7Wop/w6Zlqy87vf/uYP4r0/XT21L8Hz+64tymI98+HowfpfFntxT/1aeeWVpd/NjJYPwT6frpayn+LaueWPPJJQ8+GVz/L6fx57YUf+PJh7bsfvqFFcH5uS5dP/0txT+75kevnetf+0xo2xkfPd97WIB3lnclx1gPJ+1WzzPH/EXredSdLzwxWBs/5puTfM1tPWypuO7cBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa9dia//Tl+vZVf3n3hpP/edn2WtLurkVRHEXRG9Xxdrp8VhTFvVEU7d23dc++7Tu/MPhbu/bv2bl1x+DWfYPDO/ftuXfw7/3dwT3Du3dsvXf00ZXXrBp/3sKxaFG0ML5sSi4jIyMjURQN1i9Lx/u9Tzz7/zY8+defi6KV7/7Rslqwng/+99c+uijne0Y8NLLu31z/6MFZfzF/fEF/kld/KK/+xmVpBn1DL//ZR557ZTSv9xTl9fhLt/7fhoTGFkzGSVS6o8rYne54dm4eE1lP5jO2vmrbtu8YXlm+fuPA+n3/C394+j/es+Ffjq/fnmAdTa7f0bVaG3nkZw+8//BHhj98Ab/uZeu7roSx/NL115Os73lJXfMCdVUCdd09+Oqpf/Uf/us3Dkcraz+7fOrYZXV1JROgK17c1LjpCLPjBQ19e5L+6SuePu+D++7a/cG99x68ZvtdW78w/IXhnatWXb/62lXXXrd61QfHSh//3rH60/Hf32T9c5JIc+IluestuzQd9/Kx79UoSTu9qbvTqCvqG7/NrOe0e7bqvuSxvnjhlFgjOdLHTn1/68Y3Xjn4XOidFz87PmJvNHf8Nl4a6Lkj88TqRMJ545+f9+Wu3+3ZkX5v7n1ZllfZvBrNq3xe1WdUsB176cqHf/b0V/717U1sL+q6juWX5jl79O1ybVT3vp26rvLqauL1GcpbD3dcs+cP792+8UjZ9rz+lan/nhEPjfzvpfGn9u/9sz3jC87L/rI+oRb3lxNZT+Yztr56ktfjQl2/3VE1qasvN6/18dM3vv+u478ykd+sWdE9W/ft23Pt+PeLta4/nzV/0fb7l1w2pa7rxr+Xbfcvz7RLt/uV/PrKtvvZcSb758cbzLT7ompL+4kNv/jJww/cfGBRcD9xqtn9xG83tKpt7icqgff7I3/99cE3b//sm2Xz6aa9S+5blPM9W97QyLf/4Fev/fCtN39sfMF52Q7VJ9Tidmgi6ySfdH2NbYeuu3DqePte54Y3Yjw0cvm33nfLuTNf/sz4grL1O9E7b/2uKt/OVwN13d713gWP/nTJezs3f/du/psrPzB7zoUzf0cTqPQk67cnsH4nsk7yqdav3w/csWvHnePtC/e4bVx3yflPut/Ze+/BL23dsWN4z97m6mp2f5qOk13Lre5P073HwpK60tdrsq6Zu9PM+mr2/Zbmf2cmRqvvN4DU5H5hVsPy7PYzve63bF604QNf+e5L8eD4/rJT11vTcS7N7Mpbvd5adp703ky78TypFtXVPW7qedLYU8rOk7LjlJ0nXZlpl5/HPJxbSej160r2vHnXTTP51kYjhObHQBJ/IGmnx5vLPhBdX33uqk/EQ83Nj2aPp9Nx/k5mBbV6PF02P5ZH+Xl1en68L/Ok8tf7SG5mPYHXo+z1Xt4QaGSk3fPy/kDW6Xl5XxS3FH9o+KkT37zt+OJg/C2VJH6lpfgvVl86+43TA3OC8Y+k8WstxV/+tTmHzhxY3x2MfzRdPz0txb9h07LVl53ef3cw/so0/96W4v/40RXnNh359vFg/CiN39dS/FtWPbHmk0sefDIY/+U4GWf0vRtFx86s2jbejqOuZP6neYy2o8PRRP+uhjyjONPO1BFV6x+vjP+sd2KAahw3Lk/7ZZanddSS5VfU5ZhnQ2B5+q7tSd7Yb6XtKHuneHm6eUrzOhXY/5wvlbpjj7zlZdcnO+WN1wd+r76d/vw/nQPdtfHX7rrM+irbf2S33mm84HXYwCWMsuOFqT9/m93S++/Vp55ZWl382MngddUTzV5X3d3Qml1yXbXdfIPbixPp9rS97dFAKP7Lafz29gfB+Mn+oGyeXZVpl86zrvzxyuZZ9jilL5rbUt0bTz60ZffTL6wIzrN142/48nn2WENrbuk8a+/n0sF59mzckfURjL+uM8c1wXmWHNeUzbOrM+3251nj8einktt7Jhf9/7SUVuo+u+ZHr53rX/tMcJ4dbXae/X5Dq790nrV3fBt8nSaOb7PH571NxW/++PziPv5s+vhwol16fFjJtPOPD5Mf587U8eH6wPLpHh/2TbkzWUd0MR4fBrYzAFDkB4/c+3/q2+n5f7rvTs//v5t5Xrvnldnfh0p16rwyGP9oZ85XgsepE+crM32+NdPH2TN7vjXz19kv7uP4mb8u1D+j55XOQ5J2lL0zznkIAABvhyv+3dd/vb591V9GY+f/E7/3lvz9/wtpO/N857mB+OftPHemr5M4j87orW/M/HWwmb5O5TqA6wDlXAcAAHhn2Lxtz/Dw3t1b7xjevH3n9n0Ty7vGzpym/p7q309u16ULDk/2jwp+f3pdpj0ZP7//Z3L6Rzn5fCjQP6SWnMB9/o4vXrf5zuG7p1t/aLyy+vP6F9WfPb8I1b860D+k3fpD45XVn9e/qP6bg/Eb8/lwoH9Iu/WHxiurP69/Uf2fzY+/Jsrk86uB/iHt1h8ar6z+vP5F9Wf/Hiz0+v9aoH9Iu/WHxiurP69/Uf23BOM35nPjZP9zoWth9dqt/8bS/Jqvp6j+W4PxG/P5B4H+IeH6Q/k1N15u/XFxPUX13xaM35jPmnSkJq8Ptfv6rynNr/l6CuqvfC4YvzGf9EN3sv1D2q0/NF5Z/Xn9i17/jcH4jfn8w0D/kNL6u7L5NTdeWf15/Yvqvz0YvzGfjwT6h7T7+ofGK6s/r39R/b8RjN+Yzz8K9A9pt/7QeGX15/Uvqn9TMH5jPr8e6B/Sbv2h8crqz+tfVP9vBuM35vPRQP+QKfWnP49osv7QeGX15/Uvqn9zMH5jPh8L9A9p9/UPjVdWf17/ovq3BOM35vOPA/1D2q0/NF5Z/Xn9i+rfGozfmM/HA/1D2q0/NF5Z/Xn9Z9fCnzv++WD8xnw+Eegf0m79ofHK6s/rX/T63xGM35jPJwP9Q9qtPzReWf15/Yvqz37eYaj+fxLoH9Ju/aHxuqKR+4rGzaunqP7hnP5RTj5rA/1D2q0/NF7Z65/Xv6j+bcH4+Z8bkO0f0m79ofHK6s/rX1T/F4LxG/P5dKB/SLv1h8Yrqz+vf1H9XwzGb8znpkD/kHbrD41XVn9e/6L6twfjN+azLtA/pN36Q+OV1Z/Xv6j+3wrGb8znM4H+Ie3WHxqvrP68/kX1fykYvzGf9YH+Ie3WHxqvrP68/kX17wjGb8zn5kD/kHbrD41XVn9e/6L67wrGb8zns4H+Ie3WHxqvrP68/kX17wzGb8xnQ6B/SLv1h8Yrqz+vf1H9u4LxG/O5JdA/pN36Q+OV1Z/Xv6j+3cH4jfncGugf0m79ofHK6s/rX1T/l4PxG/O5LdA/pN36Q+OV1Z/Xv6j+PcH4jfl8LtA/pN36Q+OV1Z/Xv6j+vcH4jflsDPQPabf+0Hhl9ef1L6p/XzB+Yz63B/qHTLf+nibHK6s/r39R/fuD8Rvz+Y1A/5B2X//QeGX15/Uvqv/uYPzGfDYF+oe0W39ovLL68/oX1X8gGL8xn98M9A9pt/7QeGX15/Uvqv+eYPzGfDYH+odM1L9vz/Dw5v2779y6b3jzzl13Du/dfGDP9n37hpMDtXb/riz8d0Fv8x+yUKjh/TE+Sbbv3Du8Z+r2u7dw/tbPiWjsz57G/2yuJ35PU/2zH3vd6qy5UOZ7V1QrXF+XZtrzk8+jnR/4PNps/zTskrE7Uz+PNjtsreRzXMu2T9nxQ9unuKB/3vY1tD0r2/9Ne/tXOr97CuvPLu5O/rCvO353U/2jgv/v1tx8be/vToPz9eXm5mv2c9fL5mu2/3Tna1+b8zU7fmg+VQr6Fx0PNTtfNwb6p5qfn3Gw3rx5Nd3/M5iGndb/Gcx8m6KF/2XQ/Puhvb8jD74fkqTL3g/Zv+Muez9k+0/3/dDb5vshO37Z+yGvf9H5cbPvh1sD/UOanw/tfW5BcD6sbG4+ZP+PVdl8yPaf7nzoaXM+ZMcvmw95/YuuFzY7Hz4b6N+s5udHe58rEpwfW5qbH9n/J1E2P7L9pzs/4jbnR3b8svmR17/o5ynNzo/PBPqnGvaf2/aOndRv37pj+8HML2D0J/vPt3t/eF72y3/za3/+1vi3JI/KlDzKjifiTB4LkkwWhP7vYSDvO/7bv9/w3Z9/5etRtPLd1aXhvCdTnvyWEQ+NLLxv+Tdve8/Jj4zmXynMf6Jn+n+LS/7fcbZ/Wk9tx669+35l2679O5v9jati6eehVCbaM/R5KMnCapOfbxL6e4Lpfr5J15Q7F6amP98E4B1i/tFn59a308//T/dHA8m2rzfZAKbLmz/Obu/z9YLH2UeaO85eka235Dg72z+tt9nj7Eqbx9nZ8cuOs/P6F/3eXrPH2Z8O9J+uxnkyOkHG5sfw5gO79tT/TlwT86Srvpk+1uz/re18vjP7f3zbz29mP7exVc3nP7OfCznz+c/s/wGe+fxn9v88t+q8nS8lHxZZ9vmROedRc+obob9Ln+551Kwpdy48yUcBOY8CgAvcv9jz+r+tb6fn/8lZ7MT5/1eTdrXD48/0eVS71x/Kzitn+jj54v/8/Zk9D7oIzgca/DKdD0R+rgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ9Pv/8798p77dXRsYu33xd/a++elLP/qDB4bP3PfxP7rr/kv+eNGb/Q+u/dQjqz/2wy1/smBo2fLhG7517KaHHnz+xp8///iTa0sH6h+/uTpp9kRR/FdxFC17/djjD33vTy8ZXRaPjh/3H44WLIgXfmdBnImw8mwURXdO5Nn44LEzq7aN3t7/1e6G5fMzQbJ1RX3VNJ+GPKN7SiviItSTzLNDmz//9IkvDX3v2ODuVT89ff2uw5Nd4p66+RRF87bUP78riqLe5GtUOtsG0icnt+uiKJpd97wPleR1ZZP5XxNoL01uZyW3fSVx0sevyLRrTeZRy9x2N/m8VlVmOH5Wdv1lN0YzJa1zXnL7XHJ79TTjVNOvOKrEUW0i/R3x5ByJ6l63OIrH5nbPRLsy1o4m2lG2HWfalUy72pWpa2zcZMVW47hxedovszzdHNeS5VfUb6tzrA8sX5zc9iRv1LfSdpS9M65vyp3JOqK6vE6dr4kRUAm899LlE+klL0ZfsqwvXjjlOSM50sdOfX/rxjdeOfhcfyCP+Nk4iR+3FH9o+KkT37zt+OKBUPwtlSR+paX4L1ZfOvuN0wNzgvGPpPGrLcXf8IufPPzAzQcWBdfPqXT91FqKv/xrcw6dObC+ezAU/2gav6el+DdsWrb6stP77w7mvzJdP70txf/xoyvObTry7ePB+FEaf3ZL8V996pml1cWPnQzGP5Gun76W4t+y6ok1n1zy4JPB9f9yGn9uS/E3nnxoy+6nX1gRnJ/r0vXT31L8s2t+9Nq5/rXPhLad8dHzvYcFeGd5V3KM9XDSbvU8s1115wtPDNbGj/nmJF9zOzlQRlx37lJg1gymAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARWDXSHV/ffu144/c9MX/tfl/1OIoigPPGcmRPladNTQ02EIey78259CZA+u70/bo2AMtxAEAAACmWvLqV75c307PwytJO456ooHoQNwbLcl9fnqNYEnaihuXZ68h9E727EicSofiVDsUp9ahOF0dijOrQ3G6OxSnpyROT9RcnN7COJWm85ndfpyxlPs6lM+cDsWZ26E48zoUZ36H4vQXxbkpnrI8FGdBYT7Nz+eFHYrzrg7FWdShOO/uUJz3dCjOJR2Kk72mPN15ODfpeWkoztidammcWlydeCDveno6zmVtjtPX5DhZ0x2nt8lxrmxznJ4mx3lfm+PETY6zIvO8SnacWcXjVErGSeftPaF60laT8//eDsU52KE4hzoU57czj7Qa5592KJ9/No042WPG+jj3tZkPQMjvPn/1H9S30/P/9Pwzjvqj7tp10exki5M9Wki3XZePfZ+6Xw1tkNJ4SzPL03G75zY+P84OGIh3+XTzy15AyMR7b2G82pTz1Zx4tfp4yzsUDwAAAKbjn5891PCjuann/wNRd23RxPnrVZnnp/2C59fZH2Qn0nhXdygeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwt+zaa2wc9bUA8P9417t7zSMGJWFDXlaSS0CIPIhydeHewipSkagKDqUJjwi5KRgcYRKIEyBpq1ComsgSFW3og9eHBooqhApISBGtK1FBi/qhUSNKxaOuwUXwBRVKXkBot1p7xh6vd7GzLUnT/n5CM3tmzvmf/wwS0hkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K/v99/9y/PpeLCvt71roKM/RKHyT03lGpJ7mVyp1NbAPt57Ye3Vf35l6+4krvTOZxtYCAAAABjnyQtmnJmOkzk8Gb2jUAj57NKQj3Jj6orxd4BiHDe1Dp/nLArLM7v/++Ko1DQUnxqdMqauENcV4jgT1/Vs2Xrj2u7uzo2f4o9Kn+rnqN5PFMLQ54s5J4dVi7Y/tydqG36OlgmeoymuW7zpppsX92zZes66m9be0HlD5/ply5aft3TZ0nPPW7b4+nXdnUuGjyE/wXohhNLY9zLBv0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKtv169zfS8WBfb3vXQEd/SxRCVKemXENyL5Mrldoa2MdrDzw8KzPj3r1JXOmdzzawEAAAADDOL56ccWE6TubwZPSOQiHks7mQCTOG4nmjqdkQyuXk+oKq60dj7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNG172D7H9PxYF9ve9dAR/8JUQhRnZpyDcm9TK5UamtgH6uX/eDCz8286/4krvQuNrAOAAAAMN5LZzbflY6TObwpjqNQCMUwPzRHM8bUJd8GTq9arzovWWf2JPOqvx3Uy5s/ybwzJpl31gR5l8bn2wMAAAAcf65q/c3qdJzM/81xHIXWkM8WQyaOJ5rjk+8Cc6vykvqJ5vukfl6d+onm/qS+eu4HAACA/2TnvP3Ux+l4/PxfDPlsYWT+nujv6ZfEZ38nBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq+eXBi3+Wjgf7etu7Bjr6M1EIUZ2acg3JvUyuVGprYB+r/vbWjjsvv21qEld657MNLAQAAACM83juf29Lx8kcnozeUSiEfLYlNIcThub+N3JTpq77+szZIYTSUEIuF25fu2nTxnOHj0neF6Jdn1l4U9/Z4/KWDh+P/pMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/qGWP7VyTjgf7etu7Bjr6/ysKIapTU64huZfJlUptDezjpZ1nHb7mnmf6krjSu9jAOgAAAMB4s7qf/VM6TubwZPaPQiEUQy7kwvShOD3rVzRVrVfvmwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw76Nny9Yb13Z3d270ww8//Bj5caz/ywQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwrP13/nXfT8WBfb3vXQEd/IQohqlNTriG5l8mVSm0N7ON/rplz3uz9m29N4krvYgPrAAAAAOOteWfz/nSczOHJ7B+FQiiG5tAcpsXxeEPzf+vR2C0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAszQ1RKB+h01Ye610DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn4YDL696IB0P9vW2dw109J8UhRDVqSnXkNzL5Eqltgb2cfXeb37p5l3Pn5XEld75bOVXqYHVAAAAgLTmt1/+cjpO5vBsHEehEPLZWSEfZsVXuscuEGWSxJrfBUbrvjqmLDPpuh1VOx7eWSH+DlEY2WcY+uwwWnfPJ9YV46tNrZN7TwAAAHA8m7bj0q+l42T+b47jKLSGfHZaaq6+eUx9y6Tn+HvH1J006bofj6lrnaDun/BKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAG3b3yhdPS8WBfb3vXQEd/FIUQ1akp15Dcy+RKpbYG9lHqfODZR6/sm5HEld7FBtYBAAAAxrv8rcK303EyhyezfxQKoRhmh5PD7KG5P7SOrU/yTij99tUVu1+5KoQl01+ck63b7/t7rng3HPr/Nz4YPgyFITSNTWoKYUrcL6rT79rfPbbquY+3PxTCkmmZWfX7jbYaPVSJSuVTty149Mrpe1fUXQYAAACOa4WHD/woHSfzfzJRR6E15LPr687/Sd4Rzf/tPTO3TY2P8ReAqoqm1rhfU51+ve8/1HZwzRcPVub/F+cURv5fgTPnj81Pt0ofq745RKXy3KfOWH34wC2XDV9I+mfq9F/TPO+Une/MnJf0L8TXrwuT7R+q+vd0HJq/qOXEi8b2DyG01er/w4uf/HDV/e9fNdy//vte/IfBz04NG75X6E6Ow1fG91/54PKdW3NvThnbP6rTf+HzT+9/4vZVd1c//+nZWv3HH6tUumbLvfvuXHjHis7zU/2b6vS/te219771k58/Uum/b27LSP+Fn/D8E/bfM3/Hvl3b71sz9v2XavW/9pyNT29Zd/U91c/fUrVw+s2nj+Pf/+uzoks297y6sfoWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8a3jiY8OpePBvt72roGO/qYohKhOTbmG5F4mVyrljqB/Nj7/KrPno0f2F09Mrld6F4/0YQAAAICaLlvx+g3pOJnDk9k/CoVQDLmQCy1Dc/+p2xY8euX0vStCa3w/Pme7N/RsOvv6DZvXX3e0HwEAAACYwK4LPlyRjpP5P/m7fBRaQz67IDTH8//KB5fv3Jp7c0oy/4cQ2iqH7PXrujuXhJHvBD0dh+YvajnxoiQvE58LlbxF127ojj8TJOs+8/j/LT3/istH8pvS+eeO5s196ozVhw/cclnNvGWjea/Pii7Z3PPqxtQ+SyN5S0fzevfdufCOFZ3nJ88RxedC/DxJ3p75O/bt2n7fmiSvKT63xOsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGc8sFfv5KOB/t627sGOvpDJoSoTk25huReJlcqtTWwj48ufHHwcOvnH07iSu98toGFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV26ifErSKOA/hMkpq0KXW3FJqVurTYiwWhsFjsQdyLf5D6h4qiQnEV14uKgmjFHuwfLKIeCgoVexEVz0oORe1hLbSKgqDgQTx50JPKHnaLVFFJdiabvPax64MVkc8HwuQ3yXzf700mDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+0B364tTFcNxud/nj+pWcu3HnVzV8cnV188baPnzyy9ZMtF8aO7bvjlb23fDPz+fj05M7ZPR927zp+7OyNf5w9+da+FS/0/NKwK5WtEOIvMYTJH7snj5/7cmtvLvauH8cOh/HxuPnT8VhI2H0xhPDooM/RD7uLU4/1xiOvNkfmryyEFO8rtOu5nyVjo/3y/9JK5+zQQ4+8M/f49Lnu9qenfl64/qnDy1+JraHzFMKmmeH160II69OrJ5+2Tl6cxrtDCBuG1t2wQl/XrLL/60rqbWm8Io3tFXLy5zuao3VjlX00CmNzleuqqq1xflFx/4oPo7WS73NTGk+ncdc/zKnnVwy1GBqD9p+Iy2ckDP1uMcT+2W4N6lq/DoM6FOtYqGuFur6ucF/966aNrcc4Op+/V5jPj+NGmt8x/Ky+jP0l8xNpbKU/6m+5DsU3S9qXvFm+jzDU1/y/dTBK1Er+e3l+0F76Mdpprh03X7Lmr8vIn81/9vCDv373wumxkj7iBzHlx0r507On5t6//8xEpyx/ppbya5Xyz9e/uvjeQmdjaf6JnF+vlH/vnz+9fPSeg1tK92c+70+jUv7O1zYeWjy4v7m9LP/tnN+qlL/nwOTeqxeefa60/915f9ZXyv/29Wt/P3DiozOl+SHnb6iU//2pd7fVJ974ujR/Lu9Pu1L+fVNv3nT73+zXvwkCMRQHYA5sBA8OLG1sncIFLKytHMEdBHEEsRJdxQEUN3AMbSxMJAhp4h9Qvg+uuOY9eITk/XrzdXb+h1i/Lqo/OS6ms+1+kD2f4zifpqj+ZXg6X5vRLnd3Vptvv7AA/6Ubdqxl+C/Nma9K8sKq37rvfJ3w1e9s9KRKsstD+4MNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Am3AAAA//8ncmVi") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 222.667654ms ago: executing program 1: syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000100)=ANY=[@ANYBLOB='data_checksum=xxhash,spr_hash=siphash,data_checksum=xxhash,compression=zstd,\x00'], 0x1, 0x11a04, &(0x7f00000234c0)="$eJzs+XtYjt2j7/1fbVSkVEQpskkRhVCh7ItCkX2RFO1IkVI2lV0i0kaIUqgkkexSEiGVIkKhUKG9iija8Dvmd93m/K57fe/fWvN+nmfNP+b7dRzXMa4xxnl9znGOazS6zuMUAAAAAAD+W3iwx63FtK/hw51rvvnMSnPeIZAU+Ue7xO8DZP4oPf+rRoj/m8RFFf5R/nldnHaeaViww9Ak+Ocpq9gr66PEnRS0V6830082uFJhJ2/a+b/L/b2ehv1HXeibkEDgEPL+zd6svD7/1iYkEAhEhGR8BQJZIeEsWaE/RYxqEwgEq/99nP9z541vY+z+rfQNEP+f2nv8KYT1/t+bxB/r7IRq4ycnV+O8oCUjjIb19Vzh+x+HCEn803oSCKSt//x54X+Ra2ProKGxdo2XgqX3hg29axNEi/daaBTGlr9fU6Gyf3+BcEPd+NlPXnhv7CIQCLr+8fo3v1erwu+T/1HOEwgE3f4pX+9/c12D/g+vX/Mv6sp/lGJ/lJL/m5zf/QP/D4//M9E/ld3+k5//z/pX39n/l7r/Xz7fb7+vU/qPMu2Pcth/Mkfk90tIICwkEP33vXid0H+sEcE/fW9CAiFBl3/aR4UEwv+oC/97XfCPuuA/6kJ/qgv/qS7S5U/X9Y/z/rHQRISE/uf238f9qX3AH+2if7QP/Oe9/l9Y8Bftin+UEn/8oX7/XRf8+c3/IPm/vPn36/qH3+Mq+/8zlv8bhP9pD/pX7b/Hq/fHlyH5R5ukkNz/8plf/8Lvvox1/vZ5LtN2yfzFOIQuCf2RL/S38ie6Kl2T9Nc8rfBX+dbCf+QL/638gs8TlD5IFF37y/yg3/kifytfIs81cGv9XfW/nJ+m3/Mj+rfy7wV5hvaaVm024K/yo3/nS/yt/M+ilvm/fJND/nL8o37PT9e/lX9pWarp9zEX9/9lvuB3fre/lT/A/0Fq3N4+p/4y/87v+ZH8W/mDNS/55/i7zfrL+X/yO1/qb+WX/dJu7pP/IOkv1+eU3/Mj87fy5ezVlWU2bxv+V3unkO9/5j/sv9pxAOC/t55//Mby/6P+d+9T/5/6p/uFYzJC/+M3X/c/XlL/b57oT4T+6d4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDf1yqX0+IzogyV9OdLekxqeTgnyGBIpfTVPutF/+gXFxUI/u29kIhA8P5oTf6T6Cl7l904l7PVf+ugceIpRZNkrE49q6pbEBy/7bZXdGHfydZddy0wKxUdF5iRWX62ydQq+pKiy+ilL0bevjHEz97qhLdl9sRRo2uvCeInGbvFrT//sCVN51avGacOrOqSt753X+mHgc+2JD7S7na1QCb83PP39V2+fp/ZXDum54ju7avDcj6P+VYuW3rjetQO/RXahfPuNtdpKURK9Wp5HZI7s+H9xoeHD93qc1hHdJjdzQVlOsaTjOS1d31R76VglSn0ZUXOT5O5ejoPzkt/yY5ynCIpK+ZaELIkaOfXzT3ULsyrKCg5OzVjnKanv8JHjXEpSqI/n5xblW1qOXZJ4eq3B2RFY+cP3+qlMdlmuP3QHtKhvd7o+x3ZOCes3XruPcfBZbHmj+LP9CjaNaFJLNTn6UDxr2nr9jU+eVxgMfaahWao+7NzrWk93Yzyv39a4hvhatm2+VxPL+85wglXximuq1aIvibdpyjm9q3AFz3GuGW1bZetV8mM9jmxxtpuqn/LOYNsT/nc4qciGwKHTmjeE5cRPXyMp1fJbJ8DXgZZBbKWMxTF8n5sebLhwpINFaHDW13EjXJ2vV+gVxxkKTlunefmx/Y/P0a7ZWjbOBYoyv9819g8ZblVumTzVtmb46U6UjofbjS+PHB+wwUVi8+9xIUyvHx1ND5NanoxdctU39KeveaM6DB+u8DBe5jAWqVI7PYPmW3r9/4YKyKhMEDuVP4k0/grCerxVlpd16xf7Vbh/Viz9oZ644tG9U9D3qSFnT2knr5ceaXfvXXzbt77EWyhXrvYSHL1tl+Hvu8I/uRh+uL9pV8HpG/51a5Usqx5kPVcY1N3Hcd1e7tMG+YsNiV42HP777v9bfatNXm5znCDfy/naxNOpz0YkHuvrM/PfjtOVG7SWnGqq2bE5XG954mdX33JIFP6qnmfspqQ5zJfoo1e2S8dV1ypbVISF+g0O1vWqHrk1B+XP870KKwW2a2VavM4bpB5ac7oizFe31J9PvZN3Nm+ePiGI84G3UbWS8iJhNomjbxi+El9/r1JiY/6X+wSbOkd/mr/sU6l/qUPV/d8pVircy7+omjOdqmTdqbWtVfPLMme2Kd4RunHgWfXTz53an16WJGp9er20+Peieou6NPcoBdx09dliFnL6Fk1ccFa9VcvF6tWBztFdN0V4+AtnT6oQ3xg+Mkwr4NvjR/Ld9vyYl78UC3dh3ZGkek/1BaVWmz7Ib3P9raa17n35pMbr5X2dU3XNXZ1fxNQ2uBwpr9D/1N+UV6zllVuevC22Dpi2E+vZedDDSuXhweO8bphcev+gXmWGnoWpSOlBguHLc77nmBboFQ7/VbbTP87OSOSjW07NZxs+wu/9xgUOOjb8OqQ2opkDwXhPnYKOw9VeyfJvRliNKt/v5EqO0LFOrILaqwCjsbHG81e+N1aozkg0uNcy3Sh1q7JWo8d9mmFFUkOCzmRsi9RsVC9VV+kep/scc9L8pPlIpcUawS+TZ0nkz1leE3tt76PeoY/+6mnG18Y8tF42l5b+X6XXeadm1dqvvzdavu1ypErpirc9HGsfvXW+rj2kBWvHGN1VY3M66IdVt85NKgk5luf22HayvcfyF4fcL3IRXl5ru2YbqER9+zmW3tvSAyUKY9ZN7HRSH6Ru4XwzKmXqsLkKs1qHjRkyGdamwTOeDNf9VMP5YrjFi3WXfaVDTd/MrRRX767i9PFadK+58V+7s8+X5l8zUB+xyaTlz0t0i4ZPJi8emxSlVNfy4UX9vsfqRn48tB9u0Sxng6PnspYbp98bsuuHoYvFS2Uda6bjki9J3bRdL1V51c5hZTNuZ4rqvp2OTvEJ1BO8tDCp8F+netS/MttTv7sr2LW1vSgR4nZvMnlw28IWwwWvj50l72F85qFuk3HBvpcSJ6ltP3V1m3Pxcu3VyadUddfW+juomR1dK55jV5ZcvXIVd00doyRXSBUdXCD1KU0j7Mxoinz537JsR8RsSSobdzO50/XW4x2PRRifM+3x8uy60VZ0u+VpYrkfwr8nCXHqxQMWLbyi6ZhVWbZlJA5hdovBj+ZYPbObt+ylwmRbztC3p8fsMGjVjuoXagsLTrQea50rYKdgpG4avbO5PGfDPZcnJoncqKbsZGpeemNlyUaQ46Yr7rVpcpCbbR00Aqtmtz6oxvTnCOfH1YJdd8xp+x9T836qlFZ4o7tbksebcvZtqFwsFo3T8WeMtqH5y9Yllk3w/fHrnDJ3Wlyd2UHpL/qavhJ4ppDgFD89dBrQwfmuD/fO/Gs2K/GccNrx65asOPIkJ2W5QrTrj4Jz0l+mz547hZppVbJ7Tde+435WhXT9fut6R/UVmm+6ZL5qm/i3rgeE7cbHTwludOke697s5a/MzfXOZX45vi00rKSriXaa5L7K0UYCW50EbvRUbtz89a2hBIXkbzppwxrj27vr5vnqHmnrKabzCP/24tstz3ddyY9y16pX5PVw3e+mbct9VwXK3cMbhqY1uHrvKJ5nFCa4chNA3bO19f89NJd5Nj0xWqHV+5xE7SP2vRS6aCR7YkN7V93frF5/myupPRxd001uainwhIimukfzh0TSbtwwCtpaX7uqkD1LPd9xyV27D43K3xtcIKOsYSGpn7qoawV7/eN2FJhMDemyvOt8/PKl27HhUYZbVg65dwpbTkhpRbz4kUjY1wvjl9TZGJ/xsIyV67555Xgn6cDT3ZG+30zuL9j/8Cfke376tdq7DUItUjq8WrbVae5g/Qbl8frhbSLvNw6K8ClU3So7MsdBs+fhOgd73fhUJHavEGzhGxixRbOuzjrwLAnEzZ6Z1g67bU/GlmisWPbyRs6w7Wy3W02CO0Pe5EQKDNsRoXQssUdmvfefa4/4Z9+ZNRszbSJi+95vVg+btvHoNyS8MRG88SLRzcvuBs1s6bLgN4zJAv3eyyv6S5IDjazrQ2MvDWwYrDJoYYLO7v33TvRvTQyX2pBbz/FR1V2cUWHlmwRSz4tEfr1eIFlRe69dwlTVqZtWviqQe5t1clbNqGDdLKGnuqYecLXdEh0rXg3+TmvdhxfYZ3+TleiIiDKaFjkibR+GYXnroRNG9THTtiw7mNbSfW1jOBwt2FXuz1eWWb9XXFNhKrDRK9b6Q0HlnlIe1nZtwsvSpEQigp4pVL/+IbJ/txD7jmSwYPmeCffaDxVMc55xx6jnrcmiiXrL1Mrfp0+VcVUZpjgUdvOZ8czp3vdHLHmweGW1NoVJ550qblZbzZ4vMpVjarOVWeETYf0uv2qPmFU0NQuk2/pRCRelkmteW16/8ac6bvejfGR8RDtv3/S01MqJtdd1+hsG/PN6LmluVu639SCge+OOeZtub9HacYFhd575m/dn5nhMO1ocsQFxWqf41VhdQGv/L4ntDwrVF/5RWt6z31TnD3dM3KOXPmWdHTAnYN3g9ePVT1Y/LrK3rc2Q//JiNlDtl49+UBXQuJjmpN4324Hlm10l/t53Khl8OoJz18UGHwL2GrUVbbLrrdZk9WbdKWvTJZ7bRp9I2+nYJJhRH15aniy450Z3qvrzge/nmsQuC5C/3CL0otQr/a1U2auW9v1+ldTRw8/84WjqtJfd4heGWWsoTS+z8IHwxLzc2wMonrfit3uK+USdq10n39w2i7/gUNmtXTM1h333bagyd4rUa2xc8jt5vCZl5MVC5a2rZy7Pan5SGtb4AeTqFtp18f4fhASHXj07Qs/3fz1caqJo3Yf7H5GX+6Jgbd7Su2var+kvP1fpv1o1cmRM3jQannhYB+f4cpinZE+fv6DJR6c++HXtv/9RcOOHYMf55lXtqj4yLdN/TFb/altbusst2PXRy37csE1Ss7mXYP/HsWveQ87Muof6620niw7Qjvwnkeu666PftFdo34YWFruye/WpKkb023WFoWdkvtWrBCUmkpvyrqbfErsu+u5hH3bSkdMihO71rTmlJxIw5sPkz/tLo7/pG3/5Ebbq8eKCv6+e4MEL8Riju2+f9Pgc9u6mAmRymrjLBU3Kz+fHtDzdvipa2bCl3qK1o9KcUm6ZX6rxDZkTv+By4Tjr0y8sOnx1+6+i375qt15eiBk81jxs2quE99PCOwjca/za9u0C4Xfv/UJSs9PH2rU3NhitfR7XoD7l2vxh880WlcYOzjOl7pZ7zX94Yfuha/ezbty/kW3zkUHnhipf1R5nX5xznHVqmOvF/3a+PHetcSB41N6T9aPeOvZWa6zyPCn04KDBmrSXyy7me+5ar1TZZV/jYzXWYv28dZLddQHK51avcGm4fbH3fpDvqdOCYveYTamIbWL92ql1cJSUkmitw4MV3JquH/oad/jD7Nm9Eu1kHigPevJyTFRc3X0tbyduqVvmTb7SIDyY6cjOeXOnR3roqckhYXe2pSumf1iWMvo1jfRDxUcem6Zaq0W++up4estiy1uKOsOt+rWeHW5en3c5RezfDcvaziaeN7D2aVISE71mZ9V/DffxIcjpGTcB78PjalblO1RdyfuokHdFEmXKt0hLd3DK7vtrW8XeLWU5Arvy7mUNt/L6mbLutXlOa3j9ybq7cu7f1j3+/Bud0J0/C861Ox6UmSzfPnU5BN5pfWVK9evWCrS49mn5FNuqoYn5LfI6mS1Ca5o1y0XfnZsvq6qSr6z54qeQ1+cn622yevS86UmYp9X+Q09M7ZS76nsxGdv2hNeT/+xb8vtQxOvB2WHGeS+yt344t3q01WzWy5Hnt5/W0FEKHy44WDZlIO3NizzHmW0ZIpPpGtypm1VxtYjvirjhaTPWpxylgwLnat6SmrIwZ4X+8fKZGh1r17q8bTlccGqgjEVtUeLf/nbtvcKyZDIHPKsc/2sxCfdpicpjN97P+JgSzfVTfnVq89esr0m8zEke1dZVvfd6/1jdxQ/Hey2e9XxvQOnS9ptCAvWOq484WrT9BVJ5dk35wRoxJUfO/Go3rCwKqBZ3GVR+rUnjSO3xZ5oz4i8uDy5eMTlpwUdvTc1DLdf8doyyW/donHDPw01O5cVdnKHtMbGE+1l32Y++R5clH+5qFvsSDm1OoPqS50LviyVCbxdsSsrM3nd9d4T+znbqWR9Wy9+YWqCdHXJw+Ktd2pDb81tjMsoLdUZ/kCxp5/31qdrMpZsvv5L8CFI/1J+QPLxpM5Ifc9Pi7Qyz+/v3GAnL7Isz/7Y/RsmC7f3tdH80XOA1uR05d7tH4UniSgXHpcSqdOrs/4hoWjiKlZl2LTklky/cHOZ/k7NzwZXnjw5aMHeuFq/MosvGRLWQksnxvsLJLx/VDTa5Q5Y0U08JH/51HEnh6yf9slj3mKbGYPWR01X/zp1eaiNeJuYWMfc4Ze3WAwcMWGLv/a74AzdG1NqpBN+7lW7H+L9SHjOpNeiPUbt8Yw0ThLfXPForHVwypmGJVeWD/zk2td5es6347YL6sLrP/dMn5/ycl7KtrMycRNTlSZXf5uVef9e1RiR/ZqFrbdTj/ll62f7i32OOxDxQHNGwAjlg52dovtCjOUU5O9Xx7Zp2y31FtqhLOPnvtv2TZiZsf+Go69SdKJ39zd+Ff5TvXz+msjBJyYdss8c13jevqOH4n6p+xYW6tNPzDpWrt5D7rCi9a7T08OEbs8eF3VSuD01b5TiVwvp9OWeL8zkhmrOPGPzaapNT8Fqv21aG7Ny5jjJKducLZ+UWj8+vlq2M6OqbX7yp9UHlnTu/mj1cPidJen9nHpYnXtTVaO0zXSl2PKDVT3eWma9uN7v6JXQW9FhTSrderouSnK0v7nEc2dXe9GbB8sdFzsEH3FolB/U0DjcWyd0mFTtpO2aiXknevY3fq03ePyQkcp6g3qsjTwYpjOhPm6yeMJt44DH5zZ73P6Zp55x0SSmTSan3qJ1k2GH9wHDQ0atvddOkBfNG/rgufOxBWuUepv27ThsJ3A/V3T82x4zda00lWeFfrJvz07W3HVKvq/HU6nSgxqfdqy8nPDhS6TAU+9QwLaJK1M2HfAMe5kTHiyokutoWFQYOUFU8MI8TFpX/dn0TlfVOfIrVV6+HW9iOX/G2NEjG5RHjEs+Wamn3eS57K3/tH6W3y4qNWxRLJb9Kv8808b1kYZb/qteSQbaFxd7PLu6+VKHcugOx6DNSZvW7p18ZG+/uzU7xwl0uh1r9pE42Tw8XU7jhfM81/UXBiY+W5i1JU7si1/EEYs+hmmdJl/Oju1xasfs2aUTTX5Oe/0lLu/DAr+12nGJB4YuKddd9HneLOtrI94fNLqQPbL3WPPi4JOhp+Ukz0XOiHU4cWrwxMLKD51H2raE1x5UKF1dvHRIRkW27C5tu7XlkrKLK4Zsr68Zpb6wOsqwwOlz+scdijleMv1yXXM85ZNyQ630jq0Q13mwVUfyuVqMieZLCfkJg8W/me0ztD4nKLBs3XjZs3BRhUx5uXyCS8cYK5l3mo8Wpi3IHDH1ontIx+zc07P7H7+xTd3u+OyFL6NvH3MJ3BCt+naow/g19rMPzs4e9To/ILhfXvykdYlBu85vCTm5uu265tZBebGFUx+u3nMqs+fHwZuH9NgUt/iCQ8Unk69yg371+VqW/My3+c6EXlufTXoasGZniVSJweQMZbVBRiNHjoifVPZAdc5j1Vl6xVIzH63fM+bdxFfW0j6Gm6K7bApb6TJV4a2CvurDcoeJRifbrDWPpCReO3PkQ+US41TLkbKfvDOO2P+cG3Ni3UmRL1pflmS/q3Zfb9USounQWrfi4A6nSbvmflxTc0LlfF/nZi03Q+ukbfHZjgKzKpdJFzsj6m45nlz//rHzOy/H/j9tPW9/2OlSv7tfyJURZWtCbmzOsQro5Xj+8vrXb5wtHWNdPxsP2Vr5I2q9f7/alp6TVUPaW7cahDnF31a5ucl67MzYrU2GWwefua6cM2d1yyO/CZJnnx46dttFW/bXlNYZXttFTs6YZvr1wZWbentlog7L/HB4sj1mhO/K5m8L9wwsuzlD4rVBXtGRT7sHBi8zlOkY4ycnrdSlfLe405t9OvJ+lqY6cgeC5i4/3+HxvUo7PGzi595qi35ddhdSmfau8Lmfff+yt7phExw9Q82H1NlOMy7KcnRrGXTmtP8x+35+XVu+B3sFjzpldH3m2zMiEqffaBgNnvRNp+1gF91Ts7WemTR+WL5m1K7reiGGvjKr5hzsuT7ztnBwqJn9tH2fclX7RC0cZnPv12KHd61SUlPjs0Yq9XVP2hN0R+CzrOthlStmLqcK3NpMshuHFo6PK9hg9UK1d/Hnn9MGX3Yqmxp2b//ayvfVPl6R782mtU/5qRrbzzCgoVvhuw/dXN89kMqOeT5BapOmwrAfQxTf3NjmEzXfTubIZZv4pcmj5NUDr+86vf32CWPvh18s3pvHGVQ1pHhP8pt+X3Gr4z73YlFT9zS9hkuf8k58Mb6SPCh25sYHKYbeYpP1l9S9OD3ZsNsyO7dBig+uT5P4lvPh6plX07y3bmtL6jVuwY89l5caPw7fFloX9OTbEaH7PtGikcO3FTtWzx1pmR/fZqOy9nNuyaXpzpu/mu8JWX04QP/Qxp2tZ463yCa8K0xret94S6BjZtT0zdtC1XPv7pUt1hKyK6vy5cwHL7e80N9SaovaHZlFFcI1tr5dNZZuHRBZnCUo3nSu+8Ym1bXKFZ+LG9wjTe+ci3Y4+X2S79SdhseU91rNOfvjZ1RW3uxp8e4D5rRr6nU1kq0ZaB/0/r2Pke/ZZN2Jt7zuP8rKmbToWXuWUMhEyfBrWQ2az1se+w6NX1DVa3LKr7p+Te5JF+6mL4+sVdzumzZnsUhqSl6MXEb/Y60Z6js6YrUuNU5YfCc+xn3LlfwRiQnnEx7v37In16QmxtN2n3ae2/a3xR9SF45Q9VnrlJNUHRIulVqRWPKrvbq61OFTeumhl0l7T07c/zDqbNf1KkEptRkLcxxahsW5HFfuvtFgydCtPzWKdWt72Mo5/gi68NXz6PHE73Ie18/LvGg91vgxfI3Vxlka2+r7VCqti40UkplcOkZ6mNk2yzsLnDYuSds9SmJBQrNFvxVPxzUNCE0R9hh5r5tDa9jkcJ+hKl+WvxLJ1th3Rfz19PXNV+0ue8/8POTNqK9XVPbNOevlaKnp/SL3YPewVUK+YfeSvlcNc3imp35x4lKZYb8SHrwvlLMyKXm0L6FvtumcQ4u2twyJbch96xnbHuT7xOmnfHdn5whjhXiR0Xdd7w/5YFtasqh8iXLnw6DhyqdeN45s72zWi3UxU764xLRiScPWqB6FdyJnvl3o2l/X9fLlBKfIlqguudKNNTPaZ4c7ioTPXzHzeN6Lq6WZ37McCuYp+82c+jgux+jjmej9q9eat3azCSx575KUs9PRL6n7jNt2Iaunj7lZqey+TOmp9Bq3zkyvUV5t2i/Un4ae8j52sE0yVKbczfHI/G1CKtP9w1erTxEdYLHDLk5iX/zpgDfbn4RevZQYU60WWLVo/dhNAbNMFj3+8ayzlyCjfbTlzpZphyvkSoO7FNkJP7d3iLVLatt8TuLzmY4FJ7vuyHBcm3hX/1NH3Z5tgRo+QYsGKhi1JjRG5K6Vc5lzcrS8safvupfu+2ZWKezJU98QNWuF2Kdeoz+mqthb2CzVXDRh1Wb1qYdE64osZd8o3s9Ril2y59eTF7MvOvdWn1bf7Bs//ujsQXGOo95PqhrbrFe42j3wtFLzf/HjCwAA8DeYie7p/viVwiD15oE55we4Cf9+/t/lj/7fz/8dhASCJzNMG0QK6zfckvWPK9OqHuVZJ6EhckZqmXV/1UkqX+/PvNxnUqSY8P6JSr8O1S5+e3W8/v7l2Xk1ucGNxk5Tyrd3y0mQ78zcOdTppOTE8T5TDafH5gSqliwf02La2DZhd3YfqQnB01v2rfWR//JS7skoixEH8xdNC6ozuSJ3+LbksWIlqUF9g8dG7DmWnmhzzG+QhcyJoZ3NJR9zR6uZ3Nx+rzV2yDrXgUPG9W6zKXxsMufW4w1Tnep79LWK/u51fvwcC/cZ7lWOYoFXBx5LLZnX9qHdK7Cu/Z3Em8rC3hHFdUvPSbyTkXqR9GvXr8XVKqcdbnzZI2v1bO/cHO/TzTkTc6o1VinETLQXj9nrOami+M2BKfNOqEmGidUuWCwttS5YfGHG7IgM64CXLkFtF5+aVmYrNCkrXpVfOCq9u0pI2yxdnfWTDpeEJCikPH9+uTDffJaszq/y4Fyld8f1X/q4/EhpCFK8lBiaKb6u09hj2uGGc1Vrn8y/NGLk1cqlzjlmVzcFrEv9WGVdv//to5rrmTeWr2/rWKsuVWLZHrc/3dR1iodY99pHfTxfhPZf3+urgZWeoPNeStGmtX1uDfDSqI+NmZf682dY9sKi+BzLyGv3aoo6tNxFzyYJjf3l8jl5l62uuodda5ll0tPzV2uKljfGVC0wj9gler2sZXhVX/kcsynZckebitMVD4Vtr/+uv3Wa6qnyl2ZLlQ6tefXKIjVtyy//mIyHB1Myd5ZdPjKsy2Flq7Ej+qll6Gp3yZRw61YY/SO8tof4yZufX4ePVom97nXh0UwhUT+F6ddWug6IKomuuuugODpyfbPHM32nt9dNHFLXThk3dt8iwXXltXNrVkUXBwyf29f8gfc6ywI3ed8rW0a5dcyzjBTrGvxwyDLHLbq71q51mW7hMV0sX69X5cPHlza1nnczFd3yUP/70S4+/d4sKFBvm+rlatxzu7X6l5Ejn3XrvzyzffcP7WLFDSpa9xIKZn4K2jG7qlj5irXX/W4benrFf9Pxemc138NtvH72yKVWCuPv3nbOGvyoPmvVWS35HU6LhnyWVkt7c7sid95oO5FRF7+v26cWXNjnW/vES2eqrp8/Ps/ZpSDaa1T24pPv3AO7h3vbRQwNDUiy/TTaeEjwwNu3rvbN3xqxwrSmZ93BaY6jG3cOy74yrmTZocgfo+J1S4yPfkxNunBeue7OSVX/VyOF7YMDzia4WP96PVfnbL9zwX197JospniVrxLSlX1ukz60qETJ9fKHDz6yyo13Xt+NWVn14NpQqwstoeEjuuZ8/hhU7/RJsDW72/am0sDmdEW16s7bh+o776TM6zh6pn3OPWGZwUW2j5e9zz31o+XBoV33DHwOtr3snvYuvdDXasPYAzYP+117+f6a0Iw3K8P32oYNK+6/5/6RnKyZb2pG25Qa6o682yEXkPvkp/fzKz3W9V3os7f4ietMzU9ZN9WadDJHOafHLc4KjLtau2q5tt0eCd+cMpVNGjG/5IZFmdg+63U5Y0bh4KPhoxx6XlSbUl/yykFDYXFAq77wO5us8YOaV+9IPPJs1CobsXV6+X3WheuZza/M6nFnS5eYvNHV6w/7D135fMj0vPAS7XEuQsMudA79OeOo//FBX2wL1Ee/OfJEq+VaZJ7OOJPFJWe/D3LR2GJlULEwbuJGa0npkfpnnzpZWJ7fvKdX9IMFWsO9PaeFrL3TNOn1hg3GY2Q7fkj/mHV6Y8TA+79a7KbtGN0gq3DvbC/zN2e1dfb9eLHtVG2XGznKWTlH1S+UJF4JOHVrxJaQjCmWSQte5kuUW7fumTGlYkC5up3C3XX+02/eHapu4VAqHW59/1rMU22T19Ujmi/v3Sd0eo74+5OTb1/dNcFjf5bk1TMX5upERKfKH3hm5jw7J2HzMt0F00NWSWb6WrpX1BUeE2jXZrVeaLK/mHL8cGrfeLEn0+stjZ8ffLivJSI+prU43WXkTacZ5oVRsic8j9pq/FQ5EpszsqXXOdkNHzTtdQU7lhssd/82/17s19jvhkvvSDx1t9oleK6RvKe3p4HTQ+0Lm42N5OonLM/eUqT/wu3OEstqoV2rrLTeJjQoaUgam1RHqa55FXvKbKtOQXb9hKkLAi/FXfEbOMjAvmep7/aJj6KSpt6eLv10aYS7249ZbQev+GxdYX1Y+kvPIsunyzNblN6U336yO+Vwj6zTBbEN+3qf3dkm7j0oyl6haePxvWkFY559K55y321ZybLOxdODpsp8uLkx625Y4LLyyAbxhK9z9YYI789fcFn/87ozbkMjs5ZIh8/5FaGUeUAt2lH0YpeXlWvte0x6kdfjoKHamqsdA9xGa3Y5XfRy06ne4eMXHu6usuNStKzb2ZIRJ6rzXd1XXmipjBp22Wx5lN6b/W+VDV9FjKwr/K66btF5G2fd8a0x3+Y+m31YUnd5v8eH91seuXr3bIFOmNG4E/Zyp99u0uiR1WS19EiY+/2mkL0Vjl89b2qcy037Ncx1lvV3gyM+h32HOvRIu3DYbo7jyHap3Cbf5JUVXsdPHXOzdVlvKSIimh/RY2bAgu+rtCtlJg9Pch29P7DOqmH4oV3z7k5/7Tw3KOp8a/zH6MC4tPD9P90HvNSvuLPP3DM6cF75lhBtky8Xtg2wzb/Wo+TR09amaNV2M2lVc+vkFWkiQnmhl+zatgkyixL37GqeoJ/rEHP5m2TlAr/Zr2duTZDtGDFArmNwhb/8lHTll1fHuNuOKJs+M+rG+4AnhzIFJ9Wf9ovscnXtqnOxm7uHFgQuq1q2WzfGusU15daRSNXmI0vnSyiWX981WUtl8r2A2hQd29HZS1eZB+dsnT/6mYKPsO1m3Zk3K3xmC4JcunWX6jPqrJ/lbZ1+O159yO9yLD71pLBc7PEyl9KL97W8qsa+uDtC9NrT9Hf608cvXjTO8vXkuzkxJf7aq360bhFdYdSmtnuzinrDquqTdZf6uOabLJE7m/zhm5iG/O0Im/PO3Y4/NNe9mZcySGfAp12l8hptXXds0d3r/drHN3m1eGvNo72ardcrqyJj91SrrLOLHtay/8qx9rvbJY596r2pru8xvZjl4VJrUiVG9tqlN1sq9ZjPzr6/Kr7VdHwxbV95/sodmdLVP6WrfBo3bNAok4kzaTdpPn72eG6n0ILRHj3eFZ03rdZuTFgYMl8rt4uaU5/wzoG1+p3Dnotc7vJjcaWanPOKFU7Txl7wa1JeernFP0Px6+qLzwt+ehwqPGE/41LmwYgvtZ9/1O9InrRgZ+fpLqOntT9aduZ694ZfvuNl1M0kE7MPuIclHPreUbV4+2iVQQXLFvm+Es96kWH7LeeIu4bWqIVxjhH683Q7Rmy+FFsaMH2MbGiLy0JXbY3IlaLl3y5Ix6y4OkvE/kG8+dJjJh8bhnQpOr513rbRsy/2NAgSGSopl/At8Vf1fie/k1kbbULXr3rW43GLwl7Xw5fOTdLc6SHltCzi3tECK9c4K/vGDw5F3e9trCoPdZkdVjFyqFX5B/vFhad7CaaEHhVJ7Dnv5revthmJCQfaRirsHz9WVm7MCAPj68kf85zG7/0eUr23Yfy40ykuJ1rSP4WtP6uoMiq9Iuum9e3eRr6PrKPUjG8FRZXbyEsuWCHuKNqo81y8I29O/5NTPzW2m62/eT7cceqq85oide1PPp5THap8M22ESP2r1BC1qV5D23qFuZc1RQqP3X2hSC5qa+9xdk2f83sFBgz+ULf2bdcLQ2WTHqflpCdG2Y21NBcfkD77zKetcYsHtC0pX1g2Xy20yzuDHYHDZzoo3rN6Oeus1mupmedf+nmqGZ10EXOV7bh8yWh4nZqM26TLrQE2Ws5ZW0uVBiTu6XNlY/bl2cqmmZO2J5aUpjWs7e1uplreKTAOn9py+1FGmZSe66/tK4xDJZwevPSTOLor/m3QLrWvg5vjNrn4arU2nL+372vExfZxDbeFHe9Gp8+IXb7o7HtbxTW7u380SDn3vuBjo+ag9SnX1zu9nj/5Q49Z/jNyxUqcRiwuyBhUZpT0tv5VTVn+xiUmD44oDUgb5vcoQ+ThIwXpAwuD+k1y/C/+2Q8AgqLqM2VJA17PajzWkjClS2SP3/f/Yn/0/9v9v6pAIPgsEAiMYhNe3O4qlOs4bO3nkoIhbUZaRccejnPZ6ygkOktQlj3fKKLC6fUb58mFIzeefJrz46Vu/uOELsdem0VHhK5ad+3SZs3ktDNmNz5U2TzJde3dc06lr7TEq1/ONouy+k0Sc35fId5L12fzphMzZo8c8cwz1WJqyzPl6YNyigRBNxXnSeWodWZuM92UYjvGUnyAVVTFj7gbY2eV1QSmDOyQNK3eo+CgJyw9c/JO7bW2m2yLZjX7pFw7/PztJcFJ3U/HpjTMzLLtH+Xd13D3iYz24VEPzbrbnL955POPA4ONxb3vZly7tb+xKsLZc/itriHDV/565jXic+V1vUl7Vk1PDnzusUo46dieLQPfqPePKy/s9yVxd5lids9lT6ZLZV2eVrC1d/llr42Gj8YFO/zo5pbv9vrS3DcD7F7NGRGcb5h6R2zEyrSEwIL+g9fGzM6K3ObZeG2cbWPd5ZCCSV66y47b1bT2TpFTXaZto26vvvPX/MzPoY+f/ii6dPpS5flto5tPHt6sqHRo1sAxh6alfTiyOGnRzYDmWyKhnvWVywPXNMlteLwif6LCF+llqvoiYvFxntln3J2OSp2YurxyW8SH7y4fI5u3fHuTOPaO1/idW4coGErKxPUO0LwgJ1Vz5PW0Prv1hMQlr9ys9ZQ333xinlFrw5X7Om773wjPXLaudLNtkNJgF12N8rL1varvapcn3fY4KVQ+ZJ64jaqhyukPNp7tA86NKxVpfFfx4Z2Ci+4GcdlHdSurD+cIluoXTuyMvJW1ou5a0TulZV0HyFSF3GrrHlZSsOztXn2XVXPb++ltF5HK9Nsw4Flin+rH+sUi3Zsrxpvsj7kdoFHvkTW6pnKjkrFXxgrVMTqrZXxKF1/ccyUvNLPMomlVldRkmYEejxLEPJyb3Go3RRRUN+2M7dhRKPiZr/sm/7uWmpvFgChpjXHL3556EDbn8BQFnQHeUfaxUXGq8/t4GYlvDbZSTw+uSdjXNnuex7idowfEnH571vGx9bMnSR8Pisa9erPoR57XHdFVu+7VLE2oud/bd88dOz+PWlP7FYsOdPkgd0MpdoyhpduP674Rp8w3uG2Sk49N6Wt25sSGdvuw1KIZY1SH3pXyujZ39YE1P6L9/Hqk55mM7zPlouOdqfUGQT11M8wlyr5t7OpbXpYfnbbzVenDPgkSbXMMAkYH+xcajxHNmjN12FP5Ux+rgtOq74tLe9SMtDBuuK+a+ELarFV1hmXZqpmL+nVGnpGJevb0zZOykau3zas+l9hb9MognzmNO3bvbirWSp7c99X190dcDs32fOdVYRJr91A09Z6ceZHtoFfWA2LuDje76vJC60Tn+I6dCtF3BEoDNnsbjJ/5PLvs/uEJuy6sK5A/rbGpV2Cf2PSR274+mrfK9bLf8dZHbm5bjqp5z3rwcJRItkhCgYd4QKrRtPTHa4/3XN1f7oZZ5caxtmnHa3sezA+d+0yu2ba9z0Bp5cIl7Q3bj/Ta7NFvhM6AgDtdznapzLeQUDhwVinOIX3zcnPlvbpJlp9XX901f8nrSLmBWRN8TsYsNr+bVBf08PzZZMVQ+UFyAxd9OXw8p/bxvs9zzAUygepHi0S3mBRPlvWZrJRrM+qntlfey4SIdauzNHtMs3dednni645YnddDhL5JLBpjZHpreelTYbd0uzUNQV4j9cq3Gi1UjXX+NMJj4tpNLnoHVHerd8wQVWx7GXx4XM8Pk+aem2maquk40bfe/ET8uWbpsY+0z3hnnP95+LqkqdYSs6ddPsaYVZ8fOtokNvzBlF/tWuP3maSF7yleMNcz1S5x3902wwR1F5kKz9Rld7tKvl3gLtm/x8FewwaNGNpj5Pck7we5alOeLcq8ctBxyceZaw6/79bWR0H93JKvcps8DbRXTJV+Pczy3tSzWsqp5/qs2XgnZPqXVOmfQj03nihZZb9FOfdWSmOU7NaPlZd27c+06PVhZHNIof7h6JyYmvPnbqRGJX9ccamkobKx7zKD+WKrVC/KVjxaGZbudnrxuEtdT70NWOehlamuGWEc23/cw9TPUvGXvqzcmJYSnVF6YX7y8KPJTwNkrKQuz66MPzBId5GrlNduQ9WmohPrdoyy6VqfJqq5yTx0w4vBl+pm9neY1r1CZ4mK1k1Dk/FmjRq9Jn1UMnM5MWF+0IMbK1fW9RJX6lva/NQ7YaLnjNq3B7a+0d6TO1r8uo3+Bj3x+TN7XxZ41omtSUnV7J2kq6cYeq1+UEu41I6kUuHxZwZU/toUa5qr23T2iNdaiWkjF650G/zUpaB467F+/mu2pCucss6wvlcVX6x2d8zb7QcmLprTc1fChtHl89eYWny9Zbrp/8fOn0dz9f774//TLIooU4RMlWRWEplCEVKkTMmQIWTOkHnKUFLmMUMylIyZEyEhZEwhVMZIZE5+65zzep3POe/1+azzOX/8vu/PWet+W2uvh2s/9r72vta+1t77cj2fzzBPOa7VyudDeyfM68+81SFe/yE+vWX8uS5v9HfD00qm4ejs+puRR+jL/FyZg5NiqEUcDagSUsTdJEIiLVmrmK/rjBJtqtdTs1d7txoP6KiMk1h9SilMSda4ZNs82MhzuvKoR1tZG/nvYT3VrVI5qcfDNOHhCowfXnEzCl83ddz1yP6OqffA94Y8jXJpCRJBI0nz41Yn+uLlY5rDe+pjHxzZMbH1dIumZcs7NDmiN8iJ6NGxUAuXZdMshr211ucb3l8/N+R5ua2uv0ZVoiPMVLX7zswU8aDey8LNrqFHAdru9VscDNqBb0cSD7vN7N+rE6z5+PmtLkuZ+M+k2WPu1wwO17XdS2VNfsXwYpha3YhUzGYhWPL84V8s/+TXBwAAAPgf6Cp95Pxsu4e/NtPIgdH3K75/j/8p/sr/Pf5fJBAI53Lun+CsHzx2ovOPUejuNXJ7w+Nzw7xX+csEt8iCSa3WI4tLpGRGt6NXJ8hcT39XiEnb35t8ZD2hddN4lozv5ffNGoFrw/tutNl5v/iw7fl0tcRl422OYLkoMYtefWbNE6finexiH0+e/l5UL2trvPT+yI1gJpNLgaPnqbPf2VtZHL7pf7I/JNyYg8Y0U+KGcNtoXHBiSGmu3NaIZoa8LKs13ZtC0993PKmelP0+omO7/PlCa4fSjrmvE3FRd6X5ah86/VL0rj/LcbQ78/644J2mmQNHvNq9jowqEhzX79yeYpmX2NT7c/3UJcoLCjUbHTFel7SPOZsGeHG7+msLH5X6Ntq+WR5w0qU75udZi/0Xz8YzSMeUJ7gkkd2KmV0wElqhOpgjY2yYXZVcsv9XcuH1fYUc/scVmst1T+3xOdM4Fs8a4bB/jEi4pJZox4LK+by+tm0fRpruhZgR5v1Eoifr9mxnLh7MeMnU9mjenyeq9rU6WfRgi955Yt56RvEDFPqnNsIWtgbfj45I3eSpHWINEzBaoX/7WLZRJuXm7uktu+0q3vVXmgvUDj/f2Lnb0Sc0GXA7kFTNhh7QVD0zsnqG4hNJcPjblQ6SGAX7dgsZBnXH3nyCmxb9VPxxtw2OKoJzXMyhi/fmkxvnenXf2oXfeZSSdU11SafNp+iyL6trzMfpIuEkx4sFt7MSVpY/EU0aPBK+PvfTuzfkmVmw1R/pBMcQ/q0335YrP73/8DFf/hZphKX7ERX2K98O53P4HZQgfA5jpdLMWMu6x/+LpeO9vs03TqF7zdMPyF68dQ54qjLYWVYbI1lativ5fPTtew4p0Xx6hjRjBtH1WR7pITT1bkXUFzbiE/pUzcsDzk2K2vpvK7e+8f21yuLcGHvPY735BkmDx8XDF++c0uq4oeZH9bDp3PLUqxfv+3x5JDoZErINRY/v9st2j353KZEifg9dvarhejvx4XSfvfHqe7lKch3H34XcPsb08SjZPZvThFqjKLUal2+fY8jCJtT+WPhazUl1DYyTOqqmnC8JTyXd/WA57j3pmMUTvQtB/FVLIlxrdl0mDBWchy/nENWt6S9OSWtytg9zv2Kc30VJe6yW3d79G8ntM3vVakPmNadfK830n71ns+AqdWJFs9pjTiy6opKjlHH7wbnfTHOcJw+UXnYRExfx43JT1Mk7VU314lH78WTdbttsIpuMt51eppcDxYQefjcsb+BINWV9Z5F+5s1HIXEaf8/8iZVGW3v5otg8fb94yslP+VK17Ze7ZKM1degv7/8qaNsmfthpfm+zVM8Pnr0Pd1i2vPVcM3Nj9JjKaE1sPH9W8EzGN1vNkbGKEz8eHLlG25pmumfPo+5AzhMvvo3etLUVz1GRf157gjGkT66XnFhpekrOx7Eqdq+svST7qkyV5+N9PpYP1w7m5C6oxop6nbm/KVRseaJhh/fMwOEVJxHDC0yxfL9EiL5wUXl8deIwo9ga9ZRi54pd+3lOv6VX+NKpkKvnlVMGZsqKiKcYTWiJRIzuvFFnPV2Sv9Pfq4SU43Xjm8rpc0pqWxritVYpBKf1d5+cf909KDsfnPqyPvUCuz6x+uCLvGTFFiLvsciUFrtR78PS6xdSn+Qq36x+Ssy1YXnKddObh8P6HbOJlxzhm8junX06gl7G+eoDQcYJJrek5na98yhmp+PVFOZRl6avfXp6D0WwkMfY8JMDA8+bq21Mb78589ZkMytIeOYylZw/75CC0tvCJ1ekJ46m0lm7XjCRfCV4wePjQ+YBfqqS4GtBTONWItfZl6858SVoXKYPblFLtz7YGKboVjYupJBve6SMY3Hx+GjUy9/nxpxzVRT76Lli38d5GNTJ6Tknxp1rLBpUnhaxctGq6I3TuGJ20/nOVlL8TkoiyfrZfH1+i9dfD/STqb2jaWnR0dM7epox9NmXPnLqz+oNnjrbPkvp7aFrvBZnG+fKZ0f2OPK0+E22GrW1b63Q9VD6qA2NGoZLr96uW+QvFI/QEs+wMMt5ssvU2GZfU4zGZ109J4Xc9Q3fx9VvaF4d9FmM1Z05ZtVgtMNB/za/tqpFXT79Os+VYgVJDl4x11KhgLHercz6D0ueTDaMN1wFNHVkilqfF7k5KeZ7vWjc05IYSPVCNpFxvoNdXFLI7aupDbHr8dQ3z6Ls1X88eyZ6fTLm/oUYeuVHvQv8H4VvZXFduEThp9wcZ/enspKOpdU2VqD6/KXj+8lM128mDy8/2vforN8P8tIjlxeLEiw9Q5h7iQ59f7MlquiZxX1HwOqLXmL9l9giR4On2YEx+nlHI95PPTTuJnwbFA8kKX+yNC3clqn4ne3e6D7+uT9mF39qSrrHvGRuDgm79YBfwfS1X/lH90NLw+bKHS87vnYMlRZTvvEfO1lNb8xygFOId175qusFA9Ft6Xdavxa5Un+mHnn7znut/jh/54hBcrk/1bjlO+flYgrdxwUS6+s50+nlgRvV9W4heX2OnE+q17UrOSNiOJyPfenSGJBKOr77nGTnweO8dTJaXtNbAhvHTd09ibta+irf1Y85v3QlED6qOvd5mX8q7fiY07xa5Nu4lcvAfX/F4zWFx6emXvGpAAudUySF7MdGaS5MfiHKf+HzzlqTg54qUvbKa4fQYNMAlZ5jL356PzMw4jBx3HlsuKpl0/Cf/BoBAAAA/4O4nPuuM+TcLKpnnGHpf/Zd3d/jf8q/8n+P/18TCIRhtnaF7K9aL2Nqj6kJfz2m7Wnyxj7yhewntWDaI9eOx1k6xns13tdlPaC5yzxD7ZPW6lVNQh3D61m39+OHB4SCvngEiEe4kt2TnfM47DxfwCLQGGn/e8XgeszI25XadSXbet73VzxlbzqmHLMOE0u8a597evCVCpvPG6XUlsxZOx6j5bXugyRS3dneBYf+3G2QnS5dLv6+IPlzb8MkeSIzs4tnqVbFa3HlBtNHRHyrn8y86wysS8SY7vAdOes1y9RWcXt8s1bc50dsYJxZDOlJyUxHy8uGXpaBz46IKfdcDSlKSO0e5iHsTmy/pn0vnHyjcVdos0jSyedX6V77FKkHze++6io9Hehs5NXhUPmM+JB0Z4iyzqtPC96mL2ln1SsGvblffK5JvjpvQ7Xz1nZH8ADd+6ZM06UVglrLwj6tYOIxc7dHPbnKTari6kTT5LX9WWFhEoWBS4HG1L4e3D+5vvoHKehQLfT8JLERH0lduJ0qMtvTmpZ0M7X3zsmWL6QdNe55wSZXLZ5dPR/Rtfdjjliiflx8qX7qV/OsvNnmt+aclp3jt/0G2GLshhx7fbKpt5Rbn8mLmo7nPFjw32mrMn/2yMBz3dv6gkGD1PfMvPbZz9YZCUQGWl4XKlI+fkK54EGKrRKj3vrxL8s6vPm75Xa20JvGHzOcT4+/pnHfUlQ06WyOHt3CqYTlkQzT24f2iL5eNNDLotxzjXSykPFHwNn0K1wRWxvitXMz5y+RB3jnxHBkpHn3ccunMf3MesJc47arheWVxM1ixgH6ky/7xUrbGM8X334u9fkDp03d9dHtuifefJmOla3u1IY6xCIFMpq7QlrOKF/yUIrZeMPo/vXbzdixcXEK/oNzWgSXw2+jUvVdU5OVN6+TMNNa3LkSXnM/fH7AmoXjgxmr8svWTb9z3vU1ESRESoZd3FMjtzYouuuEV8ynkvlfZWn4DfDsHSN8CEl1118JukEZssghmejNWcb79E/iHoL0+ufAg2OHy03qDfTMdYoU3nm+HvYWINkWabVdKbYatA2Zv/OB6PuR067PusurLexVisL0s9Z+5mnPxIfmOA54jem2MWc2eo5mXfE/Lqw63fqhvWusP1Sa/mAyk/ZK9QmPXyRTEty6UZzRR5f870mJvL9Z59hUKP9Ce62tUF6C6vU6X2KrqG9Y7+OUOl06RbJnA4XBG23kN/dGsR0c+znK3xHkfm1j/fxTyvABqa4XtGl0PCyPBIfLdIoVDtGOyeqZMfE0/PlWmdVT9GTVgUg1ere43uwvrRdJmXd2p/iSep4Yo5QPmxQJ1Vt4W1IRI219g2bHi+diF42DKiMfXSFa4ZxPi1t0cX7eKbQoqLYve1RemKM5V7f+3Z+3fI0HmF6MrRdr/rG1aBTfVyYhunOmtuGlXBo154rOCxXqX1suKxMqWsejueX7svf1FG6Emwo8+lK2k4qnZt2qrN/DTegr22kR1sur7GQ8u8w8eFmySTnvWn5p0OmYb2cq/3r155RPeMUp3eFXm211I7kGAhF6Pqen3UX7Q+M8igUoou9+dJGv4G6NbRppynWP7ItO1g70371hfPt098I3TeJTny/6+qiVdbYW9d0qYwxJWD7MImfmROGY3Gv40u7oYOAtX0P92ny9PVtPhPqY+MaNXfj9FR1FTkrfJdb7nPTa27O7oK7ulr+G6UI6W92JQ5Wnqb5KZL3IaNhgNzRlFt6QGU9UDh6yjVGeeD2gEZVyWG7sqXDdRHoDqx5l4byL/pL+mrtNdFXP3VvKn7bU+xN9SMdUuSb3XNQTMPx+ykhnjzyRufrKk09J1Nzt3wYrhR9ml/wct1G3OL/eE7Gb2z/vy2zKV85jwzMR9s86yc4wDU3FammS09DeVZc9tbxULlDQYlU+++ucglK7TrSQpPHHiA4VS+Pf7USJVcGDbaSF/vExVeVd7m925eVFNFgmcGypSQ5pNa3HeZ46InWRy5v9Omc2vy5n2C4+h1sUXk/kPh5WlyhuMi4jj/O1s9var74ZQCMde3q7+/yN1JMFbH/Y7pW6ZMuaZ8nsGko149KqHKHwH9BrLk4qo3TSm/oj+vqOXaCxVrQkIb3R4k5Cgq7xhkBsj883CtehW77ub15otoxMOgRZ73+1sutVwiuW34I02gMj+D44AAAAwP/jBhcjZRQJvDQXbxOS2RJY+P4e/+/4K/8fx//F3xPIFKad2EnnVC8bqxEHEH0Vrn7V5Xz/qxZPU9CHBB+XrtHe6J0yHFcF7TdEdv1iN9N9FGbPP3bK40wwQ0+ySWaluo3ZvBxdD9d+T4bRI2c/mBkcjDq6nfe2UCGNpEboy/nsnXLDsc4HWt8HOFo+uscs2Tvwfu0sSfm25HLRn6CAbscjvlWEStGD5hcrb7h+Zr/FsVmz80TvsZRfdqXC1bd09SQdqdJfkNoxJhtbqUyLfmhNs/5KdKuSTyb699FfHNtXhk103I6+J2dnEu9P3+zf3BRciJzKnyd8MFI9P6HhyUE9Efg8pvO5lZj0nrulmlyupHvalc0+OV0r8NzHxihnd6ikolv0+eXH1Kn8xtREWWVOS9qfvr3N5nb9I/TU0yMsi9lAbGJcVW6u2zyRawe7k0tbedFrd+I/O4876qlfIT7xjI+bKqOxpSuzolcyzYZ7n/LDPB/FM2z2L7MU7ruO+d4wnSUxf2xNdFI7IfnAVBXlpMzdUkfP8nKWTPVN6uVyNm3qqIHreSH2GaYOT81HPkn6qHXtblrf95aqVFiMLYHmVX/T2qXtWyWqNZYvBvpLvC9kubhZltEGFovvC73w40nXryv8ibKfPxssdbk6MYdUMzwL6csUJRETU/9Ya0Ray731g980cJEh+ZC3unrz2gWhIudBNxKuG64WtKF73Q//0H4eYu1cf1HnlU3Dxh5+zw4HWvWfbg5UGWP3jLWITyyevbLdmDuXp7hLk72IfYs6hEHq1Kqw5+5HvKv9Sh/ue2XvNz6RQ9eulXfv5EacEK1c3ENpu51Reu5Va7W2LmUvPhasvzKuPNJIbyf0s9BL3OD2l4evGN4MLtwftfrytVlRdlTYy+J5XzzdjqHkY9yLF9MSx8ocvK0CzEwz9X0yli8Hy57hnZ8Yj08NYjnLmp08UyTHQKctmChWzltU+fjmZAolT857c/Wl7G9CD61VDgwwzn+mSjbeTLXoSpxqpHy6IkXaIFMx3fmmoI2F76JdSMI6mypNyHhbaElvuW0DSb9ouKpgZwrVqYIvnAEqpUuF12aoGBteqinqM5eOZTzaCuFsYSYxJ70h3WA+lNl2qEEjqDucOer9bILRZd1j8XoGT3p2dH8lE8jr8uC/vnfHlugMiWC4pFyI3KLd56pm7yrrdlPXIRnaJAry+kvK1wwHX+2rk3d2T0jS1uYm8no8sBzUtfmT7Mny9lO9M3vluBeGMz91kdw1kdIxjdPU67rze2bP+4sKPuN3n94Vzg883XfZ2qWEffyo9Y3u8rcXWm5erXaZJbHqHJGRG6RlC3l2bfRq5bAWrYLwdL/kMZ+OwZXMnqufNNx+/XFmmmCK1lu9fXLa0FTgWYjijKZQ6tQnjbuh2xYVLzqV/vxSOrw0eto24ILV2/m26YrdTwlcwfeCBz43VaWTdcpx/TzeYvCsbnG1M93127VQ/t/FvwxPFB9ydzr3MSTrW6b9WkGDzw+Dp7duvXxYI8HKMzcb7hHDum+ASK5eiU8y2MyKxb8qecjhaIQn+wpLQxyfwIG8lgwGphjPD8TxDNRZTW9asi3o9GT31pa6vSBmOPH1/J3lifLz9w0YdDq2mgMa7378pUs1YSivcySd/uzXHErT31raagN5E92R+ybkab81djV5bx+PDTxd/fmYY5Sugdh0hLXgFBHfUutk2/xFGrfF3s76XWqfdln8OTxucF3Jnu5NSV/gA8riiu9K3qmqGVW8DcXHtxu+yQgocJqNkmb7CQfQjNv3z/afPiz8QHx+hLnefXuN9U7M6/clJhf0hRVKfxeQPsiifaioxZe47Uv8MCjgVvqeoYtVq9lCfYYpajXKD5dpD5y/ZG6UrPNTg/eifYPOBeLPK8Ynuk5+VUwm5VyeOlfnpMa7n1Fxfom3ooI7pcbDbv/bp8921YeFPMwgeyTSIP/4zYnGuIlHM3Ez94eO3zA8Fvvjs0GgD/PdANXLBwQ58gQNDJd+H6rVjehefsVu76TX6XXfrF80dSUjLPLa8Lk6xx8HC95eFtjNuzqmcSht8qDOtYzrEaoUj7Pv8Pq6LOhoMZrOqAmS0VAqVNV00dw+SdQZdy/gpnDa+fT497sTbDRZ1zQvGFKN5FEUl5F++bY3bHJhZ8kv7friqQ4hcXJXEr0tRpKjfB6i/+THGQAAAAD8F1pWFXYx3F7NDPJ+cL2id+TB3+N/qr/yf//+XyOBQCDyc+3MpzycdexIfvbOQ0frD93Ivue6Y2nzzEi8TX2giUmY1pjch/fhfdeJtig9Argjxsa0YlQTW+gSn9/gkbXhTnwd67H7sb/UzqQnbr2sMgyMf85YcR3r4PakYnp8jmXex1Ssrvhu4GPN3qzM04aicZSMDVlnE94ktOU23pHSa55NC9ZXq/VTmW7Te79OE+ptnUUcan6o+Sln95fGH+fYn0aTl50JjDd/Fv6gal44by2BZ3OEn2+cqphMNMmdvenoc9Iw/xtzFR26BcYMTf5cVzXWgkMjFO5btJDZjeYdTeB2rqn5JF9w7+h+1Vx92e9vX5VTXhqdPkxHGX65Xe0yaZWFq3pV8tcATc10HS2L1tpH75Lc1DaG9xbU9D4ZUbtMqvZRYnzQ5ps8258l0viU+CLz0r4PI9kefsOZY32rM4bMRN9vZp2/482b3tsw8HBA5vTacN7o3Vdc+qRc7x4c3dnwXYv0Wpph+HRvczp12gTXruDp5f5vxPsGHr6XqL1rsLyjtvx3UzL5fQ5eqtN+gU6Xroq4fayfkWwnG9juC0pc2Hv1UWrE/s0SuQ075r7ePo1D9605+ssixEvWHwTamz18zclB+4m/znbmoOrZRPOU27Wq01LcH5mHTGNOOrF06aQUdLwo0LELfiDItqVrc/K0NmW5t8N6Yd4V616tb8POtqzTq21talkPLXbd0yTEBdEmOnZXTjH9IWHOWbs15fZiiNp29avKzhi7NQ+dqZoIBrvkispnqVlPczn6m4LVtI6KfLewbjMSjab0L7z0mO4XHYEnyj6Hr2nlzrYh27WKom8ivB1vNaQby59PJWfxMRor9jw4f0P2zqwC128+zchc/dL8wZsvLvgFvm/eDr788PBGa+47h0KJj8GCMum0w6y335GxN896CTkGFEwwsm8XzhCH5v52benmTM1255+0+jhP9e4YW+emwn6HqJ1Wa605blHhT5eXCMemfkj0SorGdj6Y6160D5IX/maYcmd5P8tBUS2FVAGFfSfLW6NlHEMva8Ze2LNf1qkp24dK9E4Ay80vlJG9YWuRHJXX15pa6UuodHp3FVyQ3dNK01CU2NrBq5X3IernRbJqliSVi/WaScc9a5f4TlBdeCC2u/aKJKnt5y65K1QJopReEj16Qe+qGjeKp+6rTj/foUSzKhVY7JZxKltFxvlh3PxNO0tVI1vfPxXnOgk5JhTvPl364bFL7I2Yu2+5q/ydtMcJ97QIu9LriR4Szis0lJEePNFqZzrgNpUYYWGomd50UiTqg7HJrp/V2tzLuq+eXMndlqd6ZdLjd3h7OmFSZZEm6airyO6U00GNM/dPLvA/KW4+cHNrjN1rM2SldkbFx3pMXO/+3vPj48HvIg/LX1hPCe1s4Y66+u1dCTuTmPrPxLaviyZBws6L9gGflVXyVvPyKtdmH4jHR88KecYsxP4Yf/iWjzHoRnoCi/fCDt4X1kKPmUSKvFZ3nlhxuSAd5G1+VZVWP3zotY/M9xjiqAuTZ4X0z4xVvWv7JvycN5Q6uEzS8L6Tba6ZsJteCn/vsPDZUYInZ65GXnIu95mXTjbmLTyf2vqvvb70m7NLe4ByInVwlm07IFC/fqGZ/MDp8+rKuQcV9ijn7S8+dPteDQWfxe+A042RfBxX+J/Myur11xzxEe2Tj4kt10tJCj56U3Z5/mDEEkV9vJymlqbd5ysBrNH15/MnqDnC1YJu3F9TPXuDKoF9tdp54ol+GSnNeZX7Wp1VO/pOvyw9bdx9ZOOuVk99vvBqumbI58b9ygdHNzhEWgrbq28Nru3OW1ePXJi0+22zwHni+dKqFPMAAz+3fmvi9eYrBn4JRy1r3SMGqh5+lua8XuT/YJBRPEnJaOHlx+8Udw2dw9pFXM5L8/s21uQfl869p1z/yT/00g2tjSQXkuQxn8OBA9mTnZaadD27qB3ZWdqH03WVXycznd9DJy0k9sm+6nZLmoZI2afKcyuW3zMrGZ7436E5E0KzfVmPVLvae2FOpqZhdtFOpDjasI/S9uyXnJjRnBF7VSeuhoLh/IO9BRJ6F29KEJ+2t2HWqHrm7qv8XT3z84yNvjdr5rF9j3dkjDLa/rBNba+d8Keco7t3pVeIWK9krGRCMeYyzc6iHvL53NYk23h1hkPd1VtlbTsi1QcH/smPNQAAAAD4P1BM/tW7/9Zxsu64emnnwl+vzojS148p/hIQHvd3k9vp8eXkF/PY7xyeGwmpxT1jdyXTSprWbX6YJy2zPS18OckVbFPYHF5PU+GenW2l/ocuffmG0gHXBw9H33yxSN1jkqfPFXJ98hRJ2OitmPBHV3p73FyOOJDvJtENjdNv0BM5Un2OvFs3JdbjzE0e0t0c35v4K/mWRBl7sohL5St2UBRqloQS6TptKlcWNKb8PC01SlN0Y/Akjc77N9H89/E5UwAAAAAAAID/hlv3+DyHroZr+neZkNluaVb8Pf9P/FeemfBv8/9axARCisiIVOCbxbPjLc70t17O372t1d4gtN4WG/e2eeWJPZXS+OVR6bJlCZPLl89O3yjk+BHfEV7BX82v+963kDefzGxpJnTej+aGQG+NAPWDc+qz6X43etQsz5zjj7MvqRa7JhH1QVhUtbJYKF606lxzwNKXex26IrdcpbuEMofolc8dNx9vUKH27X2gs/d+AUvDH2KFyY6vIs2fOEOsrhr3X85W6MhOWPk8UZvEWG+aPqqWv1ZIHtnaF0Xr0qHTkUr7M+293aJ9AOXj7oxJkytjj+jmbnn+nvhSEjf3kPKq0ORqTksMx1qbq+YJb5qLcXQy0ftOXMpOJG6s3/3udonFwIfSQtZuE3o5wgtarRdVovvoC032vJ1+8q4sY/65+A8erZnYpLSR7vor10LZ3+qRsKuw8V2JyV0Q+ZVxbn7nxeJYJ7+tGLXTlTZhBlpNbt+SDzrVdZxhaVlTYrz9s+RNxQZTLulZp6814oyiqfuezwhSHXDWEVZU+PYnedL3qTqPSpq39hJlIO0e1kMqr3Y/69SOynnGZLf31eo0e+PWxOhNU44JzYOtTEVyXcbvi37cX8ttTVra+W58XeKlepSOwkgEZ8lqw5dTYbRnKjbYF7X8XtzbqejXENHAlX7qNoPUprYVC19G7muNQec6icWfX9R0HXS7/+h+9axsnjz4Pc+g4/6lSJltd/+kvknBDxpDGg4SZzqvsJevkvkZWvTyC4x77zws+UOGp0Dgtq6SdxO9HTkh26/dI5Uy2+QGaQ6T9otj4p7V5iy07WvWd0wOSH1yPycilT9nWrYiGJEZHGOnQmJFTP2u2GT6mTZveRF/6t3rzMYOeZo8pUVXuLQcLU99ZG5SLF3Ie3D3dpA400du6QPnTn4mzdmdbxj5OuGSTzdNqNqBuLCb1EUcy59lOD58YbykKbl1gMdjSf+pvF2ydeXlDB2F+fQms2K/Q44D66I+3/2Ye5PG7j6JPb9vH0shd29ok3egsGn7tecP54bee0cFUf1xuH09m7zsrZg6K/XFQttq4VcnB+r2qnGnZGk8H7z0ieW0y7ygr1p7zJh0nSu/H5+a2v7fp8kPR1pQyo5VKHbfOHJPOk9L4PuuL3LPaLUlbY6XMA8S3zNSETRtYeO1sW3cmdKwaGiQq3qTpjGzpiK5OZ7FhbvpRrqj+9vVpYnvbbJ2DAlmqW9Lng5l1Av7anvudV4fJ8+mTpd0oK2pnhgSbkveXUWWUuRvRWwt472yeH7MsmWPpK2kV/5PPXnCI2beYSXXcFcZWqc5v7X+21H2c8khMtZFB24p8CYIi36oP1aUxtggl3skjW7IiY78gOCwVrcEC43hRzHbcR+12LUUNp7cnYXRGc0n1c+1jQrsvbJ8W0Uu/3eU8YvMQ0MJVpLhdcPWa4OvDS8EmbOazxUIfRXoYO2nHDU8uD8gTaCGj01kRWyv+m/jIVUtZhuZC+cqzJ9r/PGQ0bx48+oEcf8VxSj2Kp7SnU+YRsqsvVWCvy/U9Hi9YKppc5DP/KpIWS9maa5RfrbtYOfzzy4X+PYr91bfNEmtcKk928eqdDUx7Q4p3bM+bjlv73NiyVtm1GoM6T2POgTYApt0/E5vsPX1mPaEd3IRPkX+ELxAaE+dKdIj5Tusmt0cZ2k4S245edLrFanVqQ2Rji0GTgX/wHqS9WEqnmr/t2pVnxOcH5sfD1XqEC3wI449VX14x9cvF+g5/6zWm23ft1EzM6qju5nFS283mM5S3hM0GNpaHxXZc3KMdKLL79i+pxSH1v4sPs9+eCDLiW9mVduiX175OwPH9JGGHdrvua7X7uEKW2d4lUJ2ScDTg5cxaVj5fF0e3Y+0M+o51bqDZ7g2klIcvSoDKXskBMo/VRhRq3i09LJ67X+prZlWK0kUTBOv7ucU38Uj4Dz8NESup/55cnJ74aEukSwjt0ibWk6/e9WHlCvKTcd3W/GOcH5JWFn3DQjIjzJ6eYOFiiHvsUiv4lkfTbHfBwMuMZs/vm8VpX/MMezOd69wU9WXPsdlwz6I5J55Szt4mcqVrrlG1OUAz/v0JSpR9yyn5SLTIzSxw/dCcuk82lx1rkk3mRv7fu4/WyPyyNHFm/WMZH7im8wzpm8K7xz0VjCQuyZZstOlKfJKyzESzvcdPW2sOd56BcKOY8nRFvxtUekTtrtYiku1jFJ2B8iExN++tN9dpXuLWe3EkK0IdftZbgYeikgSeuuitNzPm6Lt0TvOv7U/6Zqh8oRuodw/dSeNBtf5SfvtnnNHNVTyRZ+RhxusdvvX3DigVSrORcxZuG/kIf8TLu1nFiMpKgfTtsen+1yPsV2nDGJ/cNbot27eijRL+sAlzyI/5QMuh1eumoiusZqEqn23ErTODsySuPqtK3tn5QRTv/3xnNCPfDNqGjzLRPFak26lHlLfr83c8L465L7tcDLlWDBbvKLiZ5INno82G85cBhqvYmiYiCb25C8Z5ZS+lCI5/fudzfWjax65hZFSYmwkL1nDPzC/ZNLfVFnpbDa95jcdkF1mdKd957hSpVl10UX5yFcuGi4UBwPride9p4ZsstUNhRqT/xTTG+hW+12NFj+j12S1fqVvbef9Qxt6+4Kf31Vc8nn1vEZJqqRgLI2FWkbhqQbbKP8vtXxz2wsGwc9/+7488ySG6jS/xMTWnJ7boGJm5LOkwUX10750hx9NitVcYJn6zPahYfKoO19Ax4tuinW1EbUXK2fuqrDcDBg6/lPqgETeOHeJwJOYUjvRHZe0T4iMx77uW44T5jtecEWhfcfG/Ue29xuVKBnFvpQId7w1Emg8U6uu1uyrPPrkVo9K7SPZfda2cRvUB0QozQz90zroZu+/+sgj3Z8+qfI0bzq9I2riCfnIssVW8u77jObrvgpTufk5UVnsnA7f5Tbu/Ur+/Sr7l9sXpZ3JkS0zgga6eSyctMu99IHqs741rB/UgvSuBilZmFx/s+dXlVGk6kej4TdPcz8d26QzNV20C8sNinNva+XZH57JJ+DWSSgRcH0wV70c768fa2jom2HQEEAVeuppwY+fcjJTGROyO+KPfvf0ch17xlARmhjRUKks3DTzM89OWutbabyrsl812/ny6LRf1AscX4MFI+3+EP9w6KGiPR1179YhEy4Rv+WOhVwfx7f0Z7ZO7BZKux9/idObz7cg9JskdXhZWlGblV+UtLOd2z5T2T6PTzx/TmQVa2QenDri/eH5pVmerEv5dNdiNm47x8Qb77lmESye27Ot+PhntWLydkx3fr9NdzSXWZ/OVXFVIa8/0SRBrEUaSUNy2vsFTgU95DAbXFfzD5u1HO/UreOnbKH/pLSTe5jwfGg/W8TUXdk7VfT8aSs/RfbKTLMJVvEc/lCmXqBYbzP2IJzf3yNcZzJuuqeit0XzYULq+6f7dUv1a/ivs1q/0nr1QC5enCbOMuHuTckQ+TxP2q2D4Z2aHa8HjuQe92/1TZj3ifkor6YrsaOJ0eqJUPGd0c29fDWFZo+pxTWE/aZj6TuV6Q64kkYI1N4YqZiLPt4+lGy+3/tQVVfbzI6p+YzI4yyJPHZ/jukM0wbwp9d+eUX2eviwi/RxxYsXqosZ1t2tGWsem6755mqW1KWLiam61DeXVHZkTn1NTqVJTpb09aI6KveNWO/Ilfr2rEIB9rXJtLGoMPUt7kt2iqaBxucUJu/ZKgaoBe64SvT1Lb/gK+t9PC1NBdKszLwMSoqOBJITLWNej4+eKjA8Zc5cSMSaxKaTz3vWzKw4gz5wnZKs7PTrKT1BIi3PUvtM3b5dH9iqMmrUe+m4SeK+eWamOfBIfrBbaI171mKTHqUmsdQQ8f3GysRP47quaZZ5Hnq1majPtRce6H5pLkn1bo5KVGVm+T7pFvyb/MDHK5wnRt7Zx+nRKt16UO127M7O6v3StZHkZ+Q/Wz5sLc507ctyaWa2ZDolf/NWJ/WS7OmTir45iyWnSwYzPEilFD9mxxAN/flFaXfPQu9jRvSgta2NXwHR11Rr/is+lRFbkyRCi8YLDdlkVyZculYjJvN/x1wmNFjde2GzaKzdGMu3f1tanPnq0MFQ5QFnUVuXvNaXndf3usWeeHz+jKLgqaI8NkGS120TB/zMnh3zV+Oeq+Me6TDO7mVgcRS95tWhzRJG5TEu3v+b1mVYOif/C4swnd79nzW/erQ2xPQVJVYni8Ql9OdC7c5TxD0zy70yaNq1atot4530izyVd69O0qr88acFGm13R233pt8eHzjIUkTWbTrx/OyBBVVrzen8nqypW93flRhPPOWyH2fQ6aoQ3dc3uZ1uWndX6fHp/vofxkejlELPPfz5JlXxpHqq8faTBXGmnvFcKflnJYzLzw/UBoaHqlcpnUzojh94z5o5tnUgkrc63yUx7NA5sV1c4mxOig6rUoktj88qrt00kGfqH9sdnGG9J5pV5QKXls18Z6jTJTuFl9/2ybcJzBVy58eILwYUddQ/19pLmEwUu0Kn200jtPN4jrju0MEu86q4JnsjTbn8oKiobp9MNZNvP/bzPF57G3t3Q7UkqWWY4v6IwbfRxAPz5AU/k8o6n3XmZf16pdryorrp44UGjsyzbYJUlS89vhPyF3k52o8ra2eJ1WevmEeomFLHyihXHh9r+aikFjBQ0eRTR0n+4ePrBU2lJRNN+9UDmj5GhzJ4E7x63vaXkQuG5feUODuz0j+QiLGTmx3KGyr51HbdwYh+UZ+dSOmXZdoTtrPPqwVJOXaaGG0VhoTvZ+63GUi0F3gsG1j6XM2NkMglV3kgO3WugLZ3hI6tZZbvcWxIexqz975BOdfSjOHfC8JzH1V3j1yZuhnmyH7GerzrQcg7q8g3BukR5z69tnqXcJpci2LMu7rKbn/krOu35iwGv9UT2h8OjPTXDRzt7cl5RFI6XKbqdqv1ScGEfZ+kf8JUYFW35Z3KMKv0GLXvG+k0P4YUzjYFlXtN7ZJLlko0nFMfkxR/szRLExvJd0xx3WA6qp0nYdi6vl9+cqLF0aTX4HsvxVLv4f2M5EHTuUc2nRP1d5Ks2JKFuzjeMVBuHjkQwRDYJjWde6e9fHqx6TjnolTlm5lA8/Jf6h+rhKT8uy4XylkFrBVLZL6ZlPzOmpvsLyXWI7Q3uOJSDtPetHX2mJf3Eg/x7z01ZrxewHqumPCdhftnR9cf1rvnFAotL6lN31fS5K7SyDBrqG/aQbB68HKLwofL8iLd09MH36QPa0Rk7qOcd+BnUpiVsfB017rK7pRl8dTpHNfO7J+W5WJhO6+0RC5Y/tH9wlu4640De2RcjOk1rs4KBraKU105u2NVB2jFoulZ5n6cZZO9QBEstU/s8kNLeb9PTc/TzxadT/Poqhv5aSC2GNlzcDMvYNidMcrqM4u2joMnd+KXEOrr7gMle27fc2ZZprA+kOA10ct3tvzTh376Td6HFEZMRymZ05KPELUxEgh7xs55W97IrvV7P5qzbOWX6roxUb+13zE+9ihvvrQO0a4jxcrGckWJxxI5T+326L/RxJRr65v5nJL8kAShTVl8PkO25ZqDGqdPHoP6tKrSUZa9f9zj7POsxyo+3+cyd3jqRc57SLXvCHPnjSCdu85ChcOs6nd4ecMFHR1mZ0W+BrKlsHZYWkYyc+7lO9HXcMvKRGKOlfr9+ya9WQp959Cwe+SvB0vftR2T5tH9XV+X4XXpk9aK+uR0qlA6zyGKrDxvhn2FfFVPtrtVvERDjt4YrXA6dqTmZbRZytic54NmtlnC9xnKok1Z1Ye1JfUJdq8Y5Y4/mJe9XCR8sIuLnb6KszJJ1G63ySm7/llqbpa6w3MX0i+Q/iZXCqRf3ryqKTd2zTG5za3yUfu5nFFylo9WJ25S9Fu921B1Oifp/8hdQJ4sN3v+YVfIu5SagYS9acHyja+t5Rqcd9jeY268UcydwPBCz7bN/nApD6X+VyPaHP/UEK7ZS0XWyxzJv7iN3oWmGl5Z7VSlnmOjuXD33Iqw/Lrltd7uOTXKOrGEl8/Ujm9X+Lysqd6r4iwuFn/sAcWZmwSjFephDeuVjls79jp793R0cuek6mpWEzV3cJ/7ZVZ4LtbK8YVaW0qnj4CMPMlt4rbLqksPqxglSt6vR5B+GBQQKV3ykc35SeFkaNIVrV15SSb6yWrOhnnbpCoFmd+cWzR/s74l72JIoldZ5ofhi0Ps8/UOZ88EmCcwep82KldPPd2Qt0vpcsZp3hu7jAR0457WT/mNze9VGeQzjztwdavVcdrPso+BQ/vbotqmSuV5i/u10Wfvy+o/ohS8NbYps8wxO/k85a5i2NGxzQ/59SKSF2RpiX/OF88PbEW1GMwptHJcHRXembFpWXqlK0nR5tcQo6xo+BOH4w/HPclU7tfs47cqII93svlZsFuJIcGui0zlrHTMFM0y48Pbu47pZnftPmr1qfO2Dd/zfku2KEGpn1rPplPPX70Z01S4h1lSO+POOVXq2oTz8uL0Wk3vQ4Imp1/+OBxUqT/Vp03h6O2hP9nxSbozt99EL6ipgS6g+6ryP/nfZwAAAAAAAP9j9PdMHnPKDHuhpBr5NPVx/LO/5/9J/sr/Pf8fTiAQjmafp9lRw3VEsfdDTo3xpdvN9stt7O/SKHOL4mpaw7fVB/rXb5/8cTWI3qBQRGQoSuhwbbL1ctIa66He6S+NBSOz5D0Rxa7zqb/Dcz/v/fi0i7m9u/KtJ8VbQU9XH9nbdHJOP7pPP1pjjF/scj76cFCR0Sjtj76j4o2lizuNjz3rpp1j1Ql+vzRTE1s6aRDCmxc9xaJbHmW5WfDp4vWOl2fXld39Cl6RtTotPE1mUohbmagYeld2uUYztpfz2ZVjoj2n2BvXpF+kNUwu7hUg0ROr2mfG/Lxh/RnbwTRJoY2D70apyX85meqmB3Ipy+1PND8T80aI0qX7/kWH36S03dc/6J/kJ+UllBUZTV4NkbDz4mEsbnd1kA6V51rTtXz3Nq42PoqdyETj8G9z2uiTVCxlCaIuhkOLEg0KbE/I/mg/IFvVC7gsI+ARuJTf3/LgjINSO4u89uCjuCP2h4nILiTTZpiMFCpvJwUkJeYeJ+PhKB09uRxgbtWvJzWbFpl1ny/oRoyWliXvK103Hb2kEdbUoIvJ8T2c8YYt9o2XNUvjtuODhatEw5LMmS5P+Tr35TGOcMobkp669vjdbFai4R/Z6qt8BNOCXbdexDOz7rT/aVXtYGZyJ+ajaqEqeQeJLwWVP122wng8cfcUu7envAU98fWDiS6zxHKDzx98dn8qMEOsljxHv9rA6CcU7f8+qPNC8SXahc4XDqrcVWLPAqr5mZ7a+n7K1jbp7hR9onqQRLDd72Y6J51u1ZoI14GimQrK+N/1vU5Rij5B2Rvtgk/GzLg1bi29Tpy/auRr8GfgA3VrAz2/SZKq1t2YSPqCcgtK09Zn7IpPGBopq4aP8I1uUBycCtUqLFUiqdov63bqSotUD7mNfxnf/uzcS8yhFzUXa0j3fHNJ2jHTmS8+URvCKxma4asteHeHg8DlBILE0zYRmbl15r7Id+Q94Vsr12evVP+W3z0vu0pu6fZ7xwbl2q43vkp8WYSmcJ2NK6cyVZqCvxbwBwZn5NxjuqevIHGmUiFDrZq28VFO2FdDiaNkmy8Xl3mlcvamkJexnHnfI7XM3sRvuCWtQS56JENMeiu4yFN291M+l478db4eNg8ZB1lZRuEEt7Ajmz9SSmYsbdrNmOQKhngPB1BxmHlvRjhN37EwPyZRv0PL6kbeUuGd9uMuBBaTsq09Vi5H3+zy3jVzKFE4MCy349rMSd3fQnv22ZMs8bxt0Iqo2MzTX/hO7Ejezyck5SahFjNH2SAY0k564Yd6paA2vcvyi/1so+xnx95k74hguHolSTz8fkBr5qnVD++IjxuShnvREQm+2QyIuGPK8udcfu2R35/eP93T7hBMWdDJQoizdjhZ2VinWV6//iEwonN/IH9+okaK1dHqIysiu3NtyN4eeR+g0d9s1e9qLqN8oHAv849Ont37TjnsO6rR9sZTfd9Lv+sOGlpGPlmXRX/Y3FP+0NWxY29yPdPC2Arb0D2NXce6v1T+nBR13+Y7UrL7ld8dsqGoZ/3SV9MkvtLPPtmK2BMTLbWr7p98OwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh/FgUp87/G5iCnFY19Sq3+5ss+Z6ps/TJsVZQ6/ZRUo/6kGz0usUujsGYWNbPTlC6SKRm/zqCx9V9WvPvfwuG/ipQEAtEyEYFg+eDLcEhTG9O/rCMiEAgkRLt9CQQ6IuImOqJ/qEF4g0AgmP37ef7nZMWy2PV/ib7hFP9pPe0/VPKP7SJQk/x9Pv/pPAlu/2WL4H8gyr/6WRLPjzlr+7Nt93UFlA/vczP0/V+bEFH+h/5EINAY/+P+xP+bek1MLfn5b5i7M+t7OzgwzuSRDoTo8Xc/HvtiPs4RFtZJPD97Qq2rz9uRjEAg7Phr+Rd/91bmvw/+VzxPIBCo/kP9kv9Fu7j+L9t/9P9QZvsrkv8Vqf+Lev7OH/i/3P4fkf5DpPpv7v/f9b+7Zv//tPP/4+P97e920vwVq/6Kh/+b9ZD8vRARiIkIpP9+L7Yh+l99hPAfrhsRgYhA9m9/+v5bmfhfy8T/nif8nf+7TPQPZeJ/KJOQ/UO7/vW4f3U0EiKi/7z+7+3+f+zXBZCUd7Q36AYGJwR3Ce7uEjRYsCDBHYJrSHAGgg4Ed3cCBIegwQkW3IO7uwSXrdoPtm7d72ZrK7t78232eaqmpvt/an5z3tM97/T5T+effTgP+nCe7D/e6/8LVf7iPP6H7xE+/KG++Pg88J8f/A+R/6cH/8d1/e8+9nXx/6SX/w6h/8M96L86/9hv3g8vRuQPZ5FDxfiffub9f+FjbVPrkGZ72xXrG+0v+gi1LNSH/FB/K79A+4SrIodkmhXvr/IbhP6QH/pv5R98lD/h1QgnVv1l/oiP+WH+Vn6Eve2Hdb+7Lc1fzufhx/kE/a387SO6jI5V7GbFz/4qf8bH/Ah/K/9RUO1973svH/WX/Wf9OJ+Ifyt/Wc11FV7kWDL4L/MDH/Mj/a38z0J2rvtpYNyZf5m/5eN8Iv+t/BSZloXsDulY+i/nf+hj/id/K//i++xP4u7bufQv359FPs4n2t/Kj9EsTaJonXtk+Kt7Z6je/93/YQH+XWJ++IwV8uH5391T/+/6D/vChGih/sdnvigfvj75f/IX/Seh/sPuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv1f5tg/bzUyxclC+b/a0K73sfrjqLU+9WXOu2ukbU+6+3vxmdYHM+SafbnQyaaZ0B45sOxI12c36V3uWObDtbM1vM9cem3nd9UE5vw1T/48eJZqUv3c0xqVwTw7Hvx2nzfQxmRfefpd0Rv/JI76oc/zk53Gyt+00qeCATUsG1Z3YvF7l5ycGlA053TJw9UrJNQOmnIh7dPmJU4HtI7qMjlXsZsWPfQUFAoF4/+xoAAAA4F+j2osd52Kfv9godZouzTNvenrk4x4e+kM9KBAhEC/QOdSY9tkvTIjzXa6F43s/f/euZtOXt3bFWVBicJGWAwuOC3+jSsScz6ZmODjkl+Q7vt4yJfSd8nH+7Dqq6fA2Oc8OGFm2+Np9t8qmjfWsTLVaKUq2GV999uQExSJuXZtk+/nMt5LHnJay5cUSc/ZcXRe3fZXLxR4/vt6kQMcSdS7l2dViaY+ha7efC0o05/TStlXb1h312cpXE2o+bnfy3fG6RRcXmpCp+ffpbl3++cDZ07e33sxysNeMP6K2bTjv2M3qiQ6kPrvxVsEvpyfu3/Fu9q03Hr5tf+jnJC8T5HiyelryTA9+6pA4c7S0CROUKBC//WdJwzcY0TjF2YJ18l18uq/K4qaDf9+SaP6Lzo/yX5rXPsqqbK3bP42dLsKs3ls+G3qx0sPd08+Ge5xnxY8dpjY69XB4yBflWn4av3fp0SPS13308ubW++eLB11esWzJohn702+d1/N27F5JU4wbNzdzUJ5uPzXrE/ePN2XORAgfp0iznOGGxx+3pHOO67kPxEp3oc2Z6/e/m7MudEjuk7tGdL38duDR0+mjJrnQIdq4l73fBI/NNPjPy2trF2wUI9+DXCWmf14l3/rSTaYNHDBxebHq7+OWOph9zsjVYa+kTtFuVt4VU3dWOr40eqjl9eNeKjG70uPshw4sbpa/+Ot6Y1MVDFd92tC0/TIle9RwdKrtiX/9+tAfBX6rd3DttQWDjyX+qdDz5BfK55y5K2XV2QmGX835W+Voy0J+HhS1YJEJ9YMvnEgUpsHzpGOavo4xeOXGpEd/XRzlSrV6rUOXLTpr4/XS78K9K5K7aoGcD46FbpB+WYucyQpU71QtdqTJUwfO7t0kUZqt0zouGj8t/Nueg1J3vTK0cP2Mjb+dFNQ0S7faSdrdb/rlztEDoozuu/TK9ZFznx+rku/gp6/+TLh9X+HvQs9ucm3Sw1rNzgU1iBN+T6w7w0+VX7+gXcXinywJ0yxqYHfciVu+yLLwq0ypzvfM3z7e+R47ao25M7luvQZThnacMWf2sPe3SzX/5MHu7HeOvW+epFJI+vMxLncf26tf93RBs/dFOf30wsu+m0oOGzU+dp4Oo2Zd63xmxJGbx356/D529Ezp6p5p1uLk+bnD9tfMNK5U9y+27iq5OXqbH7Z2/ilz+TffNml5rWPZSO8L380c9Y9BUSe0uHt/2cPgBxlTja6yKvfviernmrm5TaFipxZc33Uiw5y4F8ZMKZvrzsgtScNkPp/p61kpBkWrEJS2zYI7o35PH35grS/H5185tcvjPQVPVNmSe3z0EluKh7r7oMu6Ti8zH6y+69CC5tUCD0oP7Z+yyYFeOx8UfrQy98zhVTd/3m3nvTrv6uTLM+fxuH2Fhi3/KfzmM+++bNshRcGfTx/JOCjxmFudGr56N/S3y/smxM42pvLXCWuefP5HpNv9h/RIO7pH824ZDi94Xql2ibGjIxQv3TLd9CRZ4uzaMe9tnjxx+n97tnuGCMvjXmhXYGP2NEcvHT+aJGO5F72qF/nk2bM9o8+c+/Z99qVlrpx4vLxj8Nxx4y7VLj19cJSV3SPl7Nro8KmgqpNKlEkWtPVe3FBzt9ZbNXRXnu2n+nxXI1r6cPdab8v3+m2FyouaVBtVq0T8ssNu3ykTpe3iKU0/+eXxuYyhYlf8PuaZYn3PXZ9ZqnmOL/L0O3w/TsTu364umjvG3LubEmZsnP7Q84aLmh3etOVQj58LPC7cue7j5hfOVph1Y9e7nYtqv5oRbsMvNaZ0S1Jn9aaKY0N9eSpZ7rej880qs+tdofPDixQ8Vj/0rGh3V47N0S9L6SxZKvSMeeO7eFszb7xYbkGHCfP7JEoz4PNRJyo+Xj12xvrR93+pEa1w393T062ckrDw96sL5j2+PWzp17Wb5Qsd7eLiTdeyXS1xc0zwl2FXHG5Zq+DVUc3ypmib6Owf3YI+j309bfWXofIsnVgw+Mzbx4dSXTvw9cuaMxPuO7X52thf0gX3O1+46IQjPy7/8u3OPtebj1v/5mK4MnErtVhUM3emHKmKfhvm7M8XUuzIM3RrxLGTO64uOWpm7TKNL7TqXXJdmjmzc297WqLz77mOd/z0TqfhCTNnSxFoOu7H9W8PJ93Xa/Tlm0Ftbk2aOPSHHnkvNmhSZObGjIW/yn6rVpsmbyJOfley5+1aG2/P7rVrbJmwx8MuSd50b/y7rWrFW16pYdz1Cdb263Dul2mDA38MynPwaIZIV2r+HOpxxBEtB8c70nh0vBPTu27MF7jV/PDVAwN+XdOn18Hk43s3/711htExikSpnH3ExEYFY4buPH/W7eLju3TIvXv5H+WiRtxx+NCycCnbDd0dfPFCjNwXx+z+9HTF9iVCpq2ONyxpjlI9Fl5/3rnKgYHlCuV7dHtlv3Ajvr06vFXsJkWO5xwyteK+yVFC71kxaWTF8BeTVX7avvq1ZaH6P6qVYvbmzte/qdkrTenI03vNjvn97lgx9p/eEzH4xbpUtaMFf3H35K6jnRum29nxbMzbDW9Me1lzeIEOd4PTbysSGDE6VOIiE9bljx14kPTivttv66XKNnvDZ/Xzb1iy5fnVFEU+SZn++wbdZ08YcrjJuXMjWu5vMvbS1tphS57Jk/VRl1iJMl7P/kudkkVmVpuQ7PKuzhkbJVq2fkaEV51qHSxfKE2uz/LtK1v7ecUO6UPNzJOl8NThecPHf9C/5vUqU6skHph857bhg/pejN7twOA5247dn9ym9by4p9oUzFbxz45ja+ebnK7Z8a/aVx40vmrv3SmDNj27Nrx/x7r5Ir6ZMOfF3oTXO91PO2n9m1Dlz47I8jr5D4X2xRjY782LjtUG5d12f22D5vnyLF++KuqzmCduFUx2ate8CT3n5Xh1uuXcyEkH9wks/3nNbyV+fV601LL5uTr/umjBkj/iX45R7Ma0Yx0WPr8aammZKBNOvyk6LUbUdk8KHUv/bbYOpSddHB151pgzXaeWmtR2bboMN0dOj/rj2BE5o+WdtjlHrfyBLgsPD99bN3SvqeP7dkrza/7UeRNuqdD45vs/Lx3dWWzc02++iny83r1VeZZ1+GVFl811576eHatz9K+WHQpfNNGLfYNfDrvXLfL1yk+qL23UZ1Ta69MvRP7s6+17B8Qve3Xx1JRRUy/fUWf4rqvZc2UuuGFVrfj1l77KFT7oRKOTQ4JvPvwmpGDuej8uXBq7Y6q965dvq7R19uu2d2IHnWu1bHLGuKmjTA/94qeuQd3WDVufu1Hh0wlCpuev0mJCgjwLDvY722TflO9LTG6+rGLIz20ql3qb5Fqv6MMHZY32PEaG5qUun/li+qazER89KFticNJf79Q/ljDXhs1beoWPuuPkyjWZ5++rGRL/aouk9263n78qxoTqs+ZFqjzkXababXfmzpyk5sPdwa2PR84+ffSgqhEmrg53ZdqpZtEXPXh+NHr8mB2KDFp049zoNAWCJ00KPr/oYYYaY7sNmJkp8Ghnm0Qzx9x6+6hx8i4LS85v2fqHlF1bvPwkYozRD/t3vHCpcZmwMeeuL3l8fIY7p5rW6rvw9roe3x6ufW/42YGT7jVMn7Ttvc1XS8fZurNAomTHxtY+vT1C8Qudl5VPNCXdrsn5+o1pmHRctwIhjcqdvNYj0Zhs9yK/bRol2uO3dRbVGbbqyqynjTt1H9K399oCq68UT3nvzLmayfZ1C2mxItTQwQmXxn13oVTbuUdTF8+2NbhovDUNslZvnGNo9LFdvtnaL0f3DIO23Tw9Z+nF7d8F5g5s+0vi2S3uvhj5dObUtWPi5Mz4OuGdb97vnRn2yA/HLz/bfepd6FrJ8gyofi1P382TDj68O7z04R8iFlqatmTZcpXex5pd+PjjJ00eLoier3muManKhlv5rmLh+MWTtfzkdvjnByaOOn3k4rro70PtCGofXLlumAW/Ni8WM8nRr26fyD66+7Mo7bZHbhL5Sv4bDaZc6L8kzKZ4XzSYmTl5uZd3k22oOGDFrgIJ70wLVSJ0g7ntytUZ3qrGrLvLdmf9amLlUSVvDi3UpunGYnfyFhyU99SdvOcS3YwcLsXAHJ9u2f5NgoV7wzy+nLHGkIoj+6Y7WeTmuvTxLhaodmjy3aKlXjZddeVC+fuXf+2eaPPln28MH7jgm0fJMwZPjDEpw5mjXXb3jZR30Kc5YwQ/jhT8rkOOLK17/tnq1yWHThde/OB9i7RV3q4u3HT1Z73XjpuxJXy2yz0nV1jbbsrzeHGK3Tocc9nUcoszHHo+uMrIhXnqPOz4oMyI9P37dxrW88j0IUe2Jhh0qfCY561XTM2bdHeunjsWfVMuRb9Ul/eHSv0kzJbQ+UMe3pl5LW+32y9rxjp+tG6rLs2Oj6z58OjNC78NapOqS48rN4MiRJx3uM+BBsMKFB1frET9bV1a7kt8YnL+oj8e+6XA0ZjXn9UfWrzb/kEXN8yM13bA4ydnRyQ/2TxF/prFup7Pv6/R5B86Rz92Nkum81NWTEwVtDrXyTy5it183qZVpKAd//B6Afwv7FGDb0q+uHU8OOK8Iw/D3ZoQ/eP+H+5DPSgQLRA+KHtgTN60GcOV3f3lo5jHTl6KkWjRpbwT2vw6LNqaSKuf72qT6Mrx3bfC1dy25c8+ZQfk3Nh7XYvbsb6/02hvi3RbC1b+NkmU0l+nWTHyZaIEc8/nS3r8s0zXil0qXqZunbZZKy8/OmRUnsptbsxoX7jarYyf3roWCJRt1q/MwdSXxq2Ik2LysFjd898rsCPP7VqDssZpterrUWeqx9qWaHOqUmtDNoVrWGHxyv0HB0cKVXtSxi8a5vl63KEcxfYULvrr4E+SNyv2+YVhJ180+arN5pOBVmVif1F/UZGnMSPU3ZYw7ra6kcZ2Gz35bJ0mPY9ETB8zSZSsfdbESt223IMRTxMn2N5+8OOZHRYuXJ3rec0MfR+/G9p03Kt9HYclqTShdbNpq4Z1ufisX6wER7dkmFip75PPG+dp3CVenm1vd40+WCTH3YGtbsyY0OLPqnPLtSxxsnG+6B0LxO9c4taN1zPOd5ry46z+LfZmG1Qk9cIriTsM6Tq+1q69kU/NWHb39eZ9/a9uDSndruj0Yw0ut0pY5sXL0BHKP012ZVXl7GmrPGlVdHXqq533dAqzK6RWsmWRD15c3PzF8RU7Uu3eeepJh3/4bQMAAMD/xxzZv+fC4DU/Nu5cs2XDPS9a7/24/4f/UA8KxAuED4oUCJ54KX/mqvt2pYyeNEeNK7F2jJnY7uKZR4VizzqyfcCwbiV6P26+oWu4LBtqRAy583xN4/0ZY5waMPDUzdzvF8yPP7vq5FzFBxQp3mnwveLbmxUbGiF0oQff/cOXDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwDgs+dq76k6Z/f92xdqMSf664Ort7y1Js156qdrvI8z+CGD9IXvlOqdNEkNZr3Lpx31rNZb75tHnPN+jqHStf4pnTaGr9tztFnSuyj7bKOvT0l6sohn4+ZdLvRoNtvI6ZskKdazqnvzoaaVH9Y4/YLspX68+6vpeZEPPbzqkg5W00YtGzPztC/FN7wRa5KPeZfa3miS/clizIv3bipdUizve2K9f3YV1AgEAgf9M/OBgAAAP4t8i8NVbJh7hIra+xN2StR4l/WftzDw36oBwUiBMIH5QisbhB+7N03L1NF+SPRr1HLxTwzu3CGhcXmt5uYoW2Zts873+5/skKCdBkjnJ4dr8mMlfPWVI7aNlnaQhc6rZvy+PuDVRa0W1f8wM7PK0aOXCb55cFtvyk0+/Pm5e8fHFqtTIqfCqROHLXY3pGN29xrlPrA/YpRa+8/++rHXLMyPqz79HDMN5n+vP74k+hPw5aOdjPSrPCh5nRLXjPwZe/K/TPmTflHkVGvH9z7unihGF3qZsySt3WbtJ/Py9pvRP+56bOlWpR8XsPPQ3at6TCqcplPQi1Kkf1AlW2dp2aKky9xzkxtW+wZN2BH0cvRT6RNcHZKq5BMMZ9M6rKxRfp21aaueRp+y6sLL4c+qFwuS4ZXZX9KMW990kg3i92eUfJK+M/67l61NlTElUNK3ipX7cuKLdat6V5gwt5I9RsuTL6ox94iLWOW+LZTq+DBi6IcmLh+1bXVT7eunNilY579O6bf/vq7zHdHHY9Q68SAZ7la7Ll8dEjnRcFtjxb+bn/iVckPrPglMLrnhbOtziVumTLxrq9/n5L0TvfFtXc+zVrs+2qVUz4Jl7h97e2tjk/t125dn7Wbb+xtX+bqnAoRBnyx5UqSsWG7VEkVNfM//PYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/Z4YUrHkjQtCMPRvndI5V5cCz9dVbnnqz5ly10wXCDNrw6rtWFS+dKfQ6TaO3g+q/211tSrKD8TN26Ha9dZKLpRIveZuj+/qGl18eHhQq5f0tR1+8SJ85z5DBHVKdPdmgxd0dFZ5PPrl7VdTjl+fNaFP8+IabPW5XivbVmZ2DBxY5uGvSnXLhy00/G7dF8zjhgsu+Wflg27DemT8L2bnup4FxZ37sKygQCIQP+mdnAwAAAP8WwQez5Ar3dna+ygVK7N+8d//Gj3t42A/1oECEQPigMIHw16IGZgblu1pvduOr1Z7lbnG/wJp035x4Gekfbh8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhvNGlPyc+Pl5xZtPe9Tt0WT9n3qHrLU2/WnKt2uubcphVSpqyZc/q5Vi3WRLk2ZeeY34Z/MnPkzuO/lYkWyHlmcOH3Gyr8/mzGznLX9uU9XTp21pljw8SY+3rRuP2Nx65L8uD16Nu3/9zx+9n1TX7O90uqQyEZCoae3bLGnAg9mw6oe7NEzvmdw12ruODTUDXSV9k0//qOPyZtT54i07KQ3SEdS3/sKygQCMT7Z0cDAAAA/xqTo2XetvL+sFQvv19epHi2omc/7uGhP9SDAhEC8QIpAu3bDnu67eu2R0LK96+3YmSzKE/Chj2ermSGObmuP6/VLnmqyOP7FVn3Kkf03bvTT28Yd+uCXeuO13ywpOkfyeY3bzo8/827ubpEGVi54y9TXrV6UXX+jVnVa0z+NOOMsWE//W7LN3dKVMx4Lu34F1O/jv1Z30/DPS40u1XoI8eGpCt073H/td9XKRN/9rkN448deD0xOHvMvjli1gudMNOPO6rVL9kk080hRRfuqrWlVuny3wXNOdXyXp8z4eN8tXZymdhbxleOX7bGl6PDviy2LWv+UT2nbqrSdUfqVJNaF+hX8JuwHaIPy54yYru1WXImfPtV/IELWo2J2L3itwmjthnZ/fiAjDX7lnqUf8q7ztGexHvW/V2Ds3dSpCrac0TuylnaDz19atPt/kXfFzoZLsLz2r1Hfd4rz4kb//DLBwAAAP+XfBNzcKJxYdekHvp62sHa8Vtm+bj/h/tQDwpEC4QPiheI9OruwWodE4S5kHFb3rO/D87cpuqBXrfqTq/1PuXEJJeulWzV8sj9rDub/fAyeaa8bQd1yN9sbpOSR0qV2r5ncvmehQZWWPuqxohjQ0ffLNX0+L4YiUrVuxM+a85qyUNKFIs953m1XypU2V46cfexyfZ/Hn152OrDdo4sVbtJ6+cxC/UPU7fr7RtFR+coWm7DjB25Rkbtmyhr95TBr94feJHuzcg0V2bNPnmh18jamcYVfjMizqmo+bJP6/BkWbuj+yIWTXh9e+iWuXa9e1f/06QJ74wtffnVPzxmAAAA+EfVOrguYqKWfUPnKN9+8eLEv33xcf8P/6EeFIgXCB8UIbBgQcLSeaucT5BzeMyfsiwM3vhkzIXyd+NUr7c0f8zsv8e9e3NI91iT8o6Ilypk9da36WK82RnSMn6f6Ck/3zfg7A+1pw/7+rN/+DIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+F1Jr0pOfYdP2q7v0tdJIHufttr97y1Js156qdnt9/3fQV06ZGG5312rIu3fIuK1i869Za0UZd77VuRf/hbaJHyZzo3tFLzeZ/MjLCme6raz+7M+nKq3LvOp0cPyD2H6eL/9Qn/uvvX/y2N3v3G5GqLrgYY/f0M9W+qviwZ+dqM3c/z3toaL7Y8zK1bfaq2qs6Ty9f7Tr5ZZukMSLsbT+s+91taT72FRQIBMIH/bOzAQAAgH+LXr/FvtowcHnMsrfPXu8t1S7jxz384+odFIgQCB8UKRDtu88mTB9/sFKucvXKlC404tCN3dk7BTe8+2x2grk3mperVSLzxbfDR6bs0ufW+msjCp9OfXNv5VNNgifvuJVgWam6MV5uX1KuyrhA+0l7upc9kqBLtLztgv/hywYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6Gmjt7D48Svey4NUOv/ZZ98Om51VueerPmXLXTNXJmSt/6Vq+Fkwuevb7y8vRqzZ/MrH+o79h1f4ZMLnfuRtWuZ2aVeDIgWo0tKe80X5K53KHedwZMqFl+4eE5rx7HmfJkQ7Zdred0bDB80uJ5jRP1T/0w0ek19Uot/rVukZzZOy/etL3A4E0pj+9c/VX1ejdyzm4fM/b51jHDLau5rsKLHEsGf+wrKBAIxPtnRwMAAAD/GifDxajw/dahZR7NWrVpf/ojhz7u4aE+1IMCEQLxAuECcX77ZnP5dR2GRwn3LtKGy3Wn3Ch1K27d+K2rzo9bZ/zdsNErX70eoVzY2am3NesYbXPDSRtS/MOXBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/KNK2cV3Wn907c8Cqzj0eNz/WPO/Bmclm5R3T6VqTDiFTgv+s0KNRrA79jg3J/MOVIvO+SvOmzcBU1ytdS/agZsN6geIzx3QoVqDvgzOxqx8r2S3Ww8YJX60fn2NimOBI7weX33Hp0uJKPQdNLPKq+fYZ+Yv9WaTRubNVTsTaVaXfnZMXow9oHCNB2k2Z7259FG/szaSvBk/Pd6l76Kblo3xbOvOzI7sinV11Pt+lWu+adGy16H2mOMsuZL79rGC1zk2qBl+L9G3b9+kvn2nUvcG0Im8+ubGkwHcF27yJdv5Znnab+hzqPep6UNf6uRceWN3h0dS0N8MkHv7lyndpBiUf1yHNgTPLF76Yu6v5ittv6lW91jHvz9+N7LCsTdEsq9LfWn/16dBh7RL9+kuyUVHPZI+df/PE4serPd1e70zUT4+Fv5c50L9+/XYJ1z9Ymbzk5WYNNw6N3CDJo3wDUi+L1L5x3pPBtYOnT+k6aW+cPFM2tUretdGVvdFDIsz9ccDQ6n0yp8t9u0yaus9qhB7+KtngIXE/vxftq3IHcvf8tPykvNufvPh6S51r0y8taVn63bXO4VJ1HNFtcc4lQ3oHXckbr139upW/XFJ65OuEfdOuyvQw4o9tG5WfG6l7+xpvy7YtvDfM7IFN79T+fVfUUTEeLx4b513NhDkjFD6VKkePGF98XyJPnnL9qvxR8OpXpwZmrfDLgXeDx3x9u9fKC8vbtW489szkZvVbVqse60GEcv1LRVtef8KbdAev1HhzZtH7hnk+jfJ60sKi1/qXv/HTqTx7KoTJk7rhs1Np9+Yq+93mA6cKFe64YVDGnUlPBac4+WPsLtODS80ON2DzN+XWRR6+dHH5UGf2/FS1w0/1m3Sueyzk8Jo9xw50+DRGn8Steo3OlyNemHj3f77dsNH0edUi/nEpQZ80kZffKxjx9OYbE7NVH7R8dOJRHWutTtcz56UWt3quqXQ4X+bKR9MnTVXkQoWoc9qU+ylbp55fFW255+eFjzt+1vHg1x1+K3mlVsrkv3VMUHxn3SHXZkfJs31e4ycHLkSutjzizZRV725Y1qfVptCx1zSb+25S/7ul27WM8mzE2KZbJvzQPdHxhnmzdRra7JcjcUM9npmoxaMWCe9v+yPy9dXTY6XrljPVZ2NXLIu5rNKViem3rV0Q+mS25unSf5FyyYkx22ZHTPZbpmTfXbhU9rt7ESKHydc3cSBM618Hja08P9aT9hufHgpJNyR33tHbSpZvdOanpB1m1Xm7o2KyVvteJrr6IHKq5iuyfnbqRPfYfeJ8H736o8QR1jQMPTLbk/qTXh6v8nOMlDNSxn3RtNHUn1ueKFrtRte867PVeLIg6sby38fodfrK7M+bbP21z/UygSy1p+Y4/+Bt0MGUqWJ9dajS5X6hIq7cV33V7kp7Or7Psf1V++fXmw8+v25Sm+pDPy02tlvgbOh0e/YUSrA528JyY2r16N2+ZNUo6c+kXbpg7YhuP0Tr1iJN+sCdMeW6v0m6KN/WncGdT6+K2+HLHm/KxCpd6GmYt/kz3t54KkPKdkVnjH6VfUvqsInr3N6Tdeuan6592zL7+MsDNz4elP7cnYsTIx1rdrd66QqdPm/WeuvAuqXu/nC0S4/mybMOizXw8PDG6cJti//JH01nHL8wOvT3vRKEjxez5cFUM9//Pq/Eb7O2zqp4YuG5p6neD78TO3/i9W83TkjUolWCZdH338/1/fxvE+/oOXzSV6tDivW40yFsjpFlQodKHnt7yKKkU2L/ULTWmlivG185HuHGis6TF5fcfqHwxfA/vxtYIFPi/PP3x1kYfPybRvE3lZ4TuuSnuyIUnls70rTvspx4lrH/weFhb1xdHf/t0QyDM6VIGnflkrWjH57PH2l3uzezQs/rvLl1xbxt2zcfPSF73Oype3UeNv7s70v3T7owa8uJPU3flj94vUFw5nGpB1z539i5i64gHKBd4HSXCCLS0iAgJd2l0t2gpKQ0SndJN3+6GwFFEKSlW7pbuksJuZv7foR73nPumd92NjOzezbPz63DGx4zga928qd55MXECyY/LOezjIVYV2TbzBoszfk6CZcfsQ/Q8WY3J8g3vcH660Pt3d7I4clLT5uDg0PgV/oqqSptYTPUwm1yGnngRtDsC0qhX/ELuug2i0+GrmIWRMRTCnkxypY/75lDUcq5kUmbUH7sKO6qB3AY9dCdizNazmjOtxgYtK8sshtR65LNy5IR2VNnv8vNdOHfCf0tqZ3qajHzTHL8QKjtg0Jg2yDB53Hv9Zqulw0Joxc1qjiPAuIXhem3TOQ/coq4hdcXlc88+SsccF6JLFjavOf1yEhaK0tMWH0CV4G6kSXjOG4Tu2VTgaCnawy9/Rda4Wg54n/k6hoeZl5fVcg25CY2uldaVRt+7QRN0v8YDY7LXgx6VGjF/n6Kph3vJb/yHyyd73NCPK0/TKzO/jLI4uXMkMuZB3A/sQxay/FaWYkto6LXv/fF881seINI2hhYZu752E5tsKii7EMMcuyRmhR/+loXq5GL+deW0GUWNfbyuWind9QC6gG8dv2Ben60nhk/1XbC4h1wscji71xf/0Na+d5Y2BJhPtmSvilU8uSnWOamZQ5HkJx3p67jK/WlkPePLhIk99OF+hAq+UkSGtMfCvcyYnW9PHqf26RTf46sbi2feG+7Vyn35qNtim7khwKBFVWbgOkb3QjGvzSL71g+UnnoR6tnfzp5hWlERCBBbftGBL8HA+X4rpuSYSrtC8umTKSzsarH4EAdK7rJQkC+ptV4/fTZo0/eqs/kBZuourodg/wu1J+YjzOhcDvg3rysn3K3xd4lkUp1Ze/4sy6//AAhJjTsIx3TvlRhqS6XXKdqGlk0tv02drgkRR11j522+vb0NpcGnoi5M3r9A+WszLc3XgkbnZY3errWdQ4t5ZM6vxTTJHOHhEJnOYbf97S+GJG2wn/XKVPprXSpct941pXZYNClMOh16BP7l1NVyObDc/5PC/dD3+02qnnqMHUmpy+67oRQJLV26J+RKM0Zi6CuFjmpD3C9Nl20b6iaXjJIxvq7xTDeG0Ln/2ZGy4G6+4fYS6sw/Nza558nv8UUCK9dJbZ0KEz8sfiraGmbWtv88eAhpU/oiA69dCV36fl5edjKI/xC13wpJAKz4MMPykzsKTT0JsbfPZl3P6Uyt5lNCrVSlf4WZNHgy6MUcOnOQCNwUc2JjdtXVT08tj19wD6X04EY23iw0BOZnRi92ZrXw47u/TioKD7UVH/2oxxi5KxvGtNFWhh9to9db+jDzpB6nj2nxtL3demfVqUmqKZvRqKGzDQpX5+PCLz48aBtwplzzybCiGJQ1NOHuLAwKlK+TSQB6e/NXHSEvWSBM4XNnfRB9PVmJiWnQKKHKRYiUvrEbQm9Ju+NfvJvyRVttHBVBV2TfG+duN4slLtpy2VqBrrELOzP/EthIUtSV3rkQ1zBxOprWxnXX8OGOlMmWwqmd91afd/ZCOTROCenPF7oVDSjMI+Oc3rfX+T7UM2VmJg8K8crN4K5jeJK/DawAEthe2kgbm2i2PbPGS8Bz2l3wvGWSi1e3eiP/dzqV3U/UYZMKJplkVeYPn1VrzjQ3RNFRN+Z+akTFGu8+fcmLXXsnVoep7YKX29tKKWWLhJe/LiO0uznt+573pPJg3gohImdJRgd9/Y/VT+blc2njsrI1HLvDUY64RtO616SMHx5wNfirJka+KtrNH2D1GXpqMomOWh3qwMRifrbx0yCLZGuP1hbY582UC49i0m3nUIbzlgVrw3U8VtfPJlYxI76+l9Aoa2TNq23DiW+tCyDwMdQ7Vd0N3qmO2s8+fIPlG/Ovtx1VrGwjbo/Rpx5qjW82Fdt30if1fXtYTTJGQUTylvUJelE91qMTLeKbq+Y+mzUFnlxwaZNpl43nctbl7zRhTrGvXgG/x0t+5lQJ1QPjsCW/1q+KEl+0DIWGUDA3txeqJIhac8j92PScqph55lxK08Ymn/fOVo0K6byLAwtXJwDT/r2DFEljYGaLtxX/2aHGU1o1zEAG33Dh1juyVlpPGtfq/vLcd6v5X7cWlTl67t3PAeP30+Qsgxnvn1XfXCq81fwF3kNWv2fCTfcvr3crHeezTVM8i+7/o3pO/7R46JolqliR4nc1CCIRf1p3XjuSWiFa3Ss+Wc9MEu1uHNP47Ogddam1Buir7W/Wh6v4GqE3Ap1clk+tx/YIhbdEzST68XO/zJMxoAuIETyaj0lyfLfWGIUQtu05OTwjU47je/mu27V2kfGDW948ggkcDW+6VSy6jrSPBmjdkdTa6nj/RrY+IA288V0raEBLmlhkqLGe8TnonwNFbVhPzrnvh6HNmu/ebYkhIc8E/ha8+28JP0bdfTv+aGihzm7ye+VGXYjm7qfxk+xbnWgt4pa9T6tLu8ulNDAK7AtV2F41LduTKh8V9xflhK9xPBr3ttBiDL1p48D8UgiR7VET5HBBzpzfaeK7fTlUnTXl4ZUd1IPEtgm+a0JnLsGfATmMz+xIE7y6he9FDEl7cm3PDmnpZNEE/V8uzzYbTYl//zfbN2SXPwCLbuoK5atDZqBUXZVnvS1F/MKKc5WgV3ze0Pvj7NH+haCNY5/yWjWHIRrHS1f+Mj7djdpob6/K5/6rrTC7fKTNqDuYT4ZWqT/b2QCi6sms0rTt5LfCb66TfVwqvk3ppLpdP2XS6JruZWt7pOqbhySPY1symv76pbeNez9vubHd1n2UlHOv93Jsie/22r0/965SZ2p+n3mfyT8NUb/7f6G91+CSeFB3TdpOR6yxyf04gTy/AIm7bTfn+czE/mhMVO57XmzPqxyZFrdofnSgcy8YCXhrGvF893ZhIWnQva5zKlQ1fQHDnTaZXUlAQzEuB8/DviwR0w0mhPbsVraFWM5cX3ziLzySZcQ3S+leRhxS3QG+Aj5rVdo83yo04Z6MMWyEhV/8c4oZYogBTryddFvxHjtcMvxozE84A5824XQFzyt9V+g1EeB4HOiArOOq+RpKdv7fx+qYjmCCM+ULKntCh0VflDu3Te/wIuYQvnxRdeUf2zyPnVF7/fZwhwlyWPKmt4rFOI/6OYGlFoGKEn1ev4oc/3iuDwHKuIq/itd0oT4uHaYPV+tNx96bRu9tS/5gDjVOum//vDWXIE4RQ7/rutfduNE4uRnrycjPIw9PGrJ6uWoH4mw/q5Ecfk+IS1VO0kQ1qHixujc2DQPs1+bTDh/6yhdpIXPVpRlPh1XZyzzNF+S7Vo14O0ekXJE4kucBa+Xi2r9lQjVQXFYj8Z21G5mS5iDuLXzgy23cZrOiNvekXSl59fGx/Yy0HWq3Jo4MqzNXiDE1qGsznnMVNOhChh6b3PO/kFLTsUbl7TEH9y3a/k+kPrVpN3zBru2cvKp+aswsbdj/4kV/iluKWZjP1r6/nFZGnG8bJYU6Z1yfDg36y7VvcIefslgi7aRtdeNRxDGBU2zZk2FkEYasgvloJUX0QvTNERVhhLFYSyGnDVfGoYxnTj0IqdIiYpKM2Sdh4XaE1drFAzsE8J1I7f9VlN650tYrerr1B+PC0+orJ1Fa4vaY63DAh928Ck1l9Halur/Rzk7fZCm3/9qetH4vzF+4yx1G2HJHzNM2g3+YfW8n9fRLNukXfnNMvQQKM/VT1bxKDiQziYbKRhEKut2qXxH9Ysuwv7wdW+w1zofhvcMq5HWsE1xY6zjFB5tKCxFTbOJms++pLXWIdih8rvEEZZl0TtPiEg4OjBKZdBsyFNyKfIyKH/Q9HdwMrKYygAvG+2ZtXcS7WBZM4JAcxhnq0L75DsOKYcTJg6sPomv3/UkcLp0x0YtJJhRnLHY/5CQGCL6W9CMfVf1E5ccMrRwJEwcuOtFkaXbvtFh/TLeoalUXKFf/VTm+9DhXNaSz8l5k1fyf9YjEsRSilxB+dYEwh5F+07iv1AfJXBJTb+KeF+VTjzPa6ltEC6ANLrJ81Lu4yPyVkraTLt+RWyZPu5v7RiPpkksNhKrv1j2u8mTtOLgxPnY0ZVQM6zuFDvSB79EXeYIlHq1vDSAKMuj5HVThj7ZghVBK46HRPYgEnN5hIKEzxDnamAmitgNy9b0y2jdU+8bD+6Xc9K9RcQVmuJCWBm2La+RjhQzzR6LGKaQzaC3PVpZRUwyYUZhOPVMelCuGJ5Zv7x8jRkxfRR0JdAZR95pFLTPpLn56mYfvzRoT203g4B25hA9PiT+H7LkhGc7d29fC/baXnbw4XV8VmCu9w5hCocd20rpVXI6p5taqXLXowjZa0bSfazFtAXMBawFbNtLggZEvtIfnO/VfhEEC7pRFG8l4nfRK6XEdgi80OLsnNCpndIgGsxLTUi0HjJKkC56ZVn4Kmz4iZQyXoMaBkqeqahiXkYCS/M0Q3EEjtIgrqQtsUniFzEHCxWpSv+JEQ6V+fkBYQrPfzFSe9y3YoJ/fcKT5UJqY8oJ1fevC53uvhW+qnGO/pE8TTeY2yFFrOl9QphMxc/u5aqKcHDDs96KUzMjvsGr68kd+tDS9lSrGk808cHxc4EI+yYfqo3zEV5rNK8OJke3wU4TH+slqcJ2CirfxF8yNP8xPj5aCnMNQXN5Ui9frtsiT8Vm+1go+eO3hVqR0QyZ3HBUyf8QMgoS6ckn+7eYtK68pRlLXGvDrF3/IZ8QiKyRvzxCNq1oTr1NqD3+4Nz5FPel9nK0BpMmTY2T5uMnv7pkftVQ5FkUl6AMPso7ZvTdp1f8kYRgll8Vc/PSL+GCMkwjTsJ5Y73Wewq3X0gFl7ZT0UH5+6sSsRRbHCWKr+TqYcQ+MfqaVJ3tKq/pH/WjenU9Z0r6eMG1tIsnWn7y+bbk7+g+Us56QJdF69k5z87l+n+HvuNhW5G/PV09rgezz+9y8p7RCw/ILPj2EGOHEKGYoY7RPY6midLPk9zBn2/jQOq1tq4g2f+qld8v5ZPA8fQY69PgSPIXEQ+LXD6vEHMX5NnBt2R33zdeMPd9wPns8eXptHysdduvz5cMdYkmf82yfEJWqUmC0Rxfmz2MYIxIrdL0XmccikImzZb41PNEfsOMjZbFcLY88l/LImY9s+gk1nAISkCe4287U5/TgOqwTCH7uIe97qk1QSp+9RGmHtZHOM3aQt9DPDqLjig4f+oQOy2FaEkyp+c9J1+ycNpA4B9X/RN9YhfF8kg8vCyy4qQexTPY/+C39emBUkGAlnJXaNprIk39cDTcbzRfsSe/N3E/zfaS33V6Hccl53dEaIQY8IAuH1efWOOP10BcP2LER1Hbn94ohVbKewax2BMmvBWBukxFDph2zPxKaCY+efO6ZDpatYtjkhbVZ5LihylYDXTKb89/hDl5JkhoIWCJ7dgubeGcvJHM4po853KumGgRn5GT8LKLUMXQw+T4dYD8YqH41sszUyujPtum+UG67CZ3mKrKhXLoM2XyOw3eXEry1hSbmvLskQudFNUaurl//QWny5vdw+qG/Ume3Ljr1AnV4gZb193tLTtmcp40oyv19nvrMUGJVh3Yln4bJM6snrmvaY8mfdTvH+JKZFCvDxy4/hjGUr7BfhZYdvJeMYtzTjus4KmQzvjCPUMalZXOq7oe3MeCWawGdlkYNB/H83gyk2sH9XyFdvZM5ZdyOkt1lYyvCmS3uKutW0cd0FQtwnZZ5mwLbVejfq++idV6ptcms79+jJTXXyfymQ0xMI3Zlpnj9CzS8hBTQZoz8BZh6c/nYLvzn/GIm0djG0QIpzr2yGwHssOMG79o0q6NnW4+/jvv2N6K15B74LL12qOS3zeZSuCJJm9Gs/qVQMfaZ6oWnWK6qphd1auK72fbE7LIa/4db08eJeUfhXqnbdl0pmCH4sihWp56s80dmd8boEwKeOBG/luM5iaLaRgPy+/43aVAf/foG30bOWXU8+mET0VUbUpKkiZ+Fops3xrOHpFvGvdiUaLQze8l2xG65HHiO+iQ3f/CDmR9qN7ovIwwpY1ToO5VRasir0D1EUuVXaROv6+LY/hhEH2crW21sLDnwA1z4QaKk9yB9Cf+l3KYW58yzipyn/vtsXK6GJgdvr8JanlpSI3iPFPA0FiOToNXnOMa81cqaVBFTnfqogXHqq3aDbWfPgNzMKj/sCNPjIVebFmmFfMD00WSBvesos/7gUXCt9cprdIiRacs9CfWj+1xw1g8nUtx7n9PI/u8+TkxRYa/N6xUaYXCfP19IhdP8Bfv7+KfVnjmt4Wdh9xHh1mBpy3kZEpWsZN5RWF93eR+mkMqbg3lYuNn9Gcy+wcrQldF9+SEu8pzGpfTrJF8lflM/UozluGXu/S/zZSWh/DDRKLV5Wv+8Xe9FDI/x/+lLGLSPJvuJ4yrXfTdJdDyYsffELvs+xHW37VBsWeqFb6tD89omsI4CzeqBOSm0CYDXguPXdqRq9ntXq5RMChwbLaWZ2Gztg/brCY/XTPijbOsvs5uxn7GNW5eKtLUwC2uLhomGVoT7BZ9KmmNlWfMeW73S9VrWY84n1DmdyBl+SvHo4dNE5Mu0imZUU8SaV/icUr1cnnIN31bdLbLtuhpNlVibCCxw2wPdsW3ZYuTyTjA0Jqu1yv72dhaH1ecvS/nryPwU61n6TkjAvXZn9Ku8jFB5AfcFgQxVi9Iq/LQj2k9H4y7GBQKdJ4IlLU77k9hRxGfZR+frbwldH6c53tz425BI+BGyDE3vLrLPPruWXvTP3J0xISm309Ryu2p3Z31AxSw94NCnuR0xCMNtTvqa+PQKCBt/tBel4sNjtjYQhWaM/makj1L6RqndWpLhMJujuLyH3afRqepLw66wE6xdsDtp5vZR6kVUq4TV4osQ0ScX8I2bPbQDxequ1uJzIbGUTkJCbIpHI6+XWI0cbmZdO5WkREr+I+zjToEdAS5fzYlYRoSMziRQXm5d9of3+d/H6bE7z0zrY3phDN1vRqNLiXXnbtkv4tfMay7KEGBITw/eHxAnSle8MlkRWFZl+/iuWpiTMOvcweElD/+i4Jp7ma0/zRHlmIeW8h1RnQ9ETMSWM2XI+VkHfukiGSs5cOvh/CDxf+Txmsunn95ipd+4U8w/Al3BBK1XdVvP2QvBnK3E/5+4fV6KnI6VFvpK+2Fev6zw+Idsf+u0zBiNXJwqyaE1/6737i6SnD9mM+b3sfzjGJABbGk5M9DPB/bJX1hwY0OqQQcho5WK7GJC9bGPh4bEoFlPHoKSfbnAiGCfrzlDfQL9hMYskbDzbSpnhteyyHcm46h7s+YfXlbIwbwSwR2MBIn37wJCKCbsFs9bO63e0qmIV5YX4hp0GBTGsZE9pmUiOVk/+MfgQ8CyTTBZOfLlWg3Gn8C3lqm/8JJ6lj+6ODDmFOCdkjuUDJDlyvAsfxIXfYuhMQXd3mY9/p9S6dDqKLJ5wnltuFzwT/kp2lT10cKrpFMiPivgtLlsWzWcB/THcyyOenuJZMZ/hCs/stp+ymIPMtG9vS7rZ7ph10CGlfswe8sq45uFLtomdP+g/kJ65sGw9RpAjhhPOqi++pajSuZjLem71pJFevbXIcYaKresM69fX4ZuOqphIQTr3A3x2tLGG1YVumXeEywh4AnZCV82UVqLCIuKxHcK3YRqZWQ0rTxkpwuRAOzVElZyR25a/KfcBBRvzH9P5KUkhK7g1807ZjrnAY2AwMehdYChRJmj/1Iakeyqif5ewnD79vWhi1rrOuK0uZE890NSn1eDWSXVTRO4F9r2pxvNto/XrVfNVlcyeYICPboo35IokZLk8zT73G4kuXskNd2Ry+zENNDfhi6MUNswYFR+GMEo1bj9CHfjxI8npp/3VgjjAVKk8+nVJvrCF/JIRYo39hxv3PQTxVKpYiKZCGeJFdFKY5mWxkKr1Hz4cafY7Xfw1VG+qR5b6f/IASj45OB+SLhx7cMFF59ZrPZJXXcUi8N95QFyKq0W0qabexjnIOCSNJZ8Obtds6oI+9eBzTO/jHQDQjvINKevfKOuP98HeM2qpUzmvV+LSiwgerfhhYLiX6XPjm22dtvnjYB5X9iVYWEOfgUEq96/oj+J6GqPSISdTwvOzUcErhWznudoU0YLYfmFi11HR7T5anQ/TlEQdLwLCU9k6h5vk2oOu2Rt45nqlESgm9i+kE0hykLZsqHQSMuMgrqeIJYzSVlhggBhoxZ0dP2ulVtkrVaPX3pWOra8qpLBzZvJwI66hQnvm0zmaMnKPqXxaNkjCI3AQ82yQlEqCW1ePWKWE9WVf3bF4lybj0+FmKcmxWtKz+crdIX/FPkGVQkFbuxTT4wnm5xG8BXRnFJ6oGg2dGHOpkZf0izcGRRU2koL5yl8KzhJ/HSCE95D7fkDN1ervnXlKGIdz0ncq6/tnIpaSkHm9/Hk74MXJQezN8kTGH/mhoVu/yjvkYxyRfn6GXYsC+L4v5U1tRrtTne1+k1FNE45qHZviWRX3ZjslD5zk8Q3TxHeP4+Wj8/n70tmWujC6onvgxyeyNtYHJv2HrZfkMriEMneeFgxmbMtyi0mkO7jRNyJaOIpe3f0RLn6vNienT9l8ldyBaRK1PcXrgurYSciWx4NR6yAZtImjOF6kX4Esb+enYj7kca+r8PNaYb2BPo7fy4l27OCgskDvddJLPSRymr7Yv5Kbi5nLhxdCTIw1my74ooorJIa2oo8GwTCdmszcPkHrzOcAmO0f7xIwCx5SZ6aDQuxem1SleXol70yTDbemmJRqEMYfVHNqRD4Ugz+TercfSSm3gkTDKcKGQOKjEMozJHlXOqbT8nZbQt1yNfKWycoOHHyfNw2KoXtuUpYydd07r+sZ7rvv2eYGLvmdRK6zTEmKX3ybU0ONTp8bNn70q/rzcxY4Q81La03aubcZLE8BRRVp69qHtjFX/zGNftcFKRV4fcK0HuF4UDYfQAT+S+hoH7s/syQjmqH/Tx5fNVgZSagcG4qoVG5WpNSRG8OaNIV45YxL4CFLzz5Qe11srdk6IBDDxoReaSz0p3SAbHl8vcNDLQ9PY5f07OdSP45pPy0CyM3nmuGyU6xTmsdyqGjd1dDi4+qaBBTSYkS8SivjmLHNxOb/07+0i8dpwlEg/d73lhngj7LCeZF3uPwzdu4eKjJMyBPMsXp5MqXjHqUtEN9i5PJtAr/1KgevOHfdqu4+vHDBHGI8LdzQhwKdhErxj6Q2eLj/xsoV4kyfvs0ET3r1xgRiyBgxpD3bqbVjyb6lR3VsXTxTIqpqlWcrdxYxE87qKH5wUHz3RMhYJfnXDidvRs/jbQ2m7i/ik4MTDVMKqOHVtbwsARKi6Y6rVZmvJIdys0M29NqVWiDAOhlK9A1mq3JNYpsHYZP3FNnhQ7WsyemVsOoV1y9dOBLzc3YnjmwqsP2kjR3zvDM1C+kH2T9+NcRn6wjkRvIcO1dIiYwEhLwLexJ4Vk+4dSRrukjjS/7qwcLemnJ4E2l/Fi2a9QgtpX/M+YR3umrx/GYzJ2ND+VDK3J0VZdGm5eaQzEibPL9h2+CTE0q6FFO+D/p//AxOPE8myW5I6wCPcZJR+GjTPGuX80Myl+UXxkRxzVVGOA/9s5NV2mZ5virP9JR5RcmrnX0ODr3UxIJweOZT5e7H+ZeoZ1u3bylS6zZFJV+bFyBOalfvP9aa0C2Ux+/tjK49/UNmJxhPOmswHphENRr/2C5N5zq//n3ccjn/9f+kKd55bD10rkVG+Kng9sfbRzybpVJWK3YmvSIpLpFIiJgzZukis8Tvo555iFObaxgr0Uc4XHSbdXCJzY/X2jN/LVLWarLNRs9/J/5f0Vwl9mW76yflnaFMuc5l6OpDXVSfJdmInD/Cixy/dJtKJlw7Wo9g7bkSnO3zwZJvu6RiGh2RCKNaMrFN1YLb1ZD2QH3XdNdOF1qDl5akHSWnj2Dc+Shj64R1A151pefGDJT2a+dW1nuOC5CspHoKNCv3rxTIsRv8WZspD69+W3tszMemlZA4rg6jic5PlXvg7WilbcBG7fFqxj1tyiVq++ReX7LhPQfQkmuo7js2zMXKoK+4yozq363jq9xbG6gQ71v9Oizbr3z5pTpr0puznlNz8RacZYcBoQkyajffBKQvvcwtKD8RglflOnJJVi24Oe92KuoenHFJrudJOf8SEu81qyylfFzeZGAdr12ZonKOm/TdLKGvpdiNp/sdFzzbJnPj7VkGbRWJpSm7pz0CA/e2SO38RR5qnx5KcrabtoyCfGVOTl+Oxq1AcTus01RwbPJhWviytuvqS59tglmC1JCMasGbyZcBPzGplAb/+m55dR+ljzM/bpgzakWIvU/QaNUukII2FZGuL9Y9HMjSstYh6Mno6iSBNd8WrzSm+XIrf48EOuhIDd00r6OT61dimlP9hrW+KomousY4lbE5a3RLyVxBblfc9Yfwb8Ybdvd88sj9kvyrY0kubfVdggEtZF/qkfuDyRdkZeRIA+7sSrTzGIUSWBhxX+Jjj5+eoxxW6lkxEXDWIA5oKtqGe9M5badqsDLnmoRsDzI83d8ib5+wRaP+uOJdL0jpbdFteUj0UYNfwPHmCz3OMwKKdijH9RWKTN3fvk+PW/0fm/C2m1GUJXxBL1/duVsZkFNWxRXDrP8b986arvRXjR4oeahbc5UrYX72n+IALPq8cDqzekMSMy+8qphJiV8LG1BSNfXtlAcb31Cd+18YwkafSDn5+16B9Qn6Tz67+d//DuXxUFrkyVXzpNrs57dvv22FhWXR9qB0XNrGdvNn8q5f8KrlP50uHStXU6mMPz3ioj6AI9T+VYhis0wnMGQUdlfaqTA08o5YqsMOSciOe8qp5AZ8jDXf739o3dOKv8K1x/sZXCpNsSsbaBbdEPtprIF9GvTZOGA56NyeNGTa8GtNTO7chTiKHZohd4Vna7v/DwIt26e8XsJvslmTOSvxUduxCfqjEsuI2l974j94TR2zWB1t2NhgF7bTEm4u/vP1UszT42JvmK2UWIGJdRLpfxSR8oGGuOGlCT4wV93B8tWO8+VWc3z0N00pDSVqvT0VnYdIjAUz5LUfcsfEN3HXZc8uTfgyqpS2VV8efohUbUj+XXKVqmXIfQ21PRNyJeIkcbsAtdkeykFrDcnJ8WkAXqrKRSXDfoMMmzXShVxEYgZOv3azBWpMeX70j4eVAdqSMd0B+iTlxKONVyEI43UywIt/7H+HadJ4Log29c0k7xhn/x8PRjQeHljImOkuBQdedvX569/E8Xh2sL4UfQEtkYM9NXvsCY3PeRjUizbyXObForwlNwBy83rnsrWPPqUVQ4GfzIUvrx3uDn/hbFp2OP+fh6Qdve4aPKzEJ6M3E0s8p8wNtrukZ/knaMBUF9JA+pGsRKNPnblYooxpGliV/dPLnn23zJZxi5FW9Nmns/bw1ghy4J8t4Nmx7QbzahRqlr5KNmzw24M1oPHfTw3r7+nVM29tCpsfV1o7IjK54M3a3yN62wcm+iiVmZjJKgAGk6Q13qia1I0pUXqdtV02bbjqv0C3VDBxwRizXHF7Fiq2637dRmjGuXciknOkjBCnuNZe3k9X7f8UntSV7WzqUoWqhwf6Z6Khj3/lqhm1pygWN+SC3VvRj9MxYLh8rXNIQa15M5i/SfyRlZE0MSK28IfdM7zR3qF1HQ2FRGLQSYUAwE5RxqHGQQN62TxkOCjOyTX1ZGDzE9khZA83zjlSV66+gW+Jwy1OPVRO57TMU1fcmCEKpQdra3Fq+UpG7pqtW+iONZvqjZwmtXnpd3+SZo4zBuG9VH5kL6xYtB+vmpxm29ePM0G8HECDX2Es0r3GC+WlF//jBWD4KrpxqjId5c7CrR12oV58YPFVjU6C6NU9ZfUs/YhUZdDcvIi2S1CfNnWWKkWBlnOPPP5XMOljnNa8rZmaUKpjrFVMmiXEl44qneEHnWICwl/EO++i019pZOlxZ/cBTVQkiHSX9lrGhN6d4/LxJhvgBl9z8bd6q0Zpf2agKdkgR6LWaiA2K1Q/Z69Ghqr8U5CZlhHcw2LcYJdWxxrPru/py8LoEKt9v3GBVdV/RG7i9KfdUq+Pyx/5QVYY4GZv/l90jJ3KL2JjbgVqhhfPzDDAFpODhnjZUZzZEjzzpIHrkTw0j8h3S6SYpT8MyDeKuRkTGlsefJqplDduSfDdwwH3yeC1S1STXL+oFgfWPSGIjvn18SQHllk6b0onDkONDmBf+3ZKGjwP37wVFk/aWXiNFJtTMvC6amLvb4EflITE7TPjgftvxUl/CXpZMfO6b7WWLGvPty2DmO1FtMxi/um5zUaso3+jis3Fj+UHzOtGT5YEmcYZ+QGQNn5p/Bk2Urxsip6rKpazW6YSp2lNcP6xGDMs3kt0wT0MZRCl7EdK1hEddfd/21NpEMt5cwF/qGxofotYrJisrzwFk+MEswpzPwVUvmnG+F6N975MoHuQ0huSVVNd6iKAzfCK//JGzKTp1qtKoUrdI90hqaKuSrG1jSJB/H+oAf1Fnzw/vMf1CBaeOhMTX5iME0t1JwhvhqVB4X7tfrYJIzxHZevJxI50nMbq69hO3kIMPAhoLansQQkonbJZmEK4U5b/wrAjb8S7ZTXIZwgrSbMeYXz95S50ts0R5a8d4apeMNSzyu6jkTsw0KuvLK/EqL3eL39ECQg0ZVf3+/tctgeCBm7kTfsWyCFQs96gnK1z4FItOA2yddUoO1pl1Pffkb8lJNww71Ls3tpeUUCX8WIVBw1pO5TdKZkdg2RQnUXhzafZ6UOiD6aUqiz0z6m1I+jsnh58LpJHeGchVFw5P9/2JZQvcsl6ZWv7zD1VLfRBSWVrNV6CVVoaR59xg9J7rfrqtAeW7p7J516HvFt7sCh9YONHd6PJ60u12mbJZwG5uQWUGcQx2du89uJa/Ec4/Eag4DB/26F3Ejhv+6NsZTNPQ67aW4p8UPaSJHtiWzMpM6mD/Pj0Jv2mN8rsfTN824NX/B4YcvP/KiYMUfSX1o+cr+bbR/cJLcWNn+ouX+isZbr5v0UMGWRm4DZg9hjJdFb2JV3xPqj6pa9Hn8Qu2T+Xc962fY5xPYEHSG+JlsVzj3xbxMI+6dEAVq76pzfiOPU4iCKVm0HCIeobDNuP+3y6BJNbxOmheZVdziLmFoWWUYdJan0qavomizCV6tTbvW6feVFNULNCFTJyIUKkhotX5Il0NTcO4gNA/9qD13g4YtOutD9fmmR4ot+ov6m75d+5XtxcJL9OVFGWFPf1OUEromsaxyW6u3pqazpyIuXCsptThxt4pqVLwt2nouDDQhhMNv/0135HeYvXV1CUdG0HzmVOnTroe1yhdTMYGzGnZ1rlyLVe7Um/hEfmREbJq2Cynh+snKWCd6iSINYz8bBomQZmeyMyXRQmZ67pSxPhe/e3NhEj+iokHN+mPBvy/XCBCfpvc+qDKei5xUQbLf/7um5jcjrTDVE0n0i3zxy3jjgwR+7b7B5F+ZSHjk6eGjYUU+GSuTiVz8NmWlPyUyjj/YLMb8/v5+bQMdh4chEzuya2Ji9rPK9+NcvqPft9yoLVd9uietyJlV4gP/9LRcGihcvlX/5fDqF7JauEPKuiczXRB1rmJmCDJ61DvRVqhvbCt6+FGX+kzWhOOgklU123HU61fcv83pPl9fnuWd8WcEvME0z7bmeHxTiv6a95iZ7C0z3393+UH5iPrYUDdclu0QawlLrbT2yYQpjujkzk+WAKIbitrTHaectL9l7Oic7QvO+BIuoqpkmNO7xq63mERmNkUZRmU0BuExAyI463fJb7XDfk2wrXJ3lOkLBUpy4ikEPgnPySSpKHCS6V6tm/ClkcrZc7347LhuYZfYPp7HrDX7rkEl6EpYZuSslGBNe3ee/Z01Bs0VeRN3tesgzRnrYbY6/y+OLP5m+kmuU6bktr5zffHU0i81mqey+1X5kzG0KEgjVN0VyusuwS5l32Rr3KNYTLqN3rCyY/y3gmtQ44fN4lauSsuUftg37Dvbozhgw3l0mckcT/XHVHzZjOs99xBiFWG1g+/EVbYobnjEZ+sFDWR2RkVW//5AVfNDks4Sw2HX8JvOCc8u8+PYwP8yKcRP49P9lCv+BVRbFocnCqGNVpAFDrVr9+Zc9O3Ib+4N54W//bDSwKOPY/6g4To42mjfabqXibWB9GvmvzNClf5LKwJiYa/RjI1yrVffSTHZY5MIrmXGFysC0qqvxrv8k197iMT3LJMMMH7U31t/xf/it5WDAJuKK9Ed58MPiB9luk32AgrPBB+gGYXpYc/y9jbg+VilTF3xVD56GcaNs9B5Mk+NM6B+98Sr6LvlQQFCOtKHm7It9IcPTKUrsqnrvidYdL1O/RG4He5v0vnfcPidabV95ZeOp5g2xB7VzcHv2uMWhHQWrh+JoO3ycRzSRNryx30tUX/EPGTVw1GwZpN6nr5zzWo93Hdzz/soJcN4gtW1q5SG//532KrRXt94J5sJiaasFRfnhAT3XGpv50cTzlq9ghE08YX3q5bI6ySI718+5RYZ/XdaNmoy4YpDadnX1edB0bzhYVCj9jTkkHJfJG/ZGffjh7G+piTSwXkipHGyVWIsvYJo78sel51TLcOmKfNnbWbrtEJflPHqVXYZNoIo//j+PHtLW44d0RzXUmUVuCLJNio+UInvtfjJfjnxjW+/1a7K0gV2U7Dn+EUz+d8/7d0iQ6yE7iRzhKEur5lmnWSJbZYYjT4RKWnI+xHeemdspc5jd8ZUZu7HJNWY6XGMiIadt1b0irlva24P6GrkCi2togyNePK6DBCKXb53LZfqCuxirPSNyJTcz7dK1fnQ9x8KuvnwOonx3hkCr/+3gLnet6nx4QIIcw5lKnsuTO8cuzYKjabT/HocW3PrcuLU5Bs52RHiX9Q9fEV+9tCs3qpzheo0f+Ud05nU3csVKgyFamNJlE9r9kS5R2svNt0wLKjrwhVfVa1qbjjV7Iz/p8x7brMTQBClfK0nclleoFopjayOJzQzGv54v7XKbWgvs9uE1IHI9d6UemtexCfMfKU+MZAe31CUlQ9/bOZHxyEqJR5Jz+3QXZbumiVei3mn0g3Lt6Pqvx6HojcSP+3t1tDFV59Inm1KppkP0dIr2b4/zFO/QEhV8Ef306zG/zbKSVYoi7FlMOSVcfjGsII8tX/09ANRAxL3iWPHoTGlrFedgLQvqtvob/E+ciTr9LTih9g6kfwHG+jz6vGMggQvYjTkkfLG9/SULH63WWpscdnTUTL/aGd42LEjF+WTlz9lOiWpfqdPj17GXBCwEIy1KxtqlR+STbg76T8wp41DEZB7GJ3Vm1T84VN5qyXS0sm+t1wd9cz3E/r/1nc/HqP0oZarx7hd9w6XuYp5Nn0reS1mqWzQZd+GanDx+yMNxgQ7rivSCtrU4i0Gou4C+jeqThQa/SgucaXq1Lb4hE+hd7h58YEc2GdOH6bFcC3QKGJs2bNGWopHCjL20ObdzQhSiQ7mW0Ik0+dflzbhtw+ifWjJzMwgzf1Y8ESgiv1PJY6hKo9tE1FN+NoXjkxkhnjhHoFAyZRv6NozXZzU5FnJc/xkosohD35oXsvy+D1EEMB/aPkVyb/tax5CvDJp647ISPSiu2pZuOOL7xkrA6ofN8kkrl002Hqp6tUDBL6ymbol0S+3yeTdp2cf67UnW8hhjI1MZ/Jef8fgmWH/YW24lhroiLRU8M3k6Rfkn65xTy+4Nn8zTqLrpJw+1qbgVBLjC+1TbrvsQUPB965qpEzXVz+eyvx3a6mDt17TzYNB51mHmCPB4Bb1vL3GxvpibkaEqdzp6ShCgo2fKPUzKb/8pcFw+WDUElTGMoQ6KeG08h78topjtqo+U/WCExz03Dd9qroraLtSKW76f9AFekJ4urIiScIkrysIdVmjlzmadqwtej2Knnh1Lxkrjh0U/tsOsjDLrtCbe1U0vFJCpduPcVPoHMvkp70mSSEueLc38dibyy33BHc9AdPzEYfE3WhXtzRKw7fO/RaL3hI+LDJP7zJ9vKdlbOU+j4Z8KmWvnozENehZDG/MofsukWI5FkiYSUfIxF7KVaBxrPdSKYa8Uyjui0d/9IzyWjHIeQXfvo5+1sCYEnn9nPSaRCcWCbdkx7b4M7Wwu3WjYUr7F8k67qaOoZJWdbqb9tvp5QH31nlj2XPea0fZynNdrBJb6qt4s59Tr2NpcrTFVOyp5yQz/JN6JPWq3+8oS36h7nutMaj0nQsdceIDnrl8OI7WQGrQjmpbVthzX0fVFKmnHmTUyB3BM9u/+2JPrpAijbx8n8/aX+Y0/dhWtHv7dM+qprUUpx0HScoJ0beVRDiE8BDjqV9IKKcGppHkD8wBgdOV64DVdEZyamFqt/vn4g4RMxtfDUSs+I25VU8/fszqQO978fWvDuHIIN5pHWrRWHehUcpWv8Wx4Dmtv/xk5tPnHdNuB1uuN+qbOlQc0cVV8zgFxA2l4s+3/+u+n4vSiw6nVPNsbNCTPtSJilTCcqTjNFSmteLMFsxY2S9W3iv+Edi6qZ6ccSRo9DP4u0Z+q7m0bJIt1xR6xXq1eLK2wiXFnT0b01tW1VNiwoEPns1c0sLrBo2mKPnWXXx7PpZeiyitDEcYoSSNY8Ur0oiufo+W/CXv2bOPquldD0MkuPd3gk0ISyqV0OILcdsj//x594cc8c3mM2MkCnVHYza7y6sSLEwNK98vTsbF7NWbDj5vm8STmDlGzyoFlOef2l14658FRBag2HC56jf1x3Sh5xDc9lD/Pouc8KXaPSx2QMsdS8hK4G0qUo2ckliQUv3UZWfi2q0aWFuOXjO6ncGTa5DRqYT84uG5yxc6eseziYMIeuziv93aIsEzBCsp88Ilf3l+LxWW9jWsriSmYwyNGLu3dor7i5Z8cJeZyasY7ktUrDvlkQpVIR56bEjHJE1vYryyqh1qKHT1/NV+vLSlZq12wd+H8yXq5tg+1XQkJfq4PSPR3mTxz0wOsxs1b8PsLCJwFV6LiuEV7tb7W/ca+7613sl0qPVH0zAVKk9y9RjH8bkeafCR2lG14dm7+tQQNeqaqNhAQihm44ijGPr8LupS5/oVpjVdadkUP9XqhWIJrYTYriZLq4+MMWcGCh2bwT/ztZeNbU9dyXRF3s5O9pfI2d4RRRfmcJa80bouf/GYONPmoZLX8X0jCnG3yn1VzC5aeRPSS/4NJhmaxRjSm9uoV8e0f7MMD6OdMZ7P6wYhjPlSoxlODDzVKF0aamXyISXUbVXjjPj4UJxsHc94FnferCk40jFIk8JIPjSjtrw92rgbadcEY3LscTUdm6eWixDtyZgxDjVqfFyg3sYXv597uepvauie15m2IzMuyeddEyseaAXM4qkkkCX3F6UcBLzzGzSk+zb/WCWBiQNhmGp3z9DKg8MIE43vF2Nyf8xU1fP3upVauz09ixEKhHNEcljvZTNNqpKGZAYPmIWMtGlKHL791yyWoXSw2JkgvHaDPnZ/c32szZSVutS6/e/bv/IOPq+TlkDMCLnjjIDXIt/R5j0nFAeIbzZLETQpcCq6Ftf2kmR6Rz6KWhj59MkX+Xf+Oo4yjuj6Q1UlZpQ5eJi7TTJv/4SgKmM9W1L5TGbJqJrsI97AX2akbzOr+nr358pUY0IpAkLnoXha+zMftDA4XIowlwlJiXnREHLK1/NDA7PbnKu/ki0PBTbsE5sHcs6rPVlUKtmQQOZVo+IZyi/D0E1J4kN2Pycw3t/noCAK95vqs943fHx1bX8jOyd+YR3nzmIzhHQct5bi6BKivfOHCjH2+hbTdE+zZCoSuXFlY8l9yPx91ACW4oNuvn+PMgXYklBGhRAId4ZQDX/sUue+37QmSDNPZiL80HeInheJlmzFmUwSZrXY4eVQFRqcyhnyQKu2LGiRKDZ+7bFgrsNBEOvth7TuRXrhbUy3jqYBU3+9TX80UcwOUcrjXFGxFapaCxGL/tJSja+ON1hlpd8pjdsM5St+d1oTWKgRLwx/RngYxsU4FcMuazj4AacybU2fJCBXqKgqvM5Mj8+JWy/MIknh21pKz7sVOzl+Y9SZFo1kz6wL7+0I+b3ystN87LaEYxGrD0df2nV2vO1CVFLWSdqXr469jWJrnpFghsqHkg1kei2x/uETHXj9Ty7VjnHyvy37NfRXeb2Cv+u1TiPWUd7nVjw83XDbPtkKYv3w+umgKpf+r5L/0HW1XkV7hnrdWY8LnQjXe9HKLeWiSkdJ1nuZRhXckSYXoSu4O+OyBVwHKfDm63FPDCLYBLX989HG49NTv8f+Ndft8fL35H2sgYcqlurBoQlJhPctW3ZGgy015mfVW/zP2cboNSUiimTXx2sDnI/m5ZpvwmfWf/LmBeuN7Sdcn7PY8T65pZWtLsI5Q3+Qpzv/OPQy580wpv/THzJToWkfTn6exLE8aLP9mGYmcxcTvjV642ZiWJyYTBhUwlE+pIVnmVBEnqlVHLcy7vTWF+fdW9mJ/DFy5q7bvMw3T7iHEzAi0hhpPrO3s5+Mf/r01ISs/6Fs0UyF/B/vyieS1IfvWM7onvj/HSx0vrQ8riHOe/T7zZ0YXtFJcsTvF/TcWu9tMc9wtl+PzDk8WXRsWwhLw3YzKW5UKz4bORITEFdi2UlPwNk2pRwQQTdpQMi+U8hnP9hD7T9AW6Mo1UoIrClBX7OafRHeJbAVlJJC8vgBLuq33wb8CLP1RbPKkb92Jc6aGgtaaULDHfrO9t4TXxkqRrsJnpsdXhj/Y/6TYzrrayaTvLjdHE0nWvXIhyYFeyhpD9k4a20DnTEawT3w9Z+zgt099P7Ri5WXcQmLxmnXxi54ZuM/2ViQx/pn0mvc12obUSst9FIRTm2R1nTqlFu0jIidSIX/1ZitMX7OVaRvIGRYZODz68DGTKbirbCJ569YIe81VGY2jXsuk9I6JThIzLj0t9ToyWlt4KcE/3JHQz5hCsF5f4Zg007JF0MWtlRon9jL8nX65aVY8totZb8jXfIxOFUyvSs8aSk8ErM33yD1nPtqwI1YO178bVjt6KJ2ZXJD4bXQRWWYBHoZafOUifhvHcfxOZacSq/jqPP9B3lfmPflA3+UJr8+RUzUVplKl/9VqvckZaf+OAnXkSOhyU9bBxE9ebLvDVlPbQd9bm0Rts3pPUvQePMJtsbeGgH+V8LhkXSfZ+3MJhSx4u2ruzMsJvJhLb2ODVj9nXOoF+m1P8vyxh23RQJdfjydYyt6+emjC7p5pUxGxl7MlymJ6/dNkzIqplN0JdNvXvVn6tDwekrKivfUcRC2EM465jD5pbb2Nkwesjv91GczbLYwnRUcLGWl5xt45Ggw/nIxSAC7LloyUgpnukGE99MP1fynFWeB3yUoETyJuNBDrSt/fL2mcpP0vtLbNeo0kMQ0qnlu1jTx7CPmbYhRDh2u9qs4hZLS+82/IiMe5F+q5Fd+jV1zI46tIfx+wJ58FIAbsPOlZgqpv7oe1Z2ZuIUlY9pszfBT4TvGzL30rwFZg1QHogImgqxsV/tsNh9VNPmQRvlCgvmk8OS2s3uTFEjUtv9DSm1zO+lMo2Zg0x/2Db7own/aLPihksrVUXf8Gnf6k6l4zS0SZ7vg9Erxhgh7DddTh5qhDv4nsz2aze6FFFISJ6XoBIbK3SlIav3WiR1T+0mKNy++Dz4oFpB98c9RkRmbQiV59J2Su5nQaUoDGfOzUizSgzT6qiku99X040otS27zd30503xGaZ61i2bF/IMeLIwqnqYRBRLV65bK32mW43Tdaly+Ux995MEpO9c/lJqtVvvyPimjO/GhAGXUQdjSAqK95XF9xDV2MKulUATShOXXDKX/SvV/cfiNEH/LTPzlKZv5HfeVVeOCJlb7F9kkFnIr4ifbcqvphFxybxo2GAlcLd0i3XcF3oSjsGTI8NmQEafGTKZZvNHST2t9FDRsqYha1b/09dZKZihOmsOHWpe2SNX1OgPJXfJfyf0yJyln/YbIP3proW666xJUJcLgUoPjiWmsYlkT/azAG4yEeeNPKsT6eHThoshG1sX73bp4z9nYtc9kjjXtNDY0H5EHfAv+FeZy0vLZSLkfkcNabm1IISDpIiErc+NPjrfSP9/PX3W+OS//68ImfItkVI7PNTBXUUwlruvN+rI08vdX7fXp89RIJXpmiyX6G1LL/tkNz3brAK24JhceNN6Q3LnAVT2jTKFHVtX2Mx7WEwEj/zk/VGUxGn2UYxbRMG1zy8YSI/CpfH7CWNxEXYTWrenH1ZzVPHHJ/MPWPmGhKtP2tPVU7SVT/IXFO8cX9/PRBhNRpEn9nbrupSlj9ueGXb1PVRDWlVSaLX8PmmxXYgiEtz2zy0G//rDa/dj69y9VHfENFoPZ5wT0Ofsimyno3VKK4mI4V/Ebg95pGeaheA9QSm/qn65w+83yYb71nstf2mEcaFr7+pd41Pioeigy6MzFEn1u+X+7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/seItVR/O19TZ3cq54CBH+G2tvXsbf2i1tzkvGFp0KOnx0svrlpeyDQo34xI486ki1TN+JAWIYV3E275T1FpExXutNYHqHhaGth6fPI0iGXV3ruep9MLvU8iJ7pTx5XneiDBVWGUsvsLZ0NK28LxkIPcNbzGEjtOWzKfTO712wbUGxM2TeaqcyxK+RMU/cF7v5r4/9kLBQEB4fH/7msAAAAAAAAAAID/b6wjiEnfMJSbSVq/3q+UEpL7nxyO+H/nKAgYCI8RUBFQxaJXnveyMkcZBNURl9mFztch9EZ/Ly1wmviclsZzSOO8EKTz9DT+7H/5HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/Q8b0Q33N8+QT0xl+l5Wk13va1rO39YtacxbCm1SlFR0LhwRqLSj37m9Pzp1s7Mwl2Ahdwyimt+jefX6H5xHtfBS61cX6xnRCsAfdZnNUkSfwnvTGz3YJmxCbtMlGgebo2C0YEcsi/mmVJB/R4grqasPrV5/4DuyXX6xj1pB7fSZHoGI56iR3+z/s12mUz3UfN/A/ZhrEZQlNlmwXshUikS0yDI1EzeBqGA2JhIylxlTTYpQxBhl7ljGWarpMMsk2hcpWKVSGpsWSfax12WbcT3LO/fw+13HOdb9eT99PPr/395zfOe8iZ3787Uazi3d+/dWqm3cFBQKBkKBb2w0AAAD8rzhaIjsmavvnSXUG/9El7nLG6Zs7PPjvPChQPBASVDXwx4vvVptb8E3hXSPCNlcLrVGu6luBz3akvpCw8M4BO358/sKaz5o9srfNK/0aJDSaXmrb8d7VB/24IiaxaPKTjRd/F7q5+6s90va/8tThS1nP9b5S9IteL9br9nzPWaVP5O7cEt7i9gfeWd42ZlHLH36ILVMwLfD5nJZFvvxy3LZNGy+2eK1Y+56pOZujr4S37FAmsdPeUlt/O7Cp34Ddj7aqvSSl0zdtq9+W99tL6fe99H782yWP3d/omwqjdl0dvuWX/iVant36XsUO2dvfKdlv0o2W3bpOj5hyuG/3t/5Vecm9z/70atmFN+K/jB1TZsLER5qtm3I97dqWSVm3+BkAAADgvyrjhWZbiq5s0Dzq4zuTUoeWSL+5/0P+zoMCZQMhQRUDl/L3XX7kx1mhNQ/Oa3eh1YwBv8dGFET3fKphnxfbrv6i96DuFyPahFU5mfdB158Lg/vtyX+33aLXE9/+9u7wMZ9/GBFcUHz3nmWNiz/WbkZBxJoPSnyy9OCXfffsrXK2zZPb3zrVrt5dx9vvOlfhRLEJCYk960wbWHd/mZgqF0Pq5E/7rLDRiXun/ZCb9c6Syg92alVt9qtnSywo8/6KposqHmw6fFbtMf1GvjQ9JXJhdrmFS8ud/3ljYrNet7hOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEAjUumvQnIpnK03qnFkYOX5n6qWoYbnX1+ZFHmiZHfxQmVop0zfcyL1984gh4Yt+nfbUlsX1Z33c4vAfbV86svrEkwkrhw6vkF312Fdpu9LbpHW889iR585H/NElePPY8HuG1clduTvqhSKzjkTE795QOLL21cdOZsyfF3ljUPqO9kO3B/86KP+JlaOOlTxS/NSj3bPXPBg/7aFRVbJvf6tx+s27ggKBQOitrQYAAAD+Z3RvP7J02/KN44a++EX2r4nLSt3c4UX+zoMCxQOhgWqBJ6pPeXzf/mPFi0RMPjS4yG9ba4dFVIibUbH1wRc21ymempQf+dy8D6uFhYxoEZu+bnLEI+OPTMo40Sy9+vDrHRO2f1kpvNLMg23qLexV/mrOn6dHd63ar8udndoHZZ9dUX9Wo29n5mTWOHZ8YpOHH26xsdWBMbPTr21NLhleMiw/qF7993+qlhMVd3tSyqaFC88OK4yOjK6+8tmBC/4KubtMyn3rI5dsWrd44hPjWhVf1C2Qm5k9Y3rku71ah/fotXx8iwHHlr65q3rpt1eMLZ926ePTp6p3G/R9h/APow9l1B339AOdn/ulfH697JX9WhfGXiz386rM13oeCNl1tN7oW/wcAAAA8F+x/npB309Pv/yfrq06vVPjVEyfm/s/+O88KFA2EBI0IjD/o/gTn8Ssfm5a0QtJvRv2m9m3wzOpLbaueeNI1s7UmbNm1iyVlRL946E7+27fWS2n3f4K7e+NbvPyV7NDwjIuxA2oOOZM/MYJj5ZLuFBxwfKJA1fOu3tC5DcfHWxY+vk6F56e2+jimv4F72fNHdU58q8rBysuOdPv02tHv19csDwrNKvnoSNDBwRl3nHX+t1dXz7ZPzp8Y/ajPyxbsqD21Yr7Gpf4qfKUBlfe2Ptn89DyV2qdHlB5a/iXlXqsenhZUpH45R88eiGxe+yNg72ypgWPbFIy/MPUqB1JtevNb/9un/rTo++4bXK1uLl3v/JapW1hRfdFvVg/rE3y7PvDl7y3YfZrq8pfHVFswavpuQdO/JTaf0W/sTsGhuz/I6zGU0U25D/81YZ7Lu8fHhz83fRJi3tX33G0VEbVpt/+Mv/xrLjTDc+/G9Hko6Elc+97LaWwx7lVS5qmrn09LHnPqpPh5f7a9kBGnyfLN5vf4ca4tp1CC0vf9vo3s1aPHlAz7l9v5SYfnXzyxOvtmkXGfLpxyndjD03If7rUmffT0hat6RRcY9i5am9eSGn+S62/vs1Z80nYb2V3l983Imftp4n9byzMWruib8+M6A0r6/Q+k1n8vt7dkjf3rHlXZs+soKT8h2Y9c6Bl/6blk4bm1Qw7+lX+7v7te7zz++J/vFDhzvOt+m3IDUp4JS/nxtZyT/+ROWVBVlDHd8v2GTwwbmXnjfUHped+/fio2a9vrtzyyro+d9Rs/vX+FhENP8lMzIzvlnV1//zp1+tm9LrUJ2VV4b6zZ88ENxpfMWJKyfOhUXUzm8SPavbMvoIDr4at3TH78tWmxU7u2zxx4Mwn4pbVT+7ao1qj2inr+p2rEB/TpljCvjs6zogq0bny+OywI9FVWuUV+2rkoVHTNvWvn1Pj6m1NJtaPze/5dK2XFx1OeLPN3KI1lsV8fv1UrytbH2ixPuncsbGNg0d8Hnb/sEplfi6Wc2/z/s9ubFY3r2l+32W9wp8uKDIjZsu1axvWTV3arGaV4M0ZVWvEVWnYv0yl9F1dypQ73nbesm2B+IYdp38463DNB+8Jjan6j/S5K8+nrRvY9eT1wqnL4ptPPTK71ptjf7uW2TN2QO+Xrr2RfceLf504PnFC8xsbvu6a1uBwzKDo5ZMvN9k05/EXC2eG1yz+e9VZNdd37Tope27iA60Hxb32zYWpBVlbk7bvrfDhW1kF3R4b1W7drj/mL3nu8uyqFypduFht4rmqiXOfyErPTXm886Lm68M+eCbl3JD7K1ZK+3eLpEsv7QxKrjDgnaWbQr+7xb8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/Z4c/HZS2JXltfLfQnXmltz/2ftSw3Otr8yIPfNwn+fiQYXuyNnYof//U5gu+bLBz+GM97h+3rGG5VxKu/9zgmfNBI9tOfv/ZClO6TH236K62yf/u2a5uj6ZDx0xIK1ye9MDAH2a83Lje6l8nJl58pPH31Z668M5/Hmw/5JfvH3nwk22Xr7/95rcPfzo//LE3mrz8bd3BhRWT12TklR9Sr2rZ8QkNb94VFAgEQoJubTcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/5sz25u0W5zTdVLRpr2rrfipRWHUsNzra/MiDxx6L3XdkApXljW4Z0nXHimr7xt6rHHss2PP/z7qH/nTNzz/Xqnwe/a+cK1Ls+QTsytH9Oj91tY3P9pUq/S86UfPni5aN7zKa7XTuy/4aPIPufN6N9nRKHjbtFPL1rce1mFJg7ID762S0H7P5Z8ymhXbvzw0KzWh4O31d6+ImLz7fOsqR4r/mH3zrqBAIBB6a6sBAACA/xlRdfb9klZ+/Nhfe4b0D85+turNHV7k7zwoUDwQGrgtcKbU8eiBoztXHlPx3OCfxy1NWPTn1nEtIjc9kVpn0tXY71p8smbCjNipD9xdOb7e3JFTTp2qcIs/CwAAAPi/DKizb++Imn3uu33r5MgnMvMSb+7/oL/zoEDZQEjQPwMff90mosiwOfUPXWpe/9PbQg+XeW/1vFe3LDkd133sySt5MQvG7bke++eY8d3e3LdpeZuBHxwcPLRS6y9CmuZ88G2FyWkNS5Zp0KfUnL73P/n9wdhyq+rMGdK5bFTT4NuD2vzzpdi50R0/+HzyttIfTZ2xpePFYl1yNi/9JOaueqdTz87rXOL2tMZzKtds/e/mEd07Rs7YNHdUwea1o9uNXvFxTuk99Qou5/81OuWe4ftHrH8uJq5Mh2qZHRZ8XaX7hCpzZ11qs7j+kWIPr3xqTr3m5Z9cNfP3tVcfH7mo98efLfu8TUa3oc93euyhLx4Zmvjr2Od/Hv7KR0MGrf4la/QrrQbXevL7U6l19o6bcFu5gYOjuvznTPJvb+z+sH/EhtVfVe22tEb57R0vJP00pVfngpIrpq36YcHOFlvD7pl3NG/GvY/e4mcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/ww4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX26yY0rqqPA/C5M9O300zbd1o/EtuCqQol0UBpN/ULpBCtCqngQrQoRZu21LamdmFEqVNFMkSQWDeCC22hLlxoSinYLkSUBjGFFEFdCbV1IX4XiRRBI0nuTSa3uaYZNYv6PDCc+Z+Z+7vnnHtyMxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/vPmF5rG2oEX9/7asaz9k+c7h5/bcGLX/kO77mof2t9+zyt/HHzk8NHdb8zf0bRmy+6Ntx25/ejZrVd1/D5jcPd40xKXxRCi4SiE7QfOfdlzcrBxtC8KIeSjciWEJVHu5JIolbD6txDClolxTv3wveG1W0fbykvzp/T/PxWSnlco5ZPxjCtPHS+Xl2K8z16/4acfdnTdPdj3wE13tizrfrgy+ZWoWLOfQli8OX18bprcRx/b3tr6eOfTTZv27dlz9bdvF77oeaj108Nfnes8e21v71Dux+9uvvf0Z/uenBdCWBC/RiW7tSk5edzeF0JoqMlfN8O8rrvE+bdl1Cvi9n9xW5ohJ/l85SV+P62QahtmefxsTXfN/k0LU3Vljs6bzHNx3J6I25ZZ5uSTVxRyUShM3It3RpN7JNRctyhEYV7NfTQKubE6N1GHsTpM1lGqzqXq/LzUvMbOG2+0fBRN7U++l+pvjvsLcf/K2nv9NO7P6L8mbovxH+qFpA7pN+NKF72ZmNeYZFxn/mIscyFXcw+arj8Z77r4YpTivlK09KJjRqaRfPb+zuq2wSfWv1DOGEfUH8X5UV35t3YtP1aqth1qysrfnIvzc3XlD52/ZfnXxc+PZeb3Jfn5uvKLg10vP/P9h6sy1+fnZH0KdeV/1Nf96pXrv9nYnJX/ZpJfrCv/fGHTqZHKkQOZ41+drM+CuvL7HzzecWHtO72Z+SHJb6grv7k6cPytnsaDmfkfJOtTqiv/+rb+6sfVvRsy1/90kr+orvwzI2t+aTw18G7m/rwjWZ9yXflLt61aUX7q2Ruz7p1RZa7/wwJcXq6If2NV47re59S/q+Z54bVyNP6bb2H8WvRPniglqnl2AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5kBw5kAAAAAIT5W+fRfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CgAAP//b8tTFA==") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000000c0)='./file2\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) renameat2(r0, &(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000980)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xa50c3d, &(0x7f00000002c0)=ANY=[], 0x14, 0x0, &(0x7f0000000000)) 123.055745ms ago: executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d011fe4"}, @main]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000001a80)={0x3}) kernel console output (not intermixed with test programs): 864659][ T8484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.898329][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.983624][ T9] usb usb4-port1: unable to enumerate USB device [ 271.113337][ T8437] veth1_vlan: entered promiscuous mode [ 271.205236][ T29] audit: type=1326 audit(1717642363.405:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 271.343687][ T8437] veth0_macvtap: entered promiscuous mode [ 271.363589][ T8437] veth1_macvtap: entered promiscuous mode [ 271.425383][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.444679][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.444705][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.444727][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.444746][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.444762][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.449699][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.531765][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.546874][ T5119] Bluetooth: hci2: command tx timeout [ 271.568584][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.584534][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.615869][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.629479][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.645168][ T8437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.659200][ T8437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.670760][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.699526][ T8437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.709538][ T8437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.718800][ T8437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.727994][ T8437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.750395][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.787216][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.794398][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.818582][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.825856][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.926158][ T5167] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 271.984180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.993516][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.091851][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.108578][ T5167] usb 2-1: device descriptor read/64, error -71 [ 272.112170][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.376336][ T5167] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 272.547699][ T5167] usb 2-1: device descriptor read/64, error -71 [ 272.614073][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.668425][ T5167] usb usb2-port1: attempt power cycle [ 272.841565][ T8484] veth0_vlan: entered promiscuous mode [ 272.890697][ T8484] veth1_vlan: entered promiscuous mode [ 273.004074][ T8484] veth0_macvtap: entered promiscuous mode [ 273.052074][ T8484] veth1_macvtap: entered promiscuous mode [ 273.096289][ T5167] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.101107][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.132410][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.158328][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.169187][ T5167] usb 2-1: device descriptor read/8, error -71 [ 273.178179][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.197606][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.229023][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.250786][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.270388][ T8543] loop2: detected capacity change from 0 to 32768 [ 273.280676][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.293792][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.302769][ T8543] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8543) [ 273.365144][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.404351][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.414350][ T8543] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 273.425006][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.439621][ T8543] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 273.450697][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.462048][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.467572][ T5167] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 273.479481][ T8543] BTRFS info (device loop2): using free-space-tree [ 273.492363][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.505925][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.506755][ T5167] usb 2-1: device descriptor read/8, error -71 [ 273.524297][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.541391][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.596884][ T8484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.606199][ T8484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.620916][ T8484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.630755][ T5119] Bluetooth: hci2: command tx timeout [ 273.642579][ T5167] usb usb2-port1: unable to enumerate USB device [ 273.652359][ T8484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.877944][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.906242][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.039967][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.077868][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.365976][ T8576] loop3: detected capacity change from 0 to 8192 [ 274.416745][ T8576] loop3: AHDI p1 p2 p3 [ 274.421148][ T8576] loop3: p1 start 65535 is beyond EOD, truncated [ 274.437330][ T8576] loop3: p2 start 134217728 is beyond EOD, truncated [ 274.641901][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 275.192275][ T5116] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 275.374840][ T8598] Zero length message leads to an empty skb [ 275.407777][ T5116] usb 4-1: device descriptor read/64, error -71 [ 275.598428][ T8407] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 275.708440][ T5116] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 275.753689][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 275.907729][ T5116] usb 4-1: device descriptor read/64, error -71 [ 276.007803][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.181726][ T5116] usb usb4-port1: attempt power cycle [ 276.420602][ T29] audit: type=1326 audit(1717642368.625:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 276.556146][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 276.607697][ T5116] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 276.646568][ T5116] usb 4-1: device descriptor read/8, error -71 [ 276.759694][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.784499][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.808029][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.824567][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.850230][ T8] usb 1-1: config 0 descriptor?? [ 276.931325][ T8618] loop4: detected capacity change from 0 to 32768 [ 276.941669][ T8618] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8618) [ 276.956129][ T5116] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 276.983777][ T8618] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 276.996113][ T8618] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 277.008001][ T5116] usb 4-1: device descriptor read/8, error -71 [ 277.014483][ T8618] BTRFS info (device loop4): using free-space-tree [ 277.075332][ T8] usb 1-1: string descriptor 0 read error: -71 [ 277.094529][ T8] usb 1-1: USB disconnect, device number 21 [ 277.126227][ T5116] usb usb4-port1: unable to enumerate USB device [ 279.114686][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 280.891677][ T29] audit: type=1326 audit(1717642373.095:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2507cf69 code=0x0 [ 281.517137][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 281.708500][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.736140][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.745179][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.769319][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.790983][ T8] usb 2-1: config 0 descriptor?? [ 281.845585][ T8437] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 282.032454][ T8] usb 2-1: string descriptor 0 read error: -71 [ 282.075086][ T8] usb 2-1: USB disconnect, device number 22 [ 282.182742][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 282.718025][ T5167] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 282.897033][ T5167] usb 5-1: device descriptor read/64, error -71 [ 283.215930][ T5167] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 283.399132][ T5167] usb 5-1: device descriptor read/64, error -71 [ 283.551207][ T5167] usb usb5-port1: attempt power cycle [ 283.976413][ T5167] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 284.026855][ T5167] usb 5-1: device descriptor read/8, error -71 [ 284.126462][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.392136][ T5167] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 284.461043][ T5167] usb 5-1: device descriptor read/8, error -71 [ 284.607596][ T5167] usb usb5-port1: unable to enumerate USB device [ 285.277872][ T29] audit: type=1326 audit(1717642377.475:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc71c7cf69 code=0x0 [ 286.157094][ T8743] loop2: detected capacity change from 0 to 256 [ 286.174151][ T8743] FAT-fs (loop2): Unrecognized mount option "flush[Ãv4 Øme=£e2S`ñ—½;+º²utf8=1" or missing value [ 286.199848][ T5116] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 286.275857][ T5167] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 286.310194][ T8748] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 286.369708][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.420353][ T8748] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.486052][ T5167] usb 4-1: Using ep0 maxpacket: 8 [ 286.493845][ T5167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 286.517383][ T5167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.544347][ T5167] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.575921][ T5167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 286.609352][ T5167] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 286.652006][ T5167] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 286.678674][ T5116] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.689772][ T5116] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.697954][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.705108][ T5116] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.718062][ T5164] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 286.734463][ T5167] usb 4-1: config 0 descriptor?? [ 286.734914][ T5116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.754024][ T8741] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 286.781364][ T5116] usb 5-1: config 0 descriptor?? [ 286.885980][ T5164] usb 2-1: device descriptor read/64, error -71 [ 286.975400][ T5163] usb 4-1: USB disconnect, device number 36 [ 286.982791][ T5119] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 287.018942][ T5116] usb 5-1: string descriptor 0 read error: -71 [ 287.078272][ T5116] usb 5-1: USB disconnect, device number 16 [ 287.167636][ T5164] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 287.326831][ T5164] usb 2-1: device descriptor read/64, error -71 [ 287.390906][ T8766] loop0: detected capacity change from 0 to 256 [ 287.457506][ T5164] usb usb2-port1: attempt power cycle [ 287.674833][ T29] audit: type=1326 audit(1717642379.875:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2507cf69 code=0x0 [ 287.927554][ T8781] loop0: detected capacity change from 0 to 64 [ 287.936191][ T5164] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 287.967075][ T8781] hfs: request for non-existent node 293 in B*Tree [ 287.976198][ T8781] hfs: request for non-existent node 293 in B*Tree [ 287.983576][ T8781] hfs: get root inode failed [ 287.989452][ T5164] usb 2-1: device descriptor read/8, error -71 [ 288.185127][ T8782] loop0: detected capacity change from 0 to 2048 [ 288.209711][ T8782] udf: Bad value for 'fileset' [ 288.276040][ T5164] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 288.337521][ T5164] usb 2-1: device descriptor read/8, error -71 [ 288.491247][ T5164] usb usb2-port1: unable to enumerate USB device [ 289.346029][ T5164] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 289.483514][ T29] audit: type=1326 audit(1717642381.685:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 289.548059][ T5164] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 289.568199][ T5164] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 289.581694][ T5164] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.593555][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.606660][ T5164] usb 5-1: config 0 descriptor?? [ 289.631633][ T5164] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 291.334299][ T8817] loop1: detected capacity change from 0 to 16 [ 291.457415][ T8817] erofs: (device loop1): mounted with root inode @ nid 36. [ 293.640041][ T5164] usb 5-1: USB disconnect, device number 17 [ 293.725597][ T8826] loop4: detected capacity change from 0 to 512 [ 293.803410][ T8826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.863943][ T8826] ext4 filesystem being mounted at /root/syzkaller-testdir3769152358/syzkaller.gJ6qdz/18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.974846][ T8317] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 294.019554][ T8317] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 294.050781][ T8317] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 294.110731][ T8437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.247287][ T8845] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 294.325967][ T5162] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 294.339838][ T8847] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 294.486441][ T5162] usb 4-1: device descriptor read/64, error -71 [ 294.496697][ T29] audit: type=1326 audit(1717642386.695:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 294.756132][ T5162] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 294.906684][ T5162] usb 4-1: device descriptor read/64, error -71 [ 294.977984][ T5164] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 295.036079][ T5162] usb usb4-port1: attempt power cycle [ 295.305188][ T8867] loop4: detected capacity change from 0 to 16 [ 296.310007][ T5164] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 296.324087][ T8867] erofs: (device loop4): mounted with root inode @ nid 36. [ 298.408937][ T5162] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 300.208421][ T5164] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 300.318539][ T5164] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.328923][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.337641][ T5162] usb 4-1: device descriptor read/8, error -71 [ 300.365155][ T5164] usb 2-1: config 0 descriptor?? [ 300.376446][ T5164] usb 2-1: can't set config #0, error -71 [ 300.383820][ T5164] usb 2-1: USB disconnect, device number 27 [ 300.517848][ T8870] loop3: detected capacity change from 0 to 1024 [ 300.573657][ T29] audit: type=1800 audit(1717642392.775:90): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 300.673493][ T61] hfsplus: b-tree write err: -5, ino 4 [ 300.725437][ T8437] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 300.796021][ T8437] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 300.805228][ T8437] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 301.018863][ T8894] loop4: detected capacity change from 0 to 256 [ 301.071485][ T29] audit: type=1326 audit(1717642393.275:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc71c7cf69 code=0x0 [ 301.376603][ T5163] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 301.598048][ T5163] usb 3-1: no configurations [ 301.615850][ T5162] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 301.629104][ T5163] usb 3-1: can't read configurations, error -22 [ 301.685749][ T5162] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 301.732407][ T5162] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 301.759863][ T5162] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.785271][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.793922][ T5163] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 301.829121][ T5162] usb 4-1: config 0 descriptor?? [ 301.851900][ T5162] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 302.006627][ T5163] usb 3-1: no configurations [ 302.023322][ T5163] usb 3-1: can't read configurations, error -22 [ 302.072098][ T5163] usb usb3-port1: attempt power cycle [ 302.443753][ T8919] loop1: detected capacity change from 0 to 16 [ 302.486604][ T8919] erofs: (device loop1): mounted with root inode @ nid 36. [ 307.894822][ T9] usb 4-1: USB disconnect, device number 40 [ 308.318573][ T8317] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 308.326962][ T29] audit: type=1326 audit(1717642400.535:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 308.381101][ T8317] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 308.390589][ T8317] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 308.916021][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 308.946607][ T5163] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 309.108204][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.122096][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 309.141847][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.143939][ T5163] usb 2-1: no configurations [ 309.154525][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.181482][ T5163] usb 2-1: can't read configurations, error -22 [ 309.185248][ T9] usb 5-1: config 0 descriptor?? [ 309.213075][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 309.365836][ T5163] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 309.566557][ T5163] usb 2-1: no configurations [ 309.583576][ T5163] usb 2-1: can't read configurations, error -22 [ 309.607431][ T5163] usb usb2-port1: attempt power cycle [ 310.168075][ T5163] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 310.183066][ T8978] loop3: detected capacity change from 0 to 16 [ 314.232208][ T5162] usb 5-1: USB disconnect, device number 18 [ 314.248461][ T5163] usb 2-1: device descriptor read/8, error -71 [ 314.266809][ T8978] erofs: (device loop3): mounted with root inode @ nid 36. [ 315.774066][ T29] audit: type=1326 audit(1717642407.975:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 315.908256][ T5130] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 315.932610][ T5130] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 315.948934][ T5130] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 316.556620][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 316.799729][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.833041][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 316.873117][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.897214][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.905801][ T5163] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 316.920017][ T9] usb 5-1: config 0 descriptor?? [ 316.948883][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 317.005171][ T4489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.019476][ T4489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.028162][ T4489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.038761][ T4489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.075055][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.083439][ T4489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.106532][ T5163] usb 2-1: no configurations [ 317.111993][ T5163] usb 2-1: can't read configurations, error -22 [ 317.275850][ T5163] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 317.486589][ T5163] usb 2-1: no configurations [ 317.491365][ T5163] usb 2-1: can't read configurations, error -22 [ 317.522333][ T5163] usb usb2-port1: attempt power cycle [ 317.629642][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.636247][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.755200][ T9012] chnl_net:caif_netlink_parms(): no params data found [ 317.955857][ T5163] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 317.991568][ T5163] usb 2-1: no configurations [ 317.996641][ T5163] usb 2-1: can't read configurations, error -22 [ 318.076373][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.106002][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.127927][ T9012] bridge_slave_0: entered allmulticast mode [ 318.145763][ T5163] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 318.148211][ T9012] bridge_slave_0: entered promiscuous mode [ 318.197794][ T5163] usb 2-1: no configurations [ 318.204835][ T5163] usb 2-1: can't read configurations, error -22 [ 318.209484][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.227807][ T5163] usb usb2-port1: unable to enumerate USB device [ 318.230102][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.263099][ T9012] bridge_slave_1: entered allmulticast mode [ 318.307800][ T9012] bridge_slave_1: entered promiscuous mode [ 318.445326][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.459635][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.620531][ T9012] team0: Port device team_slave_0 added [ 318.641275][ T9012] team0: Port device team_slave_1 added [ 318.759868][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.777800][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.847118][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.879668][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.899451][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.980022][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.150678][ T4489] Bluetooth: hci4: command tx timeout [ 319.162349][ T9012] hsr_slave_0: entered promiscuous mode [ 319.172465][ T9012] hsr_slave_1: entered promiscuous mode [ 319.181976][ T9012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.191645][ T9012] Cannot create hsr debugfs directory [ 319.325787][ T8] usb 5-1: USB disconnect, device number 19 [ 319.586954][ T9012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.807589][ T9012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.969051][ T9012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.185039][ T9012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.408212][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 320.614302][ T9012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.634853][ T9012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.650680][ T29] audit: type=1326 audit(1717642412.855:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8704a7cf69 code=0x0 [ 320.679893][ T9012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.839414][ T9050] loop1: detected capacity change from 0 to 16 [ 320.891957][ T9050] erofs: (device loop1): mounted with root inode @ nid 36. [ 321.955864][ T4489] Bluetooth: hci4: command tx timeout [ 322.464146][ T9012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 322.696248][ T5163] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 322.716161][ T5162] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 322.812335][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.843558][ T8317] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 322.861130][ T9012] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.878663][ T8317] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 322.899108][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.906356][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.922497][ T8317] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 322.937356][ T5162] usb 3-1: no configurations [ 322.942009][ T5162] usb 3-1: can't read configurations, error -22 [ 322.949307][ T5163] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.987576][ T5163] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 323.021999][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.029241][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.042265][ T5163] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.059196][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.102950][ T5163] usb 5-1: config 0 descriptor?? [ 323.138387][ T5163] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 323.156305][ T5162] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 323.213919][ T9012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.236563][ T9064] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.407603][ T5162] usb 3-1: no configurations [ 323.412656][ T5162] usb 3-1: can't read configurations, error -22 [ 323.435534][ T5162] usb usb3-port1: attempt power cycle [ 323.601784][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.681142][ T9012] veth0_vlan: entered promiscuous mode [ 323.754132][ T9012] veth1_vlan: entered promiscuous mode [ 323.840054][ T9012] veth0_macvtap: entered promiscuous mode [ 323.873647][ T9012] veth1_macvtap: entered promiscuous mode [ 323.875971][ T5162] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 323.927158][ T5162] usb 3-1: no configurations [ 323.938329][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.949995][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.965237][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.978189][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.979369][ T5162] usb 3-1: can't read configurations, error -22 [ 324.002890][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.016836][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.064570][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.077649][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.087789][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.098823][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.143102][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.182147][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.203847][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.219820][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.242076][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.252690][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.265782][ T5162] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 324.266099][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.286720][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.344852][ T5162] usb 3-1: no configurations [ 324.348466][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.349903][ T4489] Bluetooth: hci4: command tx timeout [ 324.374648][ T5162] usb 3-1: can't read configurations, error -22 [ 324.392215][ T5162] usb usb3-port1: unable to enumerate USB device [ 324.401774][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.424775][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.460896][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.499144][ T9012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.520596][ T9012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.547656][ T9012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.561023][ T9012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.710660][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.731309][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.810324][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.820892][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.175053][ T29] audit: type=1326 audit(1717642417.375:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 325.454310][ T8] usb 5-1: USB disconnect, device number 20 [ 325.783815][ T9095] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.426558][ T4489] Bluetooth: hci4: command tx timeout [ 326.517130][ T784] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 326.606062][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 326.709988][ T784] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 326.730916][ T9123] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.751215][ T784] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 326.784441][ T784] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.801830][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.825513][ T784] usb 1-1: config 0 descriptor?? [ 326.844021][ T784] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 326.856137][ T8] usb 5-1: no configurations [ 326.860847][ T8] usb 5-1: can't read configurations, error -22 [ 327.055867][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 327.180569][ T29] audit: type=1326 audit(1717642419.385:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 327.266735][ T8] usb 5-1: no configurations [ 327.271535][ T8] usb 5-1: can't read configurations, error -22 [ 327.286172][ T8] usb usb5-port1: attempt power cycle [ 327.725868][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 327.790504][ T8] usb 5-1: no configurations [ 327.803367][ T8] usb 5-1: can't read configurations, error -22 [ 327.975857][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 328.057430][ T8] usb 5-1: no configurations [ 328.093503][ T8] usb 5-1: can't read configurations, error -22 [ 328.112237][ T8] usb usb5-port1: unable to enumerate USB device [ 328.152671][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 328.917754][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.314504][ T5163] usb 1-1: USB disconnect, device number 22 [ 329.594565][ T29] audit: type=1326 audit(1717642421.795:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8704a7cf69 code=0x0 [ 329.933586][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.517009][ T5162] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 330.524695][ T5164] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 330.727117][ T5162] usb 3-1: no configurations [ 330.738083][ T5164] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 330.752665][ T5162] usb 3-1: can't read configurations, error -22 [ 330.770626][ T5164] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 330.805634][ T5164] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.832929][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.872784][ T5164] usb 1-1: config 0 descriptor?? [ 330.900868][ T5164] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 330.926069][ T5162] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 331.118101][ T5162] usb 3-1: no configurations [ 331.123724][ T5162] usb 3-1: can't read configurations, error -22 [ 331.135524][ T5162] usb usb3-port1: attempt power cycle [ 331.538893][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.555948][ T5162] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 331.603028][ T5162] usb 3-1: no configurations [ 331.612508][ T5162] usb 3-1: can't read configurations, error -22 [ 331.776128][ T5162] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 331.810681][ T5162] usb 3-1: no configurations [ 331.815579][ T29] audit: type=1326 audit(1717642424.015:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 331.842288][ T5162] usb 3-1: can't read configurations, error -22 [ 331.858435][ T5162] usb usb3-port1: unable to enumerate USB device [ 333.240866][ T9] usb 1-1: USB disconnect, device number 23 [ 333.954123][ T29] audit: type=1326 audit(1717642426.155:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 334.665948][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 334.875569][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 334.888420][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 334.908919][ T9] usb 4-1: can't read configurations, error -61 [ 335.090271][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 335.140191][ T8] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 335.163342][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 335.196679][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.212673][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.235635][ T8] usb 1-1: config 0 descriptor?? [ 335.255289][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 335.320169][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 335.336561][ T9] usb 4-1: can't read configurations, error -61 [ 335.358785][ T9] usb usb4-port1: attempt power cycle [ 335.573215][ T9280] netlink: 'syz-executor.1': attribute type 63 has an invalid length. [ 335.806601][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 335.863100][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 335.875463][ T9] usb 4-1: can't read configurations, error -61 [ 336.055907][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 336.088983][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 336.105994][ T9] usb 4-1: can't read configurations, error -61 [ 336.119899][ T9] usb usb4-port1: unable to enumerate USB device [ 336.175333][ T29] audit: type=1326 audit(1717642428.375:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8704a7cf69 code=0x0 [ 337.579514][ T5162] usb 1-1: USB disconnect, device number 24 [ 337.857430][ T9323] netlink: 'syz-executor.0': attribute type 63 has an invalid length. [ 338.192114][ T29] audit: type=1326 audit(1717642430.395:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 338.528803][ T9348] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 338.606007][ T5164] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 338.819649][ T5164] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 338.830164][ T5164] usb 1-1: can't read configurations, error -61 [ 338.867597][ T5162] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 338.986425][ T5164] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 339.058865][ T5162] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 339.091288][ T5162] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.102446][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.114577][ T5162] usb 5-1: config 0 descriptor?? [ 339.132337][ T5162] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 339.189798][ T5164] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 339.200824][ T5164] usb 1-1: can't read configurations, error -61 [ 339.210474][ T5164] usb usb1-port1: attempt power cycle [ 339.626952][ T5164] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 339.700190][ T5164] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 339.721615][ T5164] usb 1-1: can't read configurations, error -61 [ 339.725214][ T9372] netlink: 'syz-executor.1': attribute type 63 has an invalid length. [ 339.892276][ T5164] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 339.959861][ T5164] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 339.973432][ T29] audit: type=1326 audit(1717642432.175:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 339.973976][ T5164] usb 1-1: can't read configurations, error -61 [ 340.009159][ T5164] usb usb1-port1: unable to enumerate USB device [ 340.011611][ T9383] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 341.303266][ T9410] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 341.582262][ T5216] usb 5-1: USB disconnect, device number 25 [ 341.600480][ T9418] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 341.870216][ T29] audit: type=1326 audit(1717642434.075:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 342.328284][ T5194] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 342.528870][ T5194] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 342.546047][ T5194] usb 5-1: can't read configurations, error -61 [ 342.725929][ T5194] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 342.949293][ T5194] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 342.987142][ T5194] usb 5-1: can't read configurations, error -61 [ 343.009727][ T5194] usb usb5-port1: attempt power cycle [ 343.223993][ T9464] netlink: 'syz-executor.1': attribute type 63 has an invalid length. [ 343.286855][ T5167] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 343.308116][ T9469] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 343.446791][ T5194] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 343.486991][ T5167] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 343.510209][ T5167] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.514016][ T5194] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 343.519533][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.538298][ T5167] usb 1-1: config 0 descriptor?? [ 343.548331][ T29] audit: type=1326 audit(1717642435.745:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc71c7cf69 code=0x0 [ 343.559793][ T5167] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 343.579220][ T5194] usb 5-1: can't read configurations, error -61 [ 343.745993][ T5194] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 343.804075][ T5194] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 343.812022][ T5194] usb 5-1: can't read configurations, error -61 [ 343.822194][ T5194] usb usb5-port1: unable to enumerate USB device [ 344.781372][ T9511] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 345.708370][ T29] audit: type=1326 audit(1717642437.915:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 345.992328][ T5194] usb 1-1: USB disconnect, device number 29 [ 346.280502][ T9545] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 346.615898][ T5162] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 346.838497][ T5162] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 346.864169][ T5162] usb 2-1: can't read configurations, error -61 [ 347.045998][ T5162] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 347.250692][ T5162] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 347.265399][ T5162] usb 2-1: can't read configurations, error -61 [ 347.272648][ T5162] usb usb2-port1: attempt power cycle [ 347.362782][ T5167] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 347.568065][ T5167] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 347.582942][ T5167] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.592673][ T5167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.604740][ T5167] usb 5-1: config 0 descriptor?? [ 347.614906][ T5167] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 347.686015][ T5162] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 347.729721][ T5162] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 347.737729][ T5162] usb 2-1: can't read configurations, error -61 [ 347.885779][ T5162] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 347.921213][ T5162] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 347.938413][ T5162] usb 2-1: can't read configurations, error -61 [ 347.956367][ T5162] usb usb2-port1: unable to enumerate USB device [ 347.974479][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.222640][ T29] audit: type=1326 audit(1717642440.425:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 349.271344][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.465397][ T29] audit: type=1804 audit(1717642441.665:107): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3346107468/syzkaller.IINh3u/66/file1" dev="sda1" ino=1961 res=1 errno=0 [ 349.708857][ T9631] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 350.118759][ T5194] usb 5-1: USB disconnect, device number 30 [ 350.213489][ T29] audit: type=1326 audit(1717642442.415:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 350.367566][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.433300][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 350.606878][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.789238][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.955876][ T5162] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 350.998118][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.165429][ T9652] loop4: detected capacity change from 0 to 128 [ 351.216675][ T5162] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.244976][ T9652] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 351.259549][ T5162] usb 4-1: can't read configurations, error -61 [ 351.443731][ T5162] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 351.454490][ T9659] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.496443][ T51] bridge_slave_1: left allmulticast mode [ 351.502162][ T51] bridge_slave_1: left promiscuous mode [ 351.543676][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.586862][ T51] bridge_slave_0: left allmulticast mode [ 351.621838][ T51] bridge_slave_0: left promiscuous mode [ 351.664695][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.687718][ T5162] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.695848][ T5162] usb 4-1: can't read configurations, error -61 [ 351.702798][ T5162] usb usb4-port1: attempt power cycle [ 351.711048][ T9659] sysv_free_block: trying to free block not in datazone [ 351.816078][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 351.839169][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.852254][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.864394][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.880882][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.891670][ T5117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 351.902785][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.011088][ T8437] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 352.043668][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 352.061372][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 352.082469][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.098583][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.114786][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.118969][ T5162] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 352.151359][ T8] usb 1-1: config 0 descriptor?? [ 352.181413][ T5162] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 352.210618][ T5162] usb 4-1: can't read configurations, error -61 [ 352.369303][ T5162] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 352.444209][ T5162] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 352.459004][ T5162] usb 4-1: can't read configurations, error -61 [ 352.476441][ T5162] usb usb4-port1: unable to enumerate USB device [ 352.504808][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.518460][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.530218][ T51] bond0 (unregistering): Released all slaves [ 352.544643][ T9657] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 352.609510][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 352.625596][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 352.650136][ T8] usb 1-1: USB disconnect, device number 30 [ 352.802821][ T9674] binder: 9673:9674 ioctl 9361 0 returned -22 [ 353.106460][ T29] audit: type=1800 audit(1717642445.315:109): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 353.143141][ T51] hsr_slave_0: left promiscuous mode [ 353.153830][ T51] hsr_slave_1: left promiscuous mode [ 353.183435][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.212555][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.230321][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.247145][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.276010][ T785] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 353.307542][ T9686] loop0: detected capacity change from 0 to 512 [ 353.317399][ T51] veth1_macvtap: left promiscuous mode [ 353.323111][ T51] veth0_macvtap: left promiscuous mode [ 353.337515][ T51] veth1_vlan: left promiscuous mode [ 353.343547][ T51] veth0_vlan: left promiscuous mode [ 353.365791][ T9686] EXT4-fs (loop0): bad block size 8192 [ 353.504941][ T785] usb 5-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 353.532354][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.568961][ T785] usb 5-1: Product: syz [ 353.587103][ T785] usb 5-1: Manufacturer: syz [ 353.606403][ T785] usb 5-1: SerialNumber: syz [ 353.626291][ T5117] Bluetooth: hci4: command 0x0405 tx timeout [ 353.631471][ T785] usb 5-1: config 0 descriptor?? [ 353.830293][ T9688] fuse: Unknown parameter 'grou00000000000000000000' [ 353.923916][ T785] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware [ 353.945928][ T4489] Bluetooth: hci1: command tx timeout [ 353.995350][ T785] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 354.004542][ T785] dib0700: firmware download failed at 7 with -22 [ 354.017830][ T785] usb 5-1: USB disconnect, device number 31 [ 354.061547][ T29] audit: type=1326 audit(1717642446.265:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 354.223121][ T9692] loop3: detected capacity change from 0 to 4096 [ 354.248193][ T9692] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 354.270209][ T9692] ntfs3: loop3: mft corrupted [ 354.275257][ T9692] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 354.300999][ T9692] ntfs3: loop3: Failed to load $LogFile (-22). [ 354.725844][ T8] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 354.728109][ T51] team0 (unregistering): Port device team_slave_1 removed [ 354.881480][ T51] team0 (unregistering): Port device team_slave_0 removed [ 354.936105][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 354.968754][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.010332][ T8] usb 4-1: config 179 has no interface number 0 [ 355.028165][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 355.074552][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 355.121107][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.159249][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.188089][ T9704] loop2: detected capacity change from 0 to 1024 [ 355.194983][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.229006][ T9704] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.233177][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.300018][ T9697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 355.376395][ T9704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.705864][ T5194] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 355.734350][ T9697] loop3: detected capacity change from 0 to 512 [ 355.849271][ T9697] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 355.907213][ T5194] usb 3-1: Using ep0 maxpacket: 16 [ 355.919014][ T5194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 355.930263][ T5194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 355.940468][ T5194] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 355.950190][ T5194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.950563][ T9697] EXT4-fs (loop3): 1 truncate cleaned up [ 355.986117][ T5194] usb 3-1: config 0 descriptor?? [ 356.038735][ T4489] Bluetooth: hci1: command tx timeout [ 356.039006][ T9697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.328292][ T5216] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 356.477249][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.524222][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.633467][ T5194] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 356.652490][ T5194] hid-generic 0003:0158:0100.0008: unexpected long global item [ 356.694398][ T5194] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 356.997751][ C0] hrtimer: interrupt took 307005 ns [ 357.740410][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 357.772616][ T5164] usb 4-1: USB disconnect, device number 49 [ 357.772616][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 357.772804][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 357.801136][ T5164] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 357.844232][ T9720] netlink: 'syz-executor.0': attribute type 63 has an invalid length. [ 357.880552][ T9012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.074221][ T9729] loop3: detected capacity change from 0 to 128 [ 358.106546][ T4489] Bluetooth: hci1: command tx timeout [ 358.151836][ T9729] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 358.168405][ T5164] usb 3-1: USB disconnect, device number 23 [ 358.211815][ T8407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.247340][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.275173][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.310303][ T9732] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.326125][ T9665] bridge_slave_0: entered allmulticast mode [ 358.349878][ T9665] bridge_slave_0: entered promiscuous mode [ 358.362971][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.371145][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.383898][ T9732] sysv_free_block: trying to free block not in datazone [ 358.393510][ T9665] bridge_slave_1: entered allmulticast mode [ 358.401211][ T9665] bridge_slave_1: entered promiscuous mode [ 358.595889][ T5216] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 358.642465][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.663388][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.824888][ T5216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 358.884497][ T9665] team0: Port device team_slave_0 added [ 358.887171][ T29] audit: type=1800 audit(1717642451.095:111): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 358.918782][ T785] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 358.926906][ T5216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 358.960696][ T9665] team0: Port device team_slave_1 added [ 358.960788][ T5216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.022903][ T5216] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.034166][ T5216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.055455][ T5216] usb 1-1: config 0 descriptor?? [ 359.069002][ T9012] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 359.120689][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.143558][ T785] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 359.155057][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.186700][ T785] usb 3-1: can't read configurations, error -61 [ 359.199380][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.253233][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.270175][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.332251][ T9746] fuse: Unknown parameter 'group_i00000000000000000000' [ 359.334200][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.375994][ T785] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 359.542285][ T5216] usbhid 1-1:0.0: can't add hid device: -71 [ 359.549019][ T5216] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 359.579092][ T785] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 359.593971][ T785] usb 3-1: can't read configurations, error -61 [ 359.600609][ T9748] binder: 9747:9748 ioctl 9361 0 returned -22 [ 359.609077][ T5216] usb 1-1: USB disconnect, device number 31 [ 359.624425][ T785] usb usb3-port1: attempt power cycle [ 359.676735][ T9665] hsr_slave_0: entered promiscuous mode [ 359.709690][ T9665] hsr_slave_1: entered promiscuous mode [ 359.721384][ T9665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.732621][ T9665] Cannot create hsr debugfs directory [ 359.748514][ T29] audit: type=1326 audit(1717642451.955:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8704a7cf69 code=0x0 [ 360.005901][ T5164] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 360.085850][ T785] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 360.112458][ T9753] loop0: detected capacity change from 0 to 512 [ 360.121478][ T9753] EXT4-fs (loop0): bad block size 8192 [ 360.139640][ T785] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 360.148808][ T785] usb 3-1: can't read configurations, error -61 [ 360.196304][ T5117] Bluetooth: hci1: command tx timeout [ 360.206999][ T5164] usb 4-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 360.219988][ T5164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.230432][ T9665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.233547][ T5164] usb 4-1: Product: syz [ 360.241990][ T5164] usb 4-1: Manufacturer: syz [ 360.247640][ T5164] usb 4-1: SerialNumber: syz [ 360.256221][ T5164] usb 4-1: config 0 descriptor?? [ 360.257181][ T9665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.299043][ T9665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.317695][ T9665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.335774][ T785] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 360.409636][ T785] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 360.425916][ T785] usb 3-1: can't read configurations, error -61 [ 360.446939][ T785] usb usb3-port1: unable to enumerate USB device [ 360.475094][ T5164] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in warm state. [ 360.502877][ T5164] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 360.524545][ T5164] dvbdev: DVB: registering new adapter (Hauppauge Nova-T MyTV.t) [ 360.535107][ T5164] usb 4-1: media controller created [ 360.549441][ T5164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.617396][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.667192][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.690360][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.697573][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.706406][ T5164] DVB: Unable to find symbol dib7000p_attach() [ 360.723829][ T5164] dvb-usb: no frontend was attached by 'Hauppauge Nova-T MyTV.t' [ 360.735329][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.742537][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.866411][ T5164] rc_core: IR keymap rc-dib0700-rc5 not found [ 360.884889][ T5164] Registered IR keymap rc-empty [ 360.912035][ T5164] dvb-usb: could not initialize remote control. [ 360.932915][ T5164] dvb-usb: Hauppauge Nova-T MyTV.t successfully initialized and connected. [ 360.963142][ T5164] usb 4-1: USB disconnect, device number 50 [ 361.047297][ T5164] dvb-usb: Hauppauge Nova-T MyTV.t successfully deinitialized and disconnected. [ 361.352056][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.666724][ T9665] veth0_vlan: entered promiscuous mode [ 361.752513][ T9665] veth1_vlan: entered promiscuous mode [ 361.762203][ T9769] loop2: detected capacity change from 0 to 4096 [ 361.791835][ T9769] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 361.830403][ T9769] ntfs3: loop2: mft corrupted [ 361.860246][ T9769] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 361.865500][ T9665] veth0_macvtap: entered promiscuous mode [ 361.909639][ T9769] ntfs3: loop2: Failed to load $LogFile (-22). [ 361.963686][ T9665] veth1_macvtap: entered promiscuous mode [ 362.007217][ T9772] netlink: 'syz-executor.3': attribute type 63 has an invalid length. [ 362.116430][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.167341][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.201534][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.244586][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.268034][ T5117] Bluetooth: hci1: command 0x0405 tx timeout [ 362.280585][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.292327][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.302479][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.314473][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.327067][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.337790][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.350133][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.423057][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.434654][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.444942][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.452519][ T5167] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 362.456740][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.473498][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.487880][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.514791][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.545762][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.557354][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.573926][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.600349][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.643522][ T9665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.652738][ T9665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.668474][ T5167] usb 3-1: Using ep0 maxpacket: 8 [ 362.686281][ T9665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.696912][ T5167] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 362.712249][ T5167] usb 3-1: config 179 has no interface number 0 [ 362.718779][ T9665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.743938][ T5167] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 362.790991][ T5167] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 362.844222][ T5167] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.867906][ T5167] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 362.883288][ T5167] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 362.914236][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.004331][ T9775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.093077][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.141132][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.291817][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.314866][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.376434][ T9782] loop0: detected capacity change from 0 to 128 [ 363.388944][ T9782] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 363.403278][ T9784] loop2: detected capacity change from 0 to 512 [ 363.445217][ T9784] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 363.476102][ T9784] EXT4-fs (loop2): 1 truncate cleaned up [ 363.483928][ T9784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.565812][ T9788] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.587486][ T9788] sysv_free_block: trying to free block not in datazone [ 363.643975][ T5165] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 363.700679][ T9787] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 363.800601][ T9787] EXT4-fs (loop2): Remounting filesystem read-only [ 364.119856][ T9793] fuse: Unknown parameter 'group_i00000000000000000000' [ 364.190607][ T29] audit: type=1800 audit(1717642456.395:113): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 364.272896][ T8484] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 364.576203][ T29] audit: type=1326 audit(1717642456.775:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 364.603742][ T5165] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 364.646676][ T9805] binder: 9804:9805 ioctl 9361 0 returned -22 [ 364.822185][ T5165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 364.857628][ T5165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 364.902989][ T5165] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.939487][ T5165] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.949317][ T5165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.963215][ T5167] usb 3-1: USB disconnect, device number 28 [ 364.969174][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 364.969221][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 364.987051][ T5164] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 365.018089][ T5165] usb 4-1: config 0 descriptor?? [ 365.040135][ T8407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.057939][ T5167] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 365.176455][ T5164] usb 2-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 365.197474][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.213364][ T5164] usb 2-1: Product: syz [ 365.221897][ T5164] usb 2-1: Manufacturer: syz [ 365.231099][ T5164] usb 2-1: SerialNumber: syz [ 365.259198][ T5164] usb 2-1: config 0 descriptor?? [ 365.296534][ T9809] loop4: detected capacity change from 0 to 1024 [ 365.314229][ T9809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 365.437928][ T9809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.450163][ T5165] usbhid 4-1:0.0: can't add hid device: -71 [ 365.474178][ T5165] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 365.496857][ T5164] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in warm state. [ 365.518978][ T5164] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 365.534262][ T5165] usb 4-1: USB disconnect, device number 51 [ 365.540811][ T5164] dvbdev: DVB: registering new adapter (Hauppauge Nova-T MyTV.t) [ 365.554774][ T5164] usb 2-1: media controller created [ 365.563294][ T5164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.626806][ T5117] Bluetooth: hci1: command 0x0405 tx timeout [ 365.655597][ T5164] DVB: Unable to find symbol dib7000p_attach() [ 365.671957][ T5164] dvb-usb: no frontend was attached by 'Hauppauge Nova-T MyTV.t' [ 365.707802][ T9821] netlink: 'syz-executor.0': attribute type 63 has an invalid length. [ 365.836019][ T5164] rc_core: IR keymap rc-dib0700-rc5 not found [ 365.845850][ T5194] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 365.864787][ T5164] Registered IR keymap rc-empty [ 365.881454][ T5164] dvb-usb: could not initialize remote control. [ 365.913204][ T5164] dvb-usb: Hauppauge Nova-T MyTV.t successfully initialized and connected. [ 365.955931][ T5164] usb 2-1: USB disconnect, device number 40 [ 366.042399][ T5164] dvb-usb: Hauppauge Nova-T MyTV.t successfully deinitialized and disconnected. [ 366.053959][ T5194] usb 5-1: Using ep0 maxpacket: 16 [ 366.079403][ T5194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 366.110493][ T5194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 366.128434][ T5194] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 366.150349][ T5194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.176867][ T5194] usb 5-1: config 0 descriptor?? [ 366.569860][ T9837] loop3: detected capacity change from 0 to 512 [ 366.605571][ T9837] EXT4-fs (loop3): bad block size 8192 [ 366.711539][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.734102][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.774559][ T5194] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 366.814688][ T5194] hid-generic 0003:0158:0100.0009: unexpected long global item [ 366.832364][ T9840] loop0: detected capacity change from 0 to 128 [ 366.854393][ T5194] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 366.876618][ T9840] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 367.010332][ T9841] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.083332][ T9841] sysv_free_block: trying to free block not in datazone [ 367.170227][ T9843] fuse: Unknown parameter 'group_i00000000000000000000' [ 367.525168][ T29] audit: type=1800 audit(1717642459.725:115): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 367.708283][ T8484] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 368.226124][ T9851] loop0: detected capacity change from 0 to 4096 [ 368.279497][ T9851] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 368.320378][ T9851] ntfs3: loop0: mft corrupted [ 368.327692][ T9851] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 368.338399][ T9851] ntfs3: loop0: Failed to load $LogFile (-22). [ 368.517326][ T29] audit: type=1326 audit(1717642460.725:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 368.546662][ T8437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.578062][ T5194] usb 5-1: USB disconnect, device number 32 [ 368.846104][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 369.045908][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 369.096254][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 369.118421][ T8] usb 1-1: config 179 has no interface number 0 [ 369.125170][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 369.138760][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 369.145851][ T5117] Bluetooth: hci1: command 0x0405 tx timeout [ 369.150544][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.170311][ T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 369.187595][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 369.199600][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.211675][ T9854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 369.405842][ T5165] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 369.554209][ T9854] loop0: detected capacity change from 0 to 512 [ 369.600069][ T9854] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 369.622067][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 369.634104][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 369.640285][ T9854] EXT4-fs (loop0): 1 truncate cleaned up [ 369.647003][ T5165] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.663096][ T5165] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.673213][ T9867] binder: 9865:9867 ioctl 9361 0 returned -22 [ 369.674658][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.681378][ T9868] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 369.694366][ T5165] usb 5-1: config 0 descriptor?? [ 369.728593][ T9854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.881067][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 370.085965][ T5164] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 370.121046][ T5165] usbhid 5-1:0.0: can't add hid device: -71 [ 370.138426][ T5165] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 370.164502][ T5165] usb 5-1: USB disconnect, device number 33 [ 370.311094][ T5164] usb 2-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 370.312856][ T9879] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 370.340753][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.371285][ T5164] usb 2-1: Product: syz [ 370.375520][ T5164] usb 2-1: Manufacturer: syz [ 370.389147][ T5164] usb 2-1: SerialNumber: syz [ 370.399253][ T5164] usb 2-1: config 0 descriptor?? [ 370.636792][ T5164] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in warm state. [ 370.667859][ T5164] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 370.699953][ T5164] dvbdev: DVB: registering new adapter (Hauppauge Nova-T MyTV.t) [ 370.735323][ T5164] usb 2-1: media controller created [ 370.771640][ T5164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.800976][ T9887] loop3: detected capacity change from 0 to 128 [ 370.838722][ T9887] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 370.979694][ T9891] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.023366][ T9891] sysv_free_block: trying to free block not in datazone [ 371.030942][ T29] audit: type=1800 audit(1717642463.215:117): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 371.060929][ T9864] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 371.082484][ T5164] DVB: Unable to find symbol dib7000p_attach() [ 371.095899][ T5164] dvb-usb: no frontend was attached by 'Hauppauge Nova-T MyTV.t' [ 371.171609][ T9864] EXT4-fs (loop0): Remounting filesystem read-only [ 371.187184][ T5164] rc_core: IR keymap rc-dib0700-rc5 not found [ 371.200073][ T5164] Registered IR keymap rc-empty [ 371.242732][ T5164] dvb-usb: could not initialize remote control. [ 371.264077][ T5164] dvb-usb: Hauppauge Nova-T MyTV.t successfully initialized and connected. [ 371.285609][ T784] usb 1-1: USB disconnect, device number 32 [ 371.285633][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 371.291582][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 371.346479][ T5164] usb 2-1: USB disconnect, device number 41 [ 371.433539][ T8484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.434308][ T784] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 371.505968][ T5164] dvb-usb: Hauppauge Nova-T MyTV.t successfully deinitialized and disconnected. [ 371.720595][ T9012] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 371.771308][ T9898] fuse: Unknown parameter 'group_id00000000000000000000' [ 371.878987][ T29] audit: type=1326 audit(1717642464.085:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 371.987790][ T9899] loop1: detected capacity change from 0 to 1024 [ 372.011077][ T9899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 372.046909][ T9899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.066590][ T9912] netlink: 'syz-executor.4': attribute type 63 has an invalid length. [ 372.444418][ T5164] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 372.650533][ T5164] usb 2-1: Using ep0 maxpacket: 16 [ 372.677532][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 372.734804][ T9922] loop4: detected capacity change from 0 to 512 [ 372.742355][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 372.773575][ T5164] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 372.793011][ T9922] EXT4-fs (loop4): bad block size 8192 [ 372.813317][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.838588][ T5164] usb 2-1: config 0 descriptor?? [ 373.065996][ T5117] Bluetooth: hci1: command 0x0405 tx timeout [ 373.095822][ T784] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 373.097686][ T9926] loop3: detected capacity change from 0 to 4096 [ 373.229597][ T9926] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 373.262790][ T9926] ntfs3: loop3: mft corrupted [ 373.282601][ T9926] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 373.299348][ T9926] ntfs3: loop3: Failed to load $LogFile (-22). [ 373.310870][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 373.348639][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 373.384908][ T784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.400000][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.417979][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.435546][ T784] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.452087][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.481724][ T784] usb 3-1: config 0 descriptor?? [ 373.511507][ T5164] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 373.528008][ T5164] hid-generic 0003:0158:0100.000A: unexpected long global item [ 373.537568][ T5164] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 373.879212][ T5165] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 373.940544][ T784] usbhid 3-1:0.0: can't add hid device: -71 [ 373.958684][ T784] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 374.008828][ T784] usb 3-1: USB disconnect, device number 29 [ 374.075858][ T5165] usb 4-1: Using ep0 maxpacket: 8 [ 374.089426][ T5165] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 374.109261][ T5165] usb 4-1: config 179 has no interface number 0 [ 374.132094][ T5165] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 374.169909][ T5165] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 374.200285][ T5165] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.228967][ T5165] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 374.269222][ T5165] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 374.308338][ T5165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.344473][ T9928] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 374.763330][ T9928] loop3: detected capacity change from 0 to 512 [ 374.850475][ T9928] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 374.860067][ T9933] binder: 9932:9933 ioctl 9361 0 returned -22 [ 374.871868][ T9928] EXT4-fs (loop3): 1 truncate cleaned up [ 374.932292][ T9928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.230258][ T5165] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 375.281785][ T5162] usb 2-1: USB disconnect, device number 42 [ 375.297534][ T9665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.365183][ T9937] loop0: detected capacity change from 0 to 128 [ 375.427323][ T9937] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 375.435971][ T784] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 375.533984][ T9940] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.552094][ T9940] sysv_free_block: trying to free block not in datazone [ 375.694751][ T784] usb 3-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 375.715131][ T784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.734484][ T9941] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 375.754714][ T784] usb 3-1: Product: syz [ 375.760480][ T784] usb 3-1: Manufacturer: syz [ 375.772652][ T784] usb 3-1: SerialNumber: syz [ 375.793394][ T784] usb 3-1: config 0 descriptor?? [ 376.026005][ T5119] Bluetooth: hci3: command 0x0406 tx timeout [ 376.085843][ T784] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in warm state. [ 376.144632][ T784] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 376.182942][ T784] dvbdev: DVB: registering new adapter (Hauppauge Nova-T MyTV.t) [ 376.259823][ T784] usb 3-1: media controller created [ 376.284184][ T784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.335126][ T8484] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 376.381066][ T9944] fuse: Unknown parameter 'group_id00000000000000000000' [ 376.439078][ T784] DVB: Unable to find symbol dib7000p_attach() [ 376.463280][ T29] audit: type=1800 audit(1717642468.665:119): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 376.484213][ T784] dvb-usb: no frontend was attached by 'Hauppauge Nova-T MyTV.t' [ 376.597266][ T5162] usb 4-1: USB disconnect, device number 52 [ 376.597284][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 376.622864][ T5162] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 376.675859][ T784] rc_core: IR keymap rc-dib0700-rc5 not found [ 376.690259][ T784] Registered IR keymap rc-empty [ 376.707800][ T9012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.720309][ T784] dvb-usb: could not initialize remote control. [ 376.744314][ T784] dvb-usb: Hauppauge Nova-T MyTV.t successfully initialized and connected. [ 376.805175][ T784] usb 3-1: USB disconnect, device number 30 [ 376.847517][ T784] dvb-usb: Hauppauge Nova-T MyTV.t successfully deinitialized and disconnected. [ 376.995268][ T9961] netlink: 'syz-executor.3': attribute type 63 has an invalid length. [ 377.096389][ T29] audit: type=1326 audit(1717642469.295:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2041c7cf69 code=0x0 [ 377.345975][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 377.557662][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 377.589593][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 377.615006][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.629880][ T4489] Bluetooth: hci1: command 0x0405 tx timeout [ 377.667592][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.681892][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.714814][ T9979] loop4: detected capacity change from 0 to 1024 [ 377.734995][ T9979] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 377.752931][ T8] usb 1-1: config 0 descriptor?? [ 377.814160][ T9979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.156867][ T784] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 378.180543][ T9982] loop1: detected capacity change from 0 to 512 [ 378.232198][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 378.261560][ T9982] EXT4-fs (loop1): bad block size 8192 [ 378.274011][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 378.309227][ T8] usb 1-1: USB disconnect, device number 33 [ 378.341883][ T9985] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 378.376703][ T784] usb 5-1: Using ep0 maxpacket: 16 [ 378.403804][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 378.450641][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 378.471575][ T784] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 378.480922][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.511227][ T784] usb 5-1: config 0 descriptor?? [ 378.732231][ T9987] loop2: detected capacity change from 0 to 128 [ 378.756470][ T9987] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 378.924372][ T9989] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.003475][ T9991] fuse: Unknown parameter 'group_id00000000000000000000' [ 379.013004][ T9989] sysv_free_block: trying to free block not in datazone [ 379.022549][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.032668][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.071815][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.078406][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.100321][ T784] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 379.112253][ T784] hid-generic 0003:0158:0100.000B: unexpected long global item [ 379.126605][ T784] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 379.246726][ T9994] binder: 9993:9994 ioctl 9361 0 returned -22 [ 379.575871][ T784] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 379.590656][ T8407] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 379.796516][ T784] usb 1-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 379.831881][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.865890][ T784] usb 1-1: Product: syz [ 379.884608][ T784] usb 1-1: Manufacturer: syz [ 379.902589][ T784] usb 1-1: SerialNumber: syz [ 379.922926][ T784] usb 1-1: config 0 descriptor?? [ 380.191274][ T784] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in warm state. [ 380.242456][ T784] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 380.251791][ T784] dvbdev: DVB: registering new adapter (Hauppauge Nova-T MyTV.t) [ 380.273999][ T784] usb 1-1: media controller created [ 380.309408][ T784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.414804][ T784] DVB: Unable to find symbol dib7000p_attach() [ 380.422667][ T784] dvb-usb: no frontend was attached by 'Hauppauge Nova-T MyTV.t' [ 380.527914][ T784] rc_core: IR keymap rc-dib0700-rc5 not found [ 380.557297][ T29] audit: type=1800 audit(1717642472.755:121): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 380.587150][ T784] Registered IR keymap rc-empty [ 380.596243][ T784] dvb-usb: could not initialize remote control. [ 380.623703][ T784] dvb-usb: Hauppauge Nova-T MyTV.t successfully initialized and connected. [ 380.660286][ T784] usb 1-1: USB disconnect, device number 34 [ 380.673805][ T5216] usb 5-1: USB disconnect, device number 34 [ 380.700315][ T784] dvb-usb: Hauppauge Nova-T MyTV.t successfully deinitialized and disconnected. [ 380.743949][ T8437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.986409][ T5119] Bluetooth: hci1: command 0x0405 tx timeout [ 381.117622][ T29] audit: type=1326 audit(1717642473.315:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 381.132979][T10016] netlink: 'syz-executor.4': attribute type 63 has an invalid length. [ 381.161986][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 381.175036][T10009] loop3: detected capacity change from 0 to 4096 [ 381.232859][T10009] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 381.245908][T10009] ntfs3: loop3: mft corrupted [ 381.250918][T10009] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 381.264518][T10009] ntfs3: loop3: Failed to load $LogFile (-22). [ 381.775830][ T5164] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 381.796216][ T5216] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 381.804571][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 381.875818][ T5165] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 381.956192][ T5164] usb 4-1: Using ep0 maxpacket: 8 [ 381.963332][ T5164] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 381.972142][ T5164] usb 4-1: config 179 has no interface number 0 [ 381.983285][ T5164] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 381.997883][ T5164] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 382.007145][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 382.021420][ T5164] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 382.023774][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 382.042397][ T5164] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 382.042816][ T5216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 382.063133][ T5164] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 382.068877][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.091654][ T5216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 382.092385][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.103042][ T5216] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.103098][ T5216] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.134104][ T5165] usb 3-1: Using ep0 maxpacket: 32 [ 382.140008][T10020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 382.148357][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.157982][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.169113][ T5216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.179288][ T5165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 382.193084][ T5165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 382.203942][ T8] usb 2-1: config 0 descriptor?? [ 382.209587][ T5165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 382.226318][ T5165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 382.237576][ T5216] usb 5-1: config 0 descriptor?? [ 382.243585][T10022] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 382.257923][ T5165] usb 3-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=72.68 [ 382.270119][ T5165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.278626][ T5165] usb 3-1: Product: syz [ 382.285249][ T5165] usb 3-1: Manufacturer: syz [ 382.292266][ T5165] usb 3-1: SerialNumber: syz [ 382.304915][ T5165] usb 3-1: config 0 descriptor?? [ 382.323422][ T5165] usb 3-1: bad CDC descriptors [ 382.331729][ T5165] option 3-1:0.0: GSM modem (1-port) converter detected [ 382.429383][T10020] loop3: detected capacity change from 0 to 512 [ 382.476434][T10020] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 382.490215][T10020] EXT4-fs (loop3): 1 truncate cleaned up [ 382.498695][T10020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.550776][ T5164] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 382.562381][ T784] usb 3-1: USB disconnect, device number 31 [ 382.611411][ T784] option 3-1:0.0: device disconnected [ 382.642756][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 382.655899][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 382.668704][ T8] usb 2-1: USB disconnect, device number 43 [ 382.866972][ T5216] usbhid 5-1:0.0: can't add hid device: -71 [ 382.873142][ T5216] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 382.900268][ T5216] usb 5-1: USB disconnect, device number 35 [ 383.736726][T10053] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 383.991135][ T5216] usb 4-1: USB disconnect, device number 53 [ 383.991165][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 384.005621][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 384.059785][ T5216] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 384.112386][ T9012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.746035][ T5167] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 384.835991][ T784] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 384.962768][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 384.984226][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 385.025987][ T5167] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.026719][ T784] usb 4-1: Using ep0 maxpacket: 32 [ 385.054492][ T5167] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.071820][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.074712][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 385.096704][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 385.112154][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 385.124505][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 385.137497][ T5167] usb 1-1: config 0 descriptor?? [ 385.141428][ T784] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=72.68 [ 385.164979][ T784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.173496][ T784] usb 4-1: Product: syz [ 385.179400][ T784] usb 4-1: Manufacturer: syz [ 385.184418][ T784] usb 4-1: SerialNumber: syz [ 385.198427][ T784] usb 4-1: config 0 descriptor?? [ 385.234165][ T784] usb 4-1: bad CDC descriptors [ 385.240331][ T784] option 4-1:0.0: GSM modem (1-port) converter detected [ 385.489984][ T8] usb 4-1: USB disconnect, device number 54 [ 385.502866][ T8] option 4-1:0.0: device disconnected [ 385.576609][ T5167] usbhid 1-1:0.0: can't add hid device: -71 [ 385.598231][ T5167] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 385.620061][T10090] netlink: 'syz-executor.4': attribute type 63 has an invalid length. [ 385.623348][ T5167] usb 1-1: USB disconnect, device number 35 [ 386.603337][T10122] netlink: 'syz-executor.1': attribute type 63 has an invalid length. [ 387.086129][ T5165] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 387.116409][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 387.278676][ T5165] usb 5-1: Using ep0 maxpacket: 32 [ 387.296879][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 387.318639][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 387.342098][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 387.356472][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 387.380502][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 387.392707][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.417294][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 387.439677][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.456854][ T5165] usb 5-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=72.68 [ 387.470680][ T5165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.481244][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.496333][ T5165] usb 5-1: Product: syz [ 387.517906][ T8] usb 2-1: config 0 descriptor?? [ 387.523078][ T5165] usb 5-1: Manufacturer: syz [ 387.534316][ T5165] usb 5-1: SerialNumber: syz [ 387.565315][ T5165] usb 5-1: config 0 descriptor?? [ 387.584508][ T5165] usb 5-1: bad CDC descriptors [ 387.590887][ T5165] option 5-1:0.0: GSM modem (1-port) converter detected [ 387.857872][ T5165] usb 5-1: USB disconnect, device number 36 [ 387.878613][ T5165] option 5-1:0.0: device disconnected [ 387.956407][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 387.970510][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 387.993659][ T8] usb 2-1: USB disconnect, device number 44 [ 388.630417][T10149] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 389.445813][ T784] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 389.456294][ T5164] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 389.646711][ T5164] usb 2-1: Using ep0 maxpacket: 32 [ 389.668534][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 389.685581][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 389.706300][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 389.718179][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 389.734835][ T784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.750105][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 389.779973][ T784] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.792339][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 389.809441][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.826548][ T5164] usb 2-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=72.68 [ 389.837671][T10185] netlink: 'syz-executor.3': attribute type 63 has an invalid length. [ 389.846234][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.854272][ T5164] usb 2-1: Product: syz [ 389.859901][ T784] usb 5-1: config 0 descriptor?? [ 389.886157][ T5164] usb 2-1: Manufacturer: syz [ 389.898342][ T5164] usb 2-1: SerialNumber: syz [ 389.922147][ T5164] usb 2-1: config 0 descriptor?? [ 389.936226][ T5164] usb 2-1: bad CDC descriptors [ 389.942164][ T5164] option 2-1:0.0: GSM modem (1-port) converter detected [ 390.227398][ T5164] usb 2-1: USB disconnect, device number 45 [ 390.243992][ T5164] option 2-1:0.0: device disconnected [ 390.284691][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 390.292151][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 390.299609][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 390.307019][ T784] usbhid 5-1:0.0: can't add hid device: -32 [ 390.313096][ T784] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 390.337871][ T784] usb 5-1: USB disconnect, device number 37 [ 390.833810][ T29] audit: type=1326 audit(1717642483.035:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10213 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 390.846977][T10218] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 391.388895][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 391.918604][ T784] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 391.986234][ T5165] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 392.117649][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 392.129402][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 392.150124][ T784] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.154033][T10255] netlink: 'syz-executor.1': attribute type 63 has an invalid length. [ 392.172790][ T784] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.184824][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.195913][ T5165] usb 1-1: Using ep0 maxpacket: 32 [ 392.197181][ T784] usb 4-1: config 0 descriptor?? [ 392.207967][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 392.239272][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 392.261167][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 392.292420][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 392.323656][ T5165] usb 1-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=72.68 [ 392.341673][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.360365][ T5165] usb 1-1: Product: syz [ 392.369292][ T5165] usb 1-1: Manufacturer: syz [ 392.373969][ T5165] usb 1-1: SerialNumber: syz [ 392.381662][ T5165] usb 1-1: config 0 descriptor?? [ 392.390887][ T5165] usb 1-1: bad CDC descriptors [ 392.398275][ T5165] option 1-1:0.0: GSM modem (1-port) converter detected [ 392.612059][ T5165] usb 1-1: USB disconnect, device number 36 [ 392.621216][ T5165] option 1-1:0.0: device disconnected [ 392.637595][ T784] usbhid 4-1:0.0: can't add hid device: -71 [ 392.643920][ T784] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.661252][ T784] usb 4-1: USB disconnect, device number 55 [ 393.054147][ T29] audit: type=1326 audit(1717642485.255:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10274 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0867cf69 code=0x0 [ 393.251043][T10279] netlink: 'syz-executor.0': attribute type 63 has an invalid length. [ 393.875275][ T29] audit: type=1804 audit(1717642486.075:125): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir22870106/syzkaller.fGUrL9/110/file1" dev="sda1" ino=1966 res=1 errno=0 [ 393.911203][ T29] audit: type=1804 audit(1717642486.105:126): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir22870106/syzkaller.fGUrL9/110/file1" dev="sda1" ino=1966 res=1 errno=0 [ 394.140685][T10312] netlink: 'syz-executor.1': attribute type 63 has an invalid length. [ 394.245892][ T5164] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 394.450322][ T5164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 394.474291][ T5164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 394.490563][ T5164] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.504770][ T5164] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.527863][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.539234][ T5164] usb 3-1: config 0 descriptor?? [ 394.651081][ T29] audit: type=1326 audit(1717642486.855:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8704a7cf69 code=0x0 [ 394.958415][ T5164] usbhid 3-1:0.0: can't add hid device: -71 [ 395.028637][ T5164] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 395.040376][ T5164] usb 3-1: USB disconnect, device number 32 [ 396.292359][ T29] audit: type=1804 audit(1717642488.495:128): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir297318534/syzkaller.iwhDxG/31/file1" dev="sda1" ino=1965 res=1 errno=0 [ 396.344250][ T29] audit: type=1804 audit(1717642488.495:129): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir297318534/syzkaller.iwhDxG/31/file1" dev="sda1" ino=1965 res=1 errno=0 [ 397.110332][ T29] audit: type=1326 audit(1717642489.315:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8704a7cf69 code=0x0 [ 397.445857][ T784] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 397.632686][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 397.659210][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 397.674366][ T784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.692201][ T784] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.715854][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.740263][ T784] usb 2-1: config 0 descriptor?? [ 398.303280][ T29] audit: type=1804 audit(1717642490.505:131): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3769152358/syzkaller.gJ6qdz/147/file1" dev="sda1" ino=1964 res=1 errno=0 [ 398.330765][ T29] audit: type=1804 audit(1717642490.505:132): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3769152358/syzkaller.gJ6qdz/147/file1" dev="sda1" ino=1964 res=1 errno=0 [ 398.381033][ T784] usbhid 2-1:0.0: can't add hid device: -71 [ 398.390730][ T784] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 398.403678][ T784] usb 2-1: USB disconnect, device number 46 [ 398.660920][ T29] audit: type=1326 audit(1717642490.865:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 400.036067][ T8] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 400.229756][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 400.248532][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 400.262204][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.278002][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.291433][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.322798][ T8] usb 5-1: config 0 descriptor?? [ 400.472403][ T29] audit: type=1800 audit(1717642492.675:134): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=E91F7189591E9233614B dev="sda1" ino=1960 res=0 errno=0 [ 400.521786][ T29] audit: type=1326 audit(1717642492.715:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10471 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 400.952372][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 400.965016][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 400.992836][ T8] usb 5-1: USB disconnect, device number 38 [ 402.030344][ T29] audit: type=1326 audit(1717642494.235:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2727cf69 code=0x0 [ 402.385872][ T784] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 402.577724][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 402.602602][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 402.616979][ T784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.641729][ T784] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.654578][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.680295][ T784] usb 5-1: config 0 descriptor?? [ 403.308408][ T784] usbhid 5-1:0.0: can't add hid device: -71 [ 403.322837][ T784] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 403.335429][ T784] usb 5-1: USB disconnect, device number 39 [ 403.416794][ T5167] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 403.575757][ T5167] usb 4-1: device descriptor read/64, error -71 [ 403.877233][ T5167] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 404.073345][ T5167] usb 4-1: device descriptor read/64, error -71 [ 404.181822][ T29] audit: type=1326 audit(1717642496.385:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8704a7cf69 code=0x0 [ 404.215124][ T5167] usb usb4-port1: attempt power cycle [ 404.636472][ T5167] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 404.694673][ T5167] usb 4-1: device descriptor read/8, error -71 [ 404.975703][ T5167] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 405.018119][ T5167] usb 4-1: device descriptor read/8, error -71 [ 405.146317][ T5167] usb usb4-port1: unable to enumerate USB device [ 405.165877][ T784] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 405.367969][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 405.387064][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 405.403989][ T784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.434842][ T784] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.456043][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.471545][ T784] usb 2-1: config 0 descriptor?? [ 406.095060][ T784] usbhid 2-1:0.0: can't add hid device: -71 [ 406.101918][ T784] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 406.112804][ T784] usb 2-1: USB disconnect, device number 47 [ 406.279033][ T29] audit: type=1326 audit(1717642498.485:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff32a7cf69 code=0x0 [ 407.255883][ T5164] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 407.436068][ T5164] usb 5-1: device descriptor read/64, error -71 [ 407.715951][ T5164] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 407.795740][ T784] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 407.875856][ T5164] usb 5-1: device descriptor read/64, error -71 [ 407.879278][T10667] loop0: detected capacity change from 0 to 32768 [ 407.909451][T10667] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 407.999686][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 408.016562][ T5164] usb usb5-port1: attempt power cycle [ 408.035204][ T784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 408.037085][T10667] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 408.045379][ T784] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.073678][T10671] loop1: detected capacity change from 0 to 32768 [ 408.078553][T10667] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 408.097483][T10667] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 408.097483][T10667] running recovery passes: check_allocations [ 408.123953][ T784] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.133315][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.172192][T10667] bcachefs (loop0): accounting_read... done [ 408.185261][ T784] usb 4-1: config 0 descriptor?? [ 408.206818][T10667] bcachefs (loop0): alloc_read... done [ 408.222045][T10667] bcachefs (loop0): stripes_read... done [ 408.228731][T10667] bcachefs (loop0): snapshots_read... done [ 408.234853][T10667] bcachefs (loop0): check_allocations... [ 408.238634][T10667] ------------[ cut here ]------------ [ 408.250628][T10667] kernel BUG at fs/bcachefs/buckets.h:96! [ 408.256745][T10667] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 408.256782][T10667] CPU: 1 PID: 10667 Comm: syz-executor.0 Tainted: G W 6.10.0-rc2-next-20240605-syzkaller #0 [ 408.256810][T10667] Tainted: [W]=WARN [ 408.256818][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 408.256831][T10667] RIP: 0010:gc_bucket+0x250/0x260 [ 408.256867][T10667] Code: 8c e8 c4 35 63 fd e9 29 ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 36 ff ff ff e8 2b d4 ec fd e9 2c ff ff ff e8 21 df 86 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 [ 408.256883][T10667] RSP: 0018:ffffc9000f6ce208 EFLAGS: 00010246 2024/06/06 02:55:00 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 408.256909][T10667] RAX: ffffffff840fb20f RBX: 000000000001007c RCX: 0000000000040000 [ 408.256923][T10667] RDX: ffffc90003539000 RSI: 000000000003ffff RDI: 0000000000040000 [ 408.256938][T10667] RBP: ffff88802dad0000 R08: ffffffff840fb171 R09: 0000000000000000 [ 408.256952][T10667] R10: ffffc9000f6cefd0 R11: fffff52001ed9dfc R12: ffff88805efe8130 [ 408.256968][T10667] R13: ffff88805efe8118 R14: 000000000001007c R15: 0000000000000080 [ 408.256982][T10667] FS: 00007eff338d96c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 408.257001][T10667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.257016][T10667] CR2: 00007f8e280e2070 CR3: 000000002e8d2000 CR4: 00000000003506f0 [ 408.257035][T10667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.257048][T10667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.257061][T10667] Call Trace: [ 408.257069][T10667] [ 408.257077][T10667] ? __die_body+0x88/0xe0 [ 408.257112][T10667] ? die+0xcf/0x110 [ 408.257145][T10667] ? do_trap+0x15a/0x3a0 [ 408.257174][T10667] ? gc_bucket+0x250/0x260 [ 408.257204][T10667] ? do_error_trap+0x1dc/0x2c0 [ 408.257232][T10667] ? gc_bucket+0x250/0x260 [ 408.257242][T10671] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 408.257265][T10667] ? __pfx_do_error_trap+0x10/0x10 [ 408.257293][T10667] ? report_bug+0x3e8/0x500 [ 408.257328][T10667] ? handle_invalid_op+0x34/0x40 [ 408.257358][T10667] ? gc_bucket+0x250/0x260 [ 408.257390][T10667] ? exc_invalid_op+0x38/0x50 [ 408.257423][T10667] ? asm_exc_invalid_op+0x1a/0x20 [ 408.257460][T10667] ? gc_bucket+0x1b1/0x260 [ 408.257490][T10667] ? gc_bucket+0x24f/0x260 [ 408.257521][T10667] ? gc_bucket+0x250/0x260 [ 408.257552][T10667] ? gc_bucket+0x24f/0x260 [ 408.257585][T10667] bch2_check_allocations+0xc63/0xb9d0 [ 408.257618][T10667] ? bch2_check_allocations+0x67e/0xb9d0 [ 408.257653][T10667] ? validate_chain+0x11e/0x5920 [ 408.257690][T10667] ? bch2_btree_node_iter_init+0x36bb/0x4280 [ 408.257724][T10667] ? validate_chain+0x11e/0x5920 [ 408.257761][T10667] ? bch2_btree_path_verify_level+0x369/0x1950 [ 408.257788][T10667] ? __bch2_journal_key_search+0x9c2/0x10e0 [ 408.257821][T10667] ? __bch2_btree_node_iter_advance+0x577/0xaa0 [ 408.257852][T10667] ? validate_chain+0x11e/0x5920 [ 408.257886][T10667] ? validate_chain+0x11e/0x5920 [ 408.257925][T10667] ? desc_read+0x200/0x3f0 [ 408.257953][T10667] ? __pfx_bch2_check_allocations+0x10/0x10 [ 408.257987][T10667] ? desc_read+0x1a2/0x3f0 [ 408.258020][T10667] ? prb_first_seq+0x131/0x210 [ 408.258051][T10667] ? __pfx_prb_first_seq+0x10/0x10 [ 408.258089][T10667] ? this_cpu_in_panic+0x4f/0x80 [ 408.258119][T10667] ? _prb_read_valid+0xa39/0xac0 [ 408.258150][T10667] ? validate_chain+0x11e/0x5920 [ 408.258187][T10667] ? __pfx__prb_read_valid+0x10/0x10 [ 408.258216][T10667] ? data_push_tail+0x716/0x730 [ 408.258254][T10667] ? __pfx_validate_chain+0x10/0x10 [ 408.258290][T10667] ? prb_read_valid+0xa9/0xf0 [ 408.258318][T10667] ? __lock_acquire+0x1359/0x2000 [ 408.258346][T10667] ? __pfx_prb_read_valid+0x10/0x10 [ 408.258376][T10667] ? desc_read+0x200/0x3f0 [ 408.258407][T10667] ? desc_read+0x1a2/0x3f0 [ 408.258441][T10667] ? prb_first_seq+0x131/0x210 [ 408.258471][T10667] ? __pfx_prb_first_seq+0x10/0x10 [ 408.258510][T10667] ? this_cpu_in_panic+0x4f/0x80 [ 408.258540][T10667] ? _prb_read_valid+0xa39/0xac0 [ 408.258578][T10667] ? __pfx__prb_read_valid+0x10/0x10 [ 408.258618][T10667] ? mark_lock+0x9a/0x360 [ 408.258648][T10667] ? prb_read_valid+0xa9/0xf0 [ 408.258679][T10667] ? __pfx_prb_read_valid+0x10/0x10 [ 408.258712][T10667] ? console_unlock+0x239/0x4d0 [ 408.258747][T10667] ? console_unlock+0x447/0x4d0 [ 408.258785][T10667] ? __pfx_console_unlock+0x10/0x10 [ 408.258817][T10667] ? __bch2_print+0x17a/0x220 [ 408.258852][T10667] ? __bch2_print+0x17a/0x220 [ 408.258885][T10667] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 408.258934][T10667] ? preempt_count_add+0x93/0x190 [ 408.258957][T10667] ? __wake_up_klogd+0x112/0x140 [ 408.258979][T10667] ? vprintk_emit+0x7ce/0x900 [ 408.259025][T10667] ? bch2_check_allocations+0x67e/0xb9d0 [ 408.259057][T10667] ? __bch2_print+0x17a/0x220 [ 408.259094][T10667] ? __pfx___bch2_print+0x10/0x10 [ 408.259137][T10667] bch2_run_recovery_pass+0xf0/0x1e0 [ 408.259168][T10667] bch2_run_recovery_passes+0x19e/0x820 [ 408.259207][T10667] bch2_fs_recovery+0x238b/0x3730 [ 408.259243][T10667] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 408.259288][T10667] ? __pfx_lock_release+0x10/0x10 [ 408.259314][T10667] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 408.259351][T10667] ? __pfx_lock_release+0x10/0x10 [ 408.259385][T10667] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 408.259422][T10667] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 408.259458][T10667] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 408.259498][T10667] ? llist_reverse_order+0x72/0x90 [ 408.259533][T10667] bch2_fs_start+0x356/0x5b0 [ 408.259559][T10667] bch2_fs_open+0xa8d/0xdf0 [ 408.259599][T10667] ? __pfx_bch2_fs_open+0x10/0x10 [ 408.259635][T10667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 408.259674][T10667] ? __pfx_bch2_test_super+0x10/0x10 [ 408.259704][T10667] ? sget+0x2b8/0x620 [ 408.259736][T10667] ? __pfx_bch2_noset_super+0x10/0x10 [ 408.259766][T10667] bch2_fs_get_tree+0x75e/0x14d0 [ 408.259803][T10667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.259845][T10667] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 408.259910][T10667] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 408.259949][T10667] ? apparmor_capable+0x138/0x1b0 [ 408.259978][T10667] ? bpf_lsm_capable+0x9/0x10 [ 408.260002][T10667] vfs_get_tree+0x90/0x2a0 [ 408.260025][T10667] do_new_mount+0x2be/0xb40 [ 408.260064][T10667] ? __pfx_do_new_mount+0x10/0x10 [ 408.260106][T10667] __se_sys_mount+0x2d9/0x3c0 [ 408.260134][T10667] ? __pfx___se_sys_mount+0x10/0x10 [ 408.260157][T10667] ? do_syscall_64+0x100/0x230 [ 408.260191][T10667] ? __x64_sys_mount+0x20/0xc0 [ 408.260214][T10667] do_syscall_64+0xf3/0x230 [ 408.260246][T10667] ? clear_bhb_loop+0x35/0x90 [ 408.260268][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.260307][T10667] RIP: 0033:0x7eff32a7e66a [ 408.260327][T10667] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 408.260347][T10667] RSP: 002b:00007eff338d8ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 408.260371][T10667] RAX: ffffffffffffffda RBX: 00007eff338d8f80 RCX: 00007eff32a7e66a [ 408.260388][T10667] RDX: 0000000020000100 RSI: 0000000020005dc0 RDI: 00007eff338d8f40 [ 408.260405][T10667] RBP: 0000000020000100 R08: 00007eff338d8f80 R09: 0000000000000480 [ 408.260420][T10667] R10: 0000000000000480 R11: 0000000000000202 R12: 0000000020005dc0 [ 408.260434][T10667] R13: 00007eff338d8f40 R14: 0000000000005e05 R15: 00000000200000c0 [ 408.260460][T10667] [ 408.260467][T10667] Modules linked in: [ 408.260527][T10667] ---[ end trace 0000000000000000 ]--- [ 408.260594][T10667] RIP: 0010:gc_bucket+0x250/0x260 [ 408.264490][T10671] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 408.275827][T10667] Code: 8c e8 c4 35 63 fd e9 29 ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 36 ff ff ff e8 2b d4 ec fd e9 2c ff ff ff e8 21 df 86 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 [ 408.275852][T10667] RSP: 0018:ffffc9000f6ce208 EFLAGS: 00010246 [ 408.275876][T10667] RAX: ffffffff840fb20f RBX: 000000000001007c RCX: 0000000000040000 [ 408.275893][T10667] RDX: ffffc90003539000 RSI: 000000000003ffff RDI: 0000000000040000 [ 408.275916][T10667] RBP: ffff88802dad0000 R08: ffffffff840fb171 R09: 0000000000000000 [ 408.275954][T10667] R10: ffffc9000f6cefd0 R11: fffff52001ed9dfc R12: ffff88805efe8130 [ 408.275972][T10667] R13: ffff88805efe8118 R14: 000000000001007c R15: 0000000000000080 [ 409.099486][T10671] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 409.099486][T10671] running recovery passes: check_allocations [ 409.129614][T10667] FS: 00007eff338d96c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 409.143737][T10667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.175925][T10671] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 409.181448][T10667] CR2: 0000001b2eb23000 CR3: 000000002e8d2000 CR4: 00000000003506f0 [ 409.197160][T10667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.205208][T10667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.218498][T10671] bcachefs (loop1): bch2_fs_recovery(): error EINTR [ 409.237884][T10667] Kernel panic - not syncing: Fatal exception [ 409.244321][T10667] Kernel Offset: disabled [ 409.248644][T10667] Rebooting in 86400 seconds..