last executing test programs: 5.106023511s ago: executing program 3 (id=135): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) futex(&(0x7f000000cffc)=0x1, 0x5, 0x11, 0x0, 0x0, 0x7ffffffe) 4.156238826s ago: executing program 3 (id=141): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.612252828s ago: executing program 3 (id=144): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000001f80)="4a14", 0x2}], 0x1}}], 0x1, 0x5) 3.097452308s ago: executing program 0 (id=146): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}, {r0, 0x18}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 2.54814627s ago: executing program 3 (id=151): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r0, 0x82000000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)=0xad59) 2.454175526s ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 2.396098389s ago: executing program 3 (id=154): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x4800882, &(0x7f0000009b00)={[{@noikeep}, {@dax}]}, 0x1, 0x98a2, &(0x7f0000009b40)="$eJzs3Qm85nPBuP97zGDsS4k2ZEurNUtK9qUke2TPnjUklH0pS0UJFYUiiUKoiFQSyi77vu/7vv5fY4aYLvL8/s/z8Mx1XS8z93ru8zmf9/fzde7zPXPfKy+2/EKDwaSDkb10+q/OOvDGNVaYaKktT95/2BWH7rP0PaOuHmfkyWQLjDpdcNTpQoPBYMioxxky8rph85908liDYYMR//2rCccbf6wJB4PxR10c9TiDuUeeTHDUS/d7YbR4oNOO+HR7j/zzYhONeJARZ1Zb67nNBoPB8Fd8/IhxzfpvX6i0BRdaYaF/Wb3sNtaom4f867YXT4eN/DPBEYPBBIcNXnv7GHHfsV/xsf+bjfick04/WPHGN+Fz/5/rswsus9xo/iPW4tBR1809Yo2PvgaNjb6d77P8xneNmsIhoybupXUz5E3a7v+fWnnBxZYavPY6Hiy96A53vvDifnPYIoPBsEUHg2GLDQbDFn+zPeq/pzd146uqqqo3pQUXmmPE87+xRvt+YPhL39fS94XnPDvbrYPBsKVHfr87bK2XngtWVVVVVVVV1VuzBReaY2F4/j/p6z3/n/a03Sfr+X9VVVVVVVXV/52WXHChOUY81x/t+f9Ur/f8/8G7jzty5O/+LzD3yI96/s39IqqqqqqqqqrqdVtsSXz+P+3rPf8/76RpL+j5f1VVVVVVVdX/nZabY7GFB694nb1RV8/80u30/P/0O65f/c0ab1VVVVVVVVX913v+vlPP+NdrV089GO313l9s1M8Fhhx/5kUXvWkDfWs05N9/HrLzmz2m/7+NcB5+zLSDwWYrvtlDqTeh/zOvVV//I+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJe4/j/y6//f/qJ67z0XvDvn3GOK0/910e++N7/w5Ze8r5d3qShvxmNqcf/BxsNGQxG+U660WAwWHrB5VaYeTAYnHrlHDPOMHj5tnlG3Dbf5ENffIP4l/6ZyKKT8QPvPN3I0xEbyuDtLz/G8S8+/pIvHD50yGiDeEWTnXLkkRuu/MSco5/O9Npfx1gvn5vo5Ltf+rcsY412p+Gv8cEvPf5LX8vozqPGPvOIsc+y9aZbzLLVdtt/ZKNN195gvQ3W22ze2eeabc55551rrlnW32iT9WYd+fdrzdm0L/698BuZswlHn7P7FnzlnI3+tb3WnE37+nP24iMecO7wT700Z8P+i3O28OvP2bQbjfpEky0w9mCtF+dmyGAw2SJjD7YdcWG2cQeDyRYddd+pRtz3E5OPNRjs968vdMS5cV/eBofsPOI+Ky+2/EIjd1ODwb9O/9VrvJ/9OKNGvsCo0wVHnS408tNMOvjXpjhs/pNOHmvEXLxqOiYcb/yxJhwMxh91cdTjDOYdeTL+aS/d7zXeZ320gb74Mit7j/zzYhMNBoMJRpyZeu3T9xgx9f8L79P+//T//3/zmmfIy9vjkFF/Rt1npNeCiy/5r8/14jSMmLuho66be4TJf/Nb27+qfxvvtMMH077OeF/ndXFejLavTU6dYtf/rtfFofFO9TrjfZ3X8X3N8a5068F3jXyo/7bxjravW+rFvxd4I/u6wevv64bSA6x3/ntH39d95rWH+Krd5UtzNO5od3qtfd1Uh0yz84jHX+D193VLjRj72K/a1401GEy28Ev7uhE7vsXGHuw34sLsIy4sPvbg6BEX5njxwniDM0dc+Og6m2+y7ogrlvj37WDmIa/6BU1YZ4uNts6GvOJrHzLa73cOG3k6wREvvYfTa+w3h4z6sv7jvoK220lfZ7yv8/5TOM8jrlv3hOFT/He9/xSNd/jrj/e13i/7Nce77+On3/jfPN6X19nYr5iuJd7IOpv21etsxJc49BUr441+H7Yu3H/k+alefrRtdrz75e8pxh7tcf/T9xRLvP46m3Sj0T5ur8MGQ15vbhZ/I3Pznn/bB+3yyrl5o99vzTz9yNuHvs7cjDvvGjO9NDfj/BfnZvH/6twsMBj66rkZNlh0MBjMMGr/sNgbmZupXn9u3uh2Mz7cf+T59V6+apF9jjn7pbkZfS7+09ws9l+dm2lf3m5mePG26cYajDPOYNu1t956y9lG/v3SxdlH/v36a3CRNzKXk/73zOW7hr3WXP5rU53w1guO+A9r8N/26S89/iL/1bkcvDyXg41GXyz1Vq2f/7nL313+7vJ3l7+7/N3lL+41jv+//Pr/B0063/6jfrgx9gXTTLnnmz3eN7kx+vj/KN9XHf/fc8ppLhhr8PJtr3t8duR93pLHZ+ceeTLBUS/db/TjgzzQ1z4+e9i8c+/+v3R89v+pl9bqG/g5XPt/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jXOP4/60u/B3DHbMs+POpA6Nj37Lbqsm/2eN/kxujj/6N8X3X8f9lVd7tnrMHLt73u8f+R93Ec/7/5mcX2fSsf/39prXb8v/5D+btD/9FfA6TG2Fr/7vJ393r+4/0vjqPenFr/7vJ3l7+7/N3l7y5/d/m7y1/caxz/X+Cl3wM47riDt3/p9wEum2zvU9/s8b7JjanH/3v/f2/t/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iXjz+P/LfCL/yXwov03aBwfH//9uN+v2PwWj+y+aPWfyXy58aazBw+C+fP2ZZ/yvkj1n8V8wfs/ivlD9m8f98/pjFf+X8MYv/KvljFv8v5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/l/MH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8v5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8v5w/ZvHfMn/M4r9V/pjFf+v8MYv/V/LHLP7b5I9Z/L+aP2bx3zZ/zOK/Xf6YxX/7/DGL/9fyxyz+X88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOL/jfwxi/8388cs/nvlj1n8984fs/jvkz9m8d83f8zi/638MYv/t/PHLP7fyR+z+O+XP2bx3z9/zOL/3fwxi//38scs/gfkj1n8v58/ZvE/MH/M4n9Q/pjF/+D8MYv/D/LHLP4/zB+z+P8of8zif0j+mMX/0Pwxi/+P88cs/j/JH7P4H5Y/ZvE/PH/M4n9E/pjF/6f5Yxb/n+WPWfyPzB+z+B+VP2bx/3n+mMX/6Pwxi/8v8scs/sfkj1n8f5k/ZvE/Nn/M4n9c/pjF/1f5Yxb/X+ePWfyPzx+z+J+QP2bxPzF/zOL/m/wxi/9J+WMW/5Pzxyz+p+SPWfx/mz9m8f9d/pjF//f5Yxb/U/PHLP6n5Y9Z/P+QP2bxPz1/zOJ/Rv6Yxf+P+WMW/zPzxyz+f8ofs/j/OX/M4v+X/DGL/1n5Yxb/v+aPWfzPzh+z+P8tf8zif07+mMX/3Pwxi/95+WMW/7/nj1n8/5E/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8f9n/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5YxL/IYP8MYv/kPwxi/9Y+WMW/6H5Yxb/YfljFv+x88cs/uPkj1n8x80fs/gPzx+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4v+2/DGL/9vzxyz+U+SPWfzfkT9m8Z8yf8ziP1X+mMX/nfljFv935Y9Z/N+dP2bxf0/+mMX/vfljFv+p88cs/tPkj1n8p80fs/i/L3/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8358/ZvGfOX/M4v+B/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/8fyxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/8fwxi/98+WMW/0/kj1n8P5k/ZvGfP3/M4v+p/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/p/OH7P4fyZ/zOK/VP6Yxf+z+WMW/6Xzxyz+n8sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfw/nz9m8V85f8ziv0r+mMX/C/ljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/8X88cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/y/lj1n8N84fs/hvkj9m8d9U5z/eG7qXxX8znf8by+K/ef6YxX+L/DGL/5fzxyz+W+aPWfy3yh+z+G+dP2bx/0r+mMV/m/wxi/9X88cs/tvmj1n8t8sfs/hvnz9m8f9a/pjF/+v5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n8v5E/ZvH/Zv6YxX+v/DGL/975Yxb/ffLHLP775o9Z/L+VP2bx/3b+mMX/O/ljFv/98scs/vvnj1n8v5s/ZvH/Xv6Yxf+A/DGL//fzxyz+B+aPWfwPyh+z+B+cP2bx/0H+mMX/h/ljFv8f5Y9Z/A/JH7P4H5o/ZvH/cf6Yxf8n+WMW/8Pyxyz+h+ePWfyPyB+z+P80f8zi/7P8MYv/kfljFv+j8scs/j9/tf/t/+vjeotm8T+69Y9Z/H+RP2bxPyZ/zOL/y/wxi/+x+WMW/+Pyxyz+v8ofs/j/On/M4n98/pjF/4T8MYv/ifljFv/f5I9Z/E/KH7P4n5w/ZvE/JX/M4v/b/DGL/+/yxyz+v88fs/ifmj9m8T8tf8zi/4f8MYv/6fljFv8z8scs/n/MH7P4n5k/ZvH/U/6Yxf/P+WMW/7/kj1n8z8ofs/j/NX/M4n92/pjF/2/5Yxb/c/LHLP7n5o9Z/M/LH5P4v1j+/57Ef8g/8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WNjvP+wF88OuSx/bIz3H9mQf+aPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5j9awUacO/2vzxyzr/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyT+L57N/9+z+A/JH7P4j5U/ZvEfmj9m8R+WP2bxHzt/zOI/Tv6YxX/c/DGL//D8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+b8sfs/i/PX/M4j9F/pjF/x35Yxb/KfPHLP5T5Y9Z/N+ZP2bxf1f+mMX/3fljFv/35I9Z/N+bP2bxnzp/zOI/Tf6YxX/a/DGL//vyxyz+0+WPWfynzx+z+M+QP2bxnzF/zOI/U/6Yxf/9+WMW/5nzxyz+H8gfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4j9L/pjFf9b8sSFnHTj2YDAY4/1nyx+zrP/Z88cs/nPkj1n858wfs/h/LH/M4j9X/pjFf+78MYv/PPljFv9588cs/h/PH7P4z5c/ZvH/RP6Yxf+T+WMW//nzxyz+n8ofs/gvkD9m8V9wMN6bNaK3dBb/hVr/mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL/6fwxi/9n8scs/kvlj1n8P5s/ZvFfOn/M4v+5/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjF//P5Yxb/lfPHLP6r5I9Z/L+QP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4fzF/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvH/Uv6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvH/cv6YxX/L/DGL/1b5Yxb/rfPHLP5fyR+z+G+TP2bx/2r+mMV/2/wxi/92+WMW/+3zxyz+X8sfs/h/PX/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/838scs/t/MH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/t/LHLP7fzh+z+H8nf8ziv1/+mMV///wxi/9388cs/t/LH7P4H5A/ZvH/fv6Yxf/A/DGL/0H5Yxb/g/PHLP4/yB+z+P8wf8zi/6P8MYv/IfljFv9D88cs/j/OH7P4/yR/zOJ/WP6Yxf/w/DGL/xH5Yxb/n+aPWfx/lj9m8T8yf8zif1T+mMX/5/ljFv+j88cs/r/IH7P4H5M/ZvH/Zf6Yxf/Y/DGL/3H5Yxb/X+WPWfx/nT9m8T8+f8zif0L+mMX/xPwxi/9v8scs/iflj1n8T84fs/ifkj9m8f9t/pjF/3f5Yxb/3+ePWfxPzR+z+J+WP2bx/0P+mMX/9Pwxi/8Z+WMW/z/mj1n8z8wfs/j/KX/M4v/n/DGL/1/yxyz+Z+WPWfz/mj9m8T87f8zi/7f8MYv/OfljFv9z88cs/uflj1n8/54/ZvH/R/6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF/5/5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H8x/ZsFdftPg/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QPybxHzrIH7P4D8kfs/iPlT9m8R+aP2bxH5Y/ZvEfO3/M4j9O/pjFf9z8MYv/8Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5vyx+z+L89f8ziP0X+mMX/HfljFv8p88cs/lPlj1n835k/ZvF/V/6Yxf/d+WMW//fkj1n835s/ZvGfOn/M4j9N/pjFf9r8MYv/+/LHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF//35Yxb/mfPHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+H80f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+H/s9f3H/R8f11s0i/9crX/M4j93/pjFf578MYv/vPljFv+P549Z/OfLH7P4fyJ/zOL/yfwxi//8+WMW/0/lj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/3T+mMX/M/ljFv+l8scs/p/NH7P4L50/ZvH/XP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4v/5/DGL/8r5Yxb/VfLHLP5fyB+z+K+aP2bxXy1/zOK/ut6fX+LQ4r+G3p+z+K+ZP2bxXyt/zOK/dv6Yxf+L+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/5fyxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5fzxyz+W+aPWfy3yh+z+G+dP2bx/0r+mMV/m/wxi/9X88cs/tvmj1n8t8sfs/hvnz9m8f9a/pjF/+v5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n8v5E/ZvH/Zv6YxX+v/DGL/975Yxb/ffLHLP775o9Z/L+VP2bx/3b+mMX/O/ljFv/98scs/vvnj1n8v5s/ZvH/Xv6Yxf+A/DGL//fzxyz+B+aPWfwPyh+z+B+cP2bx/0H+mMX/h/ljFv8f5Y9Z/A/JH7P4H5o/ZvH/cf6Yxf8n+WMW/8Pyxyz+h+ePWfyPyB+z+P80f8zi/7P8MYv/kfljFv+j8scs/j/PH7P4H50/ZvH/Rf6Yxf+Y/DGL/y/zxyz+x+aPWfyPyx+z+P8qf2yM9x/+4tmhv84fG+P9Rzb0+Pwxi/8J+WMW/xPzxyz+v8kfs/iflD9m8T85f8zif0r+mMX/t/ljFv/f5Y9Z/H+fP2bxPzV/zOJ/Wv6Yxf8P+WMW/9Pzxyz+Z+SPWfz/mD9m8T8zf8zi/6f8MYv/n/PHLP5/yR+z+J+VP2bx/2v+mMX/7Pwxi//f8scs/ufkj1n8z80fs/iflz9m8f97/pjF/x/5Yxb/8/PHLP4X5I9Z/C/U+r+w0+vdavG/SOv/+ln8L84fs/hfkj9m8b80f8zif1n+mMX/n/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9J/IcN8scs/kPyxyz+Y+WPWfyH5o9Z/Iflj1n8x84fs/iPkz9m8R83f8ziPzx/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjFf/L8MYv/2/LHLP5vzx+z+E+RP2bxf0f+mMV/yvwxi/9U+WMW/3fmj1n835U/ZvF/d/6Yxf89+WMW//fmj1n8p84fs/hPkz9m8Z82f8zi/778MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8X9//pjFf+b8MYv/B/LHLP4fzB+z+H8o/39rYpH/h/PHLP4fyR+z+H80f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+H8sf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+H88fs/jPlz9m8f9E/pjF/5P5Yxb/+fPHLP6fyh+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v/p/DGL/2dex9+8XVj8l5I7v1YW/8/mj1n8l84fs/h/Ln/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8f98/pjFf+X8MYv/KvljFv8v5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/l/MH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8v5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8v5w/ZvHfMn/M4r9V/pjFf+v8MYv/V/LHLP7b5I9Z/L+aP2bx3zZ/zOK/Xf6YxX/7/DGL/9fyxyz+X88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOL/jfwxi/8388cs/nvlj1n8984fs/jvkz9m8d83f8zi/638MYv/t/PHLP7fyR+z+O+XP2bx3z9/zOL/3fwxi//38scs/gfkj1n8v58/ZvE/MH/M4n9Q/pjF/+D8MYv/D/LHLP4/zB+z+P8of8zif0j+mMX/0Pwxi/+P88cs/j/JH7P4H5Y/ZvE/PH/M4n9E/pjF/6f5Yxb/n+WPWfyPzB+z+B+VP2bx/3n+mMX/6Pwxi/8v8scs/sfkj1n8f5k/ZvE/Nn/M4n9c/pjF/1f5Yxb/X+ePWfyPzx+z+J+QP2bxPzF/zOL/m/wxi/9J+WMW/5Pzxyz+p+SPWfx/mz9m8f9d/pjF//f5Yxb/U/PHLP6n5Y9Z/P+QP2bxPz1/zOJ/Rv6Yxf+P+WMW/zPzxyz+f8ofs/j/OX/M4v+X/DGL/1n5Yxb/v+aPWfzPzh+z+P8tf8zif07+mMX/3Pwxi/95+WMW/7/nj1n8/5E/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8Lx0MBi+88MJOb9aw3qpZ/C9r/WMW/3/mj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/JvEfe5A/ZvEfkj9m8R8rf8ziPzR/zOI/LH/M4j92/pjFf5z8MYv/uPljFv/h+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/yfLHLP6T549Z/N+WP2bxf3v+mMV/ivwxi/878scs/lPmj1n8p8ofs/i/M3/M4v+u/DGL/7vzxyz+78kfs/i/N3/M4j91/pjFf5r8MYv/tPljFv/35Y9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/+/PHLP4z549Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bx/1j+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfw/nj9m8Z8vf8zi/4n8MYv/J/PHLP7z549Z/D+VP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/9P5Yxb/z+SPWfyXyh+z+H82f8ziv3T+mMX/c/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//n88cs/ivnj1n8V8kfs/h/IX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8f9i/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8zi/6X8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/+X8MYv/lvljFv+t8scs/lvnj1n8v5I/ZvHfJn/M4v/V/DGL/7b5Yxb/7fLHLP7b549Z/L+WP2bx/3r+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/b+SPWfy/mT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW/2/lj1n8v50/ZvH/Tv6YxX+//DGL//75Yxb/7+aPWfy/lz9m8T8gf8zi//38MYv/gfljFv+D8scs/gfnj1n8f5A/ZvH/Yf6Yxf9H+WMW/0Pyxyz+h+aPWfx/nD9m8f9J/tir/Yf835+j1/A/LH/Msv4Pzx+z+B+RP2bx/2n+mMX/Z/ljFv8j88cs/kflj1n8f54/ZvE/On/M4v+L/DGL/zH5Yxb/X+aPWfyPzR+z+B+XP2bx/1X+mMX/1/ljFv/j88cs/ifkj1n8T8wfs/j/Jn/M4n9S/pjF/+T8MYv/KfljFv/f5o9Z/H+XP2bx/33+mMX/1Pwxi/9p+WMW/z/kj1n8T88fs/ifkT9m8f9j/pjF/8z8MYv/n/LHLP5/zh+z+P8lf8zif1b+mMX/r/ljFv+z88cs/n/LH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/f+SPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/P+ZP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMR/nEH+mMV/SP6YxX+s/DGL/9D8MYv/sPwxi//Y+WMW/3Hyxyz+4+aPWfyH549Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8X9b/pjF/+35Yxb/KfLHLP7vyB+z+E+ZP2bxnyp/zOL/zjfgP+x/clxv0Sz+72r9Yxb/d+ePWfzfkz9m8X9v/pjFf+r8MYv/NPljFv9p88cs/u/LH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv/3549Z/GfOH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOL/sfwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+H88f8ziP1/+mMX/E/ljFv9P5o9Z/OfPH7P4fyp/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/p/PHLP6fyR+z+C+VP2bx/2z+mMV/6fwxi//n8scs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/8/nj1n8V84fs/ivkj9m8f9C/pjFf9X8sTHUf8ho1uOslj82hvq/2CvX/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvH/Yv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v+l/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/l/DGL/5b5Yxb/rfLHLP5b549Z/L+SP2bx3yZ/zOL/1fwxi/+2+WMW/+3yxyz+2+ePWfy/lj9m8f96/pjFf4f8MYv/jv/J/9iN/4cH9tbM4r/Tf/Df5X96XG/RLP47t//HLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/N/LHLP7fzB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/7fyxyz+384fs/h/J3/M4r9f/pjFf//8MYv/d/PHLP7fyx+z+B+QP2bx/37+mMX/wPwxi/9B+WMW/4Pzxyz+P8gfs/j/MH/M4v+j/DGL/yH5Yxb/Q/PHLP4/zh+z+P8kf8zif1j+mMX/8Pwxi/8R+WMW/5/mj1n8f5Y/ZvE/Mn/M4n9U/pjF/+f5Yxb/o/PHLP6/yB+z+B+TP2bx/2X+mMX/2Pwxi/9x+WMW/1/lj1n8f50/ZvE/Pn/M4n9C/pjF/8T8MYv/b/LHLP4n5Y9Z/E/OH7P4n5I/ZvH/bf6Yxf93Pv+d3sidLP6/9/m/oSz+p+aPWfxPyx+z+P/B6f/Af7qDxf90p/9/zOJ/Rv6Yxf+P+WMW/zPzxyz+f8ofs/j/OX/M4v+X/DGL/1n5Yxb/v+aPWfzPzh+z+P8tf8zif07+mMX/3Pwxi/95+WMW/7/nj1n8/5E/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8f9n/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj/2ov9gMMb7P5r/YDy4zrL+H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WNDxhkMBgL/Z/LHLOv/2fwxi/9z+WMW/+fzxyz+L+SPSfzHHeSPWfyH5I9Z/MfKH7P4D80fs/gPyx+z+I+dP2bxHyd/zOI/bv6YxX94/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svxHNfxVlyz+k+ePWfzflj9m8X97/pjFf4r8MYv/O/LHLP5T5o9Z/KfKH7P4vzN/zOL/rvwxi/+788cs/u/JH7P4vzd/zOI/df6YxX+a/DGL/7T5Yxb/9+WPWfynyx+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL//vzxyz+M+ePWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8f9Y/pjFf678MYv/3PljFv958scs/vPmj1n8P54/ZvGfL3/M4v+J/DGL/yfzxyz+8+ePWfw/lT9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6Yxf/T+WMW/8/kj1n8l8ofs/h/Nn/M4r90/pjF/3P5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/5/PHLP4r549Z/FfJH7P4fyF/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvH/Yv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v+l/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/l/DGL/5b5Yxb/rfLHLP5b549Z/L+SP2bx3yZ/zOL/1fwxi/+2+WMW/+3yxyz+2+ePWfy/lj9m8f96/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/D/Rvi7D475k2ZvH/Rv6Yxf+b+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx/1b+mMX/2/ljFv/v5I9Z/Pcz+o/7n+9i8d/f6P8Gsvh/N3/M4v+9/DGL/wH5Yxb/7+ePWfwPzB+z+B+UP2bxPzh/zOL/g/wxi/8P88cs/j/KH7P4H5I/ZvE/NH/M4v/j/DGL/0/yxyz+h+WPWfwPzx+z+B+RP2bx/2n+mMX/Z/ljFv8j88cs/kflj1n8f54/ZvE/On/M4v+L/DGL/zH5Yxb/X+aPWfyPzR+z+B+XP2bx/1X+mMX/1/ljFv/j88cs/ifkj1n8T8wfs/j/Jn/M4n9S/pjF/+T8MYv/KfljFv/f5o9Z/H+XP2bx/33+mMX/1Pwxi/9p+WMW/z/kj1n8T88fs/ifkT9m8f9j/pjF/8z8MYv/n/LHLP5/zh+z+P8lf8zif1b+mMX/r/ljFv+z88cs/n/LH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/f+SPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/P+ZP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMR/+CB/zOI/JH/M4j9W/pjFf2j+mMV/WP6YxX/s/DGL/zj5Yxb/cfPHLP7D88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+L8tf8zi//b8MYv/FPljFv935I9Z/KfMH7P4T5U/ZvF/Z/6Yxf9d+WMW/3fnj1n835M/ZvF/b/6YxX/q/DGL/zT5Yxb/afPHLP7vyx+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/9+ePWfxnzh+z+H8gf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8zi/7H8MYv/XPljFv+588cs/vPkj1n8580fs/h/PH/M4j9f/pjF/xP5Yxb/T+aPWfznzx+z+H8qf8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/6dfz3+K51944X9haG/FLP6faf1jFv+l8scs/p/NH7P4L50/ZvH/XP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIHxvlP3RM918xf8yy/lfKH7P4fz5/zOK/cv6YxX+V/DGL/xfyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/L+aPWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5fyh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5fzh+z+G+ZP2bx3yp/zOK/df6Yxf8r+WMW/23yxyz+X80fs/hvmz9m8d8uf8ziv33+mMX/a/ljFv+v549Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8f9G/pjF/5v5Yxb/vfLHLP57549Z/PfJH7P475s/ZvH/Vv6Yxf/b+WMW/+/kj1n898sfs/jvnz9m8f9u/pjF/3v5Yxb/A/LHLP7fzx+z+B+YP2bxPyh/zOJ/cP6Yxf8H+WMW/x/mj1n8f5Q/ZvE/JH/M4n9o/pjF/8f5Yxb/n+SPWfwPyx+z+B+eP2bxPyJ/zOL/0/wxi//P8scs/kfmj1n8j8ofs/j/PH/M4n90/pjF/xf5Yxb/Y/LHLP6/zB+z+B+bP2bxPy5/zOL/q/wxi/+v88cs/sfnj1n8T8gfs/ifmD9m8f9N/pjF/6T8MYv/yfljFv9T8scs/r/NH7P4/y5/zOL/+/wxi/+p+WMW/9Pyxyz+f8gfs/ifnj9m8T8jf8zi/8f8MYv/mfljFv8/5Y9Z/P+cP2bx/0v+mMX/rPwxi/9f88cs/mfnj1n8/5Y/Nsb5j83+5+SPjXH+r7H+z80fs/iflz9m8f97/pjF/x/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv9/5o9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/4jG/7qixb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6YxH+8Qf6YxX9I/pjFf6z8MYv/0Pwxi/+w/DGL/9j5Yxb/cfLHLP7j5o9Z/Ifnj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf1v+mMX/7fljFv8p8scs/u/IH7P4T5k/ZvGfKn/M4v/O/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL/9T5Yxb/afLHLP7T5o9Z/N+XP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP7vzx+z+M+cP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf+xF/2kGg8EY7j9n/phl/X8sf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+H88fs/jPlz9m8f9E/pjF/5P5Yxb/+fPHLP6fyh+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v/p/DGL/2fyxyz+S+WPWfw/mz9m8V86f8zi/7n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/8/ljFv+V88cs/qvkj1n8v5A/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/h/MX/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8f9S/pjFf+P8MYv/JvljFv9N88cs/uPkj1n8N88fs/hvkT9m8f9y/pjFf8v8MYv/VvljFv+t88cs/l/JH7P4b5M/ZvH/av6YxX/b/DGL/3b5Yxb/7fPHLP5fyx+z+H89f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/zfyxyz+38wfs/jvlT825KwDHx91doz23zt/zLL+98kfs/jvmz9m8f9W/pjF/9v5Yxb/7+SPWfz3yx+z+O+fP2bx/27+mMX/e/ljFv8D8scs/t/PH7P4H5g/ZvE/KH/M4n9w/pjF/wf5Yxb/H+aPWfx/lD9m8T8kf8zif2j+mMX/x/ljFv+f5I9Z/A/LH7P4H54/ZvE/In/M4v/T/DGL/8/yxyz+R+aPWfyPyh+z+P88f8zif3T+mMX/F/ljFv9j8scs/r/MH7P4H5s/ZvE/Ln/M4v+r/DGL/6/zxyz+x+ePWfxPyB+z+J+YP2bx/03+mMX/pPwxi//J+WMW/1Pyxyz+v80fs/j/Ln/M4v/7/DGL/6n5Yxb/0/LHLP5/yB+z+J+eP2bxPyN/zOL/x/wxi/+Z+WMW/z/lj1n8/5w/ZvH/S/6Yxf+s/DGL/1/zxyz+Z+ePWfz/lj9m8T8nf8zif27+mMX/vPwxi//f88cs/v/IH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/j/M3/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGJ//iD/DGL/5D8MYv/WPljFv+h+WMW/2H5Yxb/sfPHLP7j5I9Z/MfNH7P4D88fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+E+WP2bxnzx/zOL/tvwxi//b88cs/lPkj1n835E/ZvGfMn/M4j9V/pjF/535Yxb/d+WPWfzfnT9m8X9P/pjF/735Yxb/qfPHLP7T5I9Z/KfNH7P4vy9/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/N+fP2bxnzl/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi//H8scs/nPlj1n8584fs/jPkz9m8Z83f8zi//H8MYv/fPljFv9P5I9Z/D+ZP2bxnz9/zOL/qfwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP6fzh+z+H8mf8ziv1T+mMX/s/ljFv+l88cs/p/LH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8P58/ZvFfOX/M4r9K/pjF/wv5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/F/PHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv8v5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8v549Z/LfMH7P4b5U/ZvHfOn/M4v+V/DGL/zb5Yxb/r+aPWfy3zR+z+G+XP2bx3z5/zOL/tfwxi//X88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/yxF/0XGPP9d8sfs6z/3fPHLP575I9Z/PfMH7P4fyN/zOL/zfwxi/9e+WMW/73zxyz+++SPWfz3zR+z+H8rf8zi/+38MYv/d/LHLP775Y9Z/PfPH7P4fzd/zOL/vfwxi/8B+WMW/+/nj1n8D8wfs/gflD9m8T84f8zi/4P8MYv/D/PHLP4/yh+z+B+SP2bxPzR/zOL/4/wxi/9P8scs/oflj1n8D88fs/gfkT9m8f9p/pjF/2f5Yxb/I/PHLP5H5Y9Z/H+eP2bxPzp/zOL/i/wxi/8x+WMW/1/mj1n8j80fs/gflz9m8R87f8zi/+v8MYv/8fljFv8T8scs/ifmj1n8f5M/ZvE/KX/M4n9y/pjF/5T8MYv/b/PHLP6/yx+z+P8+f8zif2r+mMX/tPwxi/8f8scs/qfnj1n8z8gfs/j/MX/M4n9m/pjF/0/5Yxb/P+ePjYn+w0adfaX/X/LHxkR/Wv9n5Y9Z/P+aP2bxPzt/zOL/t/wxi/85+WMW/3Pzxyz+5+WPWfz/nj9m8f9H/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/n/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/AeDof9+lcX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/LEx3X/NkWfHvz9/bEz3H9X4D+SPWfwfzB+z+D+UPzYm+4/7r2vHfzh/bEz2f+X6fyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8sck/hMM8scs/kPyxyz+Y+WPWfyH5o9Z/Iflj1n8x84fs/iPkz9m8R83f8ziPzx/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjFf/L8MYv/2/LHLP5vzx+z+E+RP2bxf0f+mMV/yvwxi/9U+WMW/3fmj1n835U/ZvF/d/6Yxf89+WMW//fmj1n8p84fs/hPkz9m8Z82f8zi/778MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8X9//pjFf+b8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP4fyx+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/8fzxyz+8+WPWfw/kT9m8f9k/pjFf/78MYv/p/LHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/On/M4v+Z/DGL/1L5Yxb/z+aPWfyXzh+z+H8uf8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/3z+mMV/5fwxi/8q+WMW/y/kj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+X8wfs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfy/lD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy/nD9m8d8yf8ziv1X+mMV/6/wxi/9X8scs/tvkj1n8v5o/ZvHfNn/M4r9d/tiY63/pC6/03z5/bMz1f/X6/1r+mMX/6/ljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfy/kT9m8f9m/pjFf6/8MYv/3vljFv998scs/vvmj1n8v5U/ZvH/dv6Yxf87+WMW//3yxyz+++ePWfy/mz9m8f9e/pjF/4D8MYv/9/PHLP4H5o9Z/A/KH7P4H5w/ZvH/Qf6Yxf+H+WMW/x/lj1n8D8kfs/gfmj9m8f9x/pjF/yf5Yxb/w/LHLP6H549Z/I/IH7P4/zR/zOL/s/wxi/+R+WMW/6Pyxyz+P88fs/gfnT9m8f9F/pjF/5j8MYv/L/PHLP7H5o9Z/I/LH7P4/yp/zOL/6/wxi//x+WMW/xPyxyz+J+aPWfx/kz9m8T8pf8zif3L+mMX/lPwxi/9v88cs/r/LH7P4/z5/zOJ/av6Yxf+0/LGX/AfDB4Mx2f8P+WOW9X96/pjF/4z8MYv/H/PHLP5n5o9Z/P+UP2bx/3P+mMX/L/ljFv+z8scs/n/NH7P4n50/ZvH/W/6Yxf+c/DGL/7n5Yxb/8/LHLP5/zx+z+P8jf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOL/z3/3b3MQ+V8eOGbxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8sdG+g8Gg53HbP9b88cs6/+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHJP4TDvLHLP5D8scs/mPlj1n8h+aPWfyH5Y9Z/Md+Df8rrhy65v/W0N6KWfzHaf1jFv9x88cs/sPzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf7/1s4i/4nzxyz+k+SPWfwnzR+z+E+WP2bxnzx/zOL/tvwxi//b88cs/lPkj1n835E/ZvGfMn/M4j9V/pjF/535Yxb/d+WPWfzfnT9m8X9P/pjF/735Yxb/qfPHLP7T5I9Z/KfNH7P4vy9/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/N+fP2bxnzl/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi//H8scs/nPlj1n8584fs/jPkz9m8Z83f8zi//H8MYv/fPljFv9P5I9Z/D+ZP2bxnz9/bMz0Hyn9Sv9P5Y+Nmf4je6X/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+n84fs/h/Jn/M4r9U/pjF/7P5Yxb/pfPHLP6fyx+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/D+fP2bxXzl/zOK/Sv6Yxf8L+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/xfzxyz+6+SPWfzXNfq/gS/Y4r+e0f8NZPFfP3/M4r9B/pjFf8P8MYv/RvljFv8v5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8v549Z/LfMH7P4b5U/ZvHfOn/M4v+V/DGL/zb5Yxb/r+aPWfy3zR+z+G+XP2bx3z5/zOL/tfwxi//X88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+H8jf8zi/838MYv/XvljFv+988cs/vvkj1n8980fs/h/K3/M4v/t/DGL/3fyxyz+++WPWfz3zx+z+H83f8zi/738MYv/AfljFv/v549Z/A/MH7P4H5Q/ZvE/OH/M4v+D/DGL/w/zxyz+P8ofs/gfkj9m8T80f8zi/+P8MYv/T/LHLP6H5Y9Z/A/PH7P4H5E/ZvH/af6Yxf9n+WMW/yPzxyz+R+WPWfx/nj9m8T86f8zi/4v8MYv/MfljFv9f5o9Z/I/NH7P4H5c/ZvH/Vf6Yxf/X+WMW/+Pzxyz+J+SPWfxPzB+z+P8mf8zif1L+mMX/5Pwxi/8p+WMW/9/mj1n8f5c/ZvH/ff6Yxf/U/DGL/2n5Yxb/P+SPWfxPzx+z+J+RP2bx/2P+mMX/zPwxi/+f8scs/n/OHxvNf7w3ezz/v3sN/7/kj1nW/1n5Yxb/v+aPWfzPzh+z+P8tf8zif07+mMX/3Pwxi/95+WMW/7/nj1n8/5E/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8f9n/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5YxL/iQb5Yxb/IfljFv+x8scs/kPzxyz+w/LHLP5j549Z/MfJH7P4j5s/ZvEfnj9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf9t+WMW/7fnj1n8p8gfs/i/I3/M4j9l/pjFf6r8MYv/O/PHLP7vyh+z+L87f8zi/578MYv/e/PHLP5T549Z/KfJH7P4T5s/ZvF/X/6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4vz9/zOI/c/6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/4/lj1n858ofs/jPnT9m8Z8nf8ziP2/+mMX/4/ljFv/58scs/p/IH7P4fzJ/zOI/f/6Yxf9T+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/D+dP2bx/0z+mMV/qfwxi/9n88cs/kvnj1n8P5c/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/h/Pn/M4r9y/pjFf5X8MYv/F/LHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv8v5o9Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/l/KH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/l/OH7P4b5k/ZvHfKn/M4r91/pjF/yv5Yxb/bfLHLP5fzR+z+G+bP2bx3y5/zOK/vdV/+OvfbPH/mtX/P2Tx/3r+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/b+SPWfy/mT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW/2/lj1n8v50/ZvH/Tv6YxX+//DGL//75Y2Oq//DR/L+bPzam+g9G8/9e/pjF/4D8MYv/9/PHLP4H5o9Z/A/KH7P4H5w/ZvH/Qf6Yxf+H+WMW/x/lj1n8D8kfs/gfmj9m8f9x/pjF/yf5Yxb/w/LHLP6H549Z/I/IH7P4/zR/zOL/s/wxi/+R+WMW/6Pyxyz+P88fs/gfnT9m8f9F/pjF/5j8MYv/L/PHLP7H5o9Z/I/LH7P4/yp/zOL/6/wxi//x+WMW/xPyxyz+J+aPWfx/kz9m8T8pf8zif3L+mMX/lPwxi/9v88cs/r/LH7P4/z5/zOJ/av6Yxf+0/DGL/x+U/sP/4z0s/qcr/f9zFv8z8scs/n/MH7P4n5k/ZvH/U/6Yxf/P+WMW/7/kj1n8z8ofs/j/NX/M4n92/pjF/2/5Yxb/c/LHLP7n5o9Z/M/LH7P4/z1/zOL/j/wxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/z/zxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+LzbtaJct/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjEf+JB/pjFf0j+mMV/rPwxi//Q/DGL/7D8MYv/2PljFv9x8scs/uPmj1n8h+ePWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvF/W/6Yxf/t+WMW/ynyxyz+78gfs/hPmT9m8Z8qf8zi/878MYv/u/LHLP7vzh+z+L8nf8zi/978MYv/1PljFv9p8scs/tPmj1n835c/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+Z8scs/u/PH7P4z/xq/xeG/q8P7K2Zxf8DrX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4v+x/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4fzx/zOI/X/6Yxf8TL/m3Ebwqi/8no8cs/vPnj1n8P5U/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/0/ljFv/P5I9Z/JfKH7P4fzZ/zOK/dP6Yxf9z+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/+fzxyz+K+ePWfxXyR+z+H8hf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bx/2L+mMV/nfwxi/+6+WMW//Xyxyz+6+ePDTnrwFUmGXl2jPbfIH/Msv43zB+z+G+UP2bx/1L+mMV/4/wxi/8m+WMW/03zxyz+m+n9d8JrLf6b6/05i/8W+WMW/y/nj1n8t8wfs/hvlT9m8d86f8zi/5X8MYv/NvljFv+v5o9Z/LfNH7P4b5c/ZvHfPn/M4v+1/DGL/9fzxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P4fyN/zOL/zfwxi/9e+WMW/73zxyz+++SPWfz3zR+z+H8rf8zi/+38MYv/d/LHLP775Y9Z/PfPH7P4fzd/zOL/vfwxi/8B+WMW/+/nj1n8D8wfs/gflD9m8T84f8zi/4P8MYv/D/PHLP4/yh+z+B+SP2bxPzR/zOL/4/wxi/9P8scs/oflj1n8D88fs/gfkT9m8f9p/pjF/2f5Yxb/I/PHLP5H5Y9Z/H+eP2bxPzp/zOL/i/wxi/8x+WMW/1/mj1n8j80fs/gflz9m8f9V/pjF/9f5Yxb/4/PHLP4n5I9Z/E/MH7P4/yZ/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+aPWfx/lz9m8f99/pjF/9T8MYv/afljFv8/qP3Hfc1bLP6nq/1fO4v/GfljFv8/5o9Z/M/MH7P4/yl/zOL/5/wxi/9f8scs/mflj1n8/5o/ZvE/O3/M4v+3/DGL/zn5Yxb/c/PHLP7n5Y9Z/P+eP2bx/0f+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6YxH/IYLBz/pDEf+LLW/+Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxif8kg/wxi/+Q/DGL/1j5Yxb/ofljFv9h/x879x+udV3fcfzmxwFEST+2qUsbDo25NiOR0aiFqCgef5wy0czfqEcgQeSHJJiKG63UselSN0s2tXTM2aqlTjfXr5UNy5qtEVurnOJaGGMOFpozdh04hzhnb8/V+bLv19b78fgDzn0f33fI83p531xcV/qHsvRv0z+Upf8w/UNZ+g/XP5Sl/wj9Q1n676Z/KEv/kfqHsvTfXf9Qlv576B/K0n+U/qEs/V+hfyhL/z31D2Xpv5f+oSz9i/6hLP331j+Upf8r9Q9l6f8z+oey9P9Z/UNZ+u+jfyhL/331D2Xpv5/+oSz9f07/UJb+r9I/lKX//vqHsvQ/QP9Qlv6v1j+Upf/P6x/K0n+0/qEs/Q/UP5Sl/y/oH8rSf4z+oSz9D9I/lKX/wfqHsvR/jf6hLP3H6h/K0v8X9Q9l6X+I/qEs/X9J/1CW/q/VP5Sl/y/rH8rS/1f0D2Xpf6j+oSz9X6d/KEv/cfqHsvR/vf6hLP0P0z+Upf94/UNZ+h+ufyhL/wn6h7L0/1X9Q1n6T9Q/lKX/G/QPZen/a/qHsvSfpH8oS/836h/K0v9N+oey9P91/UNZ+r9Z/1CW/pP1D2Xpf4T+oSz9p+gfytL/SP1DWfofpX8oS/+j9Q9l6T9V/1CW/sfoH8rS/1j9Q1n6T9M/lKX/cfqHsvRv1z+Upf/x+oey9D9B/1CW/ifqH8rS/yT9Q1n6d+gfytL/LfqHsvR/q/6hLP1P1j+Upf/b9A9l6X+K/qEs/afrH8rS/1T9Q1n6n6Z/KEv/t+sfytL/dP1DWfq/Q/9Qlv5n6B/K0v9M/UNZ+p+lfyhL/7P1D2Xpf47+oSz9z9U/lKX/efqHsvSfoX8oS//z9Q9l6X+B/qEs/S/UP5Slf6f+oSz9L9I/lKX/TP1DWfrP0j+Upf9s/UNZ+r9T/1CW/hfrH8rSf47+oSz95+ofytL/Ev1DWfrP0z+Upf+l+oey9J+vfyhL/wX6h7L0X6h/KEv/RfqHsvS/TP9Qlv6L9Q9l6f8u/UNZ+l+ufyhL/yX6h7L0X6p/KEv/K/QPZen/bv1DWfpfqX8oS/+r9A9l6X+1/qEs/ZfpH8rS/xr9Q1n6/4b+oSz9f1P/UJb+y/UPZen/Hv1DWfr/lv6hLP3fq38oS//36R/K0v9a/UNZ+l+nfyhL/+v1D2Xp/9v6h7L0X6F/KEv/39E/lKX/7+ofytL/Bv1DWfrfqH8oS//f0z+Upf/79Q9l6X+T/qEs/W/WP5Sl/y36h7L0/339Q1n6/4H+oSz9b9U/lKX/B/QPZen/Qf1DWfrfpn8oS/+V+oey9P9D/UNZ+v+R/qEs/W/XP5Sl/x36h7L0v1P/UJb+H9I/lKX/h/UPZel/V9/+oxv+df2EytL/bvsPZen/x/qHsvRfpX8oS/8/0T+Upf89+oey9P9T/UNZ+t+rfyhL/4/oH8rS/8/0D2Xp/1H9Q1n6f0z/UJb+H9c/lKX/n+sfytL/E/qHsvS/T/9Qlv736x/K0v8B/UNZ+v+F/qEs/R/UP5Sl/0P6h7L0/0v9Q1n6/5X+oSz9H9Y/lKX/X+sfytL/k/qHsvT/lP6hLP0/rX8oS//P6B/K0v+z+oey9P8b/UNZ+n9O/1CW/p/XP5Sl/yP6h7L0/4L+oSz9/1b/UJb+q/UPZen/qP6hLP2/qH8oS/8v6R/K0v8x/UNZ+n9Z/1CW/l/RP5Sl/9/pH8rS/3H9Q1n6f1X/UJb+f69/KEv/r+kfytL/H/QPZem/Rv9Qlv5f1z+Upf9a/UNZ+v+j/qEs/f9J/1CW/t/QP5Sl/z/rH8rS/5v6h7L0/5b+oSz9v61/KEv/J/QPZen/L/qHsvR/Uv9Qlv5P6R/K0n+d/qEs/Z/WP5Sl/7/qH8rS/zv6h7L0/zf9Q1n6f1f/UJb+6/UPZen/jP6hLP2/p38oS/8N+oey9P93/UNZ+m/UP5Sl/3/oH8rS/1n9Q1n6/6f+oSz9N+kfytJ/s/6hLP3/S/9Qlv7f1z+Upf8W/UNZ+j+nfyhL/+f1D2Xp/wP9Q1n6v6B/KEv//9Y/lKX/i/qHsvT/of6hLP236h9K0n+vlv6hLP0H6R/K0n+w/qEs/YfoH8rSf6j+oSz92/QPZek/TP9Qlv7D9Q9l6T9C/1CW/rvpH8rSf6T+oSz9d9c/lKX/HvqHsvQfpX8oS/9X6B/K0n9P/UM/df0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+0ixcsvTiGXPmdC7whS984YsdX7zc/2UCAAD+r/3oQ//L/SsBAAAAAAAAAAAAAAAAAACAvJr4vxN7uf8dAQAAAAAAAAAAAADg/7v2jiM3DBnU66khOz949WOd236esOX0WXfd9UDp+bn72ycELzl45wdbt27duvLZyVO7Hw5vtVpd/2t7dT8e0fe46/WXjb5tv+2PypTP3fLEOdNHnbjg/huHfn3l9R3PtG17tq113kWz53S+fnCrVY5ua13e9eCwQa1WObatdUPXg/FdD6a1tVZ1PTh824PdWp/uevC6C+bNubDrieMq/57BT4v2jmWtIb0W2+r1X4Od979s9JOzen7u5yV7Xm1oq3v/Y+7/4r59vtfjJfbf8/rlyL77H/C/IPCSBrb/59f2/NzPS/6v9/8Prd6yNPreS++/5/XLUfYP9Qk+//faaN/P/X0+/x8YvOSO+yNGrL6pa//tp95zQPdTQ3+cz/8/ev1ydN/9D+71+b/rc/zUns//w1utcswu/nZAKu0d12zo7/2///0PfVWfm0E77//OL6/bo2v/d7/QWt79VNsA9z+1v/f/a/v8WoGBae+4Y2uf9/8B7L81NnjJHftff/+obZ//1917wT47fW8g+z+m7/7HLZp76biFS5YeOnvujJmdMzsvmTR+4mETJk2aOHHctk8E23/cxd8USGLX3v9bI/vcDGq1OnfcP3LP9VO79r/xoeUf7n5qxAD3f2y/7/8Hev+H0JjBrWHDWpfPWLRowWHbf+x5OH77j9v/sWD/A/jz/0GHdP9jPX9nOKjV2m/H/dhzJg3v2v8V88uD3U8NG+D+p/W7/ym9/64SGJhdfP+/sM9Nr/0fsf6qxV37P/j7e6/rfmqgf/4/rt/93+79H3ZFe0er1jfRrv0fPvya46tdl3Z//wf1aWL/ozfdsLnadTne/qE+Tex/+oo3nV/tupxg/1CfJvb/wNxzV1S7LifaP9Snif2/+MrN+1e7LifZP9Snif0//p2n76p2XTrsH+rTxP4/cGvH4dWuy1vsH+rTxP4Pvey5ydWuy1vtH+rTxP4v2v2UVdWuy8n2D/VpYv/Hbz1qn2rX5W32D/VpYv+DrvnusmrX5RT7h/o0sf+nZqyYV+26TLd/qE8T+181euzz1a7LqfYP9Wli/8ufecO0atflNPuH+jSx/6/cfNvj1a7L2+0f6tPE/j9+1t63Vbsup9s/1KeJ/f9gzEMjq12Xd9g/1KeJ/a9Zs+q+atflDPuH+jSx/5Wrhoypdl3OtH+oTxP7v/q4mY9Vuy5n2T/Up4n9T5j4pTOrXZez7R/q08T+9/vsN5+udl3OsX+oTxP7P+XhxQurXZdz7R/q08T+F+//sR9Wuy7n2T/Up4n9v7lz/1nVrssM+4f6NLH/cuPINdWuy/n2D/VpYv9nbLxjSrXrcoH9Q32a2P+De37+o9Wuy4X2D/VpYv+b5l8yqdp16bR/qE8T+//2e65+b7XrcpH9Q32a2P9NL3ytVLsuM+0f6tPE/tePP+Osatdllv1DfZrY/x0nPvtotesy2/6hPk3sf8WDTyyqdl3eaf9Qnyb2/8gjJzxZ7bpcbP9Qnyb2f/DYcaN6P/vcj3ld5tg/1KeJ/c87ffkHq12XufYP9Wli/0ffe/Nrql2XS+wf6tPE/kd8dfInql2XefYP9Wli/5+a/L5PVrsul9o/1KeJ/W+ectAh1a7LfPuH+jSx/7X3jb+l2nVZYP9Qnyb2//5Hb614XRbaP9Snif3Pf+2LG6tdl0X2D/VpYv9vnH7akmrX5TL7h/o0sf99bp/2hWrXZbH9Q32a2P/Z3/reydWuy7vsH+rTxP4P2vf8A6pdl8vtH+rTxP5nzV59XbXrssT+oT5N7H/qyrUTql2XpfYP9Wli/3s+tfDOatflCvuH+jSx/w1D9j2p2nV5t/1DfZrY/91XPvyNatflSvuH+jSx/+uu/Uhntetylf1DfZrY/2e2DNtU7bpcbf8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwPO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjztw6idwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAD//wY56ho=") setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') 2.267372807s ago: executing program 2 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 2.148189944s ago: executing program 0 (id=157): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x1) 2.147763394s ago: executing program 1 (id=158): r0 = fsopen(&(0x7f00000004c0)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b 1 [ 60.285288][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.296064][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.304242][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.313101][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.321934][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.324739][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.330123][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.337219][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.344810][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.357832][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.367493][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.375674][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.376481][ T5764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.384264][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.403107][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.406548][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.411291][ T5764] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.426161][ T5764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.433617][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.440954][ T5764] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.448206][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.456033][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.457331][ T5764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.803966][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 60.956128][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 60.982548][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.990748][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.999055][ T5765] bridge_slave_0: entered allmulticast mode [ 61.007083][ T5765] bridge_slave_0: entered promiscuous mode [ 61.041088][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.048653][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.057765][ T5765] bridge_slave_1: entered allmulticast mode [ 61.064469][ T5765] bridge_slave_1: entered promiscuous mode [ 61.100855][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 61.140858][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.150114][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 61.168528][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.175749][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.183180][ T5770] bridge_slave_0: entered allmulticast mode [ 61.190277][ T5770] bridge_slave_0: entered promiscuous mode [ 61.197907][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.204975][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.212397][ T5770] bridge_slave_1: entered allmulticast mode [ 61.219130][ T5770] bridge_slave_1: entered promiscuous mode [ 61.227663][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.293363][ T5765] team0: Port device team_slave_0 added [ 61.301590][ T5765] team0: Port device team_slave_1 added [ 61.360295][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.405185][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.412436][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.419954][ T5761] bridge_slave_0: entered allmulticast mode [ 61.426919][ T5761] bridge_slave_0: entered promiscuous mode [ 61.438646][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.448583][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.455517][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.481701][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.493473][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.500836][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.508392][ T5763] bridge_slave_0: entered allmulticast mode [ 61.515757][ T5763] bridge_slave_0: entered promiscuous mode [ 61.522900][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.530444][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.537916][ T5761] bridge_slave_1: entered allmulticast mode [ 61.544563][ T5761] bridge_slave_1: entered promiscuous mode [ 61.561584][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.568706][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.594868][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.606121][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.613232][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.620811][ T5763] bridge_slave_1: entered allmulticast mode [ 61.628128][ T5763] bridge_slave_1: entered promiscuous mode [ 61.677968][ T5770] team0: Port device team_slave_0 added [ 61.687878][ T5770] team0: Port device team_slave_1 added [ 61.696437][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.738186][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.751902][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.772841][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.782624][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.790021][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.816125][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.866830][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.873816][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.899885][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.937571][ T5765] hsr_slave_0: entered promiscuous mode [ 61.944231][ T5765] hsr_slave_1: entered promiscuous mode [ 61.953867][ T5761] team0: Port device team_slave_0 added [ 61.963270][ T5763] team0: Port device team_slave_0 added [ 61.991942][ T5761] team0: Port device team_slave_1 added [ 61.999204][ T5763] team0: Port device team_slave_1 added [ 62.008794][ T5770] hsr_slave_0: entered promiscuous mode [ 62.015129][ T5770] hsr_slave_1: entered promiscuous mode [ 62.022068][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.029999][ T5770] Cannot create hsr debugfs directory [ 62.111626][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.118854][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.144987][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.188759][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.195978][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.222213][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.234889][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.241963][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.268770][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.280667][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.287879][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.315320][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.412409][ T5761] hsr_slave_0: entered promiscuous mode [ 62.418787][ T5761] hsr_slave_1: entered promiscuous mode [ 62.424813][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.433322][ T5761] Cannot create hsr debugfs directory [ 62.466655][ T5768] Bluetooth: hci2: command tx timeout [ 62.484636][ T5763] hsr_slave_0: entered promiscuous mode [ 62.492782][ T5763] hsr_slave_1: entered promiscuous mode [ 62.499513][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.507166][ T5763] Cannot create hsr debugfs directory [ 62.546313][ T5768] Bluetooth: hci0: command tx timeout [ 62.552010][ T5768] Bluetooth: hci3: command tx timeout [ 62.558132][ T5775] Bluetooth: hci1: command tx timeout [ 62.713487][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.738747][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.750495][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.781741][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.864486][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.874463][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.892553][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.904590][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.970640][ T5761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.989791][ T5761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.008254][ T5761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.020695][ T5761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.118394][ T5763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.141821][ T5763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.169027][ T5763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.179491][ T5763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.279852][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.303662][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.313571][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.364730][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.382406][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.401767][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.413640][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.421033][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.440419][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.462424][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.469590][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.481721][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.488858][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.501696][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.508819][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.541251][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.548439][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.580480][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.587657][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.605559][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.639843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.647001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.683856][ T5765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.695021][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.724181][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.731309][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.126154][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.151738][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.294284][ T5765] veth0_vlan: entered promiscuous mode [ 64.322907][ T5761] veth0_vlan: entered promiscuous mode [ 64.341081][ T5765] veth1_vlan: entered promiscuous mode [ 64.354385][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.396627][ T5761] veth1_vlan: entered promiscuous mode [ 64.403576][ T5765] veth0_macvtap: entered promiscuous mode [ 64.414777][ T5765] veth1_macvtap: entered promiscuous mode [ 64.448658][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.472259][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.488816][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.528490][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.538846][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.548264][ T5768] Bluetooth: hci2: command tx timeout [ 64.555935][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.564678][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.583504][ T5770] veth0_vlan: entered promiscuous mode [ 64.590518][ T5761] veth0_macvtap: entered promiscuous mode [ 64.606053][ T5761] veth1_macvtap: entered promiscuous mode [ 64.626043][ T5768] Bluetooth: hci0: command tx timeout [ 64.626388][ T5775] Bluetooth: hci3: command tx timeout [ 64.631935][ T5764] Bluetooth: hci1: command tx timeout [ 64.639400][ T5770] veth1_vlan: entered promiscuous mode [ 64.690992][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.702558][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.714725][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.756312][ T5763] veth0_vlan: entered promiscuous mode [ 64.772846][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.784636][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.798517][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.813476][ T5761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.822424][ T5761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.831684][ T5761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.840607][ T5761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.893637][ T5763] veth1_vlan: entered promiscuous mode [ 64.900152][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.911407][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.921018][ T5770] veth0_macvtap: entered promiscuous mode [ 64.946878][ T5770] veth1_macvtap: entered promiscuous mode [ 65.021038][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.038168][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.062434][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.078535][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.088570][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.099048][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.111372][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.125226][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.135914][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.139013][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.143919][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.158393][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.176800][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.188907][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.221611][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.236235][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.245068][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.254037][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.268867][ T5763] veth0_macvtap: entered promiscuous mode [ 65.314042][ T5763] veth1_macvtap: entered promiscuous mode [ 65.333021][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.377919][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.455325][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.467812][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.479326][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.490130][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.500560][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.513335][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.526318][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.537245][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.562956][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.581664][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.593444][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.603987][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.614774][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.627145][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.678907][ T5763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.716343][ T5763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.725097][ T5763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.760281][ T5763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.867116][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.892496][ T5857] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure [ 65.902464][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.949858][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.974789][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.029848][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 66.049595][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.089146][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.143095][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.176460][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.256358][ T5863] binder: 5860:5863 ioctl c018620c 200000000240 returned -22 [ 66.456449][ T5867] syz.1.12[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.485380][ T5868] loop3: detected capacity change from 0 to 512 [ 66.519039][ T5868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.551541][ T5868] EXT4-fs (loop3): filesystem is read-only [ 66.571863][ T5868] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 66.630808][ T5764] Bluetooth: hci2: command tx timeout [ 66.639160][ T5868] EXT4-fs (loop3): filesystem is read-only [ 66.645035][ T5868] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.706139][ T5768] Bluetooth: hci0: command tx timeout [ 66.707255][ T5775] Bluetooth: hci3: command tx timeout [ 66.711822][ T5764] Bluetooth: hci1: command tx timeout [ 66.756102][ T5868] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #16: comm syz.3.4: iget: bad i_size value: 648518346341360424 [ 66.798831][ T5868] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.4: couldn't read orphan inode 16 (err -117) [ 66.851783][ T5868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.971526][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.091169][ T5867] loop1: detected capacity change from 0 to 32768 [ 67.150472][ T5880] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 67.174365][ T5867] (syz.1.12,5867,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 67.247148][ T5867] (syz.1.12,5867,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 67.372536][ T5867] JBD2: Ignoring recovery information on journal [ 67.592432][ T5867] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 67.888657][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 67.918523][ T5761] ocfs2: Unmounting device (7,1) on (node local) [ 68.236456][ T5898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.262974][ T5887] loop2: detected capacity change from 0 to 40427 [ 68.302294][ T5887] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 68.314668][ T5887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 68.366349][ T5887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.504693][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 68.540287][ T5887] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.549545][ T5887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.592041][ T5892] loop0: detected capacity change from 0 to 32768 [ 68.655550][ T5892] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 68.706255][ T5764] Bluetooth: hci2: command tx timeout [ 68.786376][ T5764] Bluetooth: hci3: command tx timeout [ 68.786446][ T5775] Bluetooth: hci1: command tx timeout [ 68.791832][ T5764] Bluetooth: hci0: command tx timeout [ 68.850598][ T5892] XFS (loop0): Ending clean mount [ 68.915179][ T5765] syz-executor: attempt to access beyond end of device [ 68.915179][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.982405][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 69.093027][ T5770] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 69.396707][ T5751] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.606153][ T5751] usb 4-1: Using ep0 maxpacket: 16 [ 69.638336][ T5751] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 69.656040][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.698055][ T5751] usb 4-1: config 0 descriptor?? [ 70.150854][ T5751] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 70.169676][ T5751] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 70.186144][ T5751] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 70.203517][ T5751] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 70.215676][ T5751] saitek 0003:06A3:0CCD.0001: unknown main item tag 0x0 [ 70.254647][ T5929] loop1: detected capacity change from 0 to 32768 [ 70.256587][ T5751] saitek 0003:06A3:0CCD.0001: hidraw0: USB HID v0.83 Device [HID 06a3:0ccd] on usb-dummy_hcd.3-1/input0 [ 70.296039][ T5933] loop0: detected capacity change from 0 to 32768 [ 70.303163][ T5929] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.34 (5929) [ 70.361633][ T5931] loop2: detected capacity change from 0 to 32768 [ 70.366377][ T5751] usb 4-1: USB disconnect, device number 2 [ 70.420918][ T5936] fido_id[5936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 70.434415][ T5933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.35 (5933) [ 70.510438][ T5931] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 70.517138][ T5933] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.531906][ T5929] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 70.550768][ T5933] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 70.566733][ T5933] BTRFS info (device loop0): force clearing of disk cache [ 70.573932][ T5933] BTRFS info (device loop0): enabling auto defrag [ 70.581219][ T5929] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 70.581387][ T5933] BTRFS info (device loop0): max_inline at 0 [ 70.598180][ T5933] BTRFS info (device loop0): enabling disk space caching [ 70.605428][ T5933] BTRFS info (device loop0): disk space caching is enabled [ 70.623743][ T5929] BTRFS info (device loop1): using free space tree [ 70.819170][ T5933] BTRFS info (device loop0): enabling ssd optimizations [ 70.846599][ T5929] BTRFS info (device loop1): enabling ssd optimizations [ 70.851209][ T5931] XFS (loop2): Ending clean mount [ 70.874777][ T5933] BTRFS info (device loop0): rebuilding free space tree [ 70.875884][ T5929] BTRFS info (device loop1): auto enabling async discard [ 70.917987][ T5931] XFS (loop2): Quotacheck needed: Please wait. [ 71.080185][ T5933] BTRFS info (device loop0): disabling free space tree [ 71.095340][ T5931] XFS (loop2): Quotacheck: Done. [ 71.129125][ T5933] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.166120][ T5933] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.198767][ T5761] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.219249][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 71.591769][ T5770] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.675299][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.693210][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.331903][ T6000] loop0: detected capacity change from 0 to 1024 [ 72.772835][ T5983] loop3: detected capacity change from 0 to 40427 [ 72.803432][ T5983] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 72.820665][ T5983] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.830570][ T1140] hfsplus: b-tree write err: -5, ino 4 [ 72.881239][ T5983] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.985974][ T27] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 73.054663][ T5983] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.085359][ T5983] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.133890][ T6014] loop0: detected capacity change from 0 to 1024 [ 73.170581][ T6014] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 73.187832][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.206035][ T6014] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 73.220029][ T27] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 73.231951][ T6014] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.243108][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.265186][ T6014] EXT4-fs error (device loop0): ext4_get_journal_inode:5816: inode #5: comm syz.0.49: unexpected bad inode w/o EXT4_IGET_BAD [ 73.283427][ T27] usb 2-1: config 0 descriptor?? [ 73.291896][ T5763] syz-executor: attempt to access beyond end of device [ 73.291896][ T5763] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.304039][ T6014] EXT4-fs (loop0): no journal found [ 73.311362][ T6014] EXT4-fs (loop0): can't get journal size [ 73.324374][ T5763] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 73.353750][ T6014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.602969][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.836445][ T27] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 74.002730][ T27] usb 2-1: USB disconnect, device number 2 [ 74.076422][ T5828] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.165721][ T6023] loop0: detected capacity change from 0 to 32768 [ 74.185465][ T6023] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.54 (6023) [ 74.222395][ T6023] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 74.234719][ T6023] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 74.249243][ T6023] BTRFS info (device loop0): turning on sync discard [ 74.256896][ T6023] BTRFS info (device loop0): turning on async discard [ 74.264478][ T6023] BTRFS info (device loop0): using free space tree [ 74.282693][ T5828] usb 4-1: config 0 has an invalid interface number: 19 but max is 0 [ 74.292008][ T5828] usb 4-1: config 0 has no interface number 0 [ 74.318521][ T5828] usb 4-1: config 0 interface 19 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.358269][ T5828] usb 4-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.375977][ T6023] BTRFS info (device loop0): enabling ssd optimizations [ 74.400902][ T5828] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 74.427237][ T5828] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 74.435277][ T5828] usb 4-1: Manufacturer: syz [ 74.464713][ T5828] usb 4-1: config 0 descriptor?? [ 74.567320][ T5770] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 74.737020][ T6021] comedi comedi0: reset error (fatal) [ 74.920897][ T5828] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 74.936194][ T6049] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 74.969449][ T6051] loop0: detected capacity change from 0 to 2048 [ 75.003642][ T6051] ======================================================= [ 75.003642][ T6051] WARNING: The mand mount option has been deprecated and [ 75.003642][ T6051] and is ignored by this kernel. Remove the mand [ 75.003642][ T6051] option from the mount to silence this warning. [ 75.003642][ T6051] ======================================================= [ 75.080239][ T6051] NILFS (loop0): couldn't find nilfs on the device [ 75.108957][ T8] usb 4-1: USB disconnect, device number 3 [ 75.118873][ T6053] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.120671][ T5752] udevd[5752]: incorrect nilfs2 checksum on /dev/loop0 [ 75.170892][ T5764] Bluetooth: hci0: unexpected cc 0x2027 length: 5 > 1 [ 75.593841][ T6069] loop1: detected capacity change from 0 to 128 [ 75.623042][ T6069] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.657503][ T6069] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.844488][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.075726][ T5828] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.271977][ T5828] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.283437][ T5828] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.298222][ T5828] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.325655][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.345759][ T5828] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 76.361023][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.391674][ T5828] usb 4-1: config 0 descriptor?? [ 76.557100][ T6092] loop2: detected capacity change from 0 to 256 [ 76.609448][ T6092] FAT-fs (loop2): Directory bread(block 64) failed [ 76.628825][ T6092] FAT-fs (loop2): Directory bread(block 65) failed [ 76.638676][ T6088] loop0: detected capacity change from 0 to 32768 [ 76.647689][ T6092] FAT-fs (loop2): Directory bread(block 66) failed [ 76.656642][ T6092] FAT-fs (loop2): Directory bread(block 67) failed [ 76.660779][ T6088] (syz.0.75,6088,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.663323][ T6092] FAT-fs (loop2): Directory bread(block 68) failed [ 76.682620][ T6088] (syz.0.75,6088,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.700350][ T6092] FAT-fs (loop2): Directory bread(block 69) failed [ 76.736077][ T6092] FAT-fs (loop2): Directory bread(block 70) failed [ 76.741686][ T6088] JBD2: Ignoring recovery information on journal [ 76.745558][ T6092] FAT-fs (loop2): Directory bread(block 71) failed [ 76.756756][ T6092] FAT-fs (loop2): Directory bread(block 72) failed [ 76.763377][ T6092] FAT-fs (loop2): Directory bread(block 73) failed [ 76.821928][ T5828] magicmouse 0003:05AC:0265.0004: unknown main item tag 0x0 [ 76.840418][ T5828] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 76.860802][ T5828] magicmouse 0003:05AC:0265.0004: magicmouse input not registered [ 76.878306][ T5828] magicmouse: probe of 0003:05AC:0265.0004 failed with error -12 [ 76.882180][ T6088] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 77.021107][ T5828] usb 4-1: USB disconnect, device number 4 [ 77.035136][ T6097] loop1: detected capacity change from 0 to 256 [ 77.069655][ T6097] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.098977][ T6095] fido_id[6095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 77.211469][ T6099] loop2: detected capacity change from 0 to 136 [ 77.264474][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 77.292738][ T6099] Attempt to read inode for relocated directory [ 77.580398][ T6105] loop2: detected capacity change from 0 to 256 [ 77.632495][ T6105] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 78.494784][ T6113] loop2: detected capacity change from 0 to 32768 [ 78.585731][ T5828] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.642294][ T6115] loop1: detected capacity change from 0 to 32768 [ 78.688692][ T6115] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.807082][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 78.816959][ T5828] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 78.825177][ T5828] usb 1-1: config 0 has no interface number 0 [ 78.846178][ T5828] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 78.877488][ T5828] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 78.890030][ T6115] XFS (loop1): Ending clean mount [ 78.895689][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.903716][ T5828] usb 1-1: Product: syz [ 78.911827][ T5828] usb 1-1: Manufacturer: syz [ 78.917894][ T5828] usb 1-1: SerialNumber: syz [ 78.923814][ T6115] XFS (loop1): Quotacheck needed: Please wait. [ 78.936505][ T5828] usb 1-1: config 0 descriptor?? [ 78.949406][ T6119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.042037][ T6115] XFS (loop1): Quotacheck: Done. [ 79.201061][ T6119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.209502][ T5761] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.293949][ T6138] loop3: detected capacity change from 0 to 1024 [ 79.392725][ T6138] hfsplus: bad catalog entry type [ 79.679197][ T5828] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 79.711253][ T5828] asix: probe of 1-1:0.188 failed with error -71 [ 79.734866][ T5828] usb 1-1: USB disconnect, device number 2 [ 79.866629][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.066755][ T23] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 80.087189][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.108211][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.132023][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.142691][ T6156] loop3: detected capacity change from 0 to 4096 [ 80.151066][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.176829][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.192891][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.204504][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.221535][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.235446][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.238533][ T6156] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 80.254744][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.264766][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.289322][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.294486][ T6156] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 80.318254][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.347695][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.369218][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.380855][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.409102][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.432597][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.449046][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.462628][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.489123][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.497890][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.517932][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.552535][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.575886][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 80.599275][ T23] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 80.623584][ T23] usb 3-1: Product: syz [ 80.646936][ T23] usb 3-1: Manufacturer: syz [ 80.651610][ T23] usb 3-1: SerialNumber: syz [ 80.676444][ T23] usb 3-1: config 0 descriptor?? [ 80.712726][ T23] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 80.833518][ T6164] loop3: detected capacity change from 0 to 1024 [ 80.897174][ T6166] loop0: detected capacity change from 0 to 1024 [ 80.924016][ T27] usb 3-1: USB disconnect, device number 2 [ 80.936833][ T6164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.939318][ T27] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 80.965917][ T6164] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.106: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 80.992700][ T6164] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1794: Corrupt filesystem [ 80.993366][ T6166] hfsplus: small file entry [ 81.133158][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.385923][ T28] audit: type=1326 audit(1769647233.565:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b0759aeb9 code=0x0 [ 81.913619][ T9] cfg80211: failed to load regulatory.db [ 82.067565][ T6212] netlink: 80 bytes leftover after parsing attributes in process `syz.2.127'. [ 82.077260][ T6212] netlink: 56 bytes leftover after parsing attributes in process `syz.2.127'. [ 82.389277][ T6223] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.398509][ T6223] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.407660][ T6223] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.416453][ T6223] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.721354][ T6231] loop2: detected capacity change from 0 to 4096 [ 83.158407][ T6226] loop0: detected capacity change from 0 to 32768 [ 83.325737][ T5828] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.525308][ T6235] loop1: detected capacity change from 0 to 32768 [ 83.536263][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 83.550500][ T5828] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 83.562456][ T5828] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 83.576645][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.591964][ T5828] usb 3-1: Product: syz [ 83.599046][ T5828] usb 3-1: Manufacturer: syz [ 83.603674][ T5828] usb 3-1: SerialNumber: syz [ 83.613457][ T5828] usb 3-1: config 0 descriptor?? [ 83.634440][ T5828] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 83.648795][ T5828] usb 3-1: setting power ON [ 83.653996][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 83.696060][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.716929][ T5828] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 83.736881][ T5828] usb 3-1: media controller created [ 83.812397][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.839491][ T6238] dvb-usb: bulk message failed: -22 (3/0) [ 83.875175][ T6238] cxusb: i2c wr: len=80 is too big! [ 83.875175][ T6238] [ 83.916968][ T5828] usb 3-1: selecting invalid altsetting 6 [ 83.922917][ T5828] usb 3-1: digital interface selection failed (-22) [ 83.939385][ T5828] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 83.950310][ T5828] usb 3-1: setting power OFF [ 83.955384][ T5828] dvb-usb: bulk message failed: -22 (2/0) [ 83.973906][ T5828] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 83.985056][ T5828] (NULL device *): no alternate interface [ 83.993317][ T6245] loop0: detected capacity change from 0 to 4096 [ 84.043658][ T6245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.045007][ T5828] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 84.086235][ T5828] usb 3-1: USB disconnect, device number 3 [ 84.136742][ T6245] EXT4-fs error (device loop0): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.0.142: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 84.162354][ T6245] EXT4-fs error (device loop0): ext4_get_first_dir_block:3606: inode #12: comm syz.0.142: directory missing '..' [ 84.199412][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.424588][ T6253] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 84.673535][ T6261] loop1: detected capacity change from 0 to 4096 [ 84.683378][ T6261] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 84.686599][ T6263] loop2: detected capacity change from 0 to 2048 [ 84.723048][ T6263] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.742904][ T6263] NILFS (loop2): mounting unchecked fs [ 84.758215][ T5756] udevd[5756]: incorrect nilfs2 checksum on /dev/loop2 [ 84.773798][ T6261] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 84.830211][ T6263] NILFS (loop2): recovery complete [ 84.849047][ T6264] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.940851][ T6261] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 85.002996][ T5761] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 85.309749][ T6276] ipvlan2: entered promiscuous mode [ 85.337762][ T6276] bridge0: port 3(ipvlan2) entered blocking state [ 85.354584][ T6276] bridge0: port 3(ipvlan2) entered disabled state [ 85.366000][ T6276] ipvlan2: entered allmulticast mode [ 85.381781][ T6276] bridge0: entered allmulticast mode [ 85.394656][ T6276] ipvlan2: left allmulticast mode [ 85.405860][ T6276] bridge0: left allmulticast mode [ 85.585991][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 85.591110][ T6286] loop1: detected capacity change from 0 to 64 [ 85.594849][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 85.595132][ T6284] netlink: 'syz.0.160': attribute type 14 has an invalid length. [ 85.635858][ T6284] netlink: 'syz.0.160': attribute type 13 has an invalid length. [ 85.774648][ T6270] loop3: detected capacity change from 0 to 32768 [ 85.783157][ T6270] XFS: noikeep mount option is deprecated. [ 85.827491][ T5764] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 85.837017][ T5764] Bluetooth: hci3: Injecting HCI hardware error event [ 85.845407][ T5768] Bluetooth: hci3: hardware error 0x00 [ 85.872721][ T6270] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 85.917245][ T6270] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.983534][ T6303] loop0: detected capacity change from 0 to 64 [ 86.038995][ T6303] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 86.104275][ T6270] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 86.178001][ T6270] XFS (loop3): Starting recovery (logdev: internal) [ 86.251809][ T6270] XFS (loop3): Ending recovery (logdev: internal) [ 86.267094][ T6302] loop1: detected capacity change from 0 to 8192 [ 86.318161][ T6302] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.400310][ T6302] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 86.463778][ T6302] REISERFS (device loop1): using ordered data mode [ 86.491254][ T6302] reiserfs: using flush barriers [ 86.525124][ T6302] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.528062][ T5828] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x44b/0x650, xfs_bnobt block 0x8 [ 86.601362][ T5828] XFS (loop3): Unmount and run xfs_repair [ 86.607206][ T6302] REISERFS (device loop1): checking transaction log (loop1) [ 86.624129][ T5828] XFS (loop3): xfs_inactive_ifree: xfs_ifree returned error -117 [ 86.633406][ T6302] REISERFS (device loop1): Using r5 hash to sort names [ 86.665567][ T5763] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.683828][ T5828] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1d7/0x390 (fs/xfs/xfs_inode.c:1633). Shutting down filesystem. [ 86.699041][ T6302] reiserfs: enabling write barrier flush mode [ 86.722445][ T5828] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 86.817993][ T6302] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 86.888477][ T6302] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 86.938677][ T6302] REISERFS (device loop1): Remounting filesystem read-only [ 86.956005][ T6302] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 87.011327][ T6302] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 87.075047][ T6302] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 87.112381][ T6302] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 87.135638][ T6308] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 87.153331][ T6302] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 87.171402][ T6308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 87.196190][ T6302] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 87.215746][ T6308] F2FS-fs (loop2): invalid crc value [ 87.221271][ T6302] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 87.255871][ T6302] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 87.278917][ T6308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.405966][ T6308] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 87.413317][ T6308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.423318][ T5761] ------------[ cut here ]------------ [ 87.429392][ T5761] kernel BUG at fs/reiserfs/journal.c:1916! [ 87.474303][ T5761] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 87.480436][ T5761] CPU: 1 PID: 5761 Comm: syz-executor Not tainted syzkaller #0 [ 87.487991][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.498236][ T5761] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 87.504065][ T5761] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 e0 b5 ff e9 f9 fc ff ff e8 2a b9 5d ff <0f> 0b e8 23 b9 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 87.523690][ T5761] RSP: 0000:ffffc9000487fb00 EFLAGS: 00010293 [ 87.529777][ T5761] RAX: ffffffff822959f6 RBX: 1ffff9200090ff64 RCX: ffff88807afdbc00 [ 87.537768][ T5761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.545752][ T5761] RBP: ffffc9000487fbf8 R08: ffffc9000487fb77 R09: 0000000000000000 [ 87.553734][ T5761] R10: ffffc9000487fb40 R11: fffff5200090ff6f R12: ffffc9000cd99000 [ 87.561897][ T5761] R13: dffffc0000000000 R14: ffff88805d9b6630 R15: 0000000000000000 [ 87.569891][ T5761] FS: 00005555807f3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 87.578835][ T5761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.585433][ T5761] CR2: 0000001b34f23ffc CR3: 000000006121d000 CR4: 00000000003506e0 [ 87.593421][ T5761] Call Trace: [ 87.596715][ T5761] [ 87.599648][ T5761] ? journal_release+0x30/0x30 [ 87.604437][ T5761] journal_release+0x1f/0x30 [ 87.609041][ T5761] reiserfs_put_super+0x26b/0x510 [ 87.614076][ T5761] ? hook_inode_free_security+0xb0/0xb0 [ 87.619633][ T5761] ? evict_inodes+0x63c/0x6a0 [ 87.624317][ T5761] ? reiserfs_dirty_inode+0x270/0x270 [ 87.629700][ T5761] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 87.635351][ T5761] ? reiserfs_dirty_inode+0x270/0x270 [ 87.640737][ T5761] generic_shutdown_super+0x134/0x2b0 [ 87.646123][ T5761] kill_block_super+0x44/0x90 [ 87.650816][ T5761] deactivate_locked_super+0x97/0x100 [ 87.652189][ T6314] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 87.656191][ T5761] cleanup_mnt+0x43b/0x4d0 [ 87.656217][ T5761] task_work_run+0x1d4/0x260 [ 87.656238][ T5761] ? task_work_cancel+0x220/0x220 [ 87.656257][ T5761] ? exit_to_user_mode_loop+0x3b/0x110 [ 87.656277][ T5761] exit_to_user_mode_loop+0xe6/0x110 [ 87.656297][ T5761] exit_to_user_mode_prepare+0xee/0x180 [ 87.656317][ T5761] syscall_exit_to_user_mode+0x1a/0x50 [ 87.656334][ T5761] do_syscall_64+0x61/0xa0 [ 87.656351][ T5761] ? clear_bhb_loop+0x40/0x90 [ 87.656367][ T5761] ? clear_bhb_loop+0x40/0x90 [ 87.669784][ T6314] F2FS-fs (loop3): invalid crc value [ 87.673641][ T5761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.725395][ T5761] RIP: 0033:0x7fb869d9c117 [ 87.729826][ T5761] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 87.749451][ T5761] RSP: 002b:00007ffd47aa88e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.757906][ T5761] RAX: 0000000000000000 RBX: 00007fb869e0471f RCX: 00007fb869d9c117 [ 87.765897][ T5761] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd47aa89a0 [ 87.773970][ T5761] RBP: 00007ffd47aa89a0 R08: 00007ffd47aa99a0 R09: 00000000ffffffff [ 87.781957][ T5761] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd47aa9a30 [ 87.789943][ T5761] R13: 00007fb869e0471f R14: 0000000000015509 R15: 00007ffd47aa9a70 [ 87.797940][ T5761] [ 87.800971][ T5761] Modules linked in: [ 87.810659][ T5761] ---[ end trace 0000000000000000 ]--- [ 87.811904][ T6314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.816494][ T5761] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 87.828852][ T5761] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 e0 b5 ff e9 f9 fc ff ff e8 2a b9 5d ff <0f> 0b e8 23 b9 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 87.828940][ T5765] syz-executor: attempt to access beyond end of device [ 87.828940][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.848643][ T5761] RSP: 0000:ffffc9000487fb00 EFLAGS: 00010293 [ 87.848664][ T5761] RAX: ffffffff822959f6 RBX: 1ffff9200090ff64 RCX: ffff88807afdbc00 [ 87.848674][ T5761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.848683][ T5761] RBP: ffffc9000487fbf8 R08: ffffc9000487fb77 R09: 0000000000000000 [ 87.848693][ T5761] R10: ffffc9000487fb40 R11: fffff5200090ff6f R12: ffffc9000cd99000 [ 87.848705][ T5761] R13: dffffc0000000000 R14: ffff88805d9b6630 R15: 0000000000000000 [ 87.848715][ T5761] FS: 00005555807f3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 87.848729][ T5761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.848740][ T5761] CR2: 0000001b34f23ffc CR3: 000000006121d000 CR4: 00000000003506e0 [ 87.848757][ T5761] Kernel panic - not syncing: Fatal exception [ 87.849210][ T5761] Kernel Offset: disabled