last executing test programs:

4m8.186247295s ago: executing program 2 (id=40):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000140)={0x20, 0x3, 0x0, 0x0, 0xbc})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="9b000000010000000000000000800000000000006958c0e906a72d1cdcea7d615ddee3d2d72af99e04bbe9fac3eca226da2b3051ee4f158326fb638f9e8c434e206714976a2aed7b9382aa0266a0e18a6b123af1a799b8c41fe51fdeacc937c00eb3ab5efa83e41ef8fb29d8655b1aa6e87c34d0049dfa706d1733fc25943f47c5290f2d3c019a11e222d42f654c9feaeb59627bc280ccf8cd169cd9f25a7fc74c41c4840e8f8a068e0641867265840f1962976954f0e0a04718b45aac2480364dd257d858", @ANYBLOB="000200"/20, @ANYRES32, @ANYBLOB='\x00'/20], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x200)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}})
ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000280)={0x0, 0x1, 0x7, '\x00', 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000071120f000000000095aa000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)

4m5.269588326s ago: executing program 2 (id=44):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
splice(r1, &(0x7f0000000380)=0x24000000, 0xffffffffffffffff, &(0x7f00000003c0)=0xcf00, 0x2, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000740)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r5})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000)

4m2.82536076s ago: executing program 2 (id=47):
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd)
epoll_create(0x47f)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0))
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x3, 0x2, 0x4})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000100)={0x3, r4, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000140))
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={<r5=>0xffffffffffffffff, 0x3})
close_range(r5, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)

3m53.255563728s ago: executing program 2 (id=61):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x14018, &(0x7f0000000180)=ANY=[@ANYBLOB="6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303034302c747970653da78688282c756d61736b3d30303030303030303030303030303030303130303030312c6e6c733d63703835372c756d61736b3d30303030303030303030303030303030303030303031b12c6465636f6d706f73652c6372652d746f723d8e4d91372c6e6f626172726965722c00"], 0x1, 0x6a5, &(0x7f0000000a40)="$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")
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
getdents64(r0, 0x0, 0x22)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x2013, r6, 0x0)
ioctl$BLKRRPART(r6, 0x125f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1a, 0xb, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b12f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@gid}, {@gid}, {@barrier}, {@nobarrier}]}, 0x1, 0x5e1, &(0x7f0000002480)="$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")
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

3m49.25374721s ago: executing program 2 (id=67):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x39, 0xd, 0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x68}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5903, &(0x7f0000010b40)="$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")
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='./file1\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
syz_usbip_server_init(0x1)
chdir(&(0x7f0000000240)='./file1\x00')
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f00000002c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
unlink(&(0x7f0000000580)='./file1\x00')

3m44.726396539s ago: executing program 2 (id=73):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff000000000004000004000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r2 = fsopen(&(0x7f0000000140)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x04', 0x0, r2)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x5, 0x2e3, &(0x7f0000000280)="$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")
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
pwrite64(r3, &(0x7f00000000c0)="97", 0x1, 0x0)
copy_file_range(r3, 0x0, r3, &(0x7f0000000080)=0x32, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setstatus(r5, 0x4, 0x4400)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x6000004, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8a080, 0x0)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nouid32}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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")
mount$nfs(&(0x7f00000000c0)='/.//', &(0x7f0000000300)='./file0\x00', 0x0, 0x2009000, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

3m29.607946104s ago: executing program 32 (id=73):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff000000000004000004000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r2 = fsopen(&(0x7f0000000140)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x04', 0x0, r2)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x5, 0x2e3, &(0x7f0000000280)="$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")
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
pwrite64(r3, &(0x7f00000000c0)="97", 0x1, 0x0)
copy_file_range(r3, 0x0, r3, &(0x7f0000000080)=0x32, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setstatus(r5, 0x4, 0x4400)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x6000004, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8a080, 0x0)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nouid32}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnoiYj4ihNCL9JMkraTRz6fK58Upl6mKeH5k9/+7IzKXLT589P35m6szUhbGTJ08cH33u2bFnOhJn1qYbhz6YPnzwlbeuvjZx6urbP3ydtffeI/Xjy+PolMEs8D+qNc3HHut0ZV32T3UpzqTc7dawVqWIyLqrrzb++6MUS53XHy9/3NXGAVsqu2fvbH94vgrcwZLodguA7ii+6LPfv8XrNk09toXrL9R/AGVx38xf9SPlSPMyfVtY/2BEnJr/+4vsFU3rENUW6wYAAJv1bTb/eWrl/K+2N7KsXJLvDQ1ExF0RsT8i7o6IAxFxT172voi4f531N28NrZx/ptc2GNqaZPO/5/O9rcb5XzH7i4FSnvt/Lf6+5PTZytSxiNgXEUPRtzPLj7Y6eXGKl37+rF39y+d/2Surv5gL5ie5Vm5aoJscnx3v1KT0+kcRh8qt4k8WdwKyvj8YEYfWd+p9ReLsE18dblfo1vGvogP7TNUvIx6v9/98NMVfSFbfnxzZFZWpYyPFVbHSjz9deb1d/ZuKvwOy/t/deP03lej/M1m+Xzuz/jqu/Ppp29+U5Q1e/zuSN2t71jvy994fn529OBqxI3m1lm94f2zps0W+KJ/FP3S09fjfn38mi/+BiMgu4iMR8WBEPJT33cMR8UhEHF0l/u9ffPSddse2Q/9Ptrz/LV7/A439v/5E6dx337Srf233vxO11FD+Tu3+dwvtm7MrL7HRqxkAAAD+e9KI2BtJOryYTtPh4frfyx+I3Wllemb2ydPT712YrD8jMBB9abHS1b9sPXQ0mc/PWM+P5WvFxfHj+brx56X/1fLDE9OVyS7HDr1uT5vxn/mt1O3WAVvO81rQu5rHf9qldgC3n+9/6F3GP/Qu4x96V6vx/2FT3l4A3Jl8/0PvMv6hdxn/0LuMf+hJm3muf6sS5VWe3pfYLolIt0UzJFokyh0Y3V2+MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTIvwEAAP//r5fyaQ==")
mount$nfs(&(0x7f00000000c0)='/.//', &(0x7f0000000300)='./file0\x00', 0x0, 0x2009000, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

5.839972218s ago: executing program 3 (id=895):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

5.38444013s ago: executing program 3 (id=899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x94, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x76, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x1}}, 0x0, @default, 0x2, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x7}}, @void, @val={0x5, 0x4, {0x0, 0x0, 0x0, 'L'}}, @val={0x25, 0x3, {0x0, 0xb6}}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x2, 0x4, 0x0, {0x1fc, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c782, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x1, 0xd, 0x41}}, @void}}]}, 0x94}}, 0x0)

5.212288561s ago: executing program 5 (id=901):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)

5.169181663s ago: executing program 3 (id=902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030426bd70000000000000007400", @ANYRES32=r2, @ANYBLOB="00800000abeeb5e11c0012800b00010062726964676500000c00028008000200c1"], 0x3c}}, 0x800)

4.887982156s ago: executing program 3 (id=904):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd800000001a4824030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.767315275s ago: executing program 1 (id=906):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000740), &(0x7f0000000440)=@udp=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f0000000340)}, 0x20)

3.76213033s ago: executing program 5 (id=907):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x4)

3.468046769s ago: executing program 1 (id=909):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fefffe340000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

3.332565619s ago: executing program 0 (id=910):
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0xffdf)
ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000000))

2.593384021s ago: executing program 1 (id=911):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfd, 0x985a, &(0x7f0000009740)="$eJzs3QW8pWWheP8zwwBDSSiCBUiJSUqI0qmIkqKEIC0dIiBdSqigCKiggIJId3eDNEh3d3f+PwMD4rhA7v9378XLWuvjzK737PPs57uf17PnPey91HyLzTUwMM7AG715+o/O3eP25RYfa6H1j9ttyHX77LzwQ8OvHuWNk3HnGH465/DTuQYGBgYNv59Bb1w3ZLZjjxs8MGRg2P/+0ZijjT54zIGB0YdfHH4/AzO9cTLGgW9u99oI8UAnGfbtdnrjz+uNNexOhp1ZZvlX1h4YGBj6tq8fNq5p/uWBSltqzvnn+4fVW26Dh9886B+3vX465I0/Y+w/MDDGvgPv/PwYtu3Ib/va/82Gfc9xJhtY4vb34Xv/n2upOedfcAT/YWtxpOHXzTRsjY+4Bo2N+DzfebE1Hhg+hYOGT9yQt62X9+N5//+rpeacb6GBd17HAwvPu/n9r72+3xwyz8DAkHkHBobMNzAwZP7326P+e3pfn3xVVVX1vjTnXNMPe80+eISfB4a++XMt/Vx44cvT3j0wMGThN14nDln+zdeCVVVVVVVVVfWf2ZxzTT83vP4f591e/09yynbj9vq/qqqqqqqq6v9OC8451/TDXuuP8Pp/wnd7/f/4g4cd8Mbv/s8x0xtf9er7+yCqqqqqqqqq6l2bb0F8/T/Ju73+v/jYSS7r9X9VVVVVVVXV/50WnX6+uQfe9j57w6+e6s3b6fX/affduuz7Nd6qqqqqqqqq+q/36iMnn/6P93yfaGCE93t/veH/LjDoyDOvuOJ9G+h/RoP+9d9Dtnq/x/T/2jDnoQdPMjCw9hLv91Dqfej/zHvV1/9I+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uHc4/v/W+/+fdvSKb34W/GemmP76k//xla9/9v+QhRd8ZOv3aejvRx/U4/8Dqw8aGBjuO87qAwMDC8+56OJTDQwMnHz99FNMPvDWbTMPu23W8UZ6/QPi3/zPROYdl+94q0nfOB32RBn4yFv3ceTr97/ga/uNNGiEQbytcY8/4IDVlnpuhhFPp3znxzH4rXNjHffgm/8ty+ARNhr6Dl/85v2/+VhGdB4+9qmGjX3qDddad+oNNtn0i6uvtcKqK6+68tqzTDfjtDPMMsuMM069yuprrjzNG3+/05xN8vrfc7+XORtzxDl7ZM63z9mIj+2d5mySd5+z1+9x94uGzv7mnA35L87Z3O8+Z5OsPvwbjTvHyAPLvz43gwYGxp1n5IGNh12YdtSBgXHnHb7thMO2/ep4gwcGdv3HAx12btS3noODthq2zVLzLTbXG7upgYF/nP6jd/g8+1GGj3yO4adzDj+d641vM87AP56KQ2Y79rjBw+bin6ZjzNFGHzzmwMDowy8Ov5+BWd44Gf2UN7d7h89ZH2Ggr7/Nyk5v/Hm9sQYGBsYYdmaiFU7bftjU/y98Tvv/r////xevmQe99XwcNPzP8G3e8Jpz/gX/8b1en4ZhczfS8OtmGmby3/zR9v/Uv4x3kqEDk7zLeN/lfXFej55fa548/jb/Xe+LQ+Od8F3G+y7v4/uO413y7r0eeOOu/tvGO8K+bqHX/57jvezrBt59XzcS3cHKl35qxH3dN955iP+0u3xzjkYdYaN32tdNuPfEWw27/znefV+30LCxj/xP+7rBAwPjzv3mvm7Yjm++kQd2HXZhumEX5h954KBhF6Z//cJoA2cOu/ClFddZc6VhVyzwr8+DqQb90y9owjqbb4R1Nuhtj33QCL/fOeSN0zH2f/MznN5hvzlo+MP6t/sKet6O8y7jfZfPn8J5HnbdSkcNHf+/6/OnaLxD33287/R52e843l2ePe32/+bxvrXORn7bdC3wXtbZJP+8zoY9xJHetjLe689hK8H2b5yf8K1722iLB9/6mWLkEe733/1MscC7r7NxVh/h63bcd2DQu83N/O9lbj75L/ugrd8+N+/1562pJnvj9pHeZW5GnWW5Kd+cm1H+i3Mz/391buYYGOmf52bIwLwDAwOTD98/zPde5mbCd5+b9/q8GR22f+P8ym9dNc/OB5//5tyMOBf/bm7m+6/OzSRvPW8mf/22SQcPjDLKwMYrbLjh+tO+8febF6d74+93X4PzvJe5HOe/Zy4/PuSd5vIfT9Ux775s/3+zBv9ln/7m/c/zX53LgbfmcmD1ERdL/afWv/+5y99d/u7yd5e/u/zd5S/uHY7/v/X+/3uOM+tuw/9xY+TLJp5gh/d7vO9zH+jj/8N9/+n4/w4TTHzZ4IG3bnvX47NvbPMfeXx2pjdOxjjwze1GPD7IA33n47P7zjLTdv9Lx2f/f/XmWn0P/w7X/t9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7h2O/0/z5u8B3DftIk8OPxA68kPbLr3I+z3e97kP9PH/4b7/dPx/kaW3fWjwwFu3vevx/ze2cRz/v/Ol+Xb5Tz7+/+Za7fh//Zvyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9x73D8f443fw/gsMP22vTN3we4ZtydTn6/x/s+90E9/t/n/3tr/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIXN/z4/8AIH2/57Z4XGBz//7/dO/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+38kfs/gvlT9m8f9u/pjF/3v5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/fv6YxX/5/DGL/wr5Yxb/H+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V9+IvfIJY/Fdz8v7bLP6r549Z/H+YP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/0f5Yxb/jfLHLP4/zh+z+G+cP2bx3yR/zOK/af6Yxf8n+WMW/83yxyz+m+ePWfy3yB+z+G+Z/1uN9LbzFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9P88cs/j/LH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/z/PHLP6/yB+z+P8yf8ziv2v+mMV/t/wxi/+v8scs/r/OH7P4754/ZvH/Tf6YxX+P/DGL/575Yxb/vfLHLP6/fU/+r/2PDes/NYv/71r/mMX/9/ljFv+988cs/vvkj1n8/5A/ZvH/Y/6YxX/f/DGL/375Yxb//fPHLP5/yh+z+P85f8zif0D+mMX/wPwxi/+gQflTFv+DWv+Yxf+v+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP5/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/pvB/bXjv36j+Y1P4DwwMXNv6xyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj0n8Bw3kj1n8B+WPWfwH549Z/EfKH7P4D8kfs/iPnD9m8R8lf8ziP2r+mMV/aP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4fyh/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fzh+z+H8kf8ziP37+mMX/o/ljFv8J8scs/hPmj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfKH/M4j9x/pjFf5L8MYv/p/PHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjF/zP5Yxb/qfLHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H85f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X8kfs/jPmj9m8f9q/pjF/2v5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f96/pjF/xv5Yxb/hfLHLP7fzB+z+C+cP2bx/1b+mMX/2/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/O/ljFv+l8scs/t/NH7P4fy9/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7fzx+z+C+fP2bxXyF/zOL/g/wxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf+H+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/H+UP2bx3yh/zOL/4/wxi//G+WMW/03yxyz+m+aPWfx/kj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/0/zxyz+P8sfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi//P88cs/r/IH7P4/zJ/zOK/a/6YxX+3/DGL/6/yxyz+v84fs/jvnj9m8f9N/pjFf4/8MYv/nvljFv+98scs/r/NH7P4/y5/zOL/+/wxi//e+WMW/33yxyz+f8gfs/j/MX/M4r9v/pjFf7/8MYv//vljFv8/5Y9Z/P+cP2bxPyB/zOJ/YP6Yxf8v/+x/7//6uP5Ds/gf1PrHLP5/zR+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8sQ+c/0jsf3z+2AfO/x3W/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mfp/UfBay3+Z+v9OYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxif/r5f+vSfwHXZI/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8f97/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/18/m/69Z/Aflj1n8B+ePWfxHyh+z+A/JH7P4j5w/ZvEfJX/M4j9q/pjFf2j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+H8of8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H84fs/h/JH/M4j9+/pjF/6P5Yxb/CfLHLP4T5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyh/zOI/cf6YxX+S/DGL/6fzxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOI/5XvyH+l/blz/oVn8P9P6xyz+U+WPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf+r8MYv/NPljg87dY+SBgYEPvP+0+WOW9T9d/pjFf/r8MYv/DPljFv8v549Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/WfPHLP5fzR+z+H8tf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fzx+z+H8jf8ziv1D+mMX/m/ljFv+F88cs/t/KH7P4fzt/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4fyd/zOK/VP6Yxf+7+WMW/+/lj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/+/ljFv/l88cs/ivkj1n8f5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/j/MH/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/+P8scs/hvlj1n8f5w/ZvHfOH/M4r9J/pjFf9P8MYv/T/LHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9p/pjF/2f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ef6Yxf8X+WMW/1/mj1n8d80fs/jvlj9m8f9V/pjF/9f5Yxb/3fPHLP6/yR+z+O+RP2bx3zN/zOK/V/6Yxf+3+WMW/9/lj1n8f58/ZvHfO3/M4r9P/pjF/w/5Yxb/P+aPWfz3zR+z+O+XP2bx3z9/zOL/p/wxi/+f88cs/gfkj1n8D8wfs/j/JX/M4n9Q/pjF/6/5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/n/LH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lcN9x/8fo3rPzSL/9Wtf8zif03+mMX/7/ljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/EcayB+z+A/KH7P4D84fs/iPlD9m8R+SP2bxHzl/zOI/Sv6YxX/U/DGL/9D8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8f9Q/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8P5w/ZvH/SP6YxX/8/DGL/0fzxyz+E+SPWfwnzB+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP1H+mMV/4vwxi/8k+WMW/0/nj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9n8scs/lPlj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/cv6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+SP2bxnzV/zOL/1fwxi//X8scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/9fwxi/838scs/gvlj1n8v5k/ZvFfOH/M4v+t/DGL/7fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/3fyxyz+S+WPWfy/mz9m8f9e/pjFf+n8MYv/MvljFv9l88cs/svlj1n8v58/ZvFfPn/M4r9C/pjF/wf5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/D/PHLP5r5I9Z/NfMH7P4r5U/NqL/JO/3gP5fewf/tfPHLOt/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx/1H+mMV/o/wxi/+P88cs/hvnj1n8N8kfs/hvmj9m8f9J/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+P80fs/j/LH/M4r9j/pjFf6f8MYv/zvljFv9d8scs/j/PH7P4/yJ/zOL/y/wxi/+u+WMW/93yxyz+v8ofs/j/On/M4r97/pjF/zf5Yxb/PfLHLP575o9Z/PfKH7P4/zZ/zOL/u/wxi//v88cs/nvnj1n898kfs/j/IX/M4v/H/DGL/775Yxb//fLHLP77549Z/P+UP2bx/3P+mMX/gPwxi/+B+WMW/7/kj1n8D8ofs/j/NX/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/b/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+2DD/9QT+V+WPWdb/1fljFv9r8scs/n/PH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/TOI/ZCB/zOI/KH/M4j84f8ziP1L+mMV/SP6YxX/k/DGL/yj5Yxb/UfPHLP5D88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMX/Q/ljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9w/pjF/yP5Yxb/8fPHLP4fzR+z+E+QP2bxnzB/zOL/sfwxi//H88cs/p/IH7P4fzJ/zOL/qfwxi/9E+WMfYP9R3u4/cf7YB9j/n9b/JPljb/q/NvYH2//T+WOW9T9p/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8P5M/ZvGfKn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/5fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/lfwxi/+s+WMW/6/mj1n8v5Y/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/6/nj1n8v5E/ZvFfKH/M4v/N/DGL/8L5Yxb/b+WPWfy/nT9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfy/kz9m8V8qf8zi/938MYv/9/LHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4v/9/DGL//L5Yxb/FfLHLP4/yB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/H+YP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/0f5Yxb/jfLHLP4/zh+z+G+cP2bx3yR/zOK/af6Yxf8n+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/zR/zOL/s/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+P88f8zi/4v8MYv/L/PHLP675o9Z/HfLH7P4/yp/zOL/6/wxi//u+WMW/9/kj1n898gfs/jvmT9m8d8rf8zi/9v8MYv/7/LHLP6/zx+z+O+dP2bx3yd/zOL/h/wxi/8f88cs/vvmj1n898sfs/jvnz9m8f9T/pjF/8/5Yxb/A/LHLP4H5o9Z/P+SP2bxPyh/zOL/1/wxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/v+WPWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4/z1/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxif/IA/ljFv9B+WMW/8H5Yxb/kfLHLP5D8scs/iPnj1n8R8kfs/iPmj9m8R+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP4fyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/4fzxyz+H8kf+wD6v/baa1u+fvbt/uPnj30A/XH9fzR/zOI/Qf6YxX/C/DGL/8fyxyz+H88fs/h/In/M4v/J/DGL/6fyxyz+E+WPWfwnzh+z+E+SP2bx/3T+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+H8mf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8v549Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/WfPHLP5fzR+z+H8tf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fzx+z+H8jf8ziv1D+mMX/m/ljFv+F88cs/t/KH7P4fzt/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4fyd/zOK/VP6Yxf+7+WMW/+/lj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/+/ljFv/l88cs/ivkj1n8f5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/j/MH/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv4HSf7d/u4XFf0Ol/7/P4v+j/DGL/0b5Yxb/H+ePWfw3zh+z+G+SP2bx3zR/zOL/k/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/H+aP2bx/1n+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx/nj9m8f9F/pjF/5f5Yxb/XfPHLP675Y9Z/H+VP2bx/3X+mMV/9/wxi/9v8scs/nvkj1n898wfs/jvlT9m8f9t/pjF/3f5Yxb/3+ePWfz3zh+z+O+TP2bx/0P+mMX/j/ljFv9988cs/vvlj1n8988fs/j/KX/M4v/n/DGL/wH5Yxb/A/PHLP5/yR+z+B+UP2bx/2v+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/9+0/kPf9VaL/yVa/3fP4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zi//f8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHJP6jDOSPWfwH5Y9Z/Afnj1n8R8ofs/gPyR+z+I+cP2bxHyV/zOI/av6YxX9o/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/h/KH/M4j92/pjFf5z8MYv/uPljFv/x8scs/h/OH7P4fyR/zOI/fv6Yxf+j+WMW/wnyxyz+E+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z8of8ziP3H+mMV/kvwxi/+n88cs/pPmj1n8J8t/WKOOeIXFf/L8MYv/FPljFv8p88cs/p/JH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/L+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMV/1vwxi/9X88cs/l/LH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi//X88cs/t/IH7P4L5Q/ZvH/Zv6YxX9hqf+W/+Z2i/+3pP7/Lov/t/PHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/d/LHLP5L5Y9Z/L+bP2bx/17+mMV/aZH/ZmO/920/oP6DRrAeZRmR/3+lD6j/6719/S+bP2bxXy5/zOL//fwxi//y+WMW/xXyxyz+P8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mD9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf9H+WMW/43yxyz+P84fs/hvnD9m8d8kf8ziv2n+mMX/J/ljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yJ+afSmJ/0/zxyzr/2f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ef6Yxf8X+WMW/1/mj1n8d80fs/jvlj9m8f9V/pjF/9f5Yxb/3fPHLP6/yR+z+O+RP2bx3zN/zOK/V/6Yxf+3+WMW/9/lj1n8f58/ZvHfO3/M4r9P/pjF/w/5Yxb/P+aPWfz3zR+z+O+XP2bx3z9/zOL/p/wxi/+f88cs/gfkj1n8D8wfs/j/JX/M4n9Q/pjF/6/5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/n/LH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8f97/pjF/9r8sbf7Hzzog+t/Xf6YZf1fnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+Q+MBtdZ/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf0ziP+pA/pjFf1D+mMV/cP6YxX+k/DGL/5D8MYv/yPljFv9R8scs/qPmj1n8h+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/4fyxyz+Y+ePWfzHyR+z+I+b//CG/tMli/94+WMW/w/nj1n8P5I/ZvEfP3/M4v/R/DGL/wT5Yxb/CfPHLP4fyx+z+H88f8zi/4n8MYv/J/PHLP6fyh+z+E+UP2bxnzh/zOI/Sf6Yxf/T+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOL/mfwxi/9U+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5w/ZvGfMX/M4j9T/tgH3n+O18+OOnP+2Afe/41GnSV/zOL/lfwxi/+s+WMW/6/mj1n8v5Y/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/6/nj1n8v5E/ZvFfKH/M4v/N/DGL/8L5Yxb/b+WPWfy/nT9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfy/kz9m8V8qf8zi/938MYv/9/LHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4v/9/DGL//L5Yxb/FfLHLP4/yB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/H+YP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/0f5Yxb/jfLHLP4/zh+z+G+cP2bx3yR/zOK/af6Yxf8n+WMW/83yxyz+m78X/0FD/gcH9p+ZxX+L1j9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3R/+eERb/HdLGLP4/zR+z+P8sf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+P88fs/j/In/M4v/L/DGL/675Yxb/3fLHLP6/yh+z+P86f8ziv3v+mMX/N/ljFv898scs/nvmj1n898ofs/j/Nn/M4v+7/DGL/+/zxyz+e+ePWfz3yR+z+P8hf8zi/8f8MYv/vvljFv/98scs/vvnj1n8/5Q/ZvH/c/6Yxf+A/DGL/4H5Yxb/v+SPWfwPyh+z+P81f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf9v+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP5/zx+z+F+bP2bxv87o/9qW/3YTi//1Rv/3kMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/++LLvl8j+o/O4n9H6x+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHJP5DB/LHLP6D8scs/oPzxyz+I+WPWfyH5I9Z/EfOH7P4j5I/ZvEfNX/M4j80f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfw/lD9m8R87f8ziP07+mMV/3Pwxi/94+WMW/w/nj1n8P5I/ZvEfP3/M4v/R/DGL/wT5Yxb/CfPHLP4fyx+z+H88f8zi/4n8MYv/J/PHLP6fyh+z+E+UP2bxnzh/zOI/Sf6Yxf/Tev+R8FqL/6R6f87iP1n+mMV/8vwxi/8U+WMW/ynzxyz+n8kfs/hPlT9m8f9s/pjF/3P5Yx90/63eODv08/ljH3T/4Q39Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+b/V238TzOL/5fwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H8lf8ziP2v+mMX/q/ljFv+v5Y9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/6/ljFv9v5I9Z/BfKH7P4fzN/zOK/cP6Yxf9b+WMW/2/nj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/+/kj1n8l8ofs/h/N3/M4v+9/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4fz9/zOK/fP6YxX+F/DGL/w/yxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/H+aPWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/Uf6YxX+j/DGL/4/zxyz+G+ePWfw3yR+z+G+aP2bx/0n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP4/zR+z+P8sf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+P88fs/j/In/M4v/L/DGL/675Yxb/3fLHLP6/yh+z+P86f8ziv3v+mMX/N/ljFv898scs/nvmj1n898ofs/j/Nn/M4v+7/DGL/+/zxyz+e+ePWfz3yR+z+P8hf8zi/8f8MYv/vvljFv/98scs/vvnj1n8/5Q/ZvH/c/6Yxf+A/DGL/4H5Yxb/v+SPWfwPyh+z+P81f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf9v+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP5/zx+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfwz9R/7fG9d/aBb/x1v/mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX9M4j/aQP6YxX9Q/pjFf3D+b2/iN89Y/EfKH7P4D8kfs/iPnD9m8R8lf8ziP2r+mMV/aP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4fyh/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fzh+z+H8kf8ziP37+mMX/o/ljFv8J8scs/hOq/Ed9z1ta/D+m8n/vWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnyh+z+E+cP2bxnyR/zOL/6fwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bx/0z+mMV/qvwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/OH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/V/LHLP6z5o9Z/L+aP2bx/1r+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+eP2bx/0b+mMV/ofwxi/8388cs/gvnj1n8v5U/ZvH/dv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Tv7YB9l/3l3funa0pfLHPsj+b1//380fs/h/L3/M4r90/pjFf5n8MYv/svljFv/l8scs/t/PH7P4L58/ZvFfIX/M4v+D/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/4f5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8f5Q/ZvHfKH/M4v/j/DGL/8b5Yxb/TfLHLP6b5o9Z/H+SP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/T/PHLP4/yx+z+O+YP2bx3yl/zOK/8+D8KYv/Lq1/zOL/8/wxi/8v8scs/r/MH7P475o/ZvHfLX/M4v+r/DGL/6/zxyz+u+ePWfx/kz9m8d8jf8ziv2f+mMV/r/wxi/9v88cs/r/LH7P4/z5/zOK/d/6YxX+f/DGL/x/yxyz+f8wfs/jvmz9m8d8vf8ziv3/+mMX/T/ljFv8/549Z/A/IH7P4H5g/ZvH/S/6Yxf+g/DGL/1/zxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/P+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4v/3/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyT+ow/kj1n8B+WPWfwH549Z/EfKH7P4D8kfs/iPnD9m8R8lf8ziP2r+mMV/aP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4fyh/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fzh+z+H8kf8ziP37+mMX/o/ljFv8J8scs/hPmj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfKH/M4j9x/pjFf5L8MYv/p/PHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjF/zP5Yxb/qfLHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H85f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X8kfs/jPmj9m8f9q/pjF/2v5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f96/pjF/xv5Yxb/hfLHLP7fzB+z+C+cP2bx/1b+mMX/2/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/O/ljFv+l/p3/KP/D4/oPzeL/3dY/ZvH/Xv6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+fP2bxXz5/zOK/Qv6Yxf8H+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/w/zxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4/yh/zOK/Uf6Yxf/H+WMW/43zxyz+m+SPWfw3zR+z+P8kf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/n+aPWfx/lj9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/5/nj1n8f5E/ZvH/Zf6YxX/X/DGL/275Yxb/X+WPWfx/nT9m8d89f8zi/5v8MYv/HvljFv8988cs/nvlj1n8f5s/ZvH/Xf6Yxf/3+WMW/73zxyz+++SPWfz/kD9m8f9j/pjFf9/8MYv/fvljFv/988cs/n/KH7P4/zl/zOJ/QP6Yxf/A/DGL/1/yxyz+B+WPWfz/mj9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOL/t/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/v+ePWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj8m8R9jIH/M4j8of8ziPzh/zOI/Uv6YxX9I/pjFf+T8MYv/KPljFv9R88cs/kPzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6Ywv+1gTE+lD+m8B8YGGPs/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+cP2bx/0j+mMV//Pwxi/9H88cs/hPkj1n8J8wfs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4j9R/pjFf+L8MYv/JPljFv9P549Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/Z/LHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/3L+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8Z81f8zi/9X8MYv/1/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi//X8MYv/N/LHLP4L5Y9Z/L+ZP2bxXzh/zOL/rfwxi/+388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/938scs/kvlj1n8v5s/ZvH/Xv6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+fP2bxXz5/zOK/Qv6Yxf8H+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/w/zxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4/yh/zOK/Uf6Yxf/H+WMW/43zxyz+m+SPWfw3zR+z+P8kf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/n+aPWfx/lj9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/5/nj1n8f5E/ZvH/Zf6YxX/X/DGL/275Yxb/X+WPWfx/nT9m8d89f8zi/5v8MYv/HvljFv8988cs/nvlj1n8f5s/ZvH/Xf6Yxf/3+WMW/73zxyz+++SPWfz/kD9m8f9j/pjFf9/8MYv/fvljFv/988cs/n/KH7P4/zl/zOJ/QP6Yxf/A/DGL/1/yxyz+B+WPWfz/mj9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/tib/gNDBwY+yP6n5o9Z1v9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4v+3/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv+/549Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WPybxH3Mgf8ziPyh/zOI/OH/M4j9S/pjFf0j+mMV/5Pwxi/8o+WMW/1Hzxyz+Q/PHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjF/0P5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvH/cP6Yxf8j+WMW//Hzxyz+H80fs/hPkD9m8Z8wf8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/RPljFv+J88cs/pPkj1n8P50/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/p/JH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv7YB9f/tZHe7v+l/LEPrv8/r/+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/y/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjFf9b8MYv/V/PHLP5fyx+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/1/PHLP7fyB+z+C+UP2bx/2b+mMV/4fwxi/+38scs/t/OH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/t/JH7P4L5U/ZvH/bv6Yxf97+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/37+mMV/+fwxi/8K+WMW/x/kj1n8V8wfs/ivZPR/Dw/Y4r+y0f89ZPFfJX/M4r9q/pjFf7X8MYv/6vljFv8f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8f9R/pjFf6P8MYv/j/PHLP4b549Z/DfJH7P4b5o/ZvH/Sf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/j/NH7P4/yx/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP4/zx+z+P8if8zi/8v8MYv/rvljFv/d8scs/r/KH7P4/zp/zOK/e/6Yxf83+WMW/z3yxyz+e+aPWfz3yh+z+P82f8zi/7v8MYv/7/PHLP57549Z/PfJH7P4/yF/zOL/x/wxi/+++WMW//3yxyz+++ePWfz/lD9m8f9z/pjF/4D8MYv/gfljH1T/QSP4/yV/7IPqPzCC/0H5Yxb/v+aPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4/y1/zOA/dGBg4JL8MYP/sPV/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4v/3/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyT+Yw3kj1n8B+WPWfwH549Z/EfKH7P4D8kfs/iPnD9m8R8lf8ziP2r+mMV/aP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4fyh/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fzh+z+H8kf8ziP37+mMX/o/ljFv8J8scs/hPmj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfKH/M4j9x/pjFf5L8MYv/p/PHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjF/zP5Yxb/qfLHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H85f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X8kfs/jPmj9m8f9q/pjF/2v5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f96/pjF/xv5Yxb/hfLHLP7fzB+z+C+cP2bx/1b+mMX/2/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/O/ljFv+l8scs/t/NH7P4fy9/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7fzx+z+C+fP2bxXyF/zOL/g/wxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf+H+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Y4POHTRg8N8gf8yy/jfMH7P4/yh/zOK/Uf6Yxf/H+WMW/43zxyz+m+SPWfw3zR+z+P8kf8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/n+aPWfx/lj9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/5/nj1n8f5E/ZvH/Zf6YxX/X/DGL/275Yx9U/6Ej+P8qf+yD6j8wgv+v88cs/rvnj1n8f5M/ZvHfI3/M4r9n/pjFf6/8MYv/b/PHLP6/yx+z+P8+f8ziv3f+mMV/n/wxi/8f8scs/n/MH7P475s/ZvHfL3/M4r9//pjF/0/5Yxb/P+ePWfwPyB+z+B+YP2bx/0v+mMX/oPwxi/9f88cs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfz/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOL/9/wxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8sck/h8ayB+z+A/KH7P4D84fs/iPlD9m8R+SP2bxHzl/zOI/Sv6YxX/U/DGL/9D8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8f9Q/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8P+zzH+e9bGTx/4jP/z1l8R8/f8zi/9H8MYv/BPljFv8J88cs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5Q/ZvGfOH/M4j9J/pjF/9P5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+Z/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfy/nP/b+sdMWPxnzB+z+M+UP2bxnzl/zOI/S/6Yxf8r+WMW/1nzxyz+X80fs/h/LX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X88fG9H//R7P/3Pv4P+N/DHL+l8of8zi/838MYv/wvljFv9v5Y9Z/L+dP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/L+TP2bxXyp/zOL/3fwxi//38scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi//38MYv/8vljFv8V8scs/j/IH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5g/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMX/R/ljFv+N8scs/j/OH7P4b5w/ZvHfJH/M4r9p/pjF/yf5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/NH/M4v+z/DGL/475Yxb/nfLHLP47549Z/HfJH7P4/zx/zOL/i/wxi/8v88cs/rvmj1n8d8sfs/j/Kn/M4v/r/DGL/+75Yxb/3+SPWfz3yB+z+O+ZP2bx3yt/zOL/2/wxi//v8scs/r/PH7P4750/ZvHfJ3/M4v+H/DGL/x/zxyz+++aPWfz3yx+z+O+fP2bx/1P+mMX/z/ljFv8D8scs/gfmj1n8/5I/ZvE/KH/M4v/X/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv+/5Y9Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/j/PX/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/9gD+WMW/0H5Yxb/wfljFv+R8scs/kPyxyz+I+ePWfxHyR+z+I+aP2bxH5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv//j537D9e6ru84fvPjAFmkH9vUpQ2Hxlybkcho1EJUFI8/Tplo5m/UI5Ag8kMSTMWNVurYdKmbJZtaOuZs1VKnm+vXyqZlzdaMrVVOcS2MMQeLzBm7bjiH4OztuThf+n5N34/HH8B9n/O+Q57Xy/v24roaqX8oS/9X6h/K0n9X/UNZ+u+mfyhL/6J/KEv/3fUPZen/Kv1DWfr/nP6hLP1/Xv9Qlv576B/K0n9P/UNZ+u+lfyhL/1/QP5Sl/6v1D2Xpv7f+oSz999E/lKX/a/QPZen/i/qHsvQfpX8oS/999Q9l6f9L+oey9B+tfyhL//30D2Xpv7/+oSz9X6t/KEv/MfqHsvT/Zf1DWfofoH8oS/9f0T+Upf/r9A9l6f+r+oey9P81/UNZ+h+ofyhL/9frH8rSf6z+oSz936B/KEv/g/QPZek/Tv9Qlv4H6x/K0n+8/qEs/X9d/1CW/hP0D2Xp/0b9Q1n6/4b+oSz9J+ofytL/TfqHsvR/s/6hLP1/U/9Qlv5v0T+Upf8k/UNZ+h+ifyhL/8n6h7L0P1T/UJb+h+kfytL/cP1DWfpP0T+Upf8R+oey9D9S/1CW/lP1D2Xpf5T+oSz9O/UPZel/tP6hLP2P0T+Upf+x+oey9D9O/1CW/l36h7L0f6v+oSz936Z/KEv/4/UPZen/dv1DWfqfoH8oS/9p+oey9D9R/1CW/ifpH8rS/x36h7L0P1n/UJb+79Q/lKX/KfqHsvQ/Vf9Qlv6n6R/K0v90/UNZ+p+hfyhL/zP1D2Xpf5b+oSz9p+sfytL/bP1DWfqfo38oS/9z9Q9l6d+tfyhL//P0D2XpP0P/UJb+M/UPZek/S/9Qlv7v0j+Upf/5+oey9J+tfyhL/zn6h7L0v0D/UJb+c/UPZel/of6hLP3n6R/K0n++/qEs/RfoH8rSf6H+oSz9L9I/lKX/Iv1DWfq/W/9Qlv4X6x/K0n+x/qEs/ZfoH8rS/xL9Q1n6v0f/UJb+l+ofytL/Mv1DWfpfrn8oS/+l+oey9L9C/1CW/r+lfyhL/9/WP5Sl/zL9Q1n6v1f/UJb+v6N/KEv/9+kfytL//fqHsvS/Uv9Qlv5X6R/K0v9q/UNZ+v+u/qEs/ZfrH8rS//f0D2Xp//v6h7L0v0b/UJb+1+ofytL/D/QPZen/Af1DWfpfp38oS//r9Q9l6X+D/qEs/f9Q/1CW/n+kfyhL/xv1D2Xp/0H9Q1n6f0j/UJb+N+kfytJ/hf6hLP3/WP9Qlv5/on8oS/+b9Q9l6X+L/qEs/W/N13/YjnxTlv4fztd/h2Tp/xH9Q1n636Z/KEv/2/UPZen/p/qHsvRfqX8oS/8/0z+Upf8d+oey9P9z/UNZ+t+pfyhL/4/qH8rS/y/0D2Xp/zH9Q1n6f1z/UJb+n9A/lKX/X+ofytL/k/qHsvS/S/9Qlv536x/K0v8e/UNZ+v+V/qEs/e/VP5Sl/336h7L0/2v9Q1n6/43+oSz979c/lKX/3+ofytL/U/qHsvT/tP6hLP0/o38oS//P6h/K0v9z+oey9P87/UNZ+n9e/1CW/l/QP5Sl/wNp+g8Z0Hdn6f/FNP0HJkv/v9c/lKX/g/qHsvR/SP9Qlv5f0j+Upf+X9Q9l6f+w/qEs/b+ifyhL/6/qH8rS/x/0D2Xp/4j+oSz9v6Z/KEv/f9Q/lKX/1/UPZen/T/qHsvR/VP9Qlv7f0D+Upf8q/UNZ+v+z/qEs/f9F/1CW/t/UP5Sl/7/qH8rS/1v6h7L0/7b+oSz9v6N/KEv/x/QPZen/b/qHsvR/XP9Qlv5P6B/K0n+1/qEs/Z/UP5Sl/7/rH8rS/7v6h7L0/w/9Q1n6f0//UJb+a/QPZen/lP6hLP2/r38oS/+1+oey9P9P/UNZ+q/TP5Sl/3/pH8rS/2n9Q1n6/7f+oSz91+sfytJ/g/6hLP3/R/9Qlv4/0D+Upf9G/UNZ+v9Q/1CW/s/oH8rS/0f6h7L0f1b/UJb+/6t/KEv/5/QPZen/Y/1DWfpv0j+UpP9uLf1DWfoP0j+Upf9g/UNZ+g/RP5Sl/1D9Q1n6d+gfytJ/mP6hLP2H6x/K0n+E/qEs/V+mfyhL/130D2Xp/3L9Q1n6v0L/UJb+I/UPZen/Sv1DWfrvqn/oJdcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZ82CxUvOnz57dvf8F+cvRvxs/Db8wi9ear94of/NBAAA/LT95EP/C/07AQAAAAAAAAAAAAAAAAAAgLya+L8Te6H/GQEAAAAAAAAAAAAA4MWus+vQtUMGbffUkG0fvObh7s0/j9948szbbrun9P7c8+VjgpccvO2DTZs2bVrx9KQpPQ+Ht1qt9v/abj2PR/Q9br/+0lE37bXlUZn8+RseO2PayGPn333t0G+suLrrqY7Nz3a0zjpv1uzuNwxutcrhHa2L2w8OGtRqlSM7Wte0H4xrP5ja0VrZfnDw5gcva32m/eD158ydfW77iaMq/5nBS0Vn19LWkO0W29ru3wbb7n/pqMdn9v7cz0v2vtrQVs/+R9/9pT37fK3X8+y/9/XLoX33P+B/QOB5DWz/z6zq/bmfl/x/7/8ffnDjkuhrz7//3tcvh9k/1Cf4/L/dRvt+7u/z+X/f4CW33h8y4sHr2vvvPPGOfXqeGrojn/9/8vrl8L77H7zd5//25/gpvZ//h7da5Yid/OOAVDq7rljb3/t///sf+uo+N4O23f+tX1n9ivb+b3+2taznqY4B7n9Kf+//V/b5vQID09l1y6Y+7/8D2H9rTPCSW/e/5u6Rmz//r77znD22+dpA9n9E3/2PXTjnwrELFi85cNac6TO6Z3RfMHHchIPGT5w4YcLYzZ8Itvy4k38okMTOvf+3dulzM6jV6t56/8AdV09p73/dfcs+0vPUiAHu/8h+3//39f4PodGDW8OGtS6evnDh/IO2/Nj7cNyWH7d8W7D/Afz3/34H9Hxb798ZDmq19tp6P+aMicPb+79kXrm356lhA9z/1H73P3n7v6sEBmYn3//P7XOz3f4PWXPZovb+9//B7qt7nhrof/8f1e/+b/b+Dzujs6tV65toe/8HD7/i6GrXpdPf/0F9mtj/qPXXbKh2XY62f6hPE/uftvzNZ1e7LsfYP9Snif3fM+fM5dWuy7H2D/VpYv/PvWrD3tWuy3H2D/VpYv+PfPfJ26pdly77h/o0sf8P3th1cLXr8lb7h/o0sf8DL/rhpGrX5W32D/VpYv/nvfyEldWuy/H2D/VpYv9Hbzpsj2rX5e32D/VpYv+Drvje0mrX5QT7h/o0sf8npi+fW+26TLN/qE8T+185aswz1a7LifYP9Wli/8ueeuPUatflJPuH+jSx/69ef9Mj1a7LO+wf6tPE/j9x2u43VbsuJ9s/1KeJ/f9o9H27VLsu77R/qE8T+3/00ZV3Vbsup9g/1KeJ/a9YOWR0tetyqv1DfZrY/+VHzXi42nU5zf6hPk3sf/yEL59a7bqcbv9Qnyb2v9fnvvVktetyhv1DfZrY/wn3L1pQ7bqcaf9Qnyb2v2jvj/+42nU5y/6hPk3s/y3de8+sdl2m2z/Up4n9l2t3ebTadTnb/qE+Tez/lHW3TK52Xc6xf6hPE/u/d9cvfKzadTnX/qE+Tex//bwLJla7Lt32D/VpYv/fee/l76t2Xc6zf6hPE/u/7tmvl2rXZYb9Q32a2P+acaecVu26zLR/qE8T+7/l2KcfqnZdZtk/1KeJ/S+/97GF1a7Lu+wf6tPE/h944JjHq12X8+0f6tPE/vcfM3Zktesy2/6hPk3sf+7Jyz5U7brMsX+oTxP7P/zO619b7bpcYP9Qnyb2P+Jrkz5Z7brMtX+oTxP7//Sk93+q2nW50P6hPk3sf8Pk/Q6odl3m2T/Up4n9r7pr3A3Vrst8+4f6NLH/Dzx0Y8XrssD+oT5N7H/e655bV+26LLR/qE8T+3/TtJMWV7suF9k/1KeJ/e9x89QvVrsui+wf6tPE/k//9vePr3Zd3m3/UJ8m9r/fnmfvU+26XGz/UJ8m9j9z1oNXVbsui+0f6tPE/qesWDW+2nVZYv9Qnyb2v+sTC26tdl0usX+oTxP7Xztkz+OqXZf32D/Up4n9337p/d+sdl0utX+oTxP7v+rKj3ZXuy6X2T/UZ0f331Hx9dv7/+zGYeurXZfL7R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbB9G7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEcBAAD//7599nQ=")
chdir(&(0x7f00000001c0)='./file0\x00')
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)

2.496000598s ago: executing program 0 (id=913):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000399cf8000000000000000000b7080000fffffff87b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.349697378s ago: executing program 0 (id=914):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)

2.096038879s ago: executing program 0 (id=916):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/27, 0x1b}, 0xffffff7f}], 0x1, 0x10002, 0x0)

2.0959234s ago: executing program 4 (id=917):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0)

2.00560897s ago: executing program 0 (id=918):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0xa1)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00')
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.879288881s ago: executing program 4 (id=919):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0)

1.796033646s ago: executing program 5 (id=920):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x1, 0x5d8, &(0x7f0000001200)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9d})
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x0)
lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee00)

1.75192698s ago: executing program 3 (id=921):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

1.613478892s ago: executing program 4 (id=922):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48a, 0x0, 0xfff}]})

1.456064509s ago: executing program 3 (id=923):
syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.426376807s ago: executing program 5 (id=924):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xd)

1.376245141s ago: executing program 4 (id=925):
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000008c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x4477, &(0x7f0000008c00)="$eJzs28tvVFUAB+Bzb4u0CNgXb0gmurBR00xZqSxEqBoSI7Y+YlzQTB9Addpp2qlhYSLGPYmJC+PaDcS9gRX/ggvZumSBLtwY3VgzM3fauXdmZMROK/X7Eri9597zYH4zd87JKXGifHVhNbewmiss5Uqzl1dP5z4pFdcW50O8TXa6fzrTjZxkv3Munn/9nfdPh3Dtx6En19fX10PFQGhpvOHn3379dLbxWBdn6lTabd3aVvkwhDASQugL2fH0hBA++D6EKIQwmJQNJcf+EML+ULv2xXc3p/q2aDQ9929N3pycuHH7weK9/vOXcm1vjEL4pnjshSuLPz/Tc+an57aoewAA+FtvTF187+38eLgbhYN3epvn60eSY7v58TodeaX7UQIAAEBbm+v/gSiOmtf/I8mxzZZgsLB9vF146+LEa/nxZP83arr+YlL0y6s91T3U7L5vdv93MFO/9f5vcz+Pqj6+er8DIYrHUudxPDYWwvi52vnRaF9cLK2Wn79cWlua27JhPLbS+dd271PpJBv6neY/lGm/+/v/w03vpsp5buveYrtaOv+etvd9+3nUUf7DmXrbkT+PLp1/b7Xs6cYbcrUHQCX/L3sfnv9Ipv1s/u3fYf/MwcqzPaqMtS/1BKjMYSrl7eYrpKXz31MtSz06kxey3ef/j0z+hzLt79Tzf/Rcd3vdLdL5P1EtS//S2ubnfzB++Of/cKb9nci/Mv5R3/8dSee/t1aYfnhWX8n2z//0C30k036X8r+ebKuGcDAKww2/dXqnt/blUN+vri5pKpeXuzCKXSCdf/Mu/+b6L+5o/nc0U3+71n/1fuvrv/o6ZDSqrf9oLZ1/f9v7Op3/HcvU6/rzP+pLVgDrn3W1n10qnf++WmGLCeBG/skEvl3+xzPtdyv/6hO/r57/5oD/3Fsrz5v/dSSdfxJV6mvgevXv6vwvas7990z+JzLtN+Sf/a8hFXv3/Ot/QfP8rzL+0Va90SSd//6291Xy/6GD7/+TmXrdn/+HkDfXf2Tp/A+0va/6+e97eP6nMvW6nf+z3WwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/YCg5DoQoHkudx/HYWAjDyfnRsC+aKcxNzxRLsx+vhjCSlOfCUHSlWJopFKcXlkpz89OFYrE0G8Kh5PpI6ItWi6Xy9GJh+fBGW/3R1fnCSnlmvlAOIRxJyk+GA/W2ZhbKi4Xl6r31a0/FpZXlq4Wl6bmFlZfz+Xw+HNsYw2A0f608v1Su9V67GsLxjboDUcPgqpdPbIxlf/RRaW1lqVCslp9sqFMszRaKDXVOJde+CoNReWVtabZQnp8ulq7U+9tJZ5PjxIWpd6feHG+6notqx6HtHRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/zF3z7z0dQiht3YWhxDO1n+Ikj8pPfdvTd6cnLhx+8Hivf7zl3Kt7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCrv0jxIxFMQBeN5TiGCjlp7AKiSdraKIjRHBE3gJC6/pMSwst1kWdl8g5A9ss8sW39cMyY/JDGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HS8fHSf700bkeJiXUV8/95cDvPbUpvH+f6zI+zI4by+dU/PTVv+e5rk9+XV30Pepqv/n68o9Xzw3GtHdzK+p53pnLGle1var597FSnXEXFd8ruUc13PNFb7fR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbszbENQGAQx9E7iUqnsQZTKInEHkrjWcI8VBIJ3de+V11y+eUPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNe4TOvcD3FkVFdm7GfbvP/dc2z/fZbN12U5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADc7cCADAAAAIMzfOo/2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQQEAAP//VqTKbA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x14)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ff9)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f0000000040)={0x2000000, 0x80000000, 0x618a})

971.999569ms ago: executing program 5 (id=926):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000001c0)={'veth0_to_team\x00'})

905.514639ms ago: executing program 1 (id=927):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
sendmmsg$sock(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x18}}], 0x2, 0x20020000)

711.392657ms ago: executing program 0 (id=928):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000140))

661.616411ms ago: executing program 5 (id=929):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000000d)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfd, 0x0)

331.9844ms ago: executing program 4 (id=930):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xab)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020)

234.185031ms ago: executing program 1 (id=931):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000140)=[{r1, 0xd204}], 0x1, 0x0, 0x0, 0x0)

44.80153ms ago: executing program 4 (id=932):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
socket$unix(0x1, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pipe(&(0x7f0000000100))
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0)

0s ago: executing program 1 (id=933):
r0 = io_uring_setup(0x26ce, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
nanosleep(&(0x7f0000000040)={r1, r2+60000000}, &(0x7f0000000080))
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

kernel console output (not intermixed with test programs):

42] loop0: detected capacity change from 0 to 32768
[  236.663929][ T7242] ocfs2: Bad value for 'resv_level'
[  236.850456][ T7249] loop3: detected capacity change from 0 to 32768
[  236.857939][ T7249] bcachefs: bch2_parse_one_mount_opt() Bad mount option inodes_32bit
[  237.196007][ T7263] loop4: detected capacity change from 0 to 32768
[  237.204446][ T7263] ocfs2: Bad value for 'localalloc'
[  237.413069][ T7245] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,background_target=invalid label 95,gc_reserve_bytes=5.50 KiB,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  237.565384][ T7245] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  237.573728][ T7245] bcachefs (loop5): Version upgrade required:
[  237.573728][ T7245] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  237.573728][ T7245] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors
[  237.573728][ T7245]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  237.724988][ T7245] bcachefs (loop5): dropping and reconstructing all alloc info
[  237.936469][ T7245] bcachefs (loop5): accounting_read... done
[  237.980827][ T7245] bcachefs (loop5): alloc_read... done
[  238.030252][ T7245] bcachefs (loop5): stripes_read... done
[  238.039628][ T7245] bcachefs (loop5): snapshots_read... done
[  238.648332][ T7245] bcachefs (loop5): done starting filesystem
[  238.899389][ T6395] bcachefs (loop5): shutting down
[  239.005563][ T6395] bcachefs (loop5): shutdown complete
[  239.088152][ T7338] loop1: detected capacity change from 0 to 256
[  239.571388][ T7329] loop3: detected capacity change from 0 to 32768
[  239.618389][ T7346] siw: device registration error -23
[  239.630727][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'.
[  240.269251][ T7329] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  240.412575][ T7329] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2d6/0x1390, inode 0x1802 dinode
[  240.423954][ T7329] XFS (loop3): Unmount and run xfs_repair
[  240.429703][ T7329] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  240.437190][ T7329] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  240.446878][ T7329] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  240.456612][ T7329] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28  ..e.....4.Xh...(
[  240.465744][ T7329] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00  4.Xh...(........
[  240.474691][ T7329] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  240.483561][ T7329] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  240.499694][ T7329] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02  .....i.R........
[  240.512119][ T7329] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08  ................
[  240.521407][ T7329] XFS (loop3): metadata inode 0x1802 type 6 is corrupt
[  240.530196][ T7329] XFS (loop3): failed to read RT inodes
[  240.537188][ T7329] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  242.889511][ T7430] loop3: detected capacity change from 0 to 2048
[  243.101212][ T6811]  loop3: p1 < > p3 p4 < >
[  243.372942][ T6811] loop3: p3 start 4284289 is beyond EOD, truncated
[  244.261619][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  244.272640][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  244.337606][ T7469] binfmt_misc: register: failed to install interpreter file ./file0
[  246.106729][ T7476] loop4: detected capacity change from 0 to 32768
[  246.118861][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  246.213227][ T7476] gfs2: fsid=_dev_video#: Trying to join cluster "lock_nolock", "_dev_video#"
[  246.254040][ T7476] gfs2: fsid=_dev_video#: Now mounting FS (format 1801)...
[  246.286970][ T5909] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 2.f0
[  246.296690][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.304955][ T5909] usb 1-1: Product: syz
[  246.309144][ T5909] usb 1-1: Manufacturer: syz
[  246.313864][ T5909] usb 1-1: SerialNumber: syz
[  246.321125][ T5909] usb 1-1: config 0 descriptor??
[  246.335545][ T5909] cdc_ether 1-1:0.0: invalid descriptor buffer length
[  246.339516][ T7476] gfs2: fsid=_dev_video#.s: journal 0 mapped with 3 extents in 0ms
[  246.344208][ T5909] usb 1-1: bad CDC descriptors
[  246.378256][ T5909] pcwd_usb: The device isn't a Human Interface Device
[  246.438083][ T7481] loop1: detected capacity change from 0 to 32768
[  246.484600][ T7481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.341 (7481)
[  246.579370][    T8] usb 1-1: USB disconnect, device number 8
[  246.722203][ T7476] gfs2: fsid=_dev_video#.s: first mount done, others may mount
[  246.767732][ T7481] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.062906][ T7522] mmap: syz.5.354 (7522) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  247.633723][ T7481] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  247.642560][ T7481] BTRFS info (device loop1): using free-space-tree
[  247.678879][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  247.679278][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  247.691731][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  247.710597][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  247.721541][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  247.739274][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  247.748557][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  247.758605][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  247.768255][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  247.778356][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  247.829545][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  247.854988][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  247.864989][ T7481] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  247.875210][ T7481] BTRFS error (device loop1): open_ctree failed: -12
[  249.311477][ T7576] netlink: 'syz.5.368': attribute type 1 has an invalid length.
[  249.519473][ T7579] loop4: detected capacity change from 0 to 512
[  249.561168][ T7579] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  249.592179][ T7579] EXT4-fs (loop4): 1 truncate cleaned up
[  249.603986][ T7579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.734291][ T7581] loop0: detected capacity change from 0 to 4096
[  249.759976][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.913766][ T5909] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  251.057814][ T5909] usb 6-1: Using ep0 maxpacket: 32
[  251.065546][ T5909] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  251.073877][ T5909] usb 6-1: config 0 has no interface number 0
[  251.081946][ T5909] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  251.091708][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.196620][ T5909] usb 6-1: Product: syz
[  251.240930][ T7610] QAT: Stopping all acceleration devices.
[  251.309233][ T5909] usb 6-1: Manufacturer: syz
[  251.327325][ T5909] usb 6-1: SerialNumber: syz
[  251.397300][ T5909] usb 6-1: config 0 descriptor??
[  251.427990][ T5909] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  251.611385][ T7619] vcan0 speed is unknown, defaulting to 1000
[  251.652226][ T5909] usb 6-1: qt2_setup_urbs - submit read urb failed -8
[  251.653238][ T7619] vcan0 speed is unknown, defaulting to 1000
[  251.669488][ T5909] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8
[  251.702946][ T7619] vcan0 speed is unknown, defaulting to 1000
[  251.964449][   T81] usb 6-1: USB disconnect, device number 4
[  252.987952][ T7602] loop4: detected capacity change from 0 to 32768
[  253.094973][   T81] vcan0 speed is unknown, defaulting to 1000
[  253.101619][ T7619] infiniband syz1: set active
[  253.109388][ T7619] infiniband syz1: added vcan0
[  253.114766][ T7619] syz1: rxe_create_cq: returned err = -12
[  253.120564][ T7619] infiniband syz1: Couldn't create ib_mad CQ
[  253.126738][ T7619] infiniband syz1: Couldn't open port 1
[  253.140903][ T7619] RDS/IB: syz1: added
[  253.145003][ T7619] smc: adding ib device syz1 with port count 1
[  253.151153][ T7619] smc:    ib device syz1 port 1 has pnetid 
[  253.158419][   T81] vcan0 speed is unknown, defaulting to 1000
[  253.167295][ T7619] vcan0 speed is unknown, defaulting to 1000
[  253.234254][ T7625] loop3: detected capacity change from 0 to 2048
[  253.240984][ T7625] nilfs2: Unknown parameter '5ÖØNq×J>LôÒÛfAa'
[  253.253350][ T7602] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  253.363542][ T7602] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2304 but max bitmap bits of 2048
[  253.431931][ T7645] loop0: detected capacity change from 0 to 256
[  253.457825][ T7602] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  253.510887][ T7602] OCFS2: File system is now read-only.
[  253.533842][ T7602] (syz.4.372,7602,1):ocfs2_search_chain:1814 ERROR: status = -30
[  253.568096][ T7602] (syz.4.372,7602,1):ocfs2_search_chain:1926 ERROR: status = -30
[  253.593736][ T7602] (syz.4.372,7602,1):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30
[  253.612781][ T7602] (syz.4.372,7602,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30
[  253.700023][ T7602] (syz.4.372,7602,0):ocfs2_claim_new_inode:2273 ERROR: status = -30
[  253.708731][ T7602] (syz.4.372,7602,0):ocfs2_claim_new_inode:2288 ERROR: status = -30
[  253.717731][ T7602] (syz.4.372,7602,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  253.725953][ T7602] (syz.4.372,7602,0):ocfs2_mknod:385 ERROR: status = -30
[  253.734154][ T7602] (syz.4.372,7602,0):ocfs2_mknod:502 ERROR: status = -30
[  253.741591][ T7602] (syz.4.372,7602,0):ocfs2_create:676 ERROR: status = -30
[  254.358730][ T7619] vcan0 speed is unknown, defaulting to 1000
[  254.462984][ T7656] netlink: 'syz.3.387': attribute type 1 has an invalid length.
[  254.475262][ T7656] netlink: 224 bytes leftover after parsing attributes in process `syz.3.387'.
[  254.616881][ T5844] ocfs2: Unmounting device (7,4) on (node local)
[  254.735197][ T7619] vcan0 speed is unknown, defaulting to 1000
[  254.849336][ T7619] vcan0 speed is unknown, defaulting to 1000
[  254.953148][ T7619] vcan0 speed is unknown, defaulting to 1000
[  255.120064][ T7671] ubi: mtd0 is already attached to ubi0
[  255.488260][ T7671] loop5: detected capacity change from 0 to 32768
[  255.517968][ T7671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.389 (7671)
[  255.886514][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.893024][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.991093][ T7671] BTRFS info (device loop5 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.002276][ T7671] BTRFS info (device loop5 state S): using crc32c (crc32c-x86_64) checksum algorithm
[  256.012033][ T7671] BTRFS error (device loop5 state S): ignoremetacsums must be used with ro mount option
[  256.021871][ T7671] BTRFS info (device loop5 state S): using free-space-tree
[  256.033599][ T7671] BTRFS error (device loop5 state S): open_ctree failed: -22
[  256.051521][ T5831] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  257.239974][ T7690] loop4: detected capacity change from 0 to 64
[  257.417664][ T7697] loop1: detected capacity change from 0 to 256
[  257.613344][ T7697] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  257.727889][ T7705] loop3: detected capacity change from 0 to 256
[  257.795204][ T7705] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0a619f0a, utbl_chksum : 0xe619d30d)
[  257.935344][ T7706] netlink: 'syz.5.401': attribute type 8 has an invalid length.
[  258.724553][ T7718] loop5: detected capacity change from 0 to 64
[  258.854086][ T7721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.408'.
[  259.054548][ T7730] loop4: detected capacity change from 0 to 256
[  259.145827][ T7732] syz.5.410: attempt to access beyond end of device
[  259.145827][ T7732] loop5: rw=0, sector=1, nr_sectors = 1 limit=0
[  259.213848][ T7732] qnx4: unable to read the superblock
[  259.495798][ T7715] loop1: detected capacity change from 0 to 32768
[  260.085378][ T7715] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  260.085378][ T7715] 
[  260.393834][ T7715] ERROR: (device loop1): remounting filesystem as read-only
[  260.405306][ T7715] xtLookup: xtSearch returned -5
[  260.412942][ T7715] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  260.412942][ T7715] 
[  260.561971][ T7759] loop5: detected capacity change from 0 to 512
[  260.607127][ T7761] loop4: detected capacity change from 0 to 512
[  260.614503][ T7761] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.631794][ T7761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  260.807039][ T7770] loop1: detected capacity change from 0 to 128
[  260.818668][ T7761] EXT4-fs (loop4): 1 truncate cleaned up
[  260.865069][ T7761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.886537][ T7759] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.417: bad orphan inode 768
[  260.911418][ T7759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.943069][ T7761] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.418: corrupted in-inode xattr: overlapping e_value 
[  260.963774][ T7759] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.980660][ T5827] sysv_free_block: flc_count > flc_size
[  261.001378][ T7761] EXT4-fs (loop4): Remounting filesystem read-only
[  261.010430][ T5827] sysv_free_block: flc_count > flc_size
[  261.016475][ T5827] sysv_free_block: flc_count > flc_size
[  261.024100][ T5827] sysv_free_block: flc_count > flc_size
[  261.029667][ T5827] sysv_free_block: flc_count > flc_size
[  261.053699][ T5827] sysv_free_block: flc_count > flc_size
[  261.059393][ T5827] sysv_free_block: flc_count > flc_size
[  261.065080][ T5827] sysv_free_block: flc_count > flc_size
[  261.070628][ T5827] sysv_free_block: flc_count > flc_size
[  261.076347][ T5827] sysv_free_block: flc_count > flc_size
[  261.091631][ T7759] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  261.103536][ T7761] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1772: inode #15: comm syz.4.418: unable to update i_inline_off
[  261.137605][ T7759] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  261.153706][ T5827] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  261.221064][ T7759] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.417: Failed to acquire dquot type 0
[  261.381403][ T7785] loop1: detected capacity change from 0 to 64
[  261.507415][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.542790][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.760739][ T7794] tmpfs: Bad value for 'mpol'
[  262.008821][ T7801] loop4: detected capacity change from 0 to 256
[  262.023563][ T5831] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  262.032548][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  262.333803][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  262.448932][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.581163][ T5922] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=d3.dd
[  262.729608][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.952378][ T5922] usb 2-1: Product: syz
[  262.967579][ T5922] usb 2-1: Manufacturer: syz
[  262.972229][ T5922] usb 2-1: SerialNumber: syz
[  263.064722][ T5922] usb 2-1: config 0 descriptor??
[  263.102409][ T5922] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state.
[  263.137271][ T5922] dvb-usb: bulk message failed: -22 (2/0)
[  263.184343][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.432'.
[  263.197071][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  263.226331][ T5922] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2)
[  263.252685][ T5922] usb 2-1: media controller created
[  263.335961][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  263.443753][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  263.496686][ T7824] loop5: detected capacity change from 0 to 128
[  263.583787][ T5922] DVB: Unable to find symbol mt352_attach()
[  263.592837][ T5922] dvb-usb: bulk message failed: -22 (5/0)
[  263.607458][ T5922] zl10353_read_register: readreg error (reg=127, ret==-121)
[  263.617433][ T5922] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2'
[  263.734628][ T7832] ntfs3(nbd0): try to read out of volume at offset 0x0
[  263.797945][ T7835] loop5: detected capacity change from 0 to 1024
[  263.843754][ T5922] rc_core: IR keymap rc-dvico-mce not found
[  263.846716][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'.
[  263.849762][ T5922] Registered IR keymap rc-empty
[  263.888741][ T5922] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  263.950982][ T5922] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7
[  263.977462][ T7841] loop0: detected capacity change from 0 to 8
[  264.005993][ T5922] dvb-usb: schedule remote query interval to 100 msecs.
[  264.049106][ T5922] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected.
[  264.105083][ T5922] usb 2-1: USB disconnect, device number 2
[  264.147267][ T7810] loop4: detected capacity change from 0 to 32768
[  264.213025][ T7810] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.430 (7810)
[  264.263306][ T7839] loop3: detected capacity change from 0 to 32768
[  264.343814][ T7810] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  264.365481][ T7810] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  264.403111][ T7810] BTRFS info (device loop4): using free-space-tree
[  264.596202][ T5922] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected.
[  264.606830][ T7850] loop0: detected capacity change from 0 to 1024
[  264.655348][ T7850] hfsplus: bad catalog entry type
[  265.107730][ T7839] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc
[  265.252835][ T7839] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  265.324646][ T7839] bcachefs (loop3): Version upgrade required:
[  265.324646][ T7839] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  265.324646][ T7839] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors
[  265.324646][ T7839]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  265.434570][ T7839] bcachefs (loop3): dropping and reconstructing all alloc info
[  265.435197][ T7884] loop5: detected capacity change from 0 to 256
[  265.558104][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  265.607018][ T7839] bcachefs (loop3): accounting_read...
[  265.652744][ T7884] FAT-fs (loop5): Directory bread(block 64) failed
[  265.684058][ T7839]  done
[  265.686880][ T7839] bcachefs (loop3): alloc_read... done
[  265.709432][ T7839] bcachefs (loop3): stripes_read... done
[  265.727123][ T7884] FAT-fs (loop5): Directory bread(block 65) failed
[  265.743942][ T7839] bcachefs (loop3): snapshots_read... done
[  265.752137][ T7884] FAT-fs (loop5): Directory bread(block 66) failed
[  265.774001][ T7884] FAT-fs (loop5): Directory bread(block 67) failed
[  265.780640][ T7884] FAT-fs (loop5): Directory bread(block 68) failed
[  265.806464][ T7839] bcachefs (loop3): done starting filesystem
[  265.834971][ T7884] FAT-fs (loop5): Directory bread(block 69) failed
[  265.841616][ T7884] FAT-fs (loop5): Directory bread(block 70) failed
[  265.891999][ T7884] FAT-fs (loop5): Directory bread(block 71) failed
[  265.927012][ T7884] FAT-fs (loop5): Directory bread(block 72) failed
[  265.974312][ T7884] FAT-fs (loop5): Directory bread(block 73) failed
[  266.855574][ T5839] bcachefs (loop3): shutting down
[  266.913737][ T5839] bcachefs (loop3): shutdown complete
[  268.433192][ T7915] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  268.441738][ T7914] loop1: detected capacity change from 0 to 1764
[  268.602892][ T7919] loop5: detected capacity change from 0 to 128
[  268.671632][ T7919] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  268.759920][ T7919] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  268.765068][ T7927] loop4: detected capacity change from 0 to 1024
[  268.854679][ T7919] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.469: No space for directory leaf checksum. Please run e2fsck -D.
[  268.894010][ T7919] EXT4-fs error (device loop5): __ext4_find_entry:1652: inode #2: comm syz.5.469: checksumming directory block 0
[  268.998994][ T6395] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.263475][ T7911] loop0: detected capacity change from 0 to 32768
[  269.292668][ T7911] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  269.304403][ T7936] loop5: detected capacity change from 0 to 256
[  269.405089][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'.
[  269.578358][ T7936] FAT-fs (loop5): Directory bread(block 64) failed
[  269.591135][ T7936] FAT-fs (loop5): Directory bread(block 65) failed
[  269.599356][ T7936] FAT-fs (loop5): Directory bread(block 66) failed
[  269.610755][ T7936] FAT-fs (loop5): Directory bread(block 67) failed
[  269.618787][ T7936] FAT-fs (loop5): Directory bread(block 68) failed
[  269.631317][ T7936] FAT-fs (loop5): Directory bread(block 69) failed
[  269.650355][ T7936] FAT-fs (loop5): Directory bread(block 70) failed
[  269.659197][ T7936] FAT-fs (loop5): Directory bread(block 71) failed
[  269.705896][ T7936] FAT-fs (loop5): Directory bread(block 72) failed
[  269.712720][ T7936] FAT-fs (loop5): Directory bread(block 73) failed
[  269.819443][ T7911] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  269.927002][ T7911] (syz.0.465,7911,0):ocfs2_read_blocks:239 ERROR: status = -12
[  270.003852][ T7911] (syz.0.465,7911,0):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  270.120463][ T5826] ocfs2: Unmounting device (7,0) on (node local)
[  270.448345][ T7954] loop1: detected capacity change from 0 to 1024
[  270.567232][ T7954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.748469][ T7946] loop4: detected capacity change from 0 to 40427
[  270.783063][ T7946] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  270.804674][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.836189][ T7946] F2FS-fs (loop4): heap/no_heap options were deprecated
[  270.859893][ T7946] F2FS-fs (loop4): invalid crc value
[  270.881462][ T7946] F2FS-fs (loop4): Found nat_bits in checkpoint
[  271.075738][ T7968] loop1: detected capacity change from 0 to 256
[  271.079524][ T7946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  271.227761][ T7946] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  271.359624][ T7956] loop5: detected capacity change from 0 to 32768
[  271.395313][ T7956] XFS: ikeep mount option is deprecated.
[  271.426178][ T7956] XFS: noikeep mount option is deprecated.
[  271.452748][ T7956] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  271.586663][ T7956] XFS (loop5): Ending clean mount
[  271.737843][ T7989] loop4: detected capacity change from 0 to 128
[  271.754949][ T7964] loop0: detected capacity change from 0 to 32768
[  271.763430][ T7956] XFS (loop5): Quotacheck needed: Please wait.
[  271.792123][ T7989] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  271.799226][ T7964] bcachefs: bch2_parse_one_mount_opt() Bad mount option inodes_32bit
[  271.814013][ T7989] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.871173][ T7956] XFS (loop5): Quotacheck: Done.
[  271.942190][ T5844] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  272.069642][ T7994] loop1: detected capacity change from 0 to 8
[  272.099502][ T7994] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  272.111455][ T6395] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  272.383803][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  272.557421][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf
[  272.587159][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.616901][ T5913] usb 5-1: Product: syz
[  272.621105][ T5913] usb 5-1: Manufacturer: syz
[  272.637800][ T5913] usb 5-1: SerialNumber: syz
[  272.655080][ T5913] usb 5-1: config 0 descriptor??
[  272.686839][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  273.010697][ T5189] bcm5974 5-1:0.0: could not read from device
[  274.011890][ T5913] usb 5-1: USB disconnect, device number 5
[  274.567211][ T8004] loop0: detected capacity change from 0 to 32768
[  274.849447][ T8023] program syz.3.505 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.097434][ T8029] loop3: detected capacity change from 0 to 1024
[  275.134461][ T8029] EXT4-fs: Ignoring removed bh option
[  275.216228][ T8029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.237662][ T8029] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.258434][ T8036] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.511'.
[  275.273329][ T8029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.510: bg 0: block 273: padding at end of block bitmap is not set
[  275.321645][ T8032] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.511'.
[  275.373581][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.483530][ T8040] loop5: detected capacity change from 0 to 512
[  275.496262][ T8040] EXT4-fs: Ignoring removed orlov option
[  275.623684][ T8040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.655556][ T8040] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  275.799799][ T8021] loop1: detected capacity change from 0 to 32768
[  275.884115][ T5913] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  275.941473][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.963565][ T8035] loop4: detected capacity change from 0 to 32768
[  275.973195][ T8021] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  276.076266][ T5913] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  276.089444][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.103116][   T29] audit: type=1800 audit(2000000179.310:84): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.504" name="file0" dev="loop1" ino=17058 res=0 errno=0
[  276.162677][ T5913] usb 1-1: config 0 descriptor??
[  276.248227][ T8068] loop3: detected capacity change from 0 to 1024
[  276.260530][ T8035] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc
[  276.295128][ T5827] ocfs2: Unmounting device (7,1) on (node local)
[  276.310319][ T8035] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  276.398898][ T5913] [drm] vendor descriptor length:6 data:06 5f 01 03 00 00 00 00 00 00 00
[  276.407464][ T5913] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  276.419284][ T8035] bcachefs (loop4): Version upgrade required:
[  276.419284][ T8035] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  276.419284][ T8035] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors
[  276.419284][ T8035]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  276.544679][ T8035] bcachefs (loop4): dropping and reconstructing all alloc info
[  276.587042][ T8035] bcachefs (loop4): accounting_read...
[  276.604050][ T5913] [drm:udl_init] *ERROR* Selecting channel failed
[  276.641805][ T5913] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  276.643777][ T8035]  done
[  276.648729][ T5913] [drm] Initialized udl on minor 2
[  276.652054][ T8035] bcachefs (loop4): alloc_read... done
[  276.652131][ T8035] bcachefs (loop4): stripes_read...
[  276.662536][ T5913] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  276.676876][ T8035]  done
[  276.684953][ T5913] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  276.695056][ T8035] bcachefs (loop4): snapshots_read... done
[  276.705898][  T978] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  276.752044][ T5913] usb 1-1: USB disconnect, device number 9
[  276.758532][ T8035] bcachefs (loop4): done starting filesystem
[  276.785108][  T978] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  276.829228][ T8077] loop5: detected capacity change from 0 to 4096
[  276.962153][ T5844] bcachefs (loop4): shutting down
[  277.033007][ T5844] bcachefs (loop4): shutdown complete
[  277.313744][  T978] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  277.493751][  T978] usb 2-1: Using ep0 maxpacket: 8
[  277.525121][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.543859][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.563874][  T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  277.583522][  T978] usb 2-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00
[  277.608011][  T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.629523][  T978] usb 2-1: config 0 descriptor??
[  277.758648][ T8090] loop5: detected capacity change from 0 to 32768
[  277.771229][ T8090] bcachefs: bch2_parse_one_mount_opt() Bad mount option inodes_32bit
[  278.120168][  T978] nzxt-smart2 0003:1E71:2006.0003: unknown main item tag 0x0
[  278.138850][  T978] nzxt-smart2 0003:1E71:2006.0003: unknown main item tag 0x0
[  278.149154][  T978] nzxt-smart2 0003:1E71:2006.0003: unknown main item tag 0x0
[  278.159530][ T8102] loop0: detected capacity change from 0 to 32768
[  278.162243][  T978] nzxt-smart2 0003:1E71:2006.0003: unknown main item tag 0x0
[  278.166768][ T8102] XFS: ikeep mount option is deprecated.
[  278.201604][  T978] nzxt-smart2 0003:1E71:2006.0003: unknown main item tag 0x0
[  278.220714][  T978] nzxt-smart2 0003:1E71:2006.0003: hidraw0: USB HID v0.00 Device [HID 1e71:2006] on usb-dummy_hcd.1-1/input0
[  278.270517][ T8102] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  278.283076][ T8113] loop5: detected capacity change from 0 to 128
[  278.328750][  T978] usb 2-1: USB disconnect, device number 3
[  278.364976][ T8113] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  278.400452][ T8113] UDF-fs: error (device loop5): udf_read_inode: (ino 87) failed !bh
[  278.410556][ T8113] UDF-fs: error (device loop5): udf_fill_super: Error in udf_iget, block=3, partition=0
[  278.527030][ T8102] XFS (loop0): Ending clean mount
[  278.540750][ T8102] XFS (loop0): Quotacheck needed: Please wait.
[  278.617665][ T8102] XFS (loop0): Quotacheck: Done.
[  278.768854][ T5826] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  278.786070][ T5913] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  278.964131][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  279.006168][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.027417][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.042068][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  279.055251][ T5913] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  279.064542][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.075991][ T5913] usb 6-1: config 0 descriptor??
[  279.470195][ T8122] loop1: detected capacity change from 0 to 32768
[  279.504099][ T5913] uclogic 0003:5543:0064.0004: ignoring exceeding usage max
[  279.508393][ T8122] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.544 (8122)
[  279.526007][ T5913] uclogic 0003:5543:0064.0004: No inputs registered, leaving
[  279.554499][ T5913] uclogic 0003:5543:0064.0004: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0
[  279.567372][ T8122] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  279.589322][ T8122] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  279.618562][ T8122] BTRFS info (device loop1): using free-space-tree
[  279.673114][ T8131] netlink: 'syz.0.546': attribute type 29 has an invalid length.
[  279.777260][ T5909] usb 6-1: USB disconnect, device number 5
[  279.932778][ T8127] loop4: detected capacity change from 0 to 32768
[  279.981454][ T8127] bcachefs: bch2_parse_one_mount_opt() Bad mount option inodes_32bit
[  280.026957][ T5827] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  280.309615][ T8152] loop1: detected capacity change from 0 to 256
[  280.736812][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  280.812640][ T8147] loop0: detected capacity change from 0 to 32768
[  280.887036][ T8147] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.915160][ T5913] usb 6-1: Using ep0 maxpacket: 16
[  280.921236][ T8170] loop3: detected capacity change from 0 to 64
[  280.959497][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.970725][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.980711][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  280.993731][ T5913] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  281.002797][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.024624][ T5913] usb 6-1: config 0 descriptor??
[  281.181324][ T8147] XFS (loop0): Ending clean mount
[  281.250201][ T8147] XFS (loop0): Quotacheck needed: Please wait.
[  281.327161][ T8147] XFS (loop0): Quotacheck: Done.
[  281.477449][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.493723][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.500994][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.508333][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.523759][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.531031][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.538497][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.545977][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.553231][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.560929][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  281.583471][ T5826] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.585991][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input9
[  281.619281][ T5913] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  281.693585][   T81] usb 6-1: USB disconnect, device number 6
[  281.789181][ T8162] loop4: detected capacity change from 0 to 32768
[  281.921315][ T8162] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+"
[  281.935119][ T8162] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)...
[  281.990377][ T8162] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms
[  282.004277][ T5909] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use
[  282.012468][ T5909] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal...
[  282.100970][ T5909] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 88ms
[  282.121948][ T5909] gfs2: fsid=(œ[{{{+.0: jid=0: Done
[  282.129286][ T8162] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount
[  282.231179][ T8163] loop1: detected capacity change from 0 to 65536
[  282.347420][ T8163] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  282.448169][ T5831] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  282.536056][ T8163] XFS (loop1): Ending clean mount
[  282.654561][   T81] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  282.686559][ T5827] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  283.546808][   T81] usb 1-1: Using ep0 maxpacket: 16
[  283.958965][   T81] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  283.979855][   T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.006030][   T81] usb 1-1: Product: syz
[  284.010242][   T81] usb 1-1: Manufacturer: syz
[  284.015035][   T81] usb 1-1: SerialNumber: syz
[  284.100914][   T81] r8152-cfgselector 1-1: Unknown version 0x0000
[  284.113509][   T81] r8152-cfgselector 1-1: config 0 descriptor??
[  284.338770][   T81] r8152-cfgselector 1-1: Needed 1 retries to read version
[  284.434689][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  284.512820][ T8218] loop3: detected capacity change from 0 to 16
[  284.537324][ T8218] erofs (device loop3): mounted with root inode @ nid 36.
[  284.542268][ T5922] r8152-cfgselector 1-1: USB disconnect, device number 10
[  284.587560][ T5913] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  284.587595][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.589621][ T5913] usb 6-1: config 0 descriptor??
[  284.824535][ T5913] kaweth 6-1:0.0: Firmware present in device.
[  285.008953][ T5913] kaweth 6-1:0.0: Statistics collection: 0
[  285.015423][ T5913] kaweth 6-1:0.0: Multicast filter limit: 0
[  285.023811][ T5879] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  285.037628][ T5913] kaweth 6-1:0.0: MTU: 0
[  285.041916][ T5913] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00
[  285.213837][ T5879] usb 5-1: Using ep0 maxpacket: 32
[  285.221224][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.233587][ T5913] kaweth 6-1:0.0: probe with driver kaweth failed with error -5
[  285.247440][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.268098][ T5913] usb 6-1: USB disconnect, device number 7
[  285.276235][ T5879] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  285.290354][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.316678][ T5879] usb 5-1: config 0 descriptor??
[  285.344531][ T8241] x_tables: ip_tables: DNAT target: only valid in nat table, not syz0
[  285.415829][  T978] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  285.575163][  T978] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  285.587627][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.598604][  T978] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  285.611273][  T978] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  285.619658][  T978] usb 2-1: Manufacturer: syz
[  285.635406][  T978] usb 2-1: config 0 descriptor??
[  285.643865][   T81] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  285.696880][  T978] rc_core: IR keymap rc-hauppauge not found
[  285.702917][  T978] Registered IR keymap rc-empty
[  285.709619][  T978] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  285.727622][  T978] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10
[  285.794184][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  285.801197][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[  285.833897][   T81] usb 1-1: Using ep0 maxpacket: 8
[  285.841488][ T5879] waltop 0003:172F:0502.0006: unknown main item tag 0x0
[  285.848927][ T5879] waltop 0003:172F:0502.0006: unknown main item tag 0x0
[  285.856678][ T5879] waltop 0003:172F:0502.0006: unknown main item tag 0x0
[  285.864090][ T5879] waltop 0003:172F:0502.0006: unknown main item tag 0x0
[  285.872139][   T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.883710][ T5879] waltop 0003:172F:0502.0006: unknown main item tag 0x0
[  285.895306][   T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.905217][   T81] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  285.914361][    C1] igorplugusb 2-1:0.0: Error: urb status = -32
[  285.920811][    C1] igorplugusb 2-1:0.0: Error: urb status = -32
[  285.927011][ T5922] usb 2-1: USB disconnect, device number 4
[  285.927135][   T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.942702][ T5879] waltop 0003:172F:0502.0006: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.4-1/input0
[  285.958135][   T81] usb 1-1: config 0 descriptor??
[  286.042601][    T8] usb 5-1: USB disconnect, device number 6
[  286.246331][ T5909] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  286.377824][   T81] aquacomputer_d5next 0003:0C70:F014.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0
[  286.413865][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  286.422183][ T5909] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  286.443807][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.459282][ T5909] usb 6-1: Product: syz
[  286.470232][ T5909] usb 6-1: Manufacturer: syz
[  286.477200][ T5909] usb 6-1: SerialNumber: syz
[  286.499581][ T5909] r8152-cfgselector 6-1: Unknown version 0x0000
[  286.507208][ T5909] r8152-cfgselector 6-1: config 0 descriptor??
[  286.620472][    T8] usb 1-1: USB disconnect, device number 11
[  286.663223][ T8251] tipc: Started in network mode
[  286.673291][ T8251] tipc: Node identity fbffffffffffffff04, cluster identity 4711
[  286.923076][   T81] r8152-cfgselector 6-1: USB disconnect, device number 8
[  287.303535][   T29] audit: type=1804 audit(2000000190.450:85): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.587" name="/newroot/125/file1" dev="fuse" ino=1 res=1 errno=0
[  287.465319][   T29] audit: type=1800 audit(2000000190.450:86): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.587" name="/" dev="fuse" ino=1 res=0 errno=0
[  287.709167][ T5879] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  287.789866][   T29] audit: type=1804 audit(2000000190.460:87): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.587" name="/newroot/125/file1" dev="fuse" ino=1 res=1 errno=0
[  287.810593][   T29] audit: type=1804 audit(2000000190.460:88): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.587" name="/newroot/125/file1" dev="fuse" ino=1 res=1 errno=0
[  287.918256][   T29] audit: type=1800 audit(2000000190.460:89): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.587" name="/" dev="fuse" ino=1 res=0 errno=0
[  287.955394][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10
[  287.966804][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 83, setting to 64
[  288.006916][ T8264] loop1: detected capacity change from 0 to 256
[  288.016407][ T5879] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  288.033169][ T8265] netlink: 'syz.5.589': attribute type 2 has an invalid length.
[  288.050514][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.098537][ T5879] usb 5-1: Product: syz
[  288.102742][ T5879] usb 5-1: Manufacturer: syz
[  288.145525][ T5879] usb 5-1: SerialNumber: syz
[  288.185609][ T5879] usb 5-1: config 0 descriptor??
[  288.222177][ T8255] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  288.245523][ T5879] hub 5-1:0.0: bad descriptor, ignoring hub
[  288.287352][ T5879] hub 5-1:0.0: probe with driver hub failed with error -5
[  289.052530][ T5879] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  289.125509][ T5879] usb 5-1: USB disconnect, device number 7
[  289.209063][ T8277] loop3: detected capacity change from 0 to 1024
[  289.300791][ T8266] loop0: detected capacity change from 0 to 32768
[  289.311171][ T8266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.588 (8266)
[  289.314000][ T5909] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  289.345404][   T29] audit: type=1800 audit(2000000192.550:90): pid=8277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.594" name="file1" dev="loop3" ino=20 res=0 errno=0
[  289.363143][ T8273] loop5: detected capacity change from 0 to 4096
[  289.394487][ T8266] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.405201][ T8266] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  289.414891][ T8266] BTRFS info (device loop0): using free-space-tree
[  289.525697][ T5909] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  289.535041][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.547372][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.571017][ T5909] usb 2-1: config 0 descriptor??
[  289.579902][ T5909] cp210x 2-1:0.0: cp210x converter detected
[  289.706982][ T5831] Bluetooth: hci3: unexpected event for opcode 0x200b
[  289.744139][ T8295] netlink: 104 bytes leftover after parsing attributes in process `syz.4.596'.
[  290.019327][ T5909] usb 2-1: cp210x converter now attached to ttyUSB0
[  290.173932][ T5826] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  290.192694][ T5909] usb 2-1: USB disconnect, device number 5
[  290.215365][ T8204] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  290.234066][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  290.375742][ T5909] cp210x 2-1:0.0: device disconnected
[  291.426018][ T8315] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  291.432115][ T8315] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  291.440656][ T8315] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  291.446790][ T8315] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  291.452829][ T8315] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  291.458998][ T8315] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  291.653896][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  291.927955][   T29] audit: type=1804 audit(2000000195.020:91): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.601" name="/newroot/113/file1" dev="fuse" ino=1 res=1 errno=0
[  292.040782][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.246164][ T8324] loop1: detected capacity change from 0 to 1024
[  292.298824][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.308667][    T8] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  292.318181][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.334922][    T8] usb 6-1: config 0 descriptor??
[  292.371559][   T29] audit: type=1800 audit(2000000195.020:92): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.601" name="/" dev="fuse" ino=1 res=0 errno=0
[  292.393784][   T29] audit: type=1804 audit(2000000195.030:93): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.601" name="/newroot/113/file1" dev="fuse" ino=1 res=1 errno=0
[  292.414184][   T29] audit: type=1804 audit(2000000195.030:94): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.601" name="/newroot/113/file1" dev="fuse" ino=1 res=1 errno=0
[  292.437970][   T29] audit: type=1800 audit(2000000195.030:95): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.601" name="/" dev="fuse" ino=1 res=0 errno=0
[  292.558774][ T8324] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  292.604596][ T8324] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  292.704468][ T8333] loop3: detected capacity change from 0 to 512
[  292.739227][ T6304] hfsplus: b-tree write err: -5, ino 4
[  292.814764][ T8333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.828346][ T8333] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.842857][    T8] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0
[  292.851906][    T8] petalynx 0003:18B1:0037.0008: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.5-1/input0
[  292.913588][ T8342] loop1: detected capacity change from 0 to 1024
[  292.948166][ T8345] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.604: verity file corrupted; can't find descriptor
[  293.046725][ T8333] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.604: verity file corrupted; can't find descriptor
[  293.082089][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.108068][ T5828] usb 6-1: USB disconnect, device number 9
[  293.121107][ T8345] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  293.153118][ T8333] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  293.259652][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.266990][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.274593][    T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  293.390807][ T8358] loop3: detected capacity change from 0 to 256
[  293.444883][ T8358] exfat: Deprecated parameter 'utf8'
[  293.491852][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.505464][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.512877][ T8358] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  293.528953][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.561864][    T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c
[  293.585986][ T5838] Bluetooth: hci5: command 0x0406 tx timeout
[  293.592064][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  293.600429][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  293.606554][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout
[  293.612752][ T5838] Bluetooth: hci1: command 0x0406 tx timeout
[  293.623916][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.634048][    T8] usb 5-1: config 0 descriptor??
[  293.776785][    T8] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[  294.145273][ T8374] loop3: detected capacity change from 0 to 64
[  294.151546][ T8376] loop0: detected capacity change from 0 to 256
[  294.173833][ T5828] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  294.206997][ T8376] exfat: Deprecated parameter 'namecase'
[  294.212726][ T8376] exfat: Deprecated parameter 'utf8'
[  294.269551][ T8376] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  294.325972][   T29] audit: type=1804 audit(2000000197.520:96): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.615" name="/newroot/147/file0/bus" dev="loop0" ino=1048650 res=1 errno=0
[  294.349305][ T5828] usb 2-1: Using ep0 maxpacket: 8
[  294.383770][ T5828] usb 2-1: config index 0 descriptor too short (expected 1821, got 853)
[  294.392168][ T5828] usb 2-1: config 0 has an invalid interface number: 103 but max is 2
[  294.434326][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.471160][ T5828] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  294.490627][ T5828] usb 2-1: config 0 has no interface number 1
[  294.496939][    T8] usb 5-1: device descriptor read/64, error -71
[  294.516518][ T5828] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  294.568140][ T5828] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  294.604401][ T8384] sp0: Synchronizing with TNC
[  294.604745][ T5828] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[  294.649964][ T5828] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  294.668677][ T5828] usb 2-1: config 0 interface 103 has no altsetting 0
[  294.696555][ T5828] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4
[  294.707927][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.707956][ T5828] usb 2-1: Product: syz
[  294.707971][ T5828] usb 2-1: Manufacturer: syz
[  294.725089][ T5828] usb 2-1: SerialNumber: syz
[  294.737128][ T5828] usb 2-1: config 0 descriptor??
[  294.795338][    T8] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[  294.878763][ T8390] loop0: detected capacity change from 0 to 4096
[  294.879200][ T8392] overlayfs: missing 'lowerdir'
[  294.902612][ T8390] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  294.962634][ T5828] videodev: could not get a free minor
[  294.973172][ T5828] dsbr100 2-1:0.0: couldn't register video device
[  294.986531][ T5828] dsbr100 2-1:0.0: probe with driver dsbr100 failed with error -23
[  295.010844][   T29] audit: type=1800 audit(2000000198.210:97): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.621" name="bus" dev="loop0" ino=33 res=0 errno=0
[  295.016434][ T5828] usb 2-1: USB disconnect, device number 6
[  295.239044][ T5879] usb 5-1: USB disconnect, device number 8
[  295.303809][   T81] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  295.457890][   T81] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  295.466802][   T81] usb 6-1: config 0 has no interface number 0
[  295.473004][   T81] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  295.494426][   T81] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  295.507103][   T81] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  295.518997][   T81] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  295.537976][   T81] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  295.551899][   T81] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  295.562205][   T81] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.585452][   T81] usb 6-1: config 0 descriptor??
[  295.592354][ T8394] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  295.624371][   T81] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  295.633920][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[  295.652800][   T29] audit: type=1326 audit(2000000198.850:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a7f85d29 code=0x0
[  295.764521][ T8410] loop1: detected capacity change from 0 to 4096
[  295.859709][   T81] usb 6-1: USB disconnect, device number 10
[  295.863056][ T8412] loop4: detected capacity change from 0 to 256
[  295.874127][   T81] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  295.901203][ T8412] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1e19d312, utbl_chksum : 0xe619d30d)
[  295.932528][   T29] audit: type=1800 audit(2000000199.130:99): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.630" name="bus" dev="loop1" ino=33 res=0 errno=0
[  296.280538][ T5831] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  297.514344][ T5913] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  298.288622][ T5913] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  298.308219][ T5913] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  298.330025][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.644'.
[  298.356043][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  298.457465][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  298.458683][ T8446] x_tables: duplicate underflow at hook 4
[  298.492320][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  298.545441][ T5913] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  298.554846][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  298.562910][ T5913] usb 1-1: Product: syz
[  298.587658][ T5913] usb 1-1: Manufacturer: syz
[  298.606392][ T5913] cdc_wdm 1-1:1.0: skipping garbage
[  298.611681][ T5913] cdc_wdm 1-1:1.0: skipping garbage
[  298.632866][ T5913] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  298.687386][ T5913] cdc_wdm 1-1:1.0: Unknown control protocol
[  299.173832][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  299.335098][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.364168][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.380919][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  299.391284][   T81] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  299.432022][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.449267][ T5913] usb 5-1: config 0 descriptor??
[  299.465777][ T8469] loop3: detected capacity change from 0 to 512
[  299.507802][ T8469] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  299.532452][ T8469] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  299.560816][ T8469] EXT4-fs (loop3): 1 truncate cleaned up
[  299.566639][   T81] usb 6-1: Using ep0 maxpacket: 32
[  299.567414][ T8469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.584282][   T81] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  299.584341][   T81] usb 6-1: config 0 has no interface number 0
[  299.631453][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.651555][ T8473] loop1: detected capacity change from 0 to 128
[  299.673828][   T81] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  299.687892][   T81] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.688355][ T8473] EXT4-fs: Ignoring removed i_version option
[  299.701923][   T81] usb 6-1: Product: syz
[  299.706631][   T81] usb 6-1: Manufacturer: syz
[  299.711383][   T81] usb 6-1: SerialNumber: syz
[  299.714121][ T8473] EXT4-fs: Ignoring removed orlov option
[  299.746903][   T81] usb 6-1: config 0 descriptor??
[  299.756009][   T81] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  299.778586][ T8473] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.821116][ T8473] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  299.913987][ T5913] magicmouse 0003:05AC:0265.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0
[  299.938888][ T5913] magicmouse 0003:05AC:0265.0009: magicmouse input not registered
[  299.985742][ T5913] magicmouse 0003:05AC:0265.0009: probe with driver magicmouse failed with error -12
[  300.012812][ T8473] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 7 (only 1 groups)
[  300.013116][   T81] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  300.111583][   T81] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  300.129236][ T5913] usb 5-1: USB disconnect, device number 9
[  300.139539][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  300.288316][   T81] usb 1-1: USB disconnect, device number 12
[  300.322587][ T8480] loop3: detected capacity change from 0 to 512
[  300.529370][ T8485] loop1: detected capacity change from 0 to 512
[  300.544831][ T8480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.626587][ T8485] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  300.639396][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.654580][ T8485] EXT4-fs (loop1): 1 truncate cleaned up
[  300.662365][ T8485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.743529][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  300.843836][   T81] usb 6-1: USB disconnect, device number 11
[  300.851104][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.865887][ T8492] sp0: Synchronizing with TNC
[  300.868825][   T81] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  300.900347][   T81] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  300.912126][   T81] quatech2 6-1:0.51: device disconnected
[  300.921559][ T8489] [U] è
[  301.430833][ T5831] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  301.483751][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  301.648186][ T8500] loop4: detected capacity change from 0 to 32768
[  301.663904][ T5828] usb 2-1: Using ep0 maxpacket: 16
[  301.676228][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.695777][ T8500] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  302.459593][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.469440][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  302.482470][ T5828] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  302.491743][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.503900][ T5828] usb 2-1: config 0 descriptor??
[  302.536353][ T5844] ocfs2: Unmounting device (7,4) on (node local)
[  303.016576][ T8509] loop5: detected capacity change from 0 to 32768
[  303.031091][ T5828] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input11
[  303.064939][ T8509] ocfs2: Bad value for 'localalloc'
[  303.133471][ T5828] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  303.858660][ T5913] usb 2-1: USB disconnect, device number 7
[  303.894915][ T8530] loop5: detected capacity change from 0 to 64
[  303.980992][ T8532] loop0: detected capacity change from 0 to 512
[  304.014937][ T8532] EXT4-fs: Ignoring removed nobh option
[  304.204558][ T8525] loop4: detected capacity change from 0 to 32768
[  304.320069][ T8532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.335954][ T8532] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.350583][ T8525] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  304.363261][ T8531] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.678: bg 0: block 224: padding at end of block bitmap is not set
[  304.450572][ T8531] EXT4-fs (loop0): Remounting filesystem read-only
[  304.467555][ T8555] loop3: detected capacity change from 0 to 256
[  304.504882][ T8555] exfat: Deprecated parameter 'utf8'
[  304.515787][ T8525] XFS (loop4): Ending clean mount
[  304.528732][ T8555] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x12727065, utbl_chksum : 0xe619d30d)
[  304.590772][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.717461][ T5844] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  304.742483][ T8558] loop1: detected capacity change from 0 to 1024
[  304.788689][ T8559] loop5: detected capacity change from 0 to 1024
[  304.840225][ T8559] hfsplus: walked past end of dir
[  304.880549][ T8565] hfsplus: walked past end of dir
[  305.300271][ T8577] loop1: detected capacity change from 0 to 256
[  305.329806][ T8575] loop5: detected capacity change from 0 to 2048
[  305.346638][ T8573] loop4: detected capacity change from 0 to 2048
[  305.367865][ T8575] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  305.369217][ T8577] FAT-fs (loop1): Directory bread(block 64) failed
[  305.406022][ T8578] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.417889][ T8573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.438802][ T8577] FAT-fs (loop1): Directory bread(block 65) failed
[  305.477889][ T8577] FAT-fs (loop1): Directory bread(block 66) failed
[  305.495617][ T8577] FAT-fs (loop1): Directory bread(block 67) failed
[  305.502712][ T8577] FAT-fs (loop1): Directory bread(block 68) failed
[  305.510763][ T8577] FAT-fs (loop1): Directory bread(block 69) failed
[  305.520194][ T8577] FAT-fs (loop1): Directory bread(block 70) failed
[  305.531431][ T8577] FAT-fs (loop1): Directory bread(block 71) failed
[  305.549900][ T8577] FAT-fs (loop1): Directory bread(block 72) failed
[  305.559084][ T8577] FAT-fs (loop1): Directory bread(block 73) failed
[  306.009153][ T8580] loop0: detected capacity change from 0 to 32768
[  306.038004][ T8580] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.696 (8580)
[  306.054847][ T8580] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  306.118655][ T8580] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  306.163817][ T8580] BTRFS info (device loop0): using free-space-tree
[  306.306445][ T8604] loop5: detected capacity change from 0 to 128
[  306.342453][ T8604] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  306.365417][ T8589] loop4: detected capacity change from 0 to 32768
[  306.383464][ T8604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.396562][ T8589] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.699 (8589)
[  306.499707][ T8612] loop3: detected capacity change from 0 to 64
[  306.627577][ T8589] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  306.660394][ T8589] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  306.717632][ T8589] BTRFS info (device loop4): disk space caching is enabled
[  306.749258][ T8589] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  306.885932][ T8589] BTRFS info (device loop4): rebuilding free space tree
[  306.904597][ T5826] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  307.099483][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'.
[  307.102694][ T8589] BTRFS info (device loop4): disabling free space tree
[  307.128323][ T8589] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  307.153801][ T8589] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  307.182667][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'.
[  307.316436][ T8639] loop1: detected capacity change from 0 to 164
[  307.393001][ T8639] Unable to read rock-ridge attributes
[  307.415384][ T8639] Unable to read rock-ridge attributes
[  307.511631][ T5844] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  307.518753][ T8644] loop3: detected capacity change from 0 to 128
[  307.589962][ T8644] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  307.605485][ T8644] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.706198][ T8649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.712'.
[  307.892215][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  308.022556][ T8618] loop5: detected capacity change from 0 to 32768
[  308.303818][ T5913] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  308.373316][ T8662] loop0: detected capacity change from 0 to 32768
[  308.574086][ T5913] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  308.584553][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  308.592662][ T5913] usb 5-1: Product: syz
[  308.597474][ T5913] usb 5-1: Manufacturer: syz
[  308.604213][ T5913] usb 5-1: SerialNumber: syz
[  308.608703][ T8662] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  308.622710][ T5913] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  308.680565][ T8662] XFS (loop0): Ending clean mount
[  308.732046][ T8662] XFS (loop0): Quotacheck needed: Please wait.
[  308.792301][ T8657] loop1: detected capacity change from 0 to 32768
[  308.820682][ T8662] XFS (loop0): Quotacheck: Done.
[  308.941286][ T8685] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.721' sets config #1
[  308.973877][ T5913] vp7045: USB control message 'out' went wrong.
[  308.980689][ T5913] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  308.993814][ T5913] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  309.032670][ T5913] usb 5-1: USB disconnect, device number 10
[  309.043140][ T5826] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  309.264726][ T8657] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  309.303896][ T8657] bcachefs (loop1): recovering from clean shutdown, journal seq 13
[  309.333883][ T8657] bcachefs (loop1): Version upgrade from 1.13: inode_has_child_snapshots to 1.7: mi_btree_bitmap incomplete
[  309.333883][ T8657] Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.19: autofix_errors
[  309.333883][ T8657]   running recovery passes: check_allocations,check_extents_to_backpointers
[  309.452701][ T8657] bcachefs (loop1): accounting_read... done
[  309.462952][ T8657] bcachefs (loop1): alloc_read... done
[  309.471497][ T8657] bcachefs (loop1): stripes_read... done
[  309.489314][ T8657] bcachefs (loop1): snapshots_read... done
[  309.497066][ T8657] bcachefs (loop1): check_allocations...
[  309.519243][ T8657] btree ptr not marked in member info btree allocated bitmap
[  309.519286][ T8657]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  309.527335][ T8698] loop0: detected capacity change from 0 to 32768
[  309.527990][ T8698] ocfs2: Bad value for 'localalloc'
[  309.697133][ T5831] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  309.866743][ T8696] loop5: detected capacity change from 0 to 32768
[  309.906630][ T8657] btree ptr not marked in member info btree allocated bitmap
[  309.906652][ T8657]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2a20405ac3f40602 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  309.935903][ T8696] ocfs2: Bad value for 'localalloc'
[  310.617936][ T8657] btree ptr not marked in member info btree allocated bitmap
[  310.618015][ T8657]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 267fcf747c875937 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  310.828674][ T8710] loop4: detected capacity change from 0 to 2048
[  310.900459][ T8710] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  310.988112][ T8715] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.029007][ T8712] loop0: detected capacity change from 0 to 4096
[  311.070235][ T8657] btree ptr not marked in member info btree allocated bitmap
[  311.070310][ T8657]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d682cebdf2a7eb26 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  311.297823][ T8712] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  311.707684][ T8657] btree ptr not marked in member info btree allocated bitmap
[  311.707706][ T8657]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d771a06d670df06c written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  311.795566][ T8657] btree ptr not marked in member info btree allocated bitmap
[  311.795587][ T8657]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b6c44d07df4e9bb7 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  311.915572][ T8724] input: syz0 as /devices/virtual/input/input12
[  311.948633][ T8657]  done
[  311.965175][ T8657] bcachefs (loop1): going read-write
[  311.986268][ T8657] bcachefs (loop1): journal_replay...
[  312.083790][   T81] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  312.158696][ T8729] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  312.248974][   T81] usb 6-1: Using ep0 maxpacket: 16
[  312.254966][ T8657]  done
[  312.260037][   T81] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.281363][ T8657] bcachefs (loop1): check_extents_to_backpointers...
[  312.292031][ T8657] bcachefs (loop1): scanning for missing backpointers in 6/128 buckets
[  312.307682][   T81] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.335087][ T8657]  done
[  312.341803][ T8657] bcachefs (loop1): resume_logged_ops... done
[  312.351071][   T81] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  312.353801][ T8657] bcachefs (loop1): delete_dead_inodes...
[  312.373746][   T81] usb 6-1: config 0 interface 0 has no altsetting 0
[  312.390904][ T8657]  done
[  312.420730][   T81] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  312.440450][   T81] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.452495][ T8657] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  312.460287][   T81] usb 6-1: config 0 descriptor??
[  312.467138][ T8657] bcachefs (loop1): check_extents_to_backpointers... done
[  312.480832][ T8657] bcachefs (loop1): resume_logged_ops... done
[  312.489157][ T8657] bcachefs (loop1): delete_dead_inodes... done
[  312.504068][ T8657] bcachefs (loop1): bch2_copygc_start(): error creating copygc thread EINTR
[  312.512881][ T8657] bcachefs (loop1): error starting copygc thread
[  312.521967][ T8734] loop0: detected capacity change from 0 to 4096
[  312.522973][ T8657] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR
[  312.546777][ T8657] bcachefs (loop1): shutting down
[  312.551863][ T8657] bcachefs (loop1): going read-only
[  312.567429][ T8657] bcachefs (loop1): finished waiting for writes to stop
[  312.584436][ T8657] bcachefs (loop1): flushing journal and stopping allocators, journal seq 23
[  312.604000][ T8657] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 23
[  312.621782][ T8657] bcachefs (loop1): clean shutdown complete, journal seq 24
[  312.631084][ T8657] bcachefs (loop1): marking filesystem clean
[  312.664324][ T8734] ntfs3(loop0): failed to convert "0080" to macinuit
[  312.685392][ T8657] bcachefs (loop1): shutdown complete
[  312.692748][ T8734] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  312.721462][ T8734] ntfs3(loop0): failed to convert name for inode 1e.
[  312.885753][   T81] hid-generic 0003:045E:05DA.000B: ignoring exceeding usage max
[  312.905554][   T81] hid-generic 0003:045E:05DA.000B: unbalanced collection at end of report description
[  312.925139][   T81] hid-generic 0003:045E:05DA.000B: probe with driver hid-generic failed with error -22
[  313.045299][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  313.193974][   T81] usb 6-1: USB disconnect, device number 12
[  313.307624][ T8726] loop4: detected capacity change from 0 to 65536
[  313.691700][ T8726] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  313.965749][ T8726] XFS (loop4): Ending clean mount
[  313.993549][ T8726] XFS (loop4): Quotacheck needed: Please wait.
[  314.120601][ T8726] XFS (loop4): Quotacheck: Done.
[  314.211290][ T5844] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  314.364102][   T81] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  314.555635][   T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  314.565708][   T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  314.576268][   T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  314.596540][   T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  314.616955][   T81] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  314.646896][ T8757] loop5: detected capacity change from 0 to 32768
[  314.656328][   T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.720557][   T81] usb 1-1: config 0 descriptor??
[  314.729993][ T8759] loop4: detected capacity change from 0 to 256
[  314.895716][ T8657] bcachefs: bch2_fs_get_tree() error: EINTR
[  314.942536][   T81] hdpvr 1-1:0.0: firmware version 0x8 dated ¥)†íËŸâè�=ÛJå¦+nÍoKÜ�o5Éüf¦oŠÉ °ÐôçO¬übL
[  314.968689][ T8757] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  314.970806][ T8768] loop4: detected capacity change from 0 to 4096
[  314.997235][ T8768] EXT4-fs: Ignoring removed nomblk_io_submit option
[  315.006223][ T8657] syz.1.716 (8657) used greatest stack depth: 11424 bytes left
[  315.023956][ T8757] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  315.051681][ T8757] bcachefs (loop5): Version upgrade required:
[  315.051681][ T8757] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  315.051681][ T8757] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors
[  315.051681][ T8757]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  315.124103][ T8757] bcachefs (loop5): dropping and reconstructing all alloc info
[  315.198056][ T8768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.204982][ T8757] bcachefs (loop5): accounting_read... done
[  315.219454][ T8757] bcachefs (loop5): alloc_read... done
[  315.225562][ T8757] bcachefs (loop5): stripes_read... done
[  315.231587][ T8757] bcachefs (loop5): snapshots_read... done
[  315.243236][ T8757] bcachefs (loop5): done starting filesystem
[  315.264112][ T8768] EXT4-fs (loop4): shut down requested (1)
[  315.360696][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.418084][   T81] hdpvr 1-1:0.0: Could not setup controls
[  315.464174][   T81] hdpvr 1-1:0.0: registering videodev failed
[  315.496555][   T81] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71
[  315.542866][   T81] usb 1-1: USB disconnect, device number 13
[  315.543588][ T6395] bcachefs (loop5): shutting down
[  315.638781][ T6395] bcachefs (loop5): shutdown complete
[  315.684453][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  315.907273][ T8771] loop1: detected capacity change from 0 to 32768
[  315.939213][ T8771] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  316.641311][ T8771] XFS (loop1): Ending clean mount
[  316.790666][ T5827] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  317.039071][ T5909] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  317.225364][ T5909] usb 5-1: Using ep0 maxpacket: 32
[  317.232226][ T5909] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  317.241211][ T5909] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  317.260731][ T5909] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  317.273017][ T5909] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  317.288538][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0
[  317.302678][ T5909] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  317.319893][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.326624][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.348584][ T5909] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  317.383810][ T5909] usb 5-1: Product: syz
[  317.394402][ T5909] usb 5-1: Manufacturer: syz
[  317.403972][ T5909] usb 5-1: SerialNumber: syz
[  317.418088][ T5909] usb 5-1: config 0 descriptor??
[  317.444293][ T5909] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  317.495117][ T5909] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  317.593270][ T8800] loop3: detected capacity change from 0 to 32768
[  317.681048][ T5879] usb 5-1: USB disconnect, device number 11
[  317.693722][ T5879] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  317.813685][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  317.919691][ T8800] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,nocow
[  317.970752][ T8800] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  317.979483][ T8800] bcachefs (loop3): Version upgrade required:
[  317.979483][ T8800] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  317.979483][ T8800] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors
[  317.979483][ T8800]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  318.049493][    C1] vkms_vblank_simulate: vblank timer overrun
[  318.405550][ T8800] bcachefs (loop3): error validating btree node at btree alloc level 0/0
[  318.405656][ T8800]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0  
[  318.405700][ T8800]   node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[  318.748795][ T8800] invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: 
[  318.748818][ T8800]   gen 0 oldest_gen 0 data_type btree
[  318.748829][ T8800]   journal_seq_nonempty 6
[  318.748840][ T8800]   journal_seq_empty    0
[  318.748851][ T8800]   need_discard         1
[  318.748861][ T8800]   need_inc_gen         1
[  318.748871][ T8800]   dirty_sectors        0
[  318.748882][ T8800]   stripe_sectors       0
[  318.748892][ T8800]   cached_sectors       0
[  318.748903][ T8800]   stripe               0
[  318.748914][ T8800]   stripe_redundancy    0
[  318.748931][ T8800]   io_time[READ]        1
[  318.748942][ T8800]   io_time[WRITE]       768
[  318.748953][ T8800]   fragmentation     0
[  318.748963][ T8800]   bp_start          8
[  318.748974][ T8800] 
[  318.748983][ T8800]   invalid data type (got 3 should be 9): delete?, fixing
[  318.964838][ T8800] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error
[  318.964838][ T8800]   btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  319.017310][ T8800] bcachefs (loop3): accounting_read... done
[  319.031983][ T8800] bcachefs (loop3): alloc_read... done
[  319.054091][ T8800] bcachefs (loop3): stripes_read... done
[  319.070234][ T8800] bcachefs (loop3): snapshots_read... done
[  319.126240][ T8800] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  319.153913][ T5879] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  319.171886][ T8800] bcachefs (loop3): done starting filesystem
[  319.281214][ T8840] +}[@ calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  319.320440][ T5879] usb 6-1: Using ep0 maxpacket: 8
[  319.330450][ T5879] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  319.339387][ T5879] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  319.359666][ T5879] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  319.376688][ T5879] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  319.386810][ T5879] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.400550][ T5879] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  319.409923][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.430561][ T5839] bcachefs (loop3): shutting down
[  319.445995][ T8846] loop1: detected capacity change from 0 to 64
[  319.538957][ T5839] bcachefs (loop3): shutdown complete
[  319.585134][   T81] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  319.649864][ T8850] loop1: detected capacity change from 0 to 1024
[  319.693565][ T5879] usb 6-1: GET_CAPABILITIES returned 0
[  319.699212][ T5879] usbtmc 6-1:16.0: can't read capabilities
[  319.708847][ T8850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.750861][ T8850] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  319.769880][ T8850] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 32 with error 28
[  319.783325][ T8850] EXT4-fs (loop1): This should not happen!! Data will be lost
[  319.783325][ T8850] 
[  319.794411][ T8850] EXT4-fs (loop1): Total free blocks count 0
[  319.800508][ T8850] EXT4-fs (loop1): Free/Dirty block details
[  319.806627][ T8850] EXT4-fs (loop1): free_blocks=68451041280
[  319.812561][ T8850] EXT4-fs (loop1): dirty_blocks=64
[  319.817837][ T8850] EXT4-fs (loop1): Block reservation details
[  319.824018][ T8850] EXT4-fs (loop1): i_reserved_data_blocks=4
[  319.859152][   T81] usb 5-1: Using ep0 maxpacket: 16
[  319.905093][   T81] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.916274][   T81] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.926708][   T81] usb 5-1: config 0 interface 0 has no altsetting 0
[  319.929730][ T5909] usb 6-1: USB disconnect, device number 13
[  319.939787][   T81] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  319.961578][   T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.973528][ T8204] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  319.999627][   T81] usb 5-1: config 0 descriptor??
[  320.195855][ T8858] loop0: detected capacity change from 0 to 2048
[  320.403801][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  320.431676][   T81] cougar 0003:060B:500A.000C: unexpected long global item
[  320.439246][   T81] cougar 0003:060B:500A.000C: parse failed
[  320.445330][   T81] cougar 0003:060B:500A.000C: probe with driver cougar failed with error -22
[  320.527960][ T5838] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  320.649223][    T8] usb 5-1: USB disconnect, device number 12
[  320.694014][ T5879] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  320.703771][ T5879] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  320.714115][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  320.723110][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  320.734335][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  320.783449][ T5879] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  320.794172][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  320.860892][ T5879] usb 2-1: Product: syz
[  320.883492][ T5879] usb 2-1: Manufacturer: syz
[  321.279720][ T5879] cdc_wdm 2-1:1.0: skipping garbage
[  321.321543][ T5879] cdc_wdm 2-1:1.0: skipping garbage
[  321.486695][ T5879] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  321.492670][ T5879] cdc_wdm 2-1:1.0: Unknown control protocol
[  321.590666][ T8866] loop4: detected capacity change from 0 to 256
[  321.617027][ T8866] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  322.747495][ T8868] loop0: detected capacity change from 0 to 131072
[  322.823438][ T8870] loop4: detected capacity change from 0 to 131072
[  322.864198][ T8868] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  322.870918][ T8868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  322.902961][ T5828] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  322.985260][ T8870] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9)
[  322.995213][ T8870] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  323.016091][ T8870] F2FS-fs (loop4): invalid crc value
[  323.169998][ T5828] usb 6-1: Using ep0 maxpacket: 16
[  323.199108][ T8868] F2FS-fs (loop0): invalid crc value
[  323.206351][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.263772][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.273704][ T8870] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  323.281284][ T5828] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  323.293941][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.306507][ T5879] usb 2-1: USB disconnect, device number 8
[  323.334870][ T5828] usb 6-1: config 0 descriptor??
[  323.461715][ T8870] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  323.492745][ T8870] F2FS-fs (loop4): Bad quota inode 2:50331648
[  323.492989][ T8868] F2FS-fs (loop0): Found nat_bits in checkpoint
[  323.501941][ T8870] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  323.516355][ T8870] F2FS-fs (loop4): Cannot turn on quotas: error -22
[  323.530053][ T8870] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  323.537490][ T8870] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b
[  323.676477][ T8868] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  323.694112][ T8868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  323.753799][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  323.779810][ T5828] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x2
[  323.801316][ T5828] konepure 0003:1E7D:2DB4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0
[  323.851242][ T8868] F2FS-fs (loop0): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0
[  324.033210][ T5828] usb 6-1: USB disconnect, device number 14
[  324.293810][ T5879] usb 2-1: Using ep0 maxpacket: 32
[  324.322694][ T5879] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13
[  324.339734][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.352561][ T5879] usb 2-1: Product: syz
[  324.363378][ T5879] usb 2-1: Manufacturer: syz
[  324.368563][ T5879] usb 2-1: SerialNumber: syz
[  324.384768][ T5879] usb 2-1: config 0 descriptor??
[  324.395050][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400
[  324.402823][ T5879] pvrusb2: **********
[  324.406998][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  324.417778][ T5879] pvrusb2: Important functionality might not be entirely working.
[  324.426111][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  324.438059][ T5879] pvrusb2: **********
[  324.611701][ T2337] pvrusb2: Invalid write control endpoint
[  324.624911][ T5879] usb 2-1: USB disconnect, device number 9
[  324.751586][ T2337] pvrusb2: Invalid write control endpoint
[  324.779888][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  324.805076][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  324.823785][   T81] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  324.831598][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  324.862376][ T2337] pvrusb2: Device being rendered inoperable
[  324.888234][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  324.913984][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  324.965572][ T2337] pvrusb2: Attached sub-driver cx25840
[  324.971359][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  325.001990][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  325.009366][   T81] usb 5-1: Using ep0 maxpacket: 8
[  325.079309][   T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  325.117056][   T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  325.143727][   T81] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  325.173748][   T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  325.201040][   T81] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  325.242340][   T81] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  325.263672][   T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.303128][   T81] usb 5-1: config 0 descriptor??
[  325.333340][ T8891] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  325.519164][ T5831] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  325.623376][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -71
[  325.640503][ T5879] usb 5-1: USB disconnect, device number 13
[  325.704185][   T81] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  326.641095][   T81] usb 1-1: Using ep0 maxpacket: 8
[  326.650807][   T81] usb 1-1: unable to get BOS descriptor or descriptor too short
[  326.664753][   T81] usb 1-1: config 4 interface 0 has no altsetting 0
[  326.675686][   T81] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  326.685024][   T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.693119][   T81] usb 1-1: Product: syz
[  326.713707][   T81] usb 1-1: Manufacturer: syz
[  326.722798][   T81] usb 1-1: SerialNumber: syz
[  326.903532][ T8921] net veth1_virt_wifi : renamed from virt_wifi0
[  327.041492][   T81] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  327.055291][   T81] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  327.066779][   T81] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  327.099946][   T81] usb 1-1: media controller created
[  327.155738][   T81] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  327.174050][ T8925] loop5: detected capacity change from 0 to 64
[  327.207597][   T81] zl10353_read_register: readreg error (reg=127, ret==0)
[  327.240645][   T81] usb 1-1: USB disconnect, device number 14
[  327.730529][ T8923] loop4: detected capacity change from 0 to 32768
[  327.758298][ T8932] loop1: detected capacity change from 0 to 1024
[  327.784349][ T5879] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  327.936898][  T676] hfsplus: b-tree write err: -5, ino 8
[  327.953923][ T5879] usb 6-1: Using ep0 maxpacket: 16
[  327.985624][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.992018][ T8923] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  328.020298][ T8923] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  328.029369][ T8923] bcachefs (loop4): Version upgrade required:
[  328.029369][ T8923] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  328.029369][ T8923] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors
[  328.029369][ T8923]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  328.046432][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.099353][    C0] vkms_vblank_simulate: vblank timer overrun
[  328.456104][ T8923] bcachefs (loop4): dropping and reconstructing all alloc info
[  328.777492][ T8923] bcachefs (loop4): accounting_read...
[  328.828556][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  328.847467][ T5879] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  328.853743][ T8923]  done
[  328.856575][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.873795][ T8923] bcachefs (loop4): alloc_read... done
[  328.887474][ T5879] usb 6-1: config 0 descriptor??
[  328.903753][ T8923] bcachefs (loop4): stripes_read... done
[  328.909532][ T8923] bcachefs (loop4): snapshots_read... done
[  328.931138][ T8923] bcachefs (loop4): done starting filesystem
[  329.187893][ T5844] bcachefs (loop4): shutting down
[  329.232745][ T5844] bcachefs (loop4): shutdown complete
[  329.309618][ T5879] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.000E/input/input13
[  329.417752][ T5879] uclogic 0003:28BD:0909.000E: input,hidraw0: USB HID vff.fe Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0
[  329.457492][ T8951] loop0: detected capacity change from 0 to 32768
[  329.520134][ T8951] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  329.628496][ T5909] usb 6-1: USB disconnect, device number 15
[  329.633490][ T8956] loop1: detected capacity change from 0 to 32768
[  329.646609][ T8956] XFS: ikeep mount option is deprecated.
[  329.686682][ T8951] XFS (loop0): Ending clean mount
[  329.701422][ T8956] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  329.749187][   T29] audit: type=1800 audit(2000000232.950:100): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.806" name="file1" dev="loop0" ino=7430 res=0 errno=0
[  329.769743][    C0] vkms_vblank_simulate: vblank timer overrun
[  329.779407][ T8956] XFS (loop1): Ending clean mount
[  329.832197][ T5826] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  329.907266][ T5827] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  330.465118][ T5909] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  330.647976][ T5909] usb 2-1: Using ep0 maxpacket: 8
[  330.658082][ T5909] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  330.670602][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  330.684699][ T5909] usb 2-1: config 0 has no interface number 0
[  330.690833][ T5909] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  330.709793][ T5909] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  330.728312][ T5909] usb 2-1: config 0 interface 52 has no altsetting 0
[  330.742243][ T5909] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  330.754216][ T5909] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  330.769602][ T5909] usb 2-1: Manufacturer: syz
[  330.804428][ T5909] usb 2-1: config 0 descriptor??
[  331.052677][ T5909] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input14
[  331.125178][ T8991] loop4: detected capacity change from 0 to 512
[  331.174356][ T8991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.193396][ T8991] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  331.323904][    C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  331.323910][   T81] usb 2-1: USB disconnect, device number 10
[  331.366533][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.530090][ T8986] loop5: detected capacity change from 0 to 32768
[  331.587711][ T8998] loop4: detected capacity change from 0 to 4096
[  331.596101][ T8998] ntfs3: Unknown parameter '18446744073709551615ÿÿÿÿÿÿ'
[  331.633313][ T8998] mkiss: ax0: crc mode is auto.
[  331.659283][ T8986] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  331.761533][   T29] audit: type=1800 audit(2000000234.960:101): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.814" name="bus" dev="loop5" ino=17058 res=0 errno=0
[  331.859977][ T9004] loop0: detected capacity change from 0 to 4096
[  331.876792][ T6395] ocfs2: Unmounting device (7,5) on (node local)
[  332.082430][ T9004] ntfs3(loop0): failed to convert "0080" to cp775
[  332.129689][ T9004] ntfs3(loop0): failed to convert name for inode 1e.
[  332.829368][ T9024] loop0: detected capacity change from 0 to 4096
[  332.907542][   T29] audit: type=1800 audit(2000000236.110:102): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.827" name="file0" dev="loop0" ino=0 res=0 errno=0
[  333.087874][ T9028] capability: warning: `syz.1.828' uses 32-bit capabilities (legacy support in use)
[  333.119959][ T9016] loop5: detected capacity change from 0 to 32768
[  333.136896][ T9016] XFS: attr2 mount option is deprecated.
[  333.203965][ T9016] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  333.330646][ T9026] loop4: detected capacity change from 0 to 32768
[  333.394919][ T9026] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  333.455144][ T9016] XFS (loop5): Ending clean mount
[  333.492301][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'.
[  333.499699][ T9016] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 
[  333.515608][ T9026] XFS (loop4): Ending clean mount
[  333.532769][ T9026] XFS (loop4): Quotacheck needed: Please wait.
[  333.534908][ T9016] XFS (loop5): Unmount and run xfs_repair
[  333.571591][ T9016] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  333.609106][ T9016] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  333.623083][ T9026] XFS (loop4): Quotacheck: Done.
[  333.623945][ T9016] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  333.645668][ T9016] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  333.655131][ T9016] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  333.664120][ T9016] 00000040: ff ff ff ff ff ff 01 00 00 00 00 00 00 00 00 00  ................
[  333.673011][ T9016] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  333.685352][ T9016] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  333.695453][ T9016] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  333.728735][ T9016] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74
[  333.768131][ T9016] XFS (loop5): Failed to initialize disk quotas, err -117.
[  333.830750][ T9026] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  333.850308][ T5879] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 
[  333.862966][ T5879] XFS (loop5): Unmount and run xfs_repair
[  333.870715][ T5879] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  333.878628][ T5879] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  333.899116][ T5879] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  333.908402][ T5879] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  333.918949][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'.
[  333.946866][ T5879] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  333.955934][ T5879] 00000040: ff ff ff ff ff ff 01 00 00 00 00 00 00 00 00 00  ................
[  333.964877][ T5879] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  333.973905][ T5879] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  333.982777][ T5879] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  333.991896][ T9016] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74
[  334.109251][ T9035] loop1: detected capacity change from 0 to 32768
[  334.203117][ T6395] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  334.237157][ T6395] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  334.494784][ T9058] loop4: detected capacity change from 0 to 32768
[  334.513085][ T9065] Falling back ldisc for ttyS3.
[  334.600621][ T9035] JBD2: Ignoring recovery information on journal
[  334.632001][ T9035] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  334.698590][ T9058] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  334.698590][ T9058] 
[  334.773560][ T9058] ERROR: (device loop4): remounting filesystem as read-only
[  334.808821][ T9058] syz.4.835: attempt to access beyond end of device
[  334.808821][ T9058] loop4: rw=2049, sector=2621792, nr_sectors = 8 limit=32768
[  334.830941][ T9069] loop0: detected capacity change from 0 to 1024
[  334.851577][ T9069] EXT4-fs: Ignoring removed orlov option
[  334.864824][ T9069] EXT4-fs: Ignoring removed nomblk_io_submit option
[  334.923086][  T114] blkno = 5002c, nblocks = 1
[  334.928070][  T114] ERROR: (device loop4): dbFree: block to be freed is outside the map
[  334.928070][  T114] 
[  334.960349][ T9069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.986215][ T5827] ocfs2: Unmounting device (7,1) on (node local)
[  335.211220][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.294875][ T9082] loop3: detected capacity change from 0 to 256
[  335.377232][ T9082] FAT-fs (loop3): Directory bread(block 1285) failed
[  335.384229][ T9082] FAT-fs (loop3): Directory bread(block 1286) failed
[  335.391137][ T9082] FAT-fs (loop3): Directory bread(block 1287) failed
[  335.398325][ T9082] FAT-fs (loop3): Directory bread(block 1288) failed
[  335.405756][ T9082] FAT-fs (loop3): Directory bread(block 1289) failed
[  335.412633][ T9082] FAT-fs (loop3): Directory bread(block 1290) failed
[  335.419568][ T9082] FAT-fs (loop3): Directory bread(block 1291) failed
[  335.426465][ T9082] FAT-fs (loop3): Directory bread(block 1292) failed
[  335.434053][ T9082] FAT-fs (loop3): Directory bread(block 1293) failed
[  335.440957][ T9082] FAT-fs (loop3): Directory bread(block 1294) failed
[  336.622987][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  336.725486][ T9113] loop4: detected capacity change from 0 to 512
[  336.778538][ T9113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  336.892335][ T9113] EXT4-fs (loop4): 1 orphan inode deleted
[  336.912003][ T9113] EXT4-fs (loop4): 1 truncate cleaned up
[  336.940263][ T9113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.017167][ T9113] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  337.080831][ T9110] loop5: detected capacity change from 0 to 32768
[  337.104087][ T9113] EXT4-fs (loop4): Remounting filesystem read-only
[  337.130878][ T9126] loop1: detected capacity change from 0 to 512
[  337.138434][ T9110] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  337.176268][ T9126] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  337.192176][ T9126] EXT4-fs (loop1): 1 truncate cleaned up
[  337.192334][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.199386][ T9126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.273973][ T5828] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  337.289706][ T9110] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  337.300410][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.371358][   T29] audit: type=1800 audit(2000000240.570:103): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.854" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  337.372359][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'.
[  337.427337][ T9131] batadv0: entered promiscuous mode
[  337.482014][ T5828] usb 1-1: Using ep0 maxpacket: 8
[  337.491461][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.496139][ T6395] ocfs2: Unmounting device (7,5) on (node local)
[  337.504611][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.519832][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  337.539783][ T5828] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  337.551341][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.575049][ T5828] usb 1-1: config 0 descriptor??
[  337.947469][ T9145] loop5: detected capacity change from 0 to 2048
[  337.976779][ T9145] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  337.993886][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.013683][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.032596][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.050582][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.068662][ T5843] udevd[5843]: incorrect nilfs2 checksum on /dev/loop5
[  338.083532][ T9148] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  338.114061][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.138580][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.146296][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.153460][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.161374][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.168869][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.176133][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x1
[  338.183292][ T5828] logitech 0003:046D:C29C.000F: unknown main item tag 0x0
[  338.190591][ T5828] logitech 0003:046D:C29C.000F: item fetching failed at offset 14/133
[  338.200014][ T5828] logitech 0003:046D:C29C.000F: parse failed
[  338.206983][ T5828] logitech 0003:046D:C29C.000F: probe with driver logitech failed with error -22
[  338.545322][ T5828] usb 1-1: USB disconnect, device number 15
[  338.848529][ T9139] loop4: detected capacity change from 0 to 32768
[  338.902280][ T9139] JBD2: Ignoring recovery information on journal
[  339.104408][ T9139] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  339.308856][ T5844] ocfs2: Unmounting device (7,4) on (node local)
[  339.440703][ T9166] loop0: detected capacity change from 0 to 512
[  339.482830][ T9166] EXT4-fs: Ignoring removed orlov option
[  339.531096][ T9166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  339.555771][ T9166] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.876: casefold flag without casefold feature
[  339.678552][ T9166] EXT4-fs (loop0): Remounting filesystem read-only
[  339.686244][ T9166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.693293][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  339.833576][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.673914][ T5828] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  340.835835][ T9207] loop0: detected capacity change from 0 to 128
[  340.843784][ T9205] netlink: 'syz.4.892': attribute type 8 has an invalid length.
[  340.903850][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'.
[  340.913817][ T5828] usb 2-1: Using ep0 maxpacket: 32
[  340.929858][ T5828] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  340.946782][ T5828] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  340.959932][ T5828] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  340.993775][ T5828] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  341.021977][ T5826] sysv_free_block: flc_count > flc_size
[  341.031004][ T5826] sysv_free_block: flc_count > flc_size
[  341.041832][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0
[  341.045418][ T9180] loop5: detected capacity change from 0 to 32768
[  341.061249][ T5828] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  341.070455][ T5826] sysv_free_block: flc_count > flc_size
[  341.070470][ T5826] sysv_free_block: flc_count > flc_size
[  341.070480][ T5826] sysv_free_block: flc_count > flc_size
[  341.070490][ T5826] sysv_free_block: flc_count > flc_size
[  341.070499][ T5826] sysv_free_block: flc_count > flc_size
[  341.070509][ T5826] sysv_free_block: flc_count > flc_size
[  341.070519][ T5826] sysv_free_block: flc_count > flc_size
[  341.070529][ T5826] sysv_free_block: flc_count > flc_size
[  341.075574][ T5826] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  341.086727][ T5828] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  341.135292][ T9180] ocfs2: Bad value for 'localalloc'
[  341.253937][ T5828] usb 2-1: Product: syz
[  341.258407][ T5828] usb 2-1: Manufacturer: syz
[  341.263025][ T5828] usb 2-1: SerialNumber: syz
[  341.271153][ T9214] loop4: detected capacity change from 0 to 1024
[  341.662034][ T9214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.729565][ T5828] usb 2-1: config 0 descriptor??
[  341.733853][  T978] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  341.736979][ T5828] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  341.755615][ T5828] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  341.815395][ T9232] sg_write: process 384 (syz.5.900) changed security contexts after opening file descriptor, this is not allowed.
[  341.832242][ T9232] program syz.5.900 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  341.854948][ T9214] EXT4-fs (loop4): shut down requested (0)
[  341.975388][  T978] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  341.993509][  T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.027586][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.038818][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.061931][ T5879] usb 2-1: USB disconnect, device number 11
[  342.067937][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  342.076359][  T978] usb 1-1: config 0 descriptor??
[  342.089018][ T5879] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  342.092238][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.251395][ T9195] ldusb: No device or device unplugged -19
[  342.277319][ T9244] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  342.287821][  T978] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  342.298332][  T978] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  342.510306][  T978] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  342.534109][  T978] [drm] Initialized udl on minor 2
[  343.396485][  T978] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  343.405695][  T978] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  343.415870][ T5879] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  343.423861][ T5879] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  343.453994][  T978] usb 1-1: USB disconnect, device number 16
[  343.613959][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  344.705774][ T9277] loop4: detected capacity change from 0 to 4096
[  344.723189][ T9277] ntfs3: Unknown parameter ')ocharset'
[  345.345000][ T9294] geneve0: entered allmulticast mode
[  345.373309][ T9296] loop5: detected capacity change from 0 to 1024
[  345.417044][ T9296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.434065][ T9278] loop1: detected capacity change from 0 to 32768
[  345.549533][ T9278] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.777548][ T9292] loop0: detected capacity change from 0 to 32768
[  345.800019][ T9292] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.918 (9292)
[  345.827836][ T6395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.863011][ T9292] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  345.878412][ T9278] XFS (loop1): Ending clean mount
[  345.881657][ T9292] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  346.024411][ T9278] Process accounting resumed
[  346.130584][ T9292] BTRFS info (device loop0): rebuilding free space tree
[  346.158610][ T9292] BTRFS info (device loop0): disabling free space tree
[  346.165885][ T9292] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  346.179543][ T9292] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  346.213700][ T5827] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  346.239207][ T9335] tap0: tun_chr_ioctl cmd 2147767506
[  346.498960][ T5826] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  346.542141][ T9314] loop4: detected capacity change from 0 to 32768
[  346.549473][ T9314] ocfs2: Bad value for 'localalloc'
[  347.141464][ T9337] loop5: detected capacity change from 0 to 32768
[  347.190280][ T9337] JBD2: Ignoring recovery information on journal
[  347.260493][ T9337] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  347.290531][ T9337] 
[  347.292896][ T9337] ======================================================
[  347.299915][ T9337] WARNING: possible circular locking dependency detected
[  347.306930][ T9337] 6.13.0-rc3-next-20241218-syzkaller #0 Not tainted
[  347.313510][ T9337] ------------------------------------------------------
[  347.320516][ T9337] syz.5.929/9337 is trying to acquire lock:
[  347.326401][ T9337] ffff888051a6b480 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}, at: ocfs2_xattr_set+0xe9e/0x1930
[  347.338585][ T9337] 
[  347.338585][ T9337] but task is already holding lock:
[  347.345941][ T9337] ffff888051a6bff8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930
[  347.355426][ T9337] 
[  347.355426][ T9337] which lock already depends on the new lock.
[  347.355426][ T9337] 
[  347.365817][ T9337] 
[  347.365817][ T9337] the existing dependency chain (in reverse order) is:
[  347.374817][ T9337] 
[  347.374817][ T9337] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}:
[  347.382634][ T9337]        lock_acquire+0x1ed/0x550
[  347.387656][ T9337]        down_read+0xb1/0xa40
[  347.392327][ T9337]        ocfs2_init_acl+0x397/0x930
[  347.397521][ T9337]        ocfs2_mknod+0x1c05/0x2b30
[  347.402626][ T9337]        ocfs2_create+0x1ab/0x470
[  347.407642][ T9337]        path_openat+0x192f/0x3580
[  347.412755][ T9337]        do_filp_open+0x27f/0x4e0
[  347.417775][ T9337]        do_sys_openat2+0x13e/0x1d0
[  347.423403][ T9337]        __x64_sys_openat+0x247/0x2a0
[  347.428763][ T9337]        do_syscall_64+0xf3/0x230
[  347.433776][ T9337]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.440181][ T9337] 
[  347.440181][ T9337] -> #1 (jbd2_handle){++++}-{0:0}:
[  347.447474][ T9337]        lock_acquire+0x1ed/0x550
[  347.452494][ T9337]        jbd2_journal_lock_updates+0xaa/0x380
[  347.458555][ T9337]        __ocfs2_flush_truncate_log+0x2ea/0x1240
[  347.464885][ T9337]        ocfs2_flush_truncate_log+0x4f/0x70
[  347.470772][ T9337]        ocfs2_sync_fs+0x125/0x390
[  347.475875][ T9337]        sync_filesystem+0x1c8/0x230
[  347.481159][ T9337]        generic_shutdown_super+0x72/0x2d0
[  347.486958][ T9337]        kill_block_super+0x44/0x90
[  347.492147][ T9337]        deactivate_locked_super+0xc4/0x130
[  347.498031][ T9337]        cleanup_mnt+0x41f/0x4b0
[  347.502956][ T9337]        task_work_run+0x24f/0x310
[  347.508058][ T9337]        syscall_exit_to_user_mode+0x13f/0x340
[  347.514208][ T9337]        do_syscall_64+0x100/0x230
[  347.519306][ T9337]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.525715][ T9337] 
[  347.525715][ T9337] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}:
[  347.536227][ T9337]        validate_chain+0x18ef/0x5920
[  347.541597][ T9337]        __lock_acquire+0x1397/0x2100
[  347.546958][ T9337]        lock_acquire+0x1ed/0x550
[  347.551974][ T9337]        down_write+0x99/0x220
[  347.556724][ T9337]        ocfs2_xattr_set+0xe9e/0x1930
[  347.562086][ T9337]        __vfs_setxattr+0x468/0x4a0
[  347.567281][ T9337]        __vfs_setxattr_noperm+0x12e/0x660
[  347.573085][ T9337]        vfs_setxattr+0x221/0x430
[  347.578108][ T9337]        filename_setxattr+0x2af/0x430
[  347.583554][ T9337]        path_setxattrat+0x440/0x510
[  347.588833][ T9337]        __x64_sys_setxattr+0xbc/0xe0
[  347.594195][ T9337]        do_syscall_64+0xf3/0x230
[  347.599209][ T9337]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.605627][ T9337] 
[  347.605627][ T9337] other info that might help us debug this:
[  347.605627][ T9337] 
[  347.615849][ T9337] Chain exists of:
[  347.615849][ T9337]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem
[  347.615849][ T9337] 
[  347.631598][ T9337]  Possible unsafe locking scenario:
[  347.631598][ T9337] 
[  347.639050][ T9337]        CPU0                    CPU1
[  347.644403][ T9337]        ----                    ----
[  347.649762][ T9337]   lock(&oi->ip_xattr_sem);
[  347.654359][ T9337]                                lock(jbd2_handle);
[  347.660957][ T9337]                                lock(&oi->ip_xattr_sem);
[  347.668065][ T9337]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  347.675354][ T9337] 
[  347.675354][ T9337]  *** DEADLOCK ***
[  347.675354][ T9337] 
[  347.683491][ T9337] 3 locks held by syz.5.929/9337:
[  347.688508][ T9337]  #0: ffff88806cbe0420 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[  347.697746][ T9337]  #1: ffff888051a6c2c0 (&sb->s_type->i_mutex_key#38){+.+.}-{4:4}, at: vfs_setxattr+0x1e1/0x430
[  347.708214][ T9337]  #2: ffff888051a6bff8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930
[  347.718160][ T9337] 
[  347.718160][ T9337] stack backtrace:
[  347.724053][ T9337] CPU: 1 UID: 0 PID: 9337 Comm: syz.5.929 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0
[  347.724075][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  347.724088][ T9337] Call Trace:
[  347.724094][ T9337]  <TASK>
[  347.724101][ T9337]  dump_stack_lvl+0x241/0x360
[  347.724122][ T9337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  347.724136][ T9337]  ? __pfx__printk+0x10/0x10
[  347.724160][ T9337]  print_circular_bug+0x13a/0x1b0
[  347.724176][ T9337]  check_noncircular+0x36a/0x4a0
[  347.724190][ T9337]  ? __pfx___might_resched+0x10/0x10
[  347.724207][ T9337]  ? __pfx_check_noncircular+0x10/0x10
[  347.724221][ T9337]  ? lockdep_lock+0x123/0x2b0
[  347.724240][ T9337]  ? bdev_getblk+0x6e/0x670
[  347.724255][ T9337]  validate_chain+0x18ef/0x5920
[  347.724284][ T9337]  ? __pfx_validate_chain+0x10/0x10
[  347.724305][ T9337]  ? __pfx_lock_acquire+0x10/0x10
[  347.724322][ T9337]  ? ocfs2_inode_lock_full_nested+0x17b/0x1be0
[  347.724345][ T9337]  ? look_up_lock_class+0x77/0x170
[  347.724365][ T9337]  ? register_lock_class+0x102/0x980
[  347.724384][ T9337]  ? __pfx_register_lock_class+0x10/0x10
[  347.724403][ T9337]  ? mark_lock+0x9a/0x360
[  347.724422][ T9337]  __lock_acquire+0x1397/0x2100
[  347.724445][ T9337]  lock_acquire+0x1ed/0x550
[  347.724462][ T9337]  ? ocfs2_xattr_set+0xe9e/0x1930
[  347.724478][ T9337]  ? __pfx_lock_acquire+0x10/0x10
[  347.724496][ T9337]  ? do_raw_spin_unlock+0x13c/0x8b0
[  347.724511][ T9337]  ? __pfx___might_resched+0x10/0x10
[  347.724527][ T9337]  ? _raw_spin_unlock+0x28/0x50
[  347.724544][ T9337]  ? ocfs2_inode_lock_tracker+0x45a/0x760
[  347.724563][ T9337]  ? ocfs2_xattr_block_find+0x17e/0x540
[  347.724579][ T9337]  down_write+0x99/0x220
[  347.724592][ T9337]  ? ocfs2_xattr_set+0xe9e/0x1930
[  347.724606][ T9337]  ? __pfx_down_write+0x10/0x10
[  347.724620][ T9337]  ? __kmalloc_cache_noprof+0x243/0x390
[  347.724635][ T9337]  ? ocfs2_xattr_set+0x4d5/0x1930
[  347.724650][ T9337]  ocfs2_xattr_set+0xe9e/0x1930
[  347.724670][ T9337]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  347.724688][ T9337]  ? __pfx_lock_release+0x10/0x10
[  347.724706][ T9337]  ? __pfx_validate_chain+0x10/0x10
[  347.724728][ T9337]  ? mark_lock+0x9a/0x360
[  347.724753][ T9337]  ? aa_get_newest_label+0xff/0x6f0
[  347.724771][ T9337]  ? posix_xattr_acl+0x76/0xd0
[  347.724788][ T9337]  ? evm_protect_xattr+0x4be/0xb30
[  347.724804][ T9337]  ? rcu_is_watching+0x15/0xb0
[  347.724819][ T9337]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  347.724835][ T9337]  __vfs_setxattr+0x468/0x4a0
[  347.724860][ T9337]  __vfs_setxattr_noperm+0x12e/0x660
[  347.724887][ T9337]  vfs_setxattr+0x221/0x430
[  347.724911][ T9337]  ? __pfx_vfs_setxattr+0x10/0x10
[  347.724935][ T9337]  filename_setxattr+0x2af/0x430
[  347.724948][ T9337]  ? __phys_addr_symbol+0x2f/0x70
[  347.724970][ T9337]  ? __pfx_filename_setxattr+0x10/0x10
[  347.724985][ T9337]  ? getname_flags+0x1e3/0x540
[  347.725000][ T9337]  path_setxattrat+0x440/0x510
[  347.725018][ T9337]  ? __pfx_path_setxattrat+0x10/0x10
[  347.725034][ T9337]  ? do_sys_openat2+0x17a/0x1d0
[  347.725058][ T9337]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  347.725077][ T9337]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  347.725096][ T9337]  __x64_sys_setxattr+0xbc/0xe0
[  347.725112][ T9337]  do_syscall_64+0xf3/0x230
[  347.725124][ T9337]  ? clear_bhb_loop+0x35/0x90
[  347.725145][ T9337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.725163][ T9337] RIP: 0033:0x7f8a93d85d29
[  347.725178][ T9337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  347.725191][ T9337] RSP: 002b:00007f8a94bb3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  347.725208][ T9337] RAX: ffffffffffffffda RBX: 00007f8a93f75fa0 RCX: 00007f8a93d85d29
[  347.725219][ T9337] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000020000140
[  347.725230][ T9337] RBP: 00007f8a93e01a20 R08: 0000000000000000 R09: 0000000000000000
[  347.725239][ T9337] R10: 00000000000000fd R11: 0000000000000246 R12: 0000000000000000
[  347.725249][ T9337] R13: 0000000000000000 R14: 00007f8a93f75fa0 R15: 00007ffdac8631e8
[  347.725264][ T9337]  </TASK>
[  348.160161][ T9355] hsr0: entered promiscuous mode
[  348.166680][ T9355] macsec2: entered allmulticast mode
[  348.172506][ T9355] hsr0: entered allmulticast mode
[  348.179873][ T9355] hsr_slave_0: entered allmulticast mode
[  348.188680][ T6395] ocfs2: Unmounting device (7,5) on (node local)
[  348.191077][ T9355] hsr_slave_1: entered allmulticast mode
[  348.226562][ T9355] hsr0: left allmulticast mode
[  348.232629][ T9355] hsr_slave_0: left allmulticast mode
[  348.249766][ T9355] hsr_slave_1: left allmulticast mode