last executing test programs: 2m5.080785305s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='900\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) 2m4.401887702s ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x7, "10ff001102005a"}}, 0xd) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000f00)={0xc, {0x14, "11ff04100800"/20}}, 0x1a) 2m4.121846329s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109027100030100c00009040000010101000007058303400001090400010101010000070583034000010904010000010200000904010101010200000b2402010203180144ac00070581010002010904020000010200000904020101010200000b2402010203180144ac0007050201000201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) 2m3.553492353s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd09, &(0x7f0000000280)="0400000000000000000000007c01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f00000002c0)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000300)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 2m3.381430748s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000800)=@filename='nfsd\x00', &(0x7f0000000900)='./proc/fs/nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='2049\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/fs/nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) 2m2.643711136s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x1}, 0x0) nanosleep(&(0x7f0000000800)={0x1}, 0x0) nanosleep(&(0x7f0000000800)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) 2m2.542114859s ago: executing program 1 (id=9): r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x0, 0x559e, &(0x7f0000005680)="$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") r1 = openat(r0, &(0x7f0000000080)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f00000000c0)='A', 0x1) fsync(r1) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)='test2\x00', 0x0) sendfile(r3, r2, 0x0, 0x8000000) close(r0) umount2(&(0x7f0000005600)='./file0\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1ff) r5 = fsopen(&(0x7f0000000400)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000440)='source\x00', &(0x7f0000000480)='/dev/loop1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) move_mount(r6, &(0x7f00000004c0)='\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x4) 2m1.222523192s ago: executing program 2 (id=10): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = eventfd(0x11111111) r2 = eventfd(0x22222222) r3 = eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) r6 = eventfd(0x22222222) read(r1, &(0x7f0000000008), 0x8) read(r2, &(0x7f0000000010), 0x8) read(r3, &(0x7f0000000018), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) read(r6, &(0x7f0000000030), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 2m0.854328071s ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000640)='ep1\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2m0.800906242s ago: executing program 2 (id=12): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) 1m59.475283026s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1, 0x50ec, &(0x7f0000000100)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVhRcVQ1VaNUQk5T8qYREtTkoVTUQa5m7z2zd87deTjedbzp7yd558z8z/POw3PuvXMuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/8ORW95xXrP4uy976Mc/vef9nz/4mbnbn/zOl24JYXL+8Y4s3HH+ia91V45/5GcHHv/mNzasefhkb14uj4dV1T+d+Z0vxFqfWR3CDzpC6E4DawezQE9+fzDW96bBENaEhUCtxNRAViJtOPy8P4RDYSFQq+pH/SEMFgJbHr7/vq9UE3f0h3BhCKGStvHLStZGfxq4qDcLDKSBG7uzwP+cytQCP+zMAnDG4puh9qKfm6zPMLJ4uQavv54l69irKx1eV0yMNM73283L3KmC3vSByTN62krVsSxKb4+j3m0r4N1W2s63edqKX6TybyinFkKV0Llj6ppt+2b2xkc6w9hYV6Oalul5fuS5z24/nfSKeR3GDowsyevwzq8/9blvPX3l3Xd98QNX3/vi86Nn2s3jhU1aTC+3SshfcyvmeYw2+TxZAW+/0rekUV+6QghffuJv/6RZvDT/H2k+/48v53jbWZc71npyKJubx0cGY+LEUDY3BwAAgBVjJew1nf3O5RPN6ivN/0fbO/4fD/nnk/lstEdD2DSfuHk4hAvmH88CR2JznxwO4a3zqcn6wOYkcDSEN8wnLqlVlZToiyVGk8CzQ3lgUxI4FgOTSeDbMXBbEvhCDMwlge0xcDQJvDcGwnT9OP54KB9H24H+GNiabcS5eBbCC0OxtWRbPVqrCgAAYInks8Oe+ruFcx3ONEOcXs71t8oQz8BumKGS1JDOYGvTqoY1dLeqobNVDbVxzzYffqnmjlY1l07D6KjPsPuzv/uz0ERp/j/efP5fWaQjHaXj/yFcNf835u7MIzO1+NbJugwAAADAGVi1+YYtzeKl+f+m9s7/j/tEugqZw4NxN8TO4RDG6wNZtZeXA9lR71V5AAAAAFaC2vH42rHw6fw2O0U7nU+X80+eZv544H/Tovl//cF3Xdesv6X5/2R75/8P1N9mnTgWe/HV4RD6CoEHYi+rgXmjMfDEe+oD+fiPxQ1wa6wqPzGhVtWtscTWGBhPAocalXioVuKC+kD+ZNUav7k2jum8RCEAAAAAZ13cHRCPy8fz/x/Zd/x9zcqV5v9bT+/8//l5cOn0/plVIazrDqEr/WHAgwPZwoAxMNiRJ346kNXVlVZ1YCCEK6oDS6t6Ml//vztdY/Dh/qyqGLjgbd997qJq4u/6Q1hXDPzi44c3VBN7k0Ct8Y/1h/CW6mjTxr/flzXekzZ+Z18Iby4EalV9si+EamO9aVX3V/LrGKRV3VsJ4bxCoFbVxkoI+wMAK1T8r3RH8cE9+2/auW1mZmr3MibiPvz+cM30zNTY9htndlQa9GlH0ue6ZYwOlMfUcDmkxKP5EkVHXr5sqJ107XeC48W+5PvxSycO5vfjd6Ge+XFO9NTdvTQd8jveXm4iFL5JvVpDHihWsvAkluqP+XvDqtC3b8/U7rFPb9u7d/f67G+72Seyv3FQ2bZan26rgcX6dg68PC4uVrJu7/W71u3Zf9Pa6eu3XTt17dQNE+Pv3LBxw8T4xo3rqqMaz/62GOrFi1WdDPXU4bM/1Dd2Fyo5G58aEhISKy0xe/PhVc0+fkrz/13N5//xUyd+8ufrMzQ6/j8SD/Nnjy8c5t8aA4faPf4/0uhofu3EgNEkMBsDsw7zAwAA8NoQd0fG3Y5xr3Xv4Ut/06xcaf4/297v/5do/f/a0vUfarTM/yWxxHij9f/TZf5r6//PNlr/P13mv7b+/6FXYf3/fbVAsklesP4/AADwWnD21v9vubx/eoGAUoaWy/unFwgoZWi5jH+7Fwg47fX/J657/JnQRGn+f1t7838L9wMAAMC54/Z/eu4tzeKl+f+h9ub/Z3/9v9Do/P/RRoHJRgsDWv8PAACAFarR+n+nhv/iY83Kleb/c+3N/+NpF511uWOtJ4eyNe1CuqbdiaHaTwYAAABgZegMY2M9beatWxl18ytv85F8KdBm6aIHLv+va5vVV5r/H21v/l/3u4w7v/7U57719JV3n7zrix+4+t4Xnx9dOP4PAAAALJ9290sAAAAAAAAAAAAAAACvvn2f+NcTzeKl3/+Hq+Yfb/T7/3jdv/j7gtfX5Y61tl7/L7+/5cP37J9fsvDBoRDeXgzsPLhzTcivzX9xMXDf1ZecX00cTEv85LH3/qqa+EQa+ODa171UTVyRBLbGRRLfkAbiVRVfWp0E4vKK/54G4vaYSwO9eeDLq7NxdKTb6teD2bbqSLfVfwyGMFwI1LbVDwazNjrSAd6RBGoD/FQaiAP8SB7oTHt1z6qsVzEwGIv+zaqsVwAAnLPit8CecM30zNR4/Aofb9/YXX8b1S1ZdqBcbVebzT+aL0125OXLhtpJd6XfRReuNd4TKtUhrC99XS1m6Zgf5dLU0mLTvb7BkFut9rZcm6638Yj6sxGNbb9xZkdPy4Ff2jrLRHfLLOtLk51ils75TdpGLW30pY0Rtblt2uhyvN8Zxsa6klzvisGRUKfVK6Ld3+sX1/lr9Coo5jkw0/OHZvWV5v8j7c3/K8VxvZRfDGA2XlnvL4ct8w8AAADL68ubf39X/PeT4Y/+Z7O8pfn/aHvz/7hjLD8UnO3tOBqv/3/zcAjzl9YfyQJHYnOfHA7hrfOpyVgiu6D+h2KJ8SxwJO4wuSSW2DpZX1VfDMwlgWeH8sDRJHAsBvK9FN8N+a6c24dC2DCfuqq+xK5YYiQJfDQGRpPAWAyMJ4HVMbApCfxmdR6YTAL/EgNhun5b/cPqfFsBAACcjnye1VN/N6TzvLnuVhk6WmUYaJWhs1WGSqsMjUYR738vZugpHo/PM8SHetJa+5NaShnixfBPu1+lDOGh+pxpwVLTtTNJRupzxgxb5g6uDk2U5v/j7c3/B+pvs9aPxfn/wvX/ssADsXtfjaeOj8bAE++pD+Q7Bo7Fye6ttaom8xL5pP3WWGJTDIwmgV0xsCkJbL0qDxw6vz6Qz7Rrjd9ca3w6L1EIAAAAwFkXdxDE3TRx/v/ffX/462blSvP/Te3N/2N7q4qNfSHW+szqEH7QsdCbWmDtYBaI+zEG48/j3zQYwprCDo5aiamBrERv0nD4eX/2C/XetKof9Wc/Poj3tzx8/31fqSbu6A/hwsLel1obv6xkbfSngYt6s8BAGrixOwvEPT+1wA87swCcsdpewfiCyk91qRlZvFyD199r5Zqg6fBK+0AXybfYb66WSyV9IN+nWnN6T1upOpZF6e1x1LttJb7bRrzbil+k8m8opxZCldC5Y+qabftm9sZHir9kLVmm57n4K9V20kvwOpx95b1trZJ2YDz5+BhfvNzir8OOWN2dX3/qc996+sq77/riB66+98XnR9vuRgPxh8I3XPe/Q8cLm3e5VUL+mltxnyeTPk9W4n8Do562EMItcxe80Cxemv9Ptjf/705u5/0+bsw9wyG8o7BxH4yb/33D2edgIZB9Sp5XDmSH3J8eavjJCQAAAEuttrujtr9gOr/NTghP58nl/JOnmT/ur9i0aP52+/2ZCy/8x2bx0vx/a/P5f1/STcf/Hf9nmTj+v6hzfVd0X/rA7Bntii5Vx7Jw/H9R5/q7zfH/RTn+7/j/Yhz/b8Hx/0Wd609b6VvSLl+6Qgj937/8oWbx0vx/V3vzf+v/Lb5oX239v62N1v/b1Wj9v1nr/wEAAMuqwUJz6TyvtHpfKUO6el8pQ8sFAlsuMWj9v9Ne/2/grz7+u9BEaf4/2978P74cVhVbXynr/41e1aCq22Jgl4UBAQAAOBc12kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAq+vZ4wPvbxZ/92UP/fin97z/8wc/M3f7k9/50i0hTM8/3pGFO84/8bXuyvGP/OzA49/8xoY1D5+s5OV68ts/qssdaz05FMKhwiODMXFiqHpnIbDlw/fs764mHhwK4e3FwM6DO9dUE98eCuHiYuC+qy85v5o4mJb4yWPv/VU18Yk08MG1r3upmrgiD3Sk3b17ddbdjrS7X1kdwnAhUOvudavrq6q1cWUe6Ezb+PvBrI0YGIxF7xrM2oiBmVhiui+Edd0hdKVV/XMlq6orrerHlayqrrSqz1dCuCKE0J1W9VhvVlV3OvJ/682qioEL3vbd5y6qJg71hrCuGPjFxw9vqCY+lQRqjf9pbwhvqb5k0sa/15M13pM2fkdPCG8OIfSmJV7szkr0piWe7A7hvEKg1vifd4ewP/CaED98dhQf3LP/pp3bZmamdi9jojdvqz9cMz0zNbb9xpkdlaRPjXQU0qcOlOOdbY790ec+u716e+Tly4baSXfn5XrmuzzRU3f30qXqfccy9T72a6BYycLzUao/5u8Nq0Lfvj1Tu8c+vW3v3t3rs7/tZp/I/nbl0WxbrV+qbdWuV7qtLi5Wsm7v9bvW7dl/09rp67ddO3Xt1A0T4+/csHHDxPjGjeuqoxrP/i7FUA+X413LPNQ3dhcqORsfABISEist0Vn36TZ+rv+XXfqiv9DRnlCZ/4AuTSuKWTrmR7kUg97cPL6Ugy5NSUojWl+aOJSyTLTOcmlpMrGQpT/LMv+9rjQ5LNbUOb9J4/3OMDbW8H+6kfq7xc3320U2b7seyTddu2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//19BHGg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file2\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x0, 0x1000, 0x1, 0x0, 0x0, [{{r1}}]}) 1m58.159138019s ago: executing program 0 (id=18): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x2}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 1m58.078907001s ago: executing program 1 (id=19): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 1m57.74202993s ago: executing program 0 (id=20): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x10000) r1 = eventfd(0x11111111) r2 = eventfd(0x22222222) r3 = eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) r6 = eventfd(0x22222222) read(r1, &(0x7f0000000008), 0x8) read(r2, &(0x7f0000000010), 0x8) read(r3, &(0x7f0000000018), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) read(r6, &(0x7f0000000030), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 1m57.420846458s ago: executing program 0 (id=21): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x14, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28}) 1m56.449441442s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000640)='ep1\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m55.774582929s ago: executing program 2 (id=23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x64) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x64, 0x2) r2 = memfd_create(&(0x7f0000000200)='memfd\x00', 0x0) ftruncate(r2, 0x1000) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) fsync(r1) 1m55.511173166s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x6) 1m55.510852676s ago: executing program 0 (id=25): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000100000)=""/262144, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000100000)='\x00'/262144, 0x40000) ftruncate(r1, 0x80000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) ioctl(r3, 0x40086610, &(0x7f0000000800)="0000100000000000") 1m54.881759812s ago: executing program 0 (id=26): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) write(r0, &(0x7f0000000100)="02fa", 0x2) write(r0, &(0x7f0000000140)="02aa", 0x2) write(r0, &(0x7f0000000180)="0200", 0x2) write(r0, &(0x7f00000001c0)="02fa", 0x2) 1m54.070568002s ago: executing program 0 (id=27): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="b7010000000000007b1af8ff00000000bfa10000000000001701000008000000b702000008000000b7030000010000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.89435598s ago: executing program 32 (id=27): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="b7010000000000007b1af8ff00000000bfa10000000000001701000008000000b702000008000000b7030000010000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.632414507s ago: executing program 33 (id=19): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 32.314147795s ago: executing program 34 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x6) 31.931855484s ago: executing program 35 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x1}, 0x0) nanosleep(&(0x7f0000000800)={0x1}, 0x0) nanosleep(&(0x7f0000000800)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) 10.71134484s ago: executing program 4 (id=28): r0 = syz_mount_image$xfs(&(0x7f000000d4c0), &(0x7f000000d500)='./file0\x00', 0x0, &(0x7f000000d540), 0x0, 0xd4a0, &(0x7f000000d580)="$eJzs3QtsleX9wPG3lFZq1PxNTPRvYoYgojhFWhWZCrQ4WAWLyJQKAyTSFRGvEAduURZDNjWLGJdtxkXHZnSbZMsuKNuSDWcAwagwDYwsgTGNl6mAceMyDV3OrbSH0tgHn6dDPp+Enr7v6e9pOd8+77EmhzaPndyQZX2zgsVZufrvrt+0/rVxP1g+4c8nPjjnll8Vzo4eXby7f/H29OLtgCy/WP7uPoVTNdlvV/TJHfTpuO6xNTUVJ2TZScXD0nrDCzd3rit9XFuZ4un/K92fX7Qi/+b+wp92NfnPc23lrI7rFD664uC/6FGquX7c2NIj2KFbZfHuigP35W/7Fv6MWp9lo9Zmh/z+6FW5r3PxSY99fGVvfyFHgub6cY1l/UcXO1cU92P/8j14NCr/Pm/92aYtxYewossL5xGiuX7shKybfTxy1vzL2wrXzaosy6qzLDsmy7J+vd2DT0d9Q11D7ppfOi5mL+3/xV19X8zY++EbWZYdX3yeGFF6LgCOLPUNdWO62P/V3e3/0Y1P/Mv+hyNfY31DXW6vl+3/ft3t/9dWDjuh+LP/8MLU/t79SwAAAAAAXZq/6K6bZs2b13KHd7zjHe+0v9PbVyYgtgObvre/EiC1FP850dt/RwAAADjaNTbVv19Z0elUZceD015qyd9esKd5zn2rlqws3RbvHt/Fkp1e59/W1tZ2347q0utjjyl7vWy/8uHc+nOPG7K0eNi//PUHVfmzVdn1X71xXsv5uU81sCpbmDsYllv3zKpsae6gNncwuCr7ae6gLn9Qk63KHZx3w63zZudOnBX4iH22NDYtzio7Fcs6fTd07D/3uEk/Kt12s2Rptfw/KpHrv2LFgifL7is5RP/29U//H/z3BT5TetZ/enPptpslD9r/t//6L/Vd3Xfo/u3rD9A/ri6u/50alV/3y67//btYsn3+mYWtM3P9H51xbGn/9/0k1/8O6w8s759fvP36n1vqjNL1P/fcMuiwHoyjUGPTN9/vbv9337/vqcUP69Nhtn21sRM3Lcr1X7fwe8uLp6p62P+M7vZ/Rf+Drif0UGPTsray/d+D/tngLpZsb7K0etqJuf7brz57aof7etJ/UHn/oQtuvm3o/EV3nXvjzbNaW1pbbqmrHXHhxRfUjqgdMTR/SSi8PbwH5ShyePs/O7ZspiLLBrXPv/v2hsty/S9c/dGa4ql+Pex/Zrf7//rOXysdDOiTVVdnC2ctWHDHsMLb0mFt4W3hw7ro34Pn/4GlH6JqircVWXZK+/w9H//uqlz/feueXFY8Vd3D/oO761994PMS6DD3/+yymU79T3vqkadz/adPaLiieKqnz/9ndbv/F9v/h6uxqex/+HzKcv1bdr64MHD8bD//xZWi/8i2tScGjg/RP64U/ffsev6iwPFz9I8rRf9vb9v2fOD45/WPK0X/+g1/eyNw/Fz940rR/9RVm78TOH6e/nGl6P/qK6/+PHB8qP5xpejfuu/R/w8cP1//uFL0/8Xux0cGjg/TP64U/f/95sNTAsdr9Y8rRf9L3/n+bYHjdfrHlaL/mDUPLAkcv0D/uFL0v3/dgz8OHL9Q/7hS9N+45d4XA8cv0j+uFP1P2fSt9wLHh+sfV4r+Wz+Yckbg+MX6x5Wi/8n7J4d+ihH6x5Wi/4QdM+cGjn9B/7hS9F+yfVro7+K8RP+4UvT/z8vjVgaOX6p/XCn61z035vHA8cv0jytF/zkbJ+4OHB+pf1wp+i/bOn5j4Pgo/eNK0f+FfX+6O3B8tP5xpehfsfsP1wWO1+sfV4r+U998NvQFmQ36x5Wi/8Pv/ObkwPEx+seVov97a375j8Dxy/WPK0X/QeueXh04/kX940rR/+4tTy0PHB+rf1wp+j+76ScPBI6P0z+uFP1v/2D+mMDxL+kfV4r+K/d/bXbgeKP+caXo//qOrx8fOH6F/nGl6D9k+z1DAsfH6x9Xiv7XvHzDtsDxCfrHlaL/D59r3Rs4fqX+caXov3bjTQ8FjjfpH1eK/idsvfWZwPGJ+seVov/v3x5cFTh+lf5xpeg//62BAwLHJ+kfV4r+Z+0Z2tXvCfkkrtY/rhT9t+89J/S3yU/WP64U/R/bPPyRwPEv6x9Xiv5T/lr3x8Dxa/SPK0X/414YtTlw/Fr940rRf/XaS3YFjk/RP64U/Sv//u7FgePN+seVov/6nTs/Fzh+nf5xpej/UNvrdwaOT9U/rhT9m3e9NSlwfJr+caXoP3jbR08Ejn9F/7hS9N+xoe3ewPHp+seVov+KVR/+M3B8hv5xpej/jVf2vBQ4PlN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOwHbdC4Y938/Yx37lqRk3/edrENI1iwlFLIXUkloG0qFRKEoa4hQIbuSpDASFdoslX3f92X+x5gZSafe3vft+Pn3nud5HM993dcy1/O9v5/rup6bqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqr/i2225sarDQYTjlsb+Q/7Rxw+6sZR16915BnrXjbtITvtdtbYrauuOm73bKNf1eClk720e9jYQ4YPzjl52JiVYa8872TDhw9NNRiagUe155P/xbCnGf/mpZMOvfRy4Niflxs+5mWfixfa+L84l7rNRqy15rgZHHqF2wTjdg+Nn91xywnH/izz1GCwzKWD17w+Xv9uOvuk9V7vMfwntNmItdZ+lf9gnPNL7q++v629+jr/1Kqjdn9d4f5NbTZizXXHWL/WfXzDdQ8MHz32uT7RYDCYeDAYTDIYDCZ9vT3q39OI1ZZcbcwzf/z6WPWR478Q0PN9aGij47cc9/d12cFg+Krj/xZU1X9WI1ZbcnW4/yd+eT/c/7Pe9tS63f9V//mtPWK1JQev+J4/duvIScfvp/v/qmMuWOr1G3FVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVvR69+MBFlwwGg6HBYDBsMHh+MO79K5eD0aNHjx6zfual1133ug30/x8NjTh81I2jrl/ryDPWvWzaQ3ba7ay/zdJ/bP/5n6D+N43xn/S02QaD3TZ9vYdSr0Pd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uxQcuumTcNTBsMHh+MO79yPHLKRa67OBxh859y7GX7/fqfz9m26T/z0f9ujU04vBRN466fq0jz1j3smkP2Wm3s/4P3D3/+Z+g/je95L/z0Nh7eTAYTLPzYDBYf8RGm8w3GAz2u/zYW+YYvLxvuTH7VphugsEEL/3T+V56nfs1TjzbK5eTvXyOM186/9qjT5hg6FWDeEUX7H/pATtt9tRSr17O+9qfY9j4N9NuMfGho0ePHv13G8f1Ws+q8ecf/1lefZ+PG/t8Y8a+6B677r7ox/beZ+Gdd91mx+133H63JZdYfunlllpi+SWWX3SHnXfZfrGxr68xZ2NnZc5/Zc4mfvWcPTDilXP26s/2WnM22z+fs5fOuNWOe503fs4m/G/O2Zz/fM5m23n8WGebaLD1S1Mz5lfONdFgrzEri0/yir8tM405dsXphg0Gh/7tg455N8nL1+DQyDHHbLbmxqv9baQj/2Fs//CcfqlVV33VNM8+bjnH2I+96iumdfjgnHOHjVn5u2mebPjwoakGgxnGrY4/3/JjF7tvOv640a9q3OZpXjnxY2d+6MCxPy83fMzLrQuevfIrz/MaBP+O/kfP/3/wWm7o5YkaGvcz7pixXiPWWvtvv2vV8S8Tjtu27BiTV8/Zv7N/GO9sw16+rmm8a49Ybckxm181/y/fCnR9rfP0ESPHXVvLjv1XL/6PUfjZse5Lr691P8/2quU/e3ZM8Le3f9u6/TWzvPrZsc5rD/Hv7ovxczTJqw56rWfHoQtM8cFXPpte49mx7pixTzR45bNjzK+dc/yzY8zY55locOiYlSXGrMw70eDUMStLvrQyfHDpmJVFtv3wLtsNvfT36h+ug/mGXp6A17hu13zVdTvsFdM39Ir5Gxp3PU84GKwyajBY5Qr6XK89nRxdtxP/k/GOWG3J1ceM8VXX7fh/QuMZOmz0lTMOBoMpx32u5ceP/X8SjXfCfz7e1WC8E/6T8Q4OXv+4if/N4335PnvpWhv3mJ7vNf7N391n0/zDfbbvBK+4M/7V7zXbwfFj38/08tlOP+qUWcbP0USvOu9/9Td6/Gch//Hf+V7Z0MjB0D+bm9f6HvZ3czPVP5+bf/X7y3zjvmAM/ydzs+GFz392/NxM/N+cm3lfY25e+X34lU08GAz/+7mZcLDGmG804+Zmnn9lbqb491w3k8HxY9/P/fKmla67+77xcwNzgX//x59/nv/m3Axt/fJ1M9dL++YYNph44sFe2+yxx0cXH/s6fnWJsa///B6c61+Zy0n/PXM587inzrB/nJyXN+194wZr/k/vwbn+u3M522DY+P/nsvOrb5Z/X/33v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iXnzgokvGXQPDBoPnB2PfD41bDkbefPSCy41ZDgaDic4/eq+1Xu/xvs4NjTh81I2jrl/ryDPWvWzaQ3ba7az/A3fPf/4nqP9NL/nvPDQYjLu/p9l5MBisP2KjTeYbDAZr7XX0+cMGL++bacy+FacbNhgcOvR3J5jk5WOGRo45ZrM1N15tMJhw3BEj/+GX/sN99FKrrjpu92zjlrOPW84xeOlkL+0eNnbT8ME55w4bszLsleedbPjwoakGgxnGrY4/37JjF3teNf640a9q3OZpxu8f9vLMDB049uflho95mX6aY09+5Xn+5dn+f9T4Z/XOw/7LQ7v/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yLD1x0ybhrYNhg8Pxg7PuhkeOWgxO3+MjwcZfIRAuOvvby13u8r3NDIw4fdeOo69c68ox1L5v2kJ12O+v/wN3zn/8J6n/TS/47Dw0G4+7vaXYeDAbrj9hok/kGg8Hl145ecNjg5X0zjdm34nTDBoNDh/7uBJO8fMzQyDHHbLbmxqsNBhOOO2LkP/zSf7iPXmrVVcftnm3ccvZxyzkGL53spd3Dxm4aPjjn3GFjVoa98ryTDR8+NNVgMMO41fHnW3bsYs+rxh83+lWN2zzN+P3DXp6ZoQPH/rzc8DEvC1+9+a6vPM+/PNv/jxr/rN552H95aPe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vxgYsuGXcNDBsMnh+MfT9s3HJo5KIPnzn/mOWY9dsnOujI13u8r3NDIw4fdeOo69c68ox1L5v2kJ12O+v/wN3zn/8J6n/TGP9JT5ttMNht09d7KPU61P3vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4l584KJLxr0d9retw0Z2XWBDIw4fdeOo69c68ox1L5v2kJ12O+v1HtD/ttfw3zd/zOK/X/6Yxf9z+WMW/8/nj1n8988fs/h/IX/M4v/F/DGL/5fyxyz+B+SPWfwPzB+z+B+UP2bx/3L+mMX/4Pwxi/9X8scs/ofkj1n8D80fs/h/NX/M4v+1/DGL/2H5Yxb/w/PHLP5H5I9Z/L+eP2bx/0b+mMX/yPwxi/9R+WMW/2/mj1n8v5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8v50/ZvE/MX/M4n9S/pjF/+T8MYv/d/LHLP6n5I9Z/E/NH7P4fzd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+WPWfy/nz9m8f9B/pjF/8z8MYv/WfljFv+z88cs/j/MH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/j/KH/M4v/j/DGL/yX5Yxb/n+SPWfwvzR+z+P80f8zif1n+mMX/Z/ljFv/L88cs/j/PH7P4/yJ/zOJ/Rf6Yxf/K/DGL/1X5Yxb/UfljFv+r88cs/r/MH7P4X5M/ZvH/Vf6Yxf/a/DGL/3X5Yxb/X+ePWfx/kz9m8f9t/pjF//r8MYv/DfljFv8b88cs/r/LH7P4/z5/zOL/h/wxi/8f88cs/n/KH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/n/PHLP5/yR+z+P81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+o/PHJP4TDPLHLP5D+WMW/2H5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf3j+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5vyB+z+M+YP2bxf2P+mMV/pvwxi/+b8scs/jPnj1n835w/ZvF/S/6YxX+W/DGL/1vzxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf1v+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxH5E/ZvFfLX/M4r96/pjF/+35Yxb/NfLHLP5r5o9Z/NfKH7P4vyN/zOK/dv6Yxf+d+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf9d+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf3f+mMX/PfljFv/N8scs/u/NH7P4b54/ZvHfIn/M4r9l/pjF/335Yxb/9+ePWfy3yh+z+G+dP2bx3yZ/zOL/gfwxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6Yxf+D+WMW/w/lj1n8d8kfs/jvmj9m8d8tf8zi/+H8MYv/7vljFv+P5I9Z/D+aP2bx/1j+mMV/j/wxi//H88cs/nvmj1n8P5E/ZvHfK3/M4r93/pjFf5/8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP4j88cs/vvmj1n898sfs/h/Ln/M4v/5/DGL//75Yxb/L+SPWfy/mD9m8f9S/pjF/4D8MYv/gfljFv+D8scs/l/OH7P4H5w/ZvH/Sv6Yxf+Q/DGL/6H5Yxb/r+aPWfy/lj9m8T8sf8zif3j+mMX/iPwxi//X88cs/t/IH7P4H5k/ZvE/Kn/M4v/N/DGL/7fyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/7fzxyz+J+aPWfxPyh+z+J+cP2bx/07+mMX/lPwxi/+p+WMW/+/mj1n8T8sfs/ifnj9m8T8jf8zi/738MYv/9/PHLP4/yB+z+J+ZP2bxPyt/zOJ/dv6Yxf+H+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/H+WPWfx/nD9m8b8kf8zi/5P8MYv/pfljFv+f5o9Z/C/LH7P4/yx/zOJ/ef6Yxf/n+WMW/1/kj1n8r8gfs/hfmT9m8b8qf8ziPyp/zOJ/df6Yxf+X+WMW/2vyxyz+v8ofs/hfmz9m8b8uf8zi/+v8MYv/b/LHLP6/zR+z+F+fP2bxvyF/zOJ/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6Yxf9P+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bx/3P+mMX/L/ljFv+/5o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjFf3T+mMR/wkH+mMV/KH/M4j8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A/PH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/DfljFv8Z88cs/m/MH7P4z5Q/ZvF/U/6YxX/m/DGL/5vzxyz+b8kfs/jPkj9m8X9r/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/m/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/iPyxyz+q+WPWfxXzx+z+L89f8ziv0b+mMV/zfwxi/9a+WMW/3fkj1n8184fs/i/M3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/i/K3/M4r9R/pjFf+P8MYv/JvljFv9N88cs/u/OH7P4vyd/zOK/Wf6Yxf+9+WMW/83zxyz+W+SPWfy3zB+z+L8vf8zi//78MYv/VvljFv+t88cs/tvkj1n8P5A/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/h/MH/M4v+h/DGL/y75Yxb/XfPHLP675Y9Z/D+cP2bx3z1/zOL/kfwxi/9H88cs/h/LH7P475E/ZvH/eP6YxX/P/DGL/yfyxyz+e+WPWfz3zh+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/ZP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/F/PHLP5fyh+z+B+QP2bxPzB/zOJ/UP6Yxf/L+WMW/4Pzxyz+X8kfs/gfkj9m8T80f8zi/9X8MYv/1/LHLP6H5Y9Z/A/PH7P4H5E/ZvH/ev6Yxf8b+WMW/yPzxyz+R+WPWfy/mT9m8f9W/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8f92/pjF/8T8MYv/SfljFv+T88cs/t/JH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/B/ljFv8z88cs/mflj1n8z84fs/j/MH/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zi/6P8MYv/j/PHLP6X5I9Z/H+SP2bxvzR/zOL/0/wxi/9l+WMW/5/lj1n8L88fs/j/PH/M4v+L/DGL/xX5Yxb/K/PHLP5X5Y9Z/Eflj1n8r84fs/j/Mn/M4n9N/pjF/1f5Yxb/a/PHLP7X5Y9Z/H+dP2bx/03+mMX/t/ljFv/r88cs/jfkj1n8b8wfs/j/Ln/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/n/OH7P4/yV/zOL/1/wxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+I/OH5P4TzTIH7P4D+WPWfyH5Y9Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/h+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4vyF/zOI/Y/6Yxf+N+WMW/5nyxyz+b8ofs/jPnD9m8X9z/pjF/y35Yxb/WfLHLP5vzR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9t+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX9E/pjFf7X8MYv/6vljFv+3549Z/NfIH7P4r5k/ZvFfK3/M4v+O/DGL/9r5Yxb/d+aPWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/d+WPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf/d+WMW//fkj1n8N8sfs/i/N3/M4r95/pjFf4v8MYv/lvljFv/35Y9Z/N+fP2bx3yp/zOK/df6YxX+b/DGL/wfyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/D+aPWfw/lD9m8d8lf8ziv2v+mMV/t/wxi/+H88cs/rvnj1n8P5I/ZvH/aP6Yxf9j+WMW/z3yxyz+H88fs/jvmT9m8f9E/pjFf6/8MYv/3vljFv998scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4j8wfs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP77549Z/L+QP2bx/2L+mMX/S/ljFv8D8scs/gfmj1n8D8ofs/h/OX/M4n9w/pjF/yv5Yxb/Q/LHLP6H5o9Z/L+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+X88fs/h/I3/M4n9k/pjF/6j8MYv/N/PHLP7fyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fzh+z+J+YP2bxPyl/zOJ/cv6Yxf87+WMW/1Pyxyz+p+aPWfy/mz9m8T8tf8zif3r+mMX/jPwxi//38scs/t/PH7P4/yB/zOJ/Zv6Yxf+s/DGL/9n5Yxb/H+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/H+UP2bx/3H+mMX/kvwxi/9P8scs/pfmj1n8f5o/ZvG/LH/M4v+z/DGL/+X5Yxb/n+ePWfx/kT9m8b8if8zif2X+mMX/qvwxi/+o/DGL/9X5Yxb/X+aPWfyvyR+z+P8qf8zif23+mMX/uvwxi/+v88cs/r/JH7P4/zZ/zOJ/ff6Yxf+G/DGL/435Yxb/3+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/7/kj1n8/5o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv/R+WMS/4kH+WMW/6H8MYv/sPwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/PH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/zfkj1n8Z8wfs/i/MX/M4j9T/pjF/035Yxb/mfPHLP5vzh+z+L8lf8ziP0v+mMX/rfljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/iPyB+z+K+WP2bxXz1/zOL/9vwxi/8a+WMW/zXzxyz+a+WPWfzfkT9m8V87f8zi/878MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8zi/678MYv/RvljFv+N88cs/pvkj1n8N80fs/i/O3/M4v+e/DGL/2b5Yxb/9+aPWfw3zx+z+G+RP2bx3zJ/zOL/vvwxi//788cs/lvlj1n8t84fs/hvkz9m8f9A/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/8H8MYv/h/LHLP675I9Z/HfNH7P475Y/ZvH/cP6YxX/3/DGL/0fyxyz+H80fs/h/LH/M4r9H/pjF/+P5Yxb/PfPHLP6fyB+z+O+VP2bx3zt/zOK/T/6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/5H5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/l/MH7P4fyl/zOJ/QP6Yxf/A/DGL/0H5Yxb/L+ePWfwPzh+z+H8lf8zif0j+mMX/0Pwxi/9X88cs/l/LH7P4H5Y/ZvE/PH/M4n9E/pjF/+v5Yxb/b+SPWfyPzB+z+B+VP2bx/2b+mMX/W/ljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/2/ljFv8T88cs/iflj1n8T84fs/h/J3/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/7+WMW/x/kj1n8z8wfs/iflT9m8T87f8zi/8P8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/+P8scs/j/OH7P4X5I/ZvH/Sf6Yxf/S/DGL/0/zxyz+l+WPWfx/lj9m8b88f8zi//P8MYv/L/LHLP5X5I9Z/K/MH7P4X5U/ZvEflT9m8b86f8zi/8v8MYv/NfljFv9f5Y9Z/K/NH7P4X5c/ZvH/df6Yxf83+WMW/9/mj1n8r88fs/jfkD9m8b8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4v+X/DGL/1/zxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOI/On9M4j/JIH/M4j+UP2bxH5Y/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8h+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+G/DGL/4z5Yxb/N+aPWfxnyh+z+L8pf8ziP3P+mMX/zfljFv+35I9Z/GfJH7P4vzV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/t+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/EfljFv/V8scs/qvnj1n8354/ZvFfI3/M4r9m/pjFf638MYv/O/LHLP5r549Z/N+ZP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/N+VP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/d+ePWfzfkz9m8d8sf8zi/978MYv/5vljFv8t8scs/lvmj1n835c/ZvF/f/6YxX+r/DGL/9b5Yxb/bfLHLP4fyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/D+YP2bx/1D+mMV/l/wxi/+u+WMW/93yxyz+H84fs/jvnj9m8f9I/pjF/6P5Yxb/j+WPWfz3yB+z+H88f8ziv2f+mMX/E/ljFv+98scs/nvnj1n898kfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4j8yf8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+L+WMW/y/lj1n8D8gfs/gfmD9m8T8of8zi/+X8MYv/wfljFv+v5I9Z/A/JH7P4H5o/ZvH/av6Yxf9r+WMW/8Pyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv+j8scs/t/MH7P4fyt/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4fzt/zOJ/Yv6Yxf+k/DGL/8n5Yxb/7+SPWfxPyR+z+J+aP2bx/27+mMX/tPwxi//p+WMW/zPyxyz+38sfs/h/P3/M4v+D/DGL/5n5Yxb/s/LHLP5n549Z/H+YP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvH/Uf6Yxf/H+WMW/0vyxyz+P8kfs/hfmj9m8f9p/pjF/7L8MYv/z/LHLP6X549Z/H+eP2bx/0X+mMX/ivwxi/+V+WMW/6vyxyz+o/LHLP5X549Z/H+ZP2bxvyZ/zOL/q/wxi/+1+WMW/+vyxyz+v84fs/j/Jn/M4v/b/DGL//X5Yxb/G/LHLP435o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/P+ePWfz/kj9m8f9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8R+ePSfwnHeSPWfyH8scs/sPyxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfzfkD9m8Z8xf8zi/8b8MYv/TPljFv835Y9Z/GfOH7P4vzl/zOL/lvwxi/8s+WMW/7fmj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7b8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziPyJ/zOK/Wv6YxX/1/DGL/9vzxyz+a+SPWfzXzB+z+K+VP2bxf0f+mMV/7fwxi/8788cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/+78scs/hvlj1n8N84fs/hvkj9m8d80f8zi/+78MYv/e/LHLP6b5Y9Z/N+bP2bx3zx/zOK/Rf6YxX/L/DGL//vyxyz+788fs/hvlT9m8d86f8ziv03+mMX/A/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8H88cs/h/KH7P475I/ZvHfNX/M4r9b/pjF/8P5Yxb/3fPHLP4fyR+z+H80f8zi/7H8MYv/HvljFv+P549Z/PfMH7P4fyJ/zOK/V/6YxX/v/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfxH5o9Z/PfNH7P475c/ZvH/XP6Yxf/z+WMW//3zxyz+X8gfs/h/MX/M4v+l/DGL/wH5Yxb/A/PHLP4H5Y9Z/L+cP2bxPzh/zOL/lfwxi/8h+WMW/0Pzxyz+X80fs/h/LX/M4n9Y/pjF//D8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOJ/VP6Yxf+b+WMW/2/lj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/2/nj1n8T8wfs/iflD9m8T85f8zi/538MYv/KfljFv9T88cs/t/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3v5Yxb/7+ePWfx/kD9m8T8zf8zif1b+mMX/7Pwxi/8P88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+P8ofs/j/OH/M4n9J/pjF/yf5Yxb/S/PHLP4/zR+z+F+WP2bx/1n+mMX/8vwxi//P88cs/r/IH7P4X5E/ZvG/Mn/M4n9V/pjFf1T+mMX/6vwxi/8v88cs/tfkj1n8f5U/ZvG/Nn/M4n9d/pjF/9f5Yxb/3+SPWfx/mz9m8b8+f8zif0P+mMX/xvwxi//v8scs/r/PH7P4/yF/zOL/x/wxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/X/LHLP5/zR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/+j8MYn/8EH+mMV/KH/M4j8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A/PH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/DfljFv8Z88cs/m/MH7P4z5Q/ZvF/U/6YxX/m/DGL/5vzxyz+b8kfs/jPkj9m8X9r/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/m/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/iPyxyz+q+WPWfxXzx+z+L89f8ziv0b+mMV/zfwxi/9a+WMW/3fkj1n8184fs/i/M3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/i/K3/M4r9R/pjFf+P8MYv/JvljFv9N88cs/u/OH7P4vyd/zOK/Wf6Yxf+9+WMW/83zxyz+W+SPWfy3zB+z+L8vf8zi//78MYv/VvljFv+t88cs/tvkj1n8P5A/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/h/MH/M4v+h/DGL/y75Yxb/XfPHLP675Y9Z/D+cP2bx3z1/zOL/kfwxi/9H88cs/h/LH7P475E/ZvH/eP6YxX/P/DGL/yfyxyz+e+WPWfz3zh+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/ZP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/F/PHLP5fyh+z+B+QP2bxPzB/zOJ/UP6Yxf/L+WMW/4Pzxyz+X8kfs/gfkj9m8T80f8zi/9X8MYv/1/LHLP6H5Y9Z/A/PH7P4H5E/ZvH/ev6Yxf8b+WMW/yPzxyz+R+WPWfy/mT9m8f9W/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8f92/pjF/8T8MYv/SfljFv+T88cs/t/JH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/B/ljFv8z88cs/mflj1n8z84fs/j/MH/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zi/6P8MYv/j/PHLP6X5I9Z/H+SP2bxvzR/zOL/0/wxi/9l+WMW/5/lj1n8L88fs/j/PH/M4v+L/DGL/xX5Yxb/K/PHLP5X5Y9Z/Eflj1n8r84fs/j/Mn/M4n9N/pjF/1f5Yxb/a/PHLP7X5Y9Z/H+dP2bx/03+mMX/t/ljFv/r88cs/jfkj1n8b8wfs/j/Ln/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/n/OH7P4/yV/zOL/1/wxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+I/OH5P4TzbIH7P4D+WPWfyH5Y9Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/h+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4vyF/zOI/Y/6Yxf+N+WMW/5nyxyz+b8ofs/jPnD9m8X9z/pjF/y35Yxb/WfLHLP5vzR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9t+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX9E/pjFf7X8MYv/6vljFv+3549Z/NfIH7P4r5k/ZvFfK3/M4v+O/DGL/9r5Yxb/d+aPWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/d+WPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf/d+WMW//fkj1n8N8sfs/i/N3/M4r95/pjFf4v8MYv/lvljFv/35Y9Z/N+fP2bx3yp/zOK/df6YxX+b/DGL/wfyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/D+aPWfw/lD9m8d8lf8ziv2v+mMV/t/wxi/+H88cs/rvnj1n8P5I/ZvH/aP6Yxf9j+WMW/z3yxyz+H88fs/jvmT9m8f9E/pjFf6/8MYv/3vljFv998scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4j8wfs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP77549Z/L+QP2bx/2L+mMX/S/ljFv8D8scs/gfmj1n8D8ofs/h/OX/M4n9w/pjF/yv5Yxb/Q/LHLP6H5o9Z/L+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+X88fs/h/I3/M4n9k/pjF/6j8MYv/N/PHLP7fyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fzh+z+J+YP2bxPyl/zOJ/cv6Yxf87+WMW/1Pyxyz+p+aPWfy/mz9m8T8tf8zif3r+mMX/jPwxi//38scs/t/PH7P4/yB/zOJ/Zv6Yxf+s/DGL/9n5Yxb/H+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/H+UP2bx/3H+mMX/kvwxi/9P8scs/pfmj1n8f5o/ZvG/LH/M4v+z/DGL/+X5Yxb/n+ePWfx/kT9m8b8if8zif2X+mMX/qvwxi/+o/DGL/9X5Yxb/X+aPWfyvyR+z+P8qf8zif23+mMX/uvwxi/+v88cs/r/JH7P4/zZ/zOJ/ff6Yxf+G/DGL/435Yxb/3+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/7/kj1n8/5o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv/R+WMS/8kH+WMW/6H8MYv/sPwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/PH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/zfkj1n8Z8wfs/i/MX/M4j9T/pjF/035Yxb/mfPHLP5vzh+z+L8lf8ziP0v+mMX/rfljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/iPyB+z+K+WP2bxXz1/zOL/9vwxi/8a+WMW/zXzxyz+a+WPWfzfkT9m8V87f8zi/878MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8zi/678MYv/RvljFv+N88cs/pvkj1n8N80fs/i/O3/M4v+e/DGL/2b5Yxb/9+aPWfw3zx+z+G+RP2bx3zJ/zOL/vvwxi//788cs/lvlj1n8t84fs/hvkz9m8f9A/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/8H8MYv/h/LHLP675I9Z/HfNH7P475Y/ZvH/cP6YxX/3/DGL/0fyxyz+H80fs/h/LH/M4r9H/pjF/+P5Yxb/PfPHLP6fyB+z+O+VP2bx3zt/zOK/T/6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/5H5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/l/MH7P4fyl/zOJ/QP6Yxf/A/DGL/0H5Yxb/L+ePWfwPzh+z+H8lf8zif0j+mMX/0Pwxi/9X88cs/l/LH7P4H5Y/ZvE/PH/M4n9E/pjF/+v5Yxb/b+SPWfyPzB+z+B+VP2bx/2b+mMX/W/ljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/2/ljFv8T88cs/iflj1n8T84fs/h/J3/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/7+WMW/x/kj1n8z8wfs/iflT9m8T87f8zi/8P8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/+P8scs/j/OH7P4X5I/ZvH/Sf6Yxf/S/DGL/0/zxyz+l+WPWfx/lj9m8b88f8zi//P8MYv/L/LHLP5X5I9Z/K/MH7P4X5U/ZvEflT9m8b86f8zi/8v8MYv/NfljFv9f5Y9Z/K/NH7P4X5c/ZvH/df6Yxf83+WMW/9/mj1n8r88fs/jfkD9m8b8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4v+X/DGL/1/zxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOI/On9M4j/FIH/M4j+UP2bxH5Y/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8h+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+G/DGL/4z5Yxb/N+aPWfxnyh+z+L8pf8ziP3P+mMX/zfljFv+35I9Z/GfJH7P4vzV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/t+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/EfljFv/V8scs/qvnj1n8354/ZvFfI3/M4r9m/pjFf638MYv/O/LHLP5r549Z/N+ZP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/N+VP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/d+ePWfzfkz9m8d8sf8zi/978MYv/5vljFv8t8scs/lvmj1n835c/ZvF/f/6YxX+r/DGL/9b5Yxb/bfLHLP4fyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/D+YP2bx/1D+mMV/l/wxi/+u+WMW/93yxyz+H84fs/jvnj9m8f9I/pjF/6P5Yxb/j+WPWfz3yB+z+H88f8ziv2f+mMX/E/ljFv+98scs/nvnj1n898kfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4j8yf8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+L+WMW/y/lj1n8D8gfs/gfmD9m8T8of8zi/+X8MYv/wfljFv+v5I9Z/A/JH7P4H5o/ZvH/av6Yxf9r+WMW/8Pyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv+j8scs/t/MH7P4fyt/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4fzt/zOJ/Yv6Yxf+k/DGL/8n5Yxb/7+SPWfxPyR+z+J+aP2bx/27+mMX/tPwxi//p+WMW/zPyxyz+38sfs/h/P3/M4v+D/DGL/5n5Yxb/s/LHLP5n549Z/H+YP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvH/Uf6Yxf/H+WMW/0vyxyz+P8kfs/hfmj9m8f9p/pjF/7L8MYv/z/LHLP6X549Z/H+eP2bx/0X+mMX/ivwxi/+V+WMW/6vyxyz+o/LHLP5X549Z/H+ZP2bxvyZ/zOL/q/wxi/+1+WMW/+vyxyz+v84fs/j/Jn/M4v/b/DGL//X5Yxb/G/LHLP435o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/P+ePWfz/kj9m8f9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8R+ePSfynHOSPWfyH8scs/sPyxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfzfkD9m8Z8xf8zi/8b8MYv/TPljFv835Y9Z/GfOH7P4vzl/zOL/lvwxi/8s+WMW/7fmj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7b8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziPyJ/zOK/Wv6YxX/1/DGL/9vzxyz+a+SPWfzXzB+z+K+VP2bxf0f+mMV/7fwxi/8788cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/+78scs/hvlj1n8N84fs/hvkj9m8d80f8zi/+78MYv/e/LHLP6b5Y9Z/N+bP2bx3zx/zOK/Rf6YxX/L/DGL//vyxyz+788fs/hvlT9m8d86f8ziv03+mMX/A/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8H88cs/h/KH7P475I/ZvHfNX/M4r9b/pjF/8P5Yxb/3fPHLP4fyR+z+H80f8zi/7H8MYv/HvljFv+P549Z/PfMH7P4fyJ/zOK/V/6YxX/v/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfxH5o9Z/PfNH7P475c/ZvH/XP6Yxf/z+WMW//3zxyz+X8gfs/h/MX/M4v+l/DGL/wH5Yxb/A/PHLP4H5Y9Z/L+cP2bxPzh/zOL/lfwxi/8h+WMW/0Pzxyz+X80fs/h/LX/M4n9Y/pjF//D8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOJ/VP6Yxf+b+WMW/2/lj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/2/nj1n8T8wfs/iflD9m8T85f8zi/538MYv/KfljFv9T88cs/t/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3v5Yxb/7+ePWfx/kD9m8T8zf8zif1b+mMX/7Pwxi/8P88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+P8ofs/j/OH/M4n9J/pjF/yf5Yxb/S/PHLP4/zR+z+F+WP2bx/1n+mMX/8vwxi//P88cs/r/IH7P4X5E/ZvG/Mn/M4n9V/pjFf1T+mMX/6vwxi/8v88cs/tfkj1n8f5U/ZvG/Nn/M4n9d/pjF/9f5Yxb/3+SPWfx/mz9m8b8+f8zif0P+mMX/xvwxi//v8scs/r/PH7P4/yF/zOL/x/wxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/X/LHLP5/zR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/+j8MYn/VIP8MYv/UP6YxX9Y/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8R+eP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/G/LHLP4z5o9Z/N+YP2bxnyl/zOL/pvwxi//M+WMW/zfnj1n835I/ZvGfJX/M4v/W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/N+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/Efkj1n8V8sfs/ivnj9m8X97/pjFf438MYv/mvljFv+18scs/u/IH7P4r50/ZvF/Z/6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvF/V/6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/N+dP2bxf0/+mMV/s/wxi/9788cs/pvnj1n8t8gfs/hvmT9m8X9f/pjF//35Yxb/rfLHLP5b549Z/LfJH7P4fyB/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvH/YP6Yxf9D+WMW/13yxyz+u+aPWfx3yx+z+H84f8ziv3v+mMX/I/ljFv+P5o9Z/D+WP2bx3yN/zOL/8fwxi/+e+WMW/0/kj1n898ofs/jvnT9m8d8nf8zi/8n8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/yPwxi/+++WMW//3yxyz+n8sfs/h/Pn/M4r9//pjF/wv5Yxb/L+aPWfy/lD9m8T8gf8zif2D+mMX/oPwxi/+X88cs/gfnj1n8v5I/ZvE/JH/M4n9o/pjF/6v5Yxb/r+WPWfwPyx+z+B+eP2bxPyJ/zOL/9fwxi/838scs/kfmj1n8j8ofs/h/M3/M4v+t/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4v/t/DGL/4n5Yxb/k/LHLP4n549Z/L+TP2bxPyV/zOJ/av6Yxf+7+WMW/9Pyxyz+p+ePWfzPyB+z+H8vf8zi//38MYv/D/LHLP5n5o9Z/M/KH7P4n50/ZvH/Yf6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/0f5Yxb/H+ePWfwvyR+z+P8kf8zif2n+mMX/p/ljFv/L8scs/j/LH7P4X54/ZvH/ef6Yxf8X+WMW/yvyxyz+V+aPWfyvyh+z+I/KH7P4X50/ZvH/Zf6Yxf+a/DGL/6/yxyz+1+aPWfyvyx+z+P86f8zi/5v8MYv/b/PHLP7X549Z/G/IH7P435g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvH/U/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/P+cP2bx/0v+mMX/r/ljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8R+dPybxn3qQP2bxH8ofs/gPyx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP7D88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxf0P+mMV/xvwxi/8b88cs/jPlj1n835Q/ZvGfOX/M4v/m/DGL/1vyxyz+s+SPWfzfmj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//b8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/+I/DGL/2r5Yxb/1fPHLP5vzx+z+K+RP2bxXzN/zOK/Vv6Yxf8d+WMW/7Xzxyz+78wfs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+78ofs/hvlD9m8d84f8ziv0n+mMV/0/wxi/+788cs/u/JH7P4b5Y/ZvF/b/6YxX/z/DGL/xb5Yxb/LfPHLP7vyx+z+L8/f8ziv1X+mMV/6/wxi/82+WMW/w/kj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O/x979GAAiIEAAfBt3Nu2Gdu2bZxtxbZt27Zt27adNLAVZGdaGP9Ry/9A/1HL/yD/Ucv/YP9Ry/8Q/1HL/1D/Ucv/MP9Ry/9w/1HL/wj/Ucv/SP9Ry/8o/1HL/2j/Ucv/GP9Ry/9Y/1HL/zj/Ucv/eP9Ry/8E/1HL/0T/Ucv/JP9Ry/9k/1HL/xT/Ucv/VP9Ry/80/1HL/3T/Ucv/Jv6jlv9N/Uct/5v5j1r+N/cftfxv4T9q+d/Sf9Tyv5X/qOV/a/9Ry/82/qOW/239Ry3/2/mPWv639x+1/O/gP2r539F/1PK/k/+o5X9n/1HL/y7+o5b/Xf1HLf+7+Y9a/nf3H7X87+E/avnf03/U8r+X/6jlf2//Ucv/Pv6jlv99/Uct//v5j1r+9/cftfwf4D9q+T/Qf9Tyf5D/qOX/YP9Ry/8h/qOW/0P9Ry3/h/mPWv4P9x+1/B/hP2r5P9J/1PJ/lP+o5f9o/1HL/zH+o5b/Y/1HLf/H+Y9a/o/3H7X8n+A/avk/0X/U8n+S/6jl/2T/Ucv/Kf6jlv9T/Uct/6f5j1r+T/cftfyf4T9q+T/Tf9Tyf5b/qOX/bP9Ry/85/qOW/3P9Ry3/5/mPWv7P9x+1/F/gP2r5v9B/1PJ/kf+o5f9i/1HL/yX+o5b/S/1HLf+X+Y9a/i/3H7X8X+E/avm/0n/U8n+V/6jl/2r/Ucv/Nf6jlv9r/Uct/9f5j1r+r/cftfzf4D9q+b/Rf9Tyf5P/qOX/Zv9Ry/8t/qOW/1v9Ry3/t/mPWv5v9x+1/N/hP2r5v9N/1PJ/l/+o5f9u/1HL/z3+o5b/e/1HLf/3+Y9a/u/3H7X8P+A/avl/0H/U8v+Q/6jl/2H/Ucv/I/6jlv9H/Uct/4/5j1r+H/cftfw/4T9q+X/Sf9Ty/5T/qOX/af9Ry/8z/qOW/2f9Ry3/z/mPWv6f9x+1/L/gP2r5f9F/1PL/kv+o5f9l/1HL/yv+o5b/V/1HLf+v+Y9a/l/3H7X8v+E/avl/03/U8v+W/6jl/23/Ucv/O/6jlv93/Uct/+/5j1r+3/cftfx/4D9q+f/Qf9Ty/5H/qOX/Y/9Ryf+Az/iPWv4/6z9q+f+c/6jl//P+o5b/L/iPWv6/6D9q+f+S/6jl/8v+o5b/r/iPWv6/6j9q+f+a/6jl/+v+o5b/b/iPWv6/6T9q+f+W/6jl/9v+o5b/Af6jlv/v+I9a/r/rP2r5/57/qOX/+/6jlv8f+I9a/n/oP2r5/5H/qOX/x/6jlv+f+I9a/n/qP2r5/5n/qOX/5/6jlv9f+I9a/n/pP2r5/5X/qOX/1/6jlv/f+I9a/n/rP2r5/53/qOX/9/6jlv8/+I9a/v/oP2r5/5P/qOX/z/6jlv+/+I9a/v/qP2r5/5v/qOX/7/6jlv9/+I9a/v/pP2r5/5f/qOX/3/6jlv//+I9a/v/rP2r5/5//qOX///6jlv8Z/Ect/zP6j1r+Z/IftfzP7D9q+Z/Ff9TyP6v/qOV/Nv9Ry//s/qOW/zn8Ry3/c/qPWv7n8h+1/M/tP2r5n8d/1PI/r/+o5X8+/1HL//z+o5b/BfxHLf8L+o9a/hfyH7X8L+w/avlfxH/U8r+o/6jlfzH/Ucv/4v6jlv8l/Ect/0v6j1r+l/Iftfwv7T9q+V/Gf9Tyv6z/qOV/Of9Ry//y/qOW/xX8Ry3/K/qPWv5X8h+1/K/sP2r5X8V/1PK/qv+o5X81/1HL/+r+o5b/NfxHLf9r+o9a/tfyH7X8r+0/avlfx3/U8r+u/6jlfz3/Ucv/+v6jlv8N/Ect/xv6j1r+N/Iftfxv7D9q+R/oP2r5H+Q/avkf7D9q+R/iP2r5H+o/avkf5j9q+R/uP2r5H+E/avkf6T9q+R/lP2r5H+0/avkf4z9q+R/rP2r5H+c/avkf7z9q+Z/gP2r5n+g/avmf5D9q+Z/sP2r5n+I/avmf6j9q+Z/mP2r5n+4/+tT9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyts+jaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBfAQAA//+ME5Qw") r1 = openat(r0, &(0x7f000001aa40)='file1\x00', 0x42, 0x1ff) setxattr(&(0x7f000001aa80)='./file0/file1\x00', &(0x7f000001aac0)=@known='user.syz\x00', &(0x7f000001ab00)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001ab40)='file1\x00', 0x0) r2 = openat(r0, &(0x7f000001ab80)='file2\x00', 0x42, 0x1ff) setxattr(&(0x7f000001abc0)='./file0/file2\x00', &(0x7f000001ac00)=@known='user.syz\x00', &(0x7f000001ac40)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001ac80)='file2\x00', 0x0) r3 = openat(r0, &(0x7f000001acc0)='file3\x00', 0x42, 0x1ff) setxattr(&(0x7f000001ad00)='./file0/file3\x00', &(0x7f000001ad40)=@known='user.syz\x00', &(0x7f000001ad80)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001adc0)='file3\x00', 0x0) r4 = openat(r0, &(0x7f000001ae00)='file4\x00', 0x42, 0x1ff) setxattr(&(0x7f000001ae40)='./file0/file4\x00', &(0x7f000001ae80)=@known='user.syz\x00', &(0x7f000001aec0)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001af00)='file4\x00', 0x0) r5 = openat(r0, &(0x7f000001af40)='file5\x00', 0x42, 0x1ff) setxattr(&(0x7f000001af80)='./file0/file5\x00', &(0x7f000001afc0)=@known='user.syz\x00', &(0x7f000001b000)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001b040)='file5\x00', 0x0) r6 = openat(r0, &(0x7f000001b080)='file6\x00', 0x42, 0x1ff) setxattr(&(0x7f000001b0c0)='./file0/file6\x00', &(0x7f000001b100)=@known='user.syz\x00', &(0x7f000001b140)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001b180)='file6\x00', 0x0) r7 = openat(r0, &(0x7f000001b1c0)='file7\x00', 0x42, 0x1ff) setxattr(&(0x7f000001b200)='./file0/file7\x00', &(0x7f000001b240)=@known='user.syz\x00', &(0x7f000001b280)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001b2c0)='file7\x00', 0x0) r8 = openat(r0, &(0x7f000001b300)='file8\x00', 0x42, 0x1ff) setxattr(&(0x7f000001b340)='./file0/file8\x00', &(0x7f000001b380)=@known='user.syz\x00', &(0x7f000001b3c0)='value\x00', 0x5, 0x0) unlinkat(r0, &(0x7f000001b400)='file8\x00', 0x0) close(r1) close(r2) close(r3) close(r4) close(r5) close(r6) close(r7) close(r8) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f000001b440)=0x1) 9.836916561s ago: executing program 7 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000640)='ep1\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 8.899990665s ago: executing program 7 (id=32): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) 7.711386295s ago: executing program 6 (id=30): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x21, 0x100, 0x4}}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_read(r0, 0x4, 0x100, &(0x7f0000000200)=""/256) syz_usb_ep_write(r0, 0x83, 0x18, &(0x7f0000000100)="1200004e0000000a00000000000201000001000000000000") nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl(r1, 0x8923, &(0x7f0000000300)='wlan0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan99\x00'/32) ioctl(r1, 0x8923, &(0x7f0000000400)='wlan2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan0\x00'/32) syz_80211_join_ibss(&(0x7f0000000500)='wlan0\x00', &(0x7f0000000600)=@default_ibss_ssid, 0x6, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000800)={0x11, 0x300, r2}, 0x14) sendto$packet(r1, &(0x7f0000000900)="00000000000000000000000008004500001c00004000401100007f0000017f0000010035003500080000", 0x2a, 0x0, 0x0, 0x0) 7.490845081s ago: executing program 5 (id=29): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x10000) r1 = eventfd(0x11111111) r2 = eventfd(0x22222222) r3 = eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) r6 = eventfd(0x22222222) read(r1, &(0x7f0000000008), 0x8) read(r2, &(0x7f0000000010), 0x8) read(r3, &(0x7f0000000018), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) read(r6, &(0x7f0000000030), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 7.188093628s ago: executing program 5 (id=33): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 7.119084761s ago: executing program 4 (id=34): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 4.458776687s ago: executing program 7 (id=35): r0 = syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240a03030000000000000014240201010200030000000000000000000000001324030201030001030000000000000000000009040100000102200009040101010102200017240102000000000100010000000000000002100000000624020102100905010900020100000a25010000000000000009040200000102200009040201010102200017240101000000000100010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 3.652760877s ago: executing program 6 (id=36): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) 3.455182353s ago: executing program 5 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='3\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000740)='blk1\n', 0x5) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') write(0xffffffffffffffff, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3.071095383s ago: executing program 6 (id=38): r0 = io_uring_setup(0x1, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000)='\x00'/4096, 0x1000}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400), 0x0) 2.695776662s ago: executing program 6 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000640)='ep1\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.520015876s ago: executing program 4 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x63) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r3) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r4, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) close(r4) nanosleep(&(0x7f0000000b00)={0x0, 0x10000}, 0x0) 2.519149356s ago: executing program 5 (id=41): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x10000) r1 = eventfd(0x11111111) r2 = eventfd(0x22222222) r3 = eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) r6 = eventfd(0x22222222) read(r1, &(0x7f0000000008), 0x8) read(r2, &(0x7f0000000010), 0x8) read(r3, &(0x7f0000000018), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) read(r6, &(0x7f0000000030), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 2.078564377s ago: executing program 5 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb0/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/nullb0/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) pwrite64(r2, &(0x7f0000002000)='\x00'/4096, 0x1000, 0x0) pwrite64(r2, &(0x7f0000001000)='SFOZ', 0x4, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@nullb, &(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)='zonefs\x00', 0x0, 0x0) 1.844500074s ago: executing program 7 (id=43): r0 = syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b31280001000000010902190001010080320904000001ffffff0007058102000200"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.788980444s ago: executing program 6 (id=44): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)='\x00'/64) 1.626187309s ago: executing program 4 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@code={0xa, 0x23, {"48c7c0aaaa000048c7c200010400488902f4"}}], 0x23}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000], 0x50010, 0x202}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa) 1.536051301s ago: executing program 5 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0xffffffff\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0xffffffff\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='disk\n', 0x5) 0s ago: executing program 4 (id=47): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000800000)=""/524288, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000800000)='\x00'/524288, 0x80000) ftruncate(r1, 0x40000000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./loop1\x00', 0x61ff, 0x701) mount(&(0x7f0000000400)=@filename='./loop1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) ioctl(r3, 0x40086610, &(0x7f0000000800)="0000100000000000") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 80.102383][ T5761] cgroup: Unknown subsys name 'net' [ 80.240243][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.898342][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.612426][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.622013][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.630435][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.639573][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.647758][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.655576][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.663424][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.675405][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.688364][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.713184][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.725778][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.733323][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.742920][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.750924][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.759569][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.767436][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.773409][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.792160][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.800309][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.808826][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.817031][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.829934][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.838117][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.845849][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.323137][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.421745][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.488265][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 84.546844][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.558035][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.565716][ T5774] bridge_slave_0: entered allmulticast mode [ 84.574835][ T5774] bridge_slave_0: entered promiscuous mode [ 84.596974][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.605439][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.615249][ T5774] bridge_slave_1: entered allmulticast mode [ 84.623462][ T5774] bridge_slave_1: entered promiscuous mode [ 84.641754][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 84.746226][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.789825][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.811106][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.818796][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.826556][ T5773] bridge_slave_0: entered allmulticast mode [ 84.833808][ T5773] bridge_slave_0: entered promiscuous mode [ 84.867764][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.876483][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.886873][ T5773] bridge_slave_1: entered allmulticast mode [ 84.894107][ T5773] bridge_slave_1: entered promiscuous mode [ 84.963881][ T5774] team0: Port device team_slave_0 added [ 84.970119][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.977564][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.985832][ T5780] bridge_slave_0: entered allmulticast mode [ 84.993775][ T5780] bridge_slave_0: entered promiscuous mode [ 85.017243][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.038614][ T5774] team0: Port device team_slave_1 added [ 85.055527][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.065398][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.074450][ T5780] bridge_slave_1: entered allmulticast mode [ 85.081443][ T5780] bridge_slave_1: entered promiscuous mode [ 85.100257][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.110355][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.117956][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.125476][ T5779] bridge_slave_0: entered allmulticast mode [ 85.133013][ T5779] bridge_slave_0: entered promiscuous mode [ 85.162351][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.169366][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.195473][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.218140][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.228192][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.236307][ T5779] bridge_slave_1: entered allmulticast mode [ 85.243534][ T5779] bridge_slave_1: entered promiscuous mode [ 85.253286][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.263234][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.270202][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.296280][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.339679][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.360382][ T5773] team0: Port device team_slave_0 added [ 85.391991][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.416818][ T5773] team0: Port device team_slave_1 added [ 85.436294][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.485435][ T5780] team0: Port device team_slave_0 added [ 85.492967][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.499970][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.526572][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.554738][ T5774] hsr_slave_0: entered promiscuous mode [ 85.562366][ T5774] hsr_slave_1: entered promiscuous mode [ 85.571524][ T5780] team0: Port device team_slave_1 added [ 85.579186][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.588572][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.614927][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.641249][ T5779] team0: Port device team_slave_0 added [ 85.689304][ T5779] team0: Port device team_slave_1 added [ 85.719223][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.726440][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.752643][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.764886][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.772246][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.798470][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.810027][ T5083] Bluetooth: hci1: command tx timeout [ 85.837699][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.844767][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.871084][ T5782] Bluetooth: hci3: command tx timeout [ 85.877183][ T51] Bluetooth: hci0: command tx timeout [ 85.883542][ T5083] Bluetooth: hci2: command tx timeout [ 85.889343][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.908399][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.915530][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.942548][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.008184][ T5773] hsr_slave_0: entered promiscuous mode [ 86.015347][ T5773] hsr_slave_1: entered promiscuous mode [ 86.022159][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.030022][ T5773] Cannot create hsr debugfs directory [ 86.115881][ T5779] hsr_slave_0: entered promiscuous mode [ 86.123541][ T5779] hsr_slave_1: entered promiscuous mode [ 86.129979][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.138278][ T5779] Cannot create hsr debugfs directory [ 86.195575][ T5780] hsr_slave_0: entered promiscuous mode [ 86.202368][ T5780] hsr_slave_1: entered promiscuous mode [ 86.208622][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.216332][ T5780] Cannot create hsr debugfs directory [ 86.580961][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.603543][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.614303][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.628166][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.695872][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.722787][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.733778][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.760849][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.828823][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.848619][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.859892][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.871163][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.997590][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.028225][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.040252][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.055489][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.170944][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.239549][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.279383][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.325921][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.368209][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.380755][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.388499][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.411402][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.428714][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.452138][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.459416][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.485777][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.493003][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.537586][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.544869][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.596497][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.625206][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.632440][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.650377][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.657668][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.717368][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.724661][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.827486][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.834734][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.861990][ T5083] Bluetooth: hci1: command tx timeout [ 87.942235][ T5083] Bluetooth: hci0: command tx timeout [ 87.947726][ T5083] Bluetooth: hci2: command tx timeout [ 87.954452][ T5782] Bluetooth: hci3: command tx timeout [ 88.450887][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.496425][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.538204][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.571479][ T5773] veth0_vlan: entered promiscuous mode [ 88.600939][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.627127][ T5773] veth1_vlan: entered promiscuous mode [ 88.690761][ T5774] veth0_vlan: entered promiscuous mode [ 88.750289][ T5773] veth0_macvtap: entered promiscuous mode [ 88.766993][ T5774] veth1_vlan: entered promiscuous mode [ 88.788025][ T5773] veth1_macvtap: entered promiscuous mode [ 88.797709][ T5780] veth0_vlan: entered promiscuous mode [ 88.846716][ T5780] veth1_vlan: entered promiscuous mode [ 88.867576][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.878322][ T5779] veth0_vlan: entered promiscuous mode [ 88.897626][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.916347][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.927460][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.936519][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.945341][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.976646][ T5779] veth1_vlan: entered promiscuous mode [ 89.030472][ T5780] veth0_macvtap: entered promiscuous mode [ 89.049390][ T5774] veth0_macvtap: entered promiscuous mode [ 89.060876][ T5780] veth1_macvtap: entered promiscuous mode [ 89.106668][ T5774] veth1_macvtap: entered promiscuous mode [ 89.161090][ T5779] veth0_macvtap: entered promiscuous mode [ 89.195405][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.206743][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.219572][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.228963][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.240554][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.250600][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.264387][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.275668][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.286346][ T5779] veth1_macvtap: entered promiscuous mode [ 89.296793][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.310863][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.332953][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.344881][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.356723][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.393470][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.401369][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.411147][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.426492][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.438094][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.448942][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.460418][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.475078][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.486201][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.497270][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506139][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.518581][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.531781][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.542237][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.553774][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.565738][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.577178][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.590126][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.609301][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.620816][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.643595][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.652585][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.698400][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.710961][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.725793][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.736558][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.747161][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.758117][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.769930][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.830082][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.852369][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.861544][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.876105][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.941998][ T5083] Bluetooth: hci1: command tx timeout [ 90.022640][ T5083] Bluetooth: hci2: command tx timeout [ 90.028157][ T5782] Bluetooth: hci3: command tx timeout [ 90.034088][ T5083] Bluetooth: hci0: command tx timeout [ 90.099708][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.111906][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.195445][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.216421][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.301917][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.317092][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.358330][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.375875][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.425331][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.472060][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.567449][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.616015][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.898735][ T5763] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 91.322591][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.391675][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.537071][ T5819] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 91.561973][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.613561][ T5819] snd-ua101 3-1:1.0: invalid bNumEndpoints [ 91.618819][ T5820] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 91.644378][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.654058][ T5820] usb 1-1: Product: syz [ 91.658354][ T5820] usb 1-1: Manufacturer: syz [ 91.669705][ T5820] usb 1-1: SerialNumber: syz [ 91.740885][ T5820] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 91.858479][ T5868] device-mapper: table: 248:0: zero-length target [ 91.891611][ T5868] device-mapper: ioctl: error adding target to table [ 92.021943][ T5782] Bluetooth: hci1: command tx timeout [ 92.101892][ T5782] Bluetooth: hci2: command tx timeout [ 92.107407][ T5782] Bluetooth: hci3: command tx timeout [ 92.113278][ T5083] Bluetooth: hci0: command tx timeout [ 92.155349][ T5872] svc: failed to register nfsdv3 RPC service (errno 111). [ 92.178117][ T5872] svc: failed to register nfsaclv3 RPC service (errno 111). [ 92.190124][ T56] cfg80211: failed to load regulatory.db [ 92.796030][ T5878] syz.1.9[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.223701][ T5878] loop1: detected capacity change from 0 to 32768 [ 93.238652][ T5878] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9 (5878) [ 93.334900][ T5878] BTRFS info (device loop1): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 93.381842][ T5878] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 93.391495][ T5878] BTRFS info (device loop1): using free space tree [ 93.554592][ T5878] BTRFS info (device loop1): enabling ssd optimizations [ 93.562462][ T5878] BTRFS info (device loop1): auto enabling async discard [ 93.752413][ T174] usb 3-1: USB disconnect, device number 2 [ 93.921942][ T5820] gspca_mr97310a: reg write [19] error -110 [ 93.938310][ T5820] mr97310a: probe of 1-1:1.0 failed with error -110 [ 94.329208][ T5774] BTRFS info (device loop1): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 94.591861][ T174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.683939][ T56] usb 1-1: USB disconnect, device number 2 [ 94.834178][ T174] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 94.850551][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.870882][ T28] audit: type=1800 audit(1785897236.437:2): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="idVendor" dev="configfs" ino=7739 res=0 errno=0 [ 94.875441][ T174] usb 3-1: config 0 descriptor?? [ 94.919981][ T5909] Config c/1 of g1 needs at least one function. [ 94.933691][ T5909] udc dummy_udc.0: failed to start g1: -22 [ 94.940179][ T28] audit: type=1800 audit(1785897236.467:3): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="idProduct" dev="configfs" ino=7740 res=0 errno=0 [ 94.960489][ T5909] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 94.974212][ T5909] UDC core: g1: couldn't find an available UDC or it's busy [ 94.985399][ T28] audit: type=1800 audit(1785897236.477:4): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="process_ump" dev="configfs" ino=7746 res=0 errno=0 [ 95.008320][ T28] audit: type=1800 audit(1785897236.477:5): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="ep_name" dev="configfs" ino=7747 res=0 errno=0 [ 95.032255][ T28] audit: type=1800 audit(1785897236.477:6): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="direction" dev="configfs" ino=7748 res=0 errno=0 [ 95.058476][ T28] audit: type=1800 audit(1785897236.477:7): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="name" dev="configfs" ino=7749 res=0 errno=0 [ 95.083361][ T28] audit: type=1800 audit(1785897236.487:8): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="name" dev="configfs" ino=7752 res=0 errno=0 [ 95.103563][ T28] audit: type=1800 audit(1785897236.487:9): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="active" dev="configfs" ino=7753 res=0 errno=0 [ 95.124631][ T28] audit: type=1800 audit(1785897236.487:10): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="UDC" dev="configfs" ino=7754 res=0 errno=0 [ 95.415623][ T174] corsair-psu 0003:1B1C:1C03.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.2-1/input0 [ 95.839989][ T28] audit: type=1800 audit(1785897237.407:11): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15" name="idVendor" dev="configfs" ino=7775 res=0 errno=0 [ 96.271981][ T56] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.472991][ T56] usb 1-1: Dual-Role OTG device on HNP port [ 96.497935][ T56] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.06 [ 96.527607][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.695021][ T5913] loop1: detected capacity change from 0 to 32768 [ 97.162908][ T5783] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by udevd (5783) [ 97.421933][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.623542][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 97.666525][ T23] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00 [ 97.713141][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.721300][ T23] usb 2-1: Product: syz [ 97.747227][ T23] usb 2-1: Manufacturer: syz [ 97.752434][ T23] usb 2-1: SerialNumber: syz [ 97.814215][ T23] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 97.851951][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.892485][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.067690][ T174] usb 3-1: USB disconnect, device number 3 [ 99.359729][ T5953] loop0: detected capacity change from 0 to 8 [ 99.630835][ T5955] PM: hibernation: hibernation entry [ 99.679804][ T5957] loop0: detected capacity change from 0 to 1024 [ 99.754472][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.978515][ T5957] loop1: detected capacity change from 0 to 1024 [ 100.015561][ T5957] EXT4-fs warning (device loop0): ext4_resize_fs:2025: can't read last block, resize aborted [ 100.387710][ T5955] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.394751][ T5955] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.417197][ T5955] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.440048][ T5955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.452125][ T5955] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.474441][ T5955] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.495738][ T5955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.512845][ T5955] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.527862][ T5955] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.977599][ T5955] Filesystems sync: 0.435 seconds [ 100.987212][ T5955] Freezing user space processes [ 101.058720][ T1130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.177065][ T1130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.196406][ T5955] Freezing user space processes completed (elapsed 0.184 seconds) [ 101.204880][ T5955] OOM killer disabled. [ 101.287084][ T1130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.367772][ T23] gspca_zc3xx: reg_r err -110 [ 101.428919][ T1130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.459051][ T5955] PM: hibernation: Preallocating image memory [ 102.410483][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.471787][ T23] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 102.478273][ T23] gspca_zc3xx: probe of 2-1:1.0 failed with error -110 [ 102.501761][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.507900][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.672779][ T1130] hsr_slave_0: left promiscuous mode [ 103.680322][ T1130] hsr_slave_1: left promiscuous mode [ 103.687848][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.695516][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.720064][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.743458][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.754714][ T1130] bridge_slave_1: left allmulticast mode [ 103.760458][ T1130] bridge_slave_1: left promiscuous mode [ 103.768173][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.786405][ T1130] bridge_slave_0: left allmulticast mode [ 103.792324][ T1130] bridge_slave_0: left promiscuous mode [ 103.798208][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.838595][ T1130] veth1_macvtap: left promiscuous mode [ 103.844793][ T1130] veth0_macvtap: left promiscuous mode [ 103.851592][ T1130] veth1_vlan: left promiscuous mode [ 103.859791][ T1130] veth0_vlan: left promiscuous mode [ 104.502077][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.584099][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.596832][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.238315][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 106.296127][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 106.350227][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.408906][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.585091][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.663843][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.669988][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.867616][ T1130] bond0 (unregistering): Released all slaves [ 133.151029][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158072][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 160.730771][ T5955] PM: hibernation: Allocated 679581 pages for snapshot [ 160.737779][ T5955] PM: hibernation: Allocated 2718324 kbytes in 59.26 seconds (45.87 MB/s) [ 160.746440][ T5955] Freezing remaining freezable tasks [ 160.756450][ T5955] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 160.781222][ T5955] printk: Suspending console(s) (use no_console_suspend to debug) [ 161.084093][ T5955] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 161.123038][ T5955] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 161.177410][ T5955] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 161.223256][ T5955] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 161.278286][ T5955] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 161.316301][ T5955] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 161.356166][ T5955] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 161.393601][ T5955] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 161.436238][ T5955] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 161.483975][ T5955] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 161.525198][ T5955] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 161.574190][ T5955] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 161.613289][ T5955] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 161.653506][ T5955] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 161.709697][ T5955] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 162.255972][ T5955] ACPI: PM: Preparing to enter system sleep state S4 [ 162.257041][ T5955] ACPI: PM: Saving platform NVS memory [ 162.258407][ T5955] Disabling non-boot CPUs ... [ 162.293889][ T5955] smpboot: CPU 1 is now offline [ 162.347152][ T5955] PM: hibernation: Creating image: [ 165.798643][ T5955] PM: hibernation: Need to copy 654840 pages [ 170.230780][ T5955] PM: hibernation: Image created (368037 pages copied, 286803 zero pages) [ 170.231057][ T5955] ACPI: PM: Restoring platform NVS memory [ 170.263828][ T5955] Enabling non-boot CPUs ... [ 170.266544][ T5955] zswap: could not alloc crypto acomp_request zstd [ 170.268656][ T5955] Error taking CPU1 up: -12 [ 170.269495][ T5955] ACPI: PM: Waking up from system sleep state S4 [ 170.871664][ T6045] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 171.052890][ T6045] usb 1-1: device firmware changed [ 171.230899][ T6044] usb 2-1: reset full-speed USB device number 2 using dummy_hcd [ 171.383131][ T6044] usb 2-1: device descriptor read/64, error -32 [ 171.653186][ T6044] usb 2-1: reset full-speed USB device number 2 using dummy_hcd [ 171.800931][ T6044] usb 2-1: device descriptor read/64, error -32 [ 172.073043][ T6044] usb 2-1: reset full-speed USB device number 2 using dummy_hcd [ 172.101204][ T6044] usb 2-1: device descriptor read/8, error -32 [ 172.373068][ T6044] usb 2-1: reset full-speed USB device number 2 using dummy_hcd [ 172.401721][ T6044] usb 2-1: device descriptor read/8, error -32 [ 172.607635][ T5955] PM: Failed to allocate LZO data [ 181.838569][ T5955] OOM killer enabled. [ 181.839280][ T5955] Restarting tasks ... done. [ 181.940430][ T5955] PM: hibernation: hibernation exit [ 181.950951][ T5763] usb 2-1: USB disconnect, device number 2 [ 181.969654][ T9] usb 1-1: USB disconnect, device number 3 [ 182.262571][ T5763] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 182.411987][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.426672][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.683213][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 182.751293][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice= 6.06 [ 182.760388][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.020717][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 183.028583][ T9] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 183.213092][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 184.645661][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.654911][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.665068][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.675842][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.698619][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.708116][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.718931][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.743802][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.752036][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.761422][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.768994][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.777374][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.922922][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.932960][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.942689][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.950443][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.958900][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.968316][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.161671][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.171025][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.178902][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.187721][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.195424][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.202928][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.433676][ T6044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.582931][ T6044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.735011][ T6044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.836933][ T6044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.628992][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 186.669616][ T6104] chnl_net:caif_netlink_parms(): no params data found [ 186.811396][ T5083] Bluetooth: hci1: command tx timeout [ 186.817389][ T5083] Bluetooth: hci2: command tx timeout [ 186.858858][ T6108] chnl_net:caif_netlink_parms(): no params data found [ 187.053427][ T5083] Bluetooth: hci3: command tx timeout [ 187.136034][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 187.291123][ T5083] Bluetooth: hci0: command tx timeout [ 187.428510][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.460156][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.471209][ T6104] bridge_slave_0: entered allmulticast mode [ 187.478239][ T6104] bridge_slave_0: entered promiscuous mode [ 187.557061][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.573537][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.581825][ T6104] bridge_slave_1: entered allmulticast mode [ 187.588819][ T6104] bridge_slave_1: entered promiscuous mode [ 187.623057][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.630190][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.643118][ T6112] bridge_slave_0: entered allmulticast mode [ 187.650218][ T6112] bridge_slave_0: entered promiscuous mode [ 187.709275][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.726188][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.735206][ T6112] bridge_slave_1: entered allmulticast mode [ 187.746921][ T6112] bridge_slave_1: entered promiscuous mode [ 187.756690][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.785999][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.793562][ T6108] bridge_slave_0: entered allmulticast mode [ 187.800552][ T6108] bridge_slave_0: entered promiscuous mode [ 187.839848][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.878193][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.982277][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.989436][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.023204][ T6108] bridge_slave_1: entered allmulticast mode [ 188.045046][ T6108] bridge_slave_1: entered promiscuous mode [ 188.203938][ T6108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.246618][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.277507][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.296659][ T6102] bridge_slave_0: entered allmulticast mode [ 188.321954][ T6102] bridge_slave_0: entered promiscuous mode [ 188.356209][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.375807][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.396431][ T6102] bridge_slave_1: entered allmulticast mode [ 188.420318][ T6102] bridge_slave_1: entered promiscuous mode [ 188.487202][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.526184][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.562908][ T6108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.595916][ T6104] team0: Port device team_slave_0 added [ 188.698594][ T6044] hsr_slave_0: left promiscuous mode [ 188.728296][ T6044] hsr_slave_1: left promiscuous mode [ 188.741704][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.749153][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.782229][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.789681][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.821460][ T6044] bridge_slave_1: left allmulticast mode [ 188.827174][ T6044] bridge_slave_1: left promiscuous mode [ 188.866445][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.882792][ T6044] bridge_slave_0: left allmulticast mode [ 188.888471][ T6044] bridge_slave_0: left promiscuous mode [ 188.894687][ T5083] Bluetooth: hci2: command tx timeout [ 188.900080][ T5083] Bluetooth: hci1: command tx timeout [ 188.912880][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.941514][ T6044] veth1_macvtap: left promiscuous mode [ 188.947080][ T6044] veth0_macvtap: left promiscuous mode [ 188.960329][ T6044] veth1_vlan: left promiscuous mode [ 188.965907][ T6044] veth0_vlan: left promiscuous mode [ 189.131181][ T5083] Bluetooth: hci3: command tx timeout [ 189.375188][ T5083] Bluetooth: hci0: command tx timeout [ 189.687976][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 189.745669][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 189.797745][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.856634][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.267089][ T6044] bond0 (unregistering): Released all slaves [ 190.432749][ T6112] team0: Port device team_slave_0 added [ 190.442092][ T6104] team0: Port device team_slave_1 added [ 190.455541][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.510443][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.528821][ T6112] team0: Port device team_slave_1 added [ 190.570166][ T6108] team0: Port device team_slave_0 added [ 190.599742][ T6108] team0: Port device team_slave_1 added [ 190.750610][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.773959][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.810675][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.826790][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.835119][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.866545][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.899101][ T6102] team0: Port device team_slave_0 added [ 190.929219][ T6102] team0: Port device team_slave_1 added [ 190.951910][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.958900][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.001026][ T5083] Bluetooth: hci1: command tx timeout [ 191.006482][ T5083] Bluetooth: hci2: command tx timeout [ 191.051096][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.114400][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.130592][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.185304][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.210937][ T5083] Bluetooth: hci3: command tx timeout [ 191.226435][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.245538][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.305301][ T6108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.342662][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.349647][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.429205][ T6108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.451111][ T5083] Bluetooth: hci0: command tx timeout [ 191.552150][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.559159][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.644388][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.707093][ T6112] hsr_slave_0: entered promiscuous mode [ 191.726455][ T6112] hsr_slave_1: entered promiscuous mode [ 191.777257][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.806924][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.865188][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.988044][ T6044] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.113646][ T6104] hsr_slave_0: entered promiscuous mode [ 192.126420][ T6104] hsr_slave_1: entered promiscuous mode [ 192.132786][ T6104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.140373][ T6104] Cannot create hsr debugfs directory [ 192.163033][ T6044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.186947][ T6102] hsr_slave_0: entered promiscuous mode [ 192.198551][ T6102] hsr_slave_1: entered promiscuous mode [ 192.205775][ T6102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.221090][ T6102] Cannot create hsr debugfs directory [ 192.242229][ T6108] hsr_slave_0: entered promiscuous mode [ 192.248653][ T6108] hsr_slave_1: entered promiscuous mode [ 192.265592][ T6108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.273551][ T6108] Cannot create hsr debugfs directory [ 192.317456][ T6044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.417879][ T6044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.051078][ T5083] Bluetooth: hci2: command tx timeout [ 193.056524][ T5083] Bluetooth: hci1: command tx timeout [ 193.155464][ T6044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.291083][ T5083] Bluetooth: hci3: command tx timeout [ 193.409421][ T6044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.530198][ T6044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.541890][ T5083] Bluetooth: hci0: command tx timeout [ 193.659652][ T6044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.717920][ T6112] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 193.758572][ T6112] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 193.794492][ T6112] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.848633][ T6112] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.059343][ T6102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.088487][ T6102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.161402][ T6102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.185412][ T6102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.852904][ T6108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.874257][ T6108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 195.045725][ T6108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 195.086808][ T6108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 195.416275][ T6104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.438616][ T6104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.580669][ T6104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.622918][ T6104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.650602][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.888461][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.967078][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.061962][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.088366][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.095562][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.216287][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.223484][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.263459][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.270821][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.307390][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.315130][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.517148][ T6102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.567384][ T6108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.685878][ T6044] hsr_slave_0: left promiscuous mode [ 196.716289][ T6044] hsr_slave_1: left promiscuous mode [ 196.737771][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.756414][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.769362][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.793344][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.818307][ T6044] bridge_slave_1: left allmulticast mode [ 196.829935][ T6044] bridge_slave_1: left promiscuous mode [ 196.851472][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.868753][ T6044] bridge_slave_0: left allmulticast mode [ 196.876922][ T6044] bridge_slave_0: left promiscuous mode [ 196.886725][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.909308][ T6044] hsr_slave_0: left promiscuous mode [ 196.916257][ T6044] hsr_slave_1: left promiscuous mode [ 196.926569][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.937057][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.949114][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.957739][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.969517][ T6044] bridge_slave_1: left allmulticast mode [ 196.980578][ T6044] bridge_slave_1: left promiscuous mode [ 196.992101][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.006544][ T6044] bridge_slave_0: left allmulticast mode [ 197.013075][ T6044] bridge_slave_0: left promiscuous mode [ 197.018896][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.070640][ T6044] veth1_macvtap: left promiscuous mode [ 197.076607][ T6044] veth0_macvtap: left promiscuous mode [ 197.088217][ T6044] veth1_vlan: left promiscuous mode [ 197.095037][ T6044] veth0_vlan: left promiscuous mode [ 197.107769][ T6044] veth1_macvtap: left promiscuous mode [ 197.114544][ T6044] veth0_macvtap: left promiscuous mode [ 197.120175][ T6044] veth1_vlan: left promiscuous mode [ 197.130255][ T6044] veth0_vlan: left promiscuous mode [ 197.999992][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 198.062649][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 198.119888][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.179701][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.584712][ T6044] bond0 (unregistering): Released all slaves [ 199.217356][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 199.289361][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 199.345100][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.399684][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.885674][ T6044] bond0 (unregistering): Released all slaves [ 200.090104][ T6108] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.243160][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.250317][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.368801][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.443031][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.450183][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.590555][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.768879][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.954054][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.961258][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.049683][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.056866][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.269676][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.079901][ T6108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.172488][ T6102] veth0_vlan: entered promiscuous mode [ 202.243772][ T6102] veth1_vlan: entered promiscuous mode [ 202.394538][ T6102] veth0_macvtap: entered promiscuous mode [ 202.477074][ T6102] veth1_macvtap: entered promiscuous mode [ 202.497507][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.507953][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.568998][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.669305][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.832208][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.869494][ T6112] veth0_vlan: entered promiscuous mode [ 202.927932][ T6112] veth1_vlan: entered promiscuous mode [ 202.956400][ T6102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.970218][ T6102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.984843][ T6102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.993968][ T6102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.244321][ T6112] veth0_macvtap: entered promiscuous mode [ 203.294408][ T6112] veth1_macvtap: entered promiscuous mode [ 203.476548][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.521173][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.555085][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.617067][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.653686][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.682458][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.723951][ T6108] veth0_vlan: entered promiscuous mode [ 203.767558][ T6112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.781144][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.789000][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.825268][ T6112] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.843029][ T6112] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.868946][ T6112] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.945742][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.980126][ T6104] veth0_vlan: entered promiscuous mode [ 203.989457][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.030259][ T6108] veth1_vlan: entered promiscuous mode [ 204.126787][ T6104] veth1_vlan: entered promiscuous mode [ 204.246961][ T6108] veth0_macvtap: entered promiscuous mode [ 204.400566][ T6015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.441852][ T6015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.462768][ T6108] veth1_macvtap: entered promiscuous mode [ 204.597137][ T6104] veth0_macvtap: entered promiscuous mode [ 204.629293][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.642693][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.681228][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.688765][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.741203][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.775843][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.816724][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.856376][ T6104] veth1_macvtap: entered promiscuous mode [ 204.941991][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.979310][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.013564][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.041113][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.075512][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.124589][ T6108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.190906][ T6108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.199661][ T6108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.267210][ T6108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.314720][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.354173][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.385530][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.416968][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.442758][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 205.442769][ T28] audit: type=1800 audit(1785897347.070:23): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="idVendor" dev="configfs" ino=10612 res=0 errno=0 [ 205.487665][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.513833][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.546646][ T28] audit: type=1800 audit(1785897347.080:24): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="idProduct" dev="configfs" ino=10613 res=0 errno=0 [ 205.567973][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.592168][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.617938][ T28] audit: type=1800 audit(1785897347.080:25): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="process_ump" dev="configfs" ino=10614 res=0 errno=0 [ 205.644566][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.671253][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.695291][ T28] audit: type=1800 audit(1785897347.120:26): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="ep_name" dev="configfs" ino=10615 res=0 errno=0 [ 205.720886][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.746360][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.777627][ T28] audit: type=1800 audit(1785897347.120:27): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="name" dev="configfs" ino=10616 res=0 errno=0 [ 205.800434][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.824793][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.889223][ T28] audit: type=1800 audit(1785897347.120:28): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="name" dev="configfs" ino=10617 res=0 errno=0 [ 205.982367][ T6104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.044405][ T28] audit: type=1800 audit(1785897347.140:29): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="active" dev="configfs" ino=10618 res=0 errno=0 [ 206.071816][ T6104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.107179][ T6104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.140920][ T6104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.154155][ T28] audit: type=1800 audit(1785897347.140:30): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.31" name="UDC" dev="configfs" ino=10619 res=0 errno=0 [ 206.324886][ T6299] loop4: detected capacity change from 0 to 65536 [ 206.464269][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.521252][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.546470][ T6299] XFS (loop4): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 206.631424][ T174] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 206.740237][ T6044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.798338][ T6044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.861180][ T174] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 206.886198][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.931965][ T174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.950193][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.994480][ T174] usb 8-1: config 0 descriptor?? [ 207.007956][ T6299] XFS (loop4): Ending clean mount [ 207.058896][ T6015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.128271][ T6015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.432639][ T174] corsair-psu 0003:1B1C:1C03.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.7-1/input0 [ 207.494014][ T6299] XFS (loop4): User initiated shutdown received. [ 207.515952][ T5844] XFS (loop4): xfs_difree: xfs_ialloc_read_agi() returned error -5. [ 207.572992][ T5844] XFS (loop4): xfs_difree: xfs_ialloc_read_agi() returned error -5. [ 207.594447][ T6299] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 207.692315][ T6299] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 207.851846][ T6088] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 207.871625][ T6102] XFS (loop4): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 208.112273][ T6088] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.168672][ T6088] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.218856][ T6088] usb 7-1: Product: syz [ 208.261252][ T6088] usb 7-1: Manufacturer: syz [ 208.265918][ T6088] usb 7-1: SerialNumber: syz [ 208.334508][ T6087] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 208.510172][ T6088] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.573730][ T6087] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 208.597113][ T6087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.678762][ T6087] usb 6-1: NFC: intf ffff888031885000 id ffffffff8da5b700 [ 208.862886][ T6087] nfcmrvl 6-1:1.0: NFC: registered with nci successfully [ 209.486269][ T6325] mac80211_hwsim hwsim14 wlan99: renamed from wlan0 (while UP) [ 209.551325][ T6087] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 209.766823][ T6087] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 209.843954][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.853856][ T6088] usb 7-1: Service connection timeout for: 256 [ 209.860091][ T6088] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 210.060209][ T6088] ath9k_htc: Failed to initialize the device [ 210.162107][ T174] usb 8-1: USB disconnect, device number 2 [ 210.258932][ T6088] usb 7-1: ath9k_htc: USB layer deinitialized [ 210.723180][ T9] usb 7-1: USB disconnect, device number 2 [ 210.892416][ T6088] usb 6-1: USB disconnect, device number 2 [ 210.919909][ T6088] usb 6-1: NFC: intf ffff888031885000 [ 210.972943][ T5844] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 211.189613][ T5844] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 211.217568][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.256598][ T5844] usb 8-1: Product: syz [ 211.278853][ T5844] usb 8-1: Manufacturer: syz [ 211.299028][ T5844] usb 8-1: SerialNumber: syz [ 211.675981][ T28] audit: type=1800 audit(1785897353.300:31): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="idVendor" dev="configfs" ino=11197 res=0 errno=0 [ 211.729621][ T6087] hid-rmi 0003:1532:011D.0004: unable to set rmi mode to 1 (-71) [ 211.759058][ T6087] hid-rmi 0003:1532:011D.0004: failed to set rmi mode [ 211.779812][ T28] audit: type=1800 audit(1785897353.340:32): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="idProduct" dev="configfs" ino=11198 res=0 errno=0 [ 211.876060][ T6087] hid-rmi 0003:1532:011D.0004: hiddev0,hidraw0: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.4-1/input0 [ 211.930327][ T28] audit: type=1800 audit(1785897353.350:33): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="process_ump" dev="configfs" ino=11199 res=0 errno=0 [ 212.033756][ T6087] usb 5-1: USB disconnect, device number 2 [ 212.096084][ T28] audit: type=1800 audit(1785897353.350:34): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="ep_name" dev="configfs" ino=11200 res=0 errno=0 [ 212.272446][ T28] audit: type=1800 audit(1785897353.350:35): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="direction" dev="configfs" ino=11201 res=0 errno=0 [ 212.338465][ T6391] fido_id[6391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 212.515116][ T28] audit: type=1800 audit(1785897353.350:36): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="name" dev="configfs" ino=11202 res=0 errno=0 [ 212.575474][ T5844] usb 8-1: 1:1 : unsupported format bits 0x20000 [ 212.622099][ T5844] usb 8-1: 2:1 : unsupported format bits 0x20000 [ 212.693776][ T28] audit: type=1800 audit(1785897353.360:37): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="active" dev="configfs" ino=11203 res=0 errno=0 [ 212.771156][ T5844] usb 8-1: USB disconnect, device number 3 [ 212.877194][ T6401] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 212.894304][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 212.922215][ T28] audit: type=1800 audit(1785897353.360:38): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="ep_name" dev="configfs" ino=11204 res=0 errno=0 [ 213.040135][ T28] audit: type=1800 audit(1785897353.380:39): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="direction" dev="configfs" ino=11205 res=0 errno=0 [ 213.254944][ T6406] zonefs (nullb0) ERROR: Not a zoned block device [ 213.283466][ T28] audit: type=1800 audit(1785897354.230:40): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.39" name="idVendor" dev="configfs" ino=11230 res=0 errno=0 [ 213.627926][ T6416] PM: hibernation: hibernation entry [ 213.691138][ T5844] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 213.751104][ T6087] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 213.892094][ T5844] usb 8-1: not running at top speed; connect to a high speed hub [ 213.909817][ T5844] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 213.934901][ T5844] usb 8-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 213.956124][ T6087] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 213.967736][ T6087] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.982212][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.005799][ T6087] usb 7-1: config 0 descriptor?? [ 214.023630][ T6410] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 214.264918][ T5844] usb 8-1: dvb_usb_v2: found a 'Realtek RTL2831U reference design' in warm state [ 214.419623][ T6416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.444992][ T6416] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.465565][ T5844] dvb_usb_rtl28xxu: probe of 8-1:1.0 failed with error -32 [ 214.478163][ T6416] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.524471][ T6087] corsair-psu 0003:1B1C:1C03.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.6-1/input0 [ 214.556890][ T6416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.583345][ T6416] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 214.619781][ T6416] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 214.686379][ T6416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.725971][ T6416] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.754785][ T6416] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.798387][ T6416] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.823610][ T6416] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.844924][ T6416] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 215.030220][ T6416] Filesystems sync: 0.143 seconds [ 215.064030][ T6416] Freezing user space processes [ 215.076378][ T6416] Freezing user space processes completed (elapsed 0.007 seconds) [ 215.085694][ T6416] OOM killer disabled. [ 215.318087][ T6416] PM: hibernation: Preallocating image memory [ 216.086704][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.572605][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.731156][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.810854][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.149772][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.155963][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.162898][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.168948][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.937252][ T6087] corsair-psu 0003:1B1C:1C03.0005: unable to query firmware (-110) [ 219.953243][ T6087] corsair-psu: probe of 0003:1B1C:1C03.0005 failed with error -110 [ 221.210991][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.217045][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.223122][ T5785] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.229161][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 251.502548][ T5100] ------------[ cut here ]------------ [ 251.509574][ T5100] WARNING: CPU: 0 PID: 5100 at mm/page_alloc.c:3392 __alloc_pages_slowpath+0x1bbb/0x22b0 [ 251.519510][ T5100] Modules linked in: [ 251.523467][ T5100] CPU: 0 PID: 5100 Comm: jbd2/sda1-8 Not tainted syzkaller #0 [ 251.530998][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.541124][ T5100] RIP: 0010:__alloc_pages_slowpath+0x1bbb/0x22b0 [ 251.547471][ T5100] Code: 07 80 c1 03 38 c1 0f 8c e7 ee ff ff 4c 89 f7 e8 8b c7 0b 00 49 b8 00 00 00 00 00 fc ff df e9 d0 ee ff ff c6 05 c1 d2 a2 0c 01 <0f> 0b 66 83 3c 24 00 0f 89 b6 fb ff ff 44 89 74 24 10 44 89 64 24 [ 251.567593][ T5100] RSP: 0018:ffffc9000fe773a0 EFLAGS: 00010246 [ 251.573867][ T5100] RAX: 0000000000000000 RBX: ffff888031fd9e00 RCX: fd2ef9bf9baec400 [ 251.581972][ T5100] RDX: 0000000000000000 RSI: 0000000000000200 RDI: ffffc9000fe77500 [ 251.589976][ T5100] RBP: ffffc9000fe775d0 R08: ffff88823fff8497 R09: 1ffff11047fff092 [ 251.598068][ T5100] R10: dffffc0000000000 R11: ffffed1047fff093 R12: 0000000000000000 [ 251.606110][ T5100] R13: 0000000000000002 R14: 0000000000000015 R15: 0000000000000001 [ 251.615340][ T5100] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 251.624629][ T5100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.631292][ T5100] CR2: 000055ab9ea16646 CR3: 000000002e6ae000 CR4: 00000000003506f0 [ 251.639284][ T5100] Call Trace: [ 251.642683][ T5100] [ 251.645652][ T5100] ? get_page_from_freelist+0x22a0/0x22a0 [ 251.651441][ T5100] __alloc_pages+0x32c/0x460 [ 251.656050][ T5100] ? zone_statistics+0x170/0x170 [ 251.661055][ T5100] ? __lock_acquire+0x7d80/0x7d80 [ 251.666098][ T5100] ? alloc_pages+0x4e1/0x740 [ 251.670753][ T5100] ? xas_load+0x12b/0x140 [ 251.675094][ T5100] folio_alloc+0x1e/0x30 [ 251.679351][ T5100] filemap_alloc_folio+0xdf/0x490 [ 251.684460][ T5100] ? __find_get_block+0x388/0xeb0 [ 251.689508][ T5100] ? filemap_add_folio+0x3d0/0x3d0 [ 251.694767][ T5100] ? write_boundary_block+0xb0/0xb0 [ 251.700072][ T5100] ? __might_sleep+0xe0/0xe0 [ 251.704736][ T5100] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 251.710657][ T5100] __filemap_get_folio+0x3fb/0xbe0 [ 251.716936][ T5100] ? jbd2_journal_next_log_block+0x28e/0x370 [ 251.723141][ T5100] __getblk_gfp+0x212/0x620 [ 251.727681][ T5100] jbd2_journal_get_descriptor_buffer+0xd1/0x380 [ 251.734469][ T5100] jbd2_journal_commit_transaction+0x1364/0x5ad0 [ 251.741052][ T5100] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 251.747859][ T5100] ? lock_chain_count+0x20/0x20 [ 251.752786][ T5100] ? _raw_spin_unlock+0x40/0x40 [ 251.757663][ T5100] ? __try_to_del_timer_sync+0x1c2/0x280 [ 251.763366][ T5100] ? __timer_delete_sync+0x23d/0x2e0 [ 251.768678][ T5100] ? __lock_acquire+0x7d80/0x7d80 [ 251.773830][ T5100] ? timer_delete_sync+0x20/0x20 [ 251.778782][ T5100] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 251.784783][ T5100] ? _raw_spin_unlock+0x40/0x40 [ 251.789676][ T5100] ? finish_wait+0xca/0x1d0 [ 251.794230][ T5100] kjournald2+0x40f/0x810 [ 251.798585][ T5100] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 251.803837][ T5100] ? wake_bit_function+0x200/0x200 [ 251.808964][ T5100] ? _raw_spin_unlock+0x40/0x40 [ 251.814959][ T5100] ? __kthread_parkme+0x71/0x1c0 [ 251.819917][ T5100] ? __kthread_parkme+0x15b/0x1c0 [ 251.825162][ T5100] kthread+0x2fa/0x390 [ 251.829243][ T5100] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 251.834569][ T5100] ? kthread_blkcg+0xd0/0xd0 [ 251.839259][ T5100] ret_from_fork+0x48/0x80 [ 251.843736][ T5100] ? kthread_blkcg+0xd0/0xd0 [ 251.848356][ T5100] ret_from_fork_asm+0x11/0x20 [ 251.853392][ T5100] [ 251.856431][ T5100] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.863721][ T5100] CPU: 0 PID: 5100 Comm: jbd2/sda1-8 Not tainted syzkaller #0 [ 251.871271][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.881332][ T5100] Call Trace: [ 251.884622][ T5100] [ 251.887584][ T5100] dump_stack_lvl+0x18c/0x250 [ 251.892295][ T5100] ? show_regs_print_info+0x20/0x20 [ 251.897517][ T5100] ? load_image+0x420/0x420 [ 251.902065][ T5100] panic+0x2ca/0x720 [ 251.905988][ T5100] ? bpf_jit_dump+0xd0/0xd0 [ 251.910522][ T5100] ? ret_from_fork_asm+0x11/0x20 [ 251.915498][ T5100] __warn+0x2e0/0x470 [ 251.919511][ T5100] ? __alloc_pages_slowpath+0x1bbb/0x22b0 [ 251.925243][ T5100] ? __alloc_pages_slowpath+0x1bbb/0x22b0 [ 251.930974][ T5100] report_bug+0x2be/0x4f0 [ 251.935321][ T5100] ? __alloc_pages_slowpath+0x1bbb/0x22b0 [ 251.941050][ T5100] ? __alloc_pages_slowpath+0x1bbb/0x22b0 [ 251.946799][ T5100] ? __alloc_pages_slowpath+0x1bbd/0x22b0 [ 251.952545][ T5100] handle_bug+0xcf/0x120 [ 251.956798][ T5100] exc_invalid_op+0x1a/0x50 [ 251.961332][ T5100] asm_exc_invalid_op+0x1a/0x20 [ 251.966276][ T5100] RIP: 0010:__alloc_pages_slowpath+0x1bbb/0x22b0 [ 251.972611][ T5100] Code: 07 80 c1 03 38 c1 0f 8c e7 ee ff ff 4c 89 f7 e8 8b c7 0b 00 49 b8 00 00 00 00 00 fc ff df e9 d0 ee ff ff c6 05 c1 d2 a2 0c 01 <0f> 0b 66 83 3c 24 00 0f 89 b6 fb ff ff 44 89 74 24 10 44 89 64 24 [ 251.992222][ T5100] RSP: 0018:ffffc9000fe773a0 EFLAGS: 00010246 [ 251.998301][ T5100] RAX: 0000000000000000 RBX: ffff888031fd9e00 RCX: fd2ef9bf9baec400 [ 252.006280][ T5100] RDX: 0000000000000000 RSI: 0000000000000200 RDI: ffffc9000fe77500 [ 252.014276][ T5100] RBP: ffffc9000fe775d0 R08: ffff88823fff8497 R09: 1ffff11047fff092 [ 252.022253][ T5100] R10: dffffc0000000000 R11: ffffed1047fff093 R12: 0000000000000000 [ 252.030235][ T5100] R13: 0000000000000002 R14: 0000000000000015 R15: 0000000000000001 [ 252.038245][ T5100] ? get_page_from_freelist+0x22a0/0x22a0 [ 252.043991][ T5100] __alloc_pages+0x32c/0x460 [ 252.048588][ T5100] ? zone_statistics+0x170/0x170 [ 252.053536][ T5100] ? __lock_acquire+0x7d80/0x7d80 [ 252.058591][ T5100] ? alloc_pages+0x4e1/0x740 [ 252.063188][ T5100] ? xas_load+0x12b/0x140 [ 252.067525][ T5100] folio_alloc+0x1e/0x30 [ 252.071785][ T5100] filemap_alloc_folio+0xdf/0x490 [ 252.076821][ T5100] ? __find_get_block+0x388/0xeb0 [ 252.081876][ T5100] ? filemap_add_folio+0x3d0/0x3d0 [ 252.086997][ T5100] ? write_boundary_block+0xb0/0xb0 [ 252.092211][ T5100] ? __might_sleep+0xe0/0xe0 [ 252.096832][ T5100] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 252.102757][ T5100] __filemap_get_folio+0x3fb/0xbe0 [ 252.107878][ T5100] ? jbd2_journal_next_log_block+0x28e/0x370 [ 252.114319][ T5100] __getblk_gfp+0x212/0x620 [ 252.118847][ T5100] jbd2_journal_get_descriptor_buffer+0xd1/0x380 [ 252.125204][ T5100] jbd2_journal_commit_transaction+0x1364/0x5ad0 [ 252.131566][ T5100] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 252.138341][ T5100] ? lock_chain_count+0x20/0x20 [ 252.143229][ T5100] ? _raw_spin_unlock+0x40/0x40 [ 252.148117][ T5100] ? __try_to_del_timer_sync+0x1c2/0x280 [ 252.153759][ T5100] ? __timer_delete_sync+0x23d/0x2e0 [ 252.159053][ T5100] ? __lock_acquire+0x7d80/0x7d80 [ 252.164089][ T5100] ? timer_delete_sync+0x20/0x20 [ 252.169117][ T5100] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 252.175027][ T5100] ? _raw_spin_unlock+0x40/0x40 [ 252.179892][ T5100] ? finish_wait+0xca/0x1d0 [ 252.184411][ T5100] kjournald2+0x40f/0x810 [ 252.188764][ T5100] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 252.193966][ T5100] ? wake_bit_function+0x200/0x200 [ 252.199087][ T5100] ? _raw_spin_unlock+0x40/0x40 [ 252.203971][ T5100] ? __kthread_parkme+0x71/0x1c0 [ 252.208916][ T5100] ? __kthread_parkme+0x15b/0x1c0 [ 252.213950][ T5100] kthread+0x2fa/0x390 [ 252.218028][ T5100] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 252.223235][ T5100] ? kthread_blkcg+0xd0/0xd0 [ 252.227849][ T5100] ret_from_fork+0x48/0x80 [ 252.232276][ T5100] ? kthread_blkcg+0xd0/0xd0 [ 252.236875][ T5100] ret_from_fork_asm+0x11/0x20 [ 252.241662][ T5100] [ 252.244733][ T5100] Kernel Offset: disabled [ 252.249128][ T5100] Rebooting in 86400 seconds..