last executing test programs: 2m29.8441576s ago: executing program 4 (id=109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000780)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000007c0)="b2", 0x1, 0x24000045, &(0x7f0000000800)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000840)='highspeed', 0x9) sendto$inet6(r0, &(0x7f0000000880)="2e138104458aa52fefb268543e0b10f4cbda5030ce04d2f7843a377ffcf141e82e60c0c5d796288d82adf9ffb3736cc59827752975493d93786933c163eb99ffabd0415eef286ab9a6c2241fdb73750e8603e350170c13a7cc768adcc613f78a33aab69e4b920080649a5e8968cf54270dc5bd832d14aa1a11a8b86686a08434af36c9212fe6b1d7d2fbfd275418cf0e7689", 0x100000030, 0x8000, 0x0, 0x0) 2m28.919620782s ago: executing program 4 (id=126): ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x13}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a0001002dbd7000010000000a00", @ANYRES32=0x0, @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x404c045}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2m28.737038887s ago: executing program 4 (id=129): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000002780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000027c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000002800), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002840)=r0, 0x4) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r2, &(0x7f0000002880)={&(0x7f00000028c0)=@hci={0x1f, 0xdd86, 0x6}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002980)="d1", 0x1}], 0x1}, 0x4c081) 2m28.59812156s ago: executing program 4 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) 2m28.494511753s ago: executing program 4 (id=134): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x16}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m28.084072223s ago: executing program 4 (id=139): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000a80)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000ac0)={r2, 0x0, 0x0}, 0x10) 2m27.623310494s ago: executing program 32 (id=139): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000a80)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000ac0)={r2, 0x0, 0x0}, 0x10) 2m2.867426727s ago: executing program 3 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) fsopen(&(0x7f0000001700)='bpf\x00', 0x0) io_uring_setup(0x21be, &(0x7f0000000240)={0x0, 0x11e6, 0x80, 0x1, 0x2d8}) 2m2.491768816s ago: executing program 3 (id=337): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000640)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2d, {0x9, 0x0, 0x8000, 0xfffffffe, 0x0, 0x400}}) 2m1.94476498s ago: executing program 3 (id=347): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 2m1.855319732s ago: executing program 3 (id=350): syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x18410, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./mnt\x00', &(0x7f0000000bc0)='overlay\x00', 0x0, &(0x7f0000000c00)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 2m1.311634915s ago: executing program 3 (id=355): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000640)=""/68, 0x44}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 2m1.090754851s ago: executing program 3 (id=358): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x4e21, 0x0, 0xa}, {0x0, 0x40000000003ff, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdac, 0x2f, 0x407fffffffffff, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x5}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) 2m0.533154144s ago: executing program 33 (id=358): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x4e21, 0x0, 0xa}, {0x0, 0x40000000003ff, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdac, 0x2f, 0x407fffffffffff, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x5}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) 1m53.027618747s ago: executing program 1 (id=423): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) getpgid(r0) 1m51.901220164s ago: executing program 1 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000740)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000007c0)={0x1, 0x0, [{0x40000090, 0x0, 0x10}]}) 1m51.162046832s ago: executing program 6 (id=360): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1m51.161288072s ago: executing program 1 (id=439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000380)=0x9) 1m50.968069347s ago: executing program 6 (id=430): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000b80)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/test/file0\x00', 0x20) 1m50.925146048s ago: executing program 1 (id=432): syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x18410, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./mnt\x00', &(0x7f0000000bc0)='overlay\x00', 0x0, &(0x7f0000000c00)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 1m49.956317032s ago: executing program 1 (id=436): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r2, 0x5501) 1m49.642401189s ago: executing program 6 (id=437): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r1, &(0x7f0000001300)=""/4113, 0x1011, 0x20, 0x0, 0x0) 1m49.322538457s ago: executing program 1 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x403, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000003c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) 1m48.968438946s ago: executing program 34 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x403, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000003c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) 1m48.616653755s ago: executing program 6 (id=448): syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x18410, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./mnt\x00', &(0x7f0000000bc0)='overlay\x00', 0x0, &(0x7f0000000c00)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 1m48.119947526s ago: executing program 6 (id=453): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r2, 0x5501) 1m47.628093378s ago: executing program 6 (id=455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1m47.248647628s ago: executing program 35 (id=455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 9.962038867s ago: executing program 5 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1000}}, 0x0, 0x0, 0x41, 0x0, "f48aa066ff96b81d726ab262faca3a754d7db4fd453e7e7eff6585505efdba032f716c1ede84ca8e8c308b71affff469730d47151b5199f415174c33c3163239b2c360ff29a64ed94f89f8e4f0a29ca0"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x9}}}}}}}, 0x0) 8.834682745s ago: executing program 5 (id=1227): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 6.53476962s ago: executing program 0 (id=1239): r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000280)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000500)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 6.314544466s ago: executing program 0 (id=1240): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x3, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004080000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r3, 0x4) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 6.14881572s ago: executing program 0 (id=1244): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 5.501949826s ago: executing program 8 (id=1246): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000002640)={0x0, r1}) close(r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000002680)) 5.390674378s ago: executing program 5 (id=1247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.389636668s ago: executing program 0 (id=1248): syz_mount_image$xfs(&(0x7f00000004c0), &(0x7f0000000d40)='./file1\x00', 0x8, &(0x7f0000000d80), 0x1, 0x9798, &(0x7f0000000e40)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") r0 = openat(0xffffffffffffff9c, &(0x7f000000a600)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f000000a640)=0xf000, 0x863, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x42, 0x98) write$P9_RREADLINK(r1, &(0x7f0000000c00)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r1, 0xfe53, 0x0, 0x4) 5.061330837s ago: executing program 8 (id=1251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001940)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000039c0)={{0x60000, 0xffff1000, 0x10, 0x9, 0x7d, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xfe}, {0xd000, 0x4000, 0x10, 0x3, 0x81, 0x7, 0x6, 0x4, 0x1, 0x6, 0x2, 0x5}, {0xf000, 0x4, 0x0, 0x4, 0x14, 0x3, 0x4, 0x13, 0x5, 0x4, 0x91, 0x80}, {0x9000, 0xeeef0000, 0xc, 0x7, 0x2, 0x40, 0x2, 0x0, 0xfd, 0x29, 0xc, 0x9}, {0xa000, 0x41000, 0xa, 0x9, 0xc8, 0x9, 0x7, 0xef, 0x2, 0x6e, 0x2, 0xc1}, {0x4000, 0x10000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x9, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x8}, {0x9000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0x0, 0x7000, 0x1, [0x6, 0x2, 0x8000000000000006, 0x3]}) 4.992728648s ago: executing program 5 (id=1252): socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 4.815260123s ago: executing program 7 (id=1263): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x939e1000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x7d, 0x44) 4.786241403s ago: executing program 5 (id=1254): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000005e80)=ANY=[@ANYBLOB="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"], 0x1, 0x4438, &(0x7f00000088c0)="$eJzs3b9vU9ceAPBzb/IeCY8fCY+BJz3pWXpI76mtooSpbZAaQiAkkFLRgqouxkkMpHVilDhVB4Z0Q+pUqUPVAbVSt0woQ1f6J3TpSGekduhSCQk1le3rxPcmVkyICaDPR4qv7/ltf32Pj4ebEycqt+aWcnNLucJCrjxzY+lU7tNyaXm+GOLtHNg++Vk8Vf/sm07ESez3z+Wz59+/diqEH2d/frS+vr4eqrpDw0hoMtT0/I/f78w0HxvikFZtN3TURyGE41vGVdUVQvjwhxCiEMKZJG00OfaGEI6Eet61O19cz+3RaO4/LJ7OP5m6uzZ8cnL13lrr1x6F8E3pX2/cnP/1v13Dv7zWVuNdezRIAAAAAAAAAAAAAAAAAABeWONXLl99b3AoPIhC92q09X7d8eTY6v7Y9T3zn7bG+zgp/ayvGwAAAAAAAAAAAAAAAAAAAF4km/f/56Jj29z/P5YcR1rUX3+n82OkcybevTx2bnAo2f892pL/ZpL025mu0L/Nvu/Z/d/PZOpvv//71n52qzG+Rr99IYoHUudxPDAQwnfJxu8nooNxqbxUef1GeXlhds+G8dJKx7++e38qOsmG/u3GfzTTfuf3///nlk9T9fz63n3EXmnp+He1LPf951Fb8T+bqfc84s/upePfXUvrbS4wUp8AqvH/snvn+I9l2u9U/I+EEHJRday51AxQXcNU01utV0hLx/9vtbTU1Jm8ka2u/8eZ+J/LtL9f8/9K9ouIbaXj//daWk+qxOb13x/vfP2fz7S/H/Gvjn/F939b0vE/UE/sThWpvZPtzv/jmfY7Ff+rcTLOI1HqE7Aa1dNb/b860tLx79mSv/n7L25r/XchU/95/f5r9Nv4/deY/v8fxfHE0T3r7pWTjn9vy3LtXv8TmXqdnv9Haus/disd/4O1tPTaua/22G78JzPtdyr+tVVJTyP+m/PJnwfq6d9a/7UlHf9/1BPj5hIrtcfa+i/aef1/MdP+fqz/quNfiTvb66siHf9DLctV4/9TG9//lzL1Oh//EAat9XctHf/DLcvVrv+eneM/lanX6fj/r5ONAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwERpNjX4jigdR5HA8MhHA2OT8RDkbThdn8dKk888lSCGNJei4ci26WytOFUn5uoTxbzBdKpfJMCOeS/OOhJ1oqlSv5+cLt8xtt9Ua3ioXFynSxUAkhjCfp/w6HG21Nz1XmC7dDCBc28o7G5cXbtwoL+dm5xbcHBwcHw8TGGPqj4meV4kKl3ns9N4TJjbp9UdPgatkXN8ZyKPq4vLy4UCjV0i811SmVZwqlpjpTSd5XoT+qLC4vzBQqxXypfLPR334aSY5jE1c+uHJpaEv+9ah+HH2+wwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKT0YfuvrEEJ3/SwOIeSi5EmU/KXcf1g8nX8ydXdt+OTk6r21R9uVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsEv/KA0EURyA34yFlh7DatntbFcU0cIVwRPoMTyMHsVLeAeLFGlThEAyC2H/wDZJ9X3Ng/kx8x7MAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFju8a17f62biBRX28uI38+//+P8udTvu+n7F2eYkdN5eunuH+qm/Hsa5bflaNXmfbpZf33ERO39DPZkuE8H4z5Dc/s2N1/f9zpSriKiLflNyrmqlr0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGMHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqKvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//TD0nhg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) 4.612504167s ago: executing program 8 (id=1255): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbd7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 4.595665478s ago: executing program 7 (id=1256): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x25b8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r0, &(0x7f00000001c0)='#', 0x1) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) 4.270162016s ago: executing program 7 (id=1257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.191683318s ago: executing program 8 (id=1258): socket$packet(0x11, 0x3, 0x300) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000300), 0x0, 0x50ed, &(0x7f00000051c0)="$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") openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x1b6) r1 = syz_io_uring_setup(0xf00, &(0x7f0000001d80)={0x0, 0x595f, 0x400, 0x4, 0x51}, &(0x7f0000001e00)=0x0, &(0x7f0000001e40)=0x0, &(0x7f0000001e80)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001ec0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 3.914298465s ago: executing program 7 (id=1260): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5b8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58c, 0x2, [@TCA_BPF_ACT={0x588, 0x1, [@m_bpf={0x120, 0x11, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x30, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, ']:'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x434, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x4, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x3, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6175, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0x8, 0xfff, 0x1000, 0x80000000, 0x2797, 0x4, 0x3, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.630143181s ago: executing program 7 (id=1261): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00!\x00'}, @local=@item_4={0x3, 0x2, 0x0, "034d2500"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f0000000400)={0x2, 0x0, 0x3, 0x0, 0x1, 0x40, 0x0, 0x2}, 0x0, &(0x7f0000000440)={0x1f, 0xc, 0x0, 0x8000000000000000, 0x0, 0x80000000000000, 0x8000000000000000, 0x20000}, 0x0, 0x0) close(0x3) 3.391939427s ago: executing program 2 (id=1262): r0 = socket$kcm(0x2, 0x200000000000006, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003cc0)={{r2}, &(0x7f0000003c40), &(0x7f0000003c80)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) 2.827269431s ago: executing program 2 (id=1264): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="9c9d34b50085b662d9b66bd4e227eab60ab454499d663935c66b17c05f94276b86213e18d8403b24c02cc7c2144a53ff77e92eb3d1430aae86c990dacee8ab34538c3f985253b0e7e94ea453c7be8ab84a6924f31818c316bf8f3451e628601d7fb85e9ef2f3fc486a3358c10ebc2f19f62f0f852fe280780871a5f4fe4dbc5642fed870b1bb25984e7863f8629fd59c0d733278ed04ec59eafb7801304fce3c166c228a1c4831206e", 0xa9}, {&(0x7f00000002c0)="3c91206b99d2ff6794", 0x9}, {&(0x7f0000000480)="fcf75a2d99e860e7a49ef3a8d49e18de20e98ab7eedb68f43ce6bda86e77e9", 0x1f}], 0x3}, 0x40440d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) close(r1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1}, 0x1) close(0x3) 2.776012542s ago: executing program 0 (id=1265): syz_mount_image$jfs(&(0x7f00000048c0), &(0x7f0000004900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000004980)=ANY=[], 0x3, 0x5f74, &(0x7f00000049c0)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtLOLKF4gLHl4C3PSGi76RIvEKEC+ASDZXlaAMGvucZLxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R9e6ETEjV+kB05G/F/0IroR83W9GPXMtbx8PyJOxWZzPBcRvdmIev3Nf56JuBwRH5+IWN9YWaofvrjPflw5f+/Op9/91t9+/fu1Uz9+80cfDrf/4P8vffSb+xEnv//aR5/eP5htBwAAgFJUVVV10tv80+n9fbftTgEAE5GP/1WSH1er1Wr1gda/605Xf9SF1k3VaPebRUSsNtepXzM4HQ8AR8xqfNJ2F2iR/IvWj4in2u4EMNU6bXeAQ7G+sbLUSfl2mseDxa32/HfKbfmvdh7e37HbdJzha0wm9fO1Fr14dpf+zE+oD9Mk598dzv/GVvsgLXfY+U/KbvkPtm59Kk7Ovzec/5Bt+f8hIo5s/t2R+Zcq599/nPxXe0d4/5c/AAAAAADHX/77/8mWz//OPvmm7Mte538XJ9QHAAAAAAAAADhoTzr+30PG/wMAAICpVb9Xr/3xxKPHdvsstvrx652Ip4eWBwqTbpZZaLsfAAAAAAAAAAAAAFCS/tY1vNc7ETMR8fTCQlVV9VfTcP24nnT9o6707YeStf1LHgAAtnx8It3Lnwfg60TMRcT19Fl/MwsLC1U1N79QLVTzs/n17GB2rppvvK/N0/qx2cE+XhD3B1X9zeYa6zWNe788rn34+9XPNah6++jYZLQcOgDF2zoarTsiHTNV9Uy0/SqHo8H+f/zY/9mPtn9OAQAAgMNXVVXVSR/nfTqd8++23SkAYBLm8vF/+LyAWq1Wq9Xq41c3VaPdbxYRsdpcp37NYDh+ADhiVuOTtrtAi+RftH5EnGq7E8BU67TdAQ7F+sbKUifl22keD9L47vlakG35r3Y218vrj5qOM3yNyaR+vtaiF8/u0p/nJtSHaZLz7w7nf2OrfZCWO+z8J2W3/OvtPNlCf9qW8+8N5z/k+OTfHZl/qXL+/cfKvyd/AAAAAACYYvnv/yfLPf/by/1ZnFAfAAAAAAAAAOCgrW+sLOX7XvP5/8+OWK7TnHP/57GR8+/sO3/3/x4nOf/ucP5DF+T0GvMP3niU/z83VpY+vPePz+Tp1Oc/0xvUzz3T6fb66ZqfauatuBW3YznO71i+v639wo72mW3tF8e0X9rRPqjb53P72ViKn8btePNh++yYC6PmxrRXY9pz/j37f5Fy/v3GV53/QmrvDE1rDz7o7tjvm9NRz3Ptz/9+cefeNXlr0Xu4bU319p1poT+b/ydPDeLnd5fvnP3lzXv37lyINNn26MVIkwOW859JXzn/l17Yas+/95v764MPBo+d/7RYi/6u+b/QmK+39+UJ960NOf9B+sr55yPQ6P3/KOe/+/7/Sgv9AQAAAAAAAAAAAAAAgL1UVbV5i+i1iLia7v9p695MAGCifvu9NFMloVar1Wq1+tjWTdVorzeLmNu+ztWI+NWobwYATLP/RMTf2+4ErZF/wfLn/dXTz7XdGWCi7r73/k9u3r69fOdu2z0BAAAAAAAAAP5XefzPxcb4z5vXAQ2NG71t/Nc3YvHIjv/ZHfQ2xzpPG/R87D3+95nYe/zv/pjnmxnTPhjTPjumfW5M+8gbPRpy/s+njHP+p9OGlTT+60st9KdtOf8zaaznnP8XhpZr5l/96Sjn392W/7l77/zs3N333n/11js3315+e/ndC+evXr505fKlK1fOvXXr9vL5rX9b7PHhyvnnsa9dB1qWnH/OXP5lyfl/PtXyL0vO/8VUy78sOf/8ek/+Zcn55/c+8i9Lzv/lVMu/LDn/L6Za/mXJ+b+SavmXJef/pVTLvyw5/1dTLf+y5PzPplr+Zcn5n0u1/MuS889nuORflpx/vrJB/mXJ+V9MtfzLkvO/lGr5lyXnfznV8i9Lzv9KquVflpz/1VTLvyw5/y+nWv5lyfl/JdXyL0vO/7VUy78sOf+vplr+Zcn5fy3V8i9Lzv/rqZZ/WXL+30i1/MuS8/9mquVflpz/66mWf1keff6/mQnP/OsvEVPQDTOlzrz7172Wafs3EwAAAAAAAAAAAAAwbBJXGre9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvoM4Ge/7LUTiEtCCMGQteMEQzbeXX8lJhgcIDQNLU0DoaUNdYy9/gB/1buGJIqaTZO2QURqpPYivSgFRBFSWyVCSKVSiiIVqb1rrkC5Qa2UC0tNKhNBJaokW5057/vuzOzszPpj7Tnn/H5R/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmm34+PSfD2RZlv/f+GNdll2Z/31Ntif/cm7n5V4hAAAAcKHebPz5D1elE/Ys40JN2/zb+/7jB/Pz8/PZF18/89Zfzs+nM8aybGh1ljXOi/79V7+cb94meCIbHRhs+nqwx80P9Th/uMf5Iz3OX9Xj/NU9zh/tcf6iHbDImuL3MY0r29T467pil2bXZCON8zZ1uNQTA6sHB+PvchoGGpeZHzmYHcmOZtPZ5KLLDDT+y7IXNuS3dXcWb2uw6bbWZ1l29ueP7o9rGAj7eFPWcmMNzY/da3dmY6///NH935199d2dZs/dsGilWbZ5Y77OJ7Ns4ddV2UC2Ou2TuM7BpnWu77DOoZZ1DjQul/+9fZ1nl7nOeL9Hwzpf6rLO9eG0h27MsmwuW3Kbdk9kg9natltN+3u0OCLy68gfyndkw+d0nGxYxnGSX+aVG1uPk/ZjMu7/DWGfDC+xhuaH47XHVy3a7+d7nOT3uh+O1fy6781vdHS0+VerLcdqvs2jNy19DHR87DocA+lYbjoGNvY6BgZXDTWOgcGFNW9sOQamFl1mMBto3NaZm7ofAxOzx05OzDz8yK1Hju07NH1o+vjU5M7t23Zs37Zjx8TBI0enJ4s/z22XlsjabDAdgxvDa008Bt/ftm3zITn/rYv3PBjtk+dBft8/e3O+oCsHsyWO8XybJzdf+PMgfd9veh4MNz0POr6mdngeDC/jeZBvc3bz8r5nDjf932kNK/VauK7pGLic3w/z23zgA0u/Fq4P63rqg+f6/XBo0TEQ79ZAeO7lp6Sf90ZvD/tl8XFxfX7GFauy0zPTp7Y8tG929tRUFsYlcXXTY9V+vKxtuk/ZouNl8JyPlz1//8bN13c4fV3YV6O3dH+s8m22j3d/rBqv7q37c1VW7M+WU7dmYVxkl3p/dvpulu/PlCW67M98mydvvfCfBVMuaXr9G+n1+jc0Mly8/g2lvTHS8vq3+KEZaqwsy87eurzXv5Hw/6V+/bumT17/8n31wJbux0C+zVMT53oMDHd9/bsxzIGwng+ExDDalPvfapw/VxymTY9lz+NmeHgkHDfD8RZbj5ttiy6TX1t+25snz++42Xxj62PV8nNLBY+bfF/91WT34ybf5sWpC3/tWBP/2vTasarXMTAytCpf70g6CIrXu/k18RjYku3PTmRHswPpMvmjnN/W+NblHQOrwv+X+rXjuj45BvJ99ezW7sdAvs2Pt13cn502h1PSNk0/O7X/fmGpzH/98ML1te+2i53583V+4iefTqd1yhD5Nq9uP9ec0X0/3RJOuaLDfmp//ix1TB/ILs1+ui6s8+iO7r+byre5Zucyj6c9WZa9PPVy4/dd4fe73z/9kx+0/N630++UX556+Z6J+356LusHAOD8vdX4c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/8O27nnvzsSy9G+B8EM+Pu+HejxTbxY73XPh6bH5BfvrHvjPy3NceW95tD2ZZ9sY97+m4/eGPxHUVTsZ1fqj19EWuu2FZt//g/QvbNb9/wtldxfXH+7PcwyB2lV+Y2Nq43rGHpxrzxXuyxrxv7qkniusvvo7bn9lWbP834U1L9hwcaLn85rCeTWGOhfeUuXfPwn7IZ7zcc+vf969Xf27h9uLlBja+vXE3n/3j4nrje0Q9c3WxfbzfS63/X77+vefy7R+6qfP6HxvsvP4z4XpfCfNXu4vtm/f515rW/6dh/fH24uW2fPtHHdf//LuK7Z8Px8U3w2xf/51/8d43Oz1e8Xb23FFcLt7+5P9ub1wuXl+8/vb1jz421bI/2q//xdeL69n9lV8MNW8fT4+3Ez14R+vxPRAe35YeeZZl3/uzrGU/Zx8uLvfPbeuP13fyjs7rv6VtnScHbmhcfuH+rGu5X9/4u60d729cz55/XNdyf565K+y/1yd+nF/vmfvC8RjO/7+Xiutrfy/T5+9qfb2J239zXfG8jdc30bb+Z9rWP3dDvu96r//u14v1P//R1S3r3/PJcDzdXcxe6z/0t1e1XP5b3y0ej1NfHT9+Yub0kQNNe7X5ebx6dM3aK65829uvCq+l7V/vPTF7ePrU2OTYZJaNlfAtA1d6/d8O83+KMXfxb6Hw018Ux93Tnyq+b73/l8XXz4TTHwyPZ/z++I2/Hmk5Xtsf97mPFvNC1//BsI7letfX/+uGZW145gsvnP6nP3m1/eeCeH9OvnO0cf+e3XBt47yBF4vz21+vevnPd7Y+r382PNmYPwz7dT68M/PGa4vba7/++N4kT3+meP7Gn+Ti5bO29xNZN9R6Py50/T8LP8f86LrW1794fPzwsbZ3c16XDeRLmAuvD9lccX7cKu7vp89e2/H24vvwZHPvPpdlLmnm4ZmJo0eOn35oYnZ6ZnZi5uFH9h47cfr47N7Ge5fu/VKvyy88v9c2nt8HpnduzxrP9hPFWGGXe/0n799/4LbJmw9MH9x3+uDs/SenTx3aPzOzf/rAzM37Dh6c/mqvyx85sHtq665tt20dP3TkwO7bd+3atmv8yPET+TKKRfWwc/LL48dP7W1cZGb39l1TO3Zsnxw/duLA9O7bJifHT/e6fON703h+6a+Mn5o+um/2yLHp8Zkjj0zvntq1c+fWnu/+eOzkwZmxiVOnj0+cnpk+NVHcl7HZxsn5975el6ceZk6E17s2A+Gn88/fsjO9P27uO48veVXFJq0/nmavhfeCit/fen0dc/9ImElN8j8AAADUQcz94Y3/F86Q/wEAAKAyYu5fHWYi/wMAAEBlxNxfJP/R9PHvdcn/F6v//7j+f4P+v/5/pv+f6P/r/2f6//r/Pej/6/+Xef36//r/9NZv/f+Q+7M1Webf/wEAAKCiYu5fG2Yi/wMAAEBlxNx/RZiJ/A8AAACVEXP/lWEmNcn/Pv9f/1//v1v/P26r/5/p//dD/3/Tf+v/L6L/r/+f6f+ft8vdny/7+vuw/79G/59+02/9/5j73xZmUpP8DwAAAHUQc//bw0zkfwAAAKiMmPuvCjOR/wEAAKAyYu5fF2ZSk/yv/6//r//v8//1/0vT//f5/x3o/+v/Z/r/5+1y9+fLvv4+7P/7/H/6Tr/1/2Pu/7Uwk5rkfwAAAKiDmPvfEWYi/wMAAEBlxNx/dZiJ/A8AAACVEXP/NWEmNcn/9ez/v5Jlmf5/pv+v/9+2Tv1//f+VoP+v/9+N/r/+f5nXr/+v/09v/db/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v7rwkxqkv/r2f/3+f/6/wX9/9Z16v/r/6+EWvf/3zis/9+D/r/+f5nXr/+v/09v/db/j7n/3WEmNcn/AAAAUAcx918fZiL/AwAAQGXE3P+eMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqVz9/8Elz/H5/wX9/1YXr/8/t7AA/f/SrF//X/+f3vqt/x9z/3vDTGqS/wEAAKAOYu5/X5iJ/A8AAACVEXP/DWEm8j8AAABURsz9Y2EmNcn/+v/6//r/+v/6//r/K6lc/f+l6f8X9P9b+fx//X/9f/1/uuu3/n/M/RvCTGqS/wEAAKAOYu7fGGYi/wMAAEBlxNx/Y5iJ/A8AAACVEXP/pjCTyuT/t3U9V/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7r8pzKQy+R8AAACIuf/mMBP5HwAAACoj5v73h5nI/wAAAFAZMfdvDjOpSf7X/9f/1/8vcf9/SP8/0//ve/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7PxBmUpP8DwAAAHUQc/8Hw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu4fDzOpSf7X/9f/1/8vcf/f5/+3rF//vz/p/5el/z/S+qX+/7Lo/+v/6//r/9Ndv/X/Y+6/NcykJvkfAAAA6iDm/i1hJvI/AAAAVEbM/RNhJvI/AAAAVEbM/ZNhJjXJ//r/+v/6//r/+v/6/ytJ/78s/f82+v/Lov+v/6//r/9Pd/3W/4+5fyrMpCb5HwAAAOog5v6tYSbyPwAAAFRGzP3bwkzkfwAAAKiMmPu3h5nUJP+XpP+/JRWg9P/1//X/9f/1/0tF/1//vxv9f/3/Mq9f/1//n1aDHU7rt/5/zP07wkxqkv8BAACgDmLu3xlmspD/1136VQEAAAAXU8z9t4WZ+Pd/AAAAqIyY+28PM6lJ/i9J/9/n/+v/6/830f/X/y8T/X/9/270//X/y7x+/X/9f3rrt/5/zP27wkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/x1hJvI/AAAAlEqnzyGMYu7/cJhJTfK//n/V+//zq/X/9f/1/7uvX/9/Zen/6/93o/+v/1/m9ev/6//TW7/1/2Pu3x1mUpP8DwAAAHUQc/9HwkzkfwAAAKiMmPs/GmYi/wMAAEBlxNy/J8ykJvlf/7/q/X+f/6//r//fa/36/ytL/1//vxv9/3L2/8OPLfr/fdT/z48h/X/6Ub/1/2PuvzPMpCb5HwAAAOog5v6PhZnI/wAAAFAZMfd/PMxE/gcAAIDKiLn/E2EmNcn/+v/6//r/+v/l7P+P6P+XhP7/ivX/Gy+F+v8F/f/zc7n782Vffz/1/33+P/2q3/r/MfffFWZSk/wPAAAAdRBz/yfDTOR/AAAAqIyY+389zET+BwAAgMqIuf/uMJOa5H/9f/1//X/9/3L2/33+f1no//v8/270//X/y7x+/X/9f3rrt/5/zP2/EWZSk/wPAAAAdRBz/z1hJvI/AAAAVEbM/Z8KM5H/AQAAoGRWLXlOzP2/GWZSk/xfvv7/WCn7/4Pp+vX/9f/1//X/9f8vJv1//f9M//+8Xe7+fNnXr/+v/09v/db/j7n/t8JMapL/AQAAoA5i7v90mIn8DwAAAJURc/9vh5nI/wAAAFAZMfffG2ZSk/x/sfv/7Zfvxuf/6/9n+v/6//r/+v8XSP9f/z/T/z9vl7s/X+L1xx9F9P/1/+mh3/r/Mff/TphJTfI/AAAA1EHM/feFmcj/AAAA0KcOn/MlYu7/TJiJ/A8AAACVEXP/Z8NMapL/y/f5//r/+v/6//r/+v9lov+v/9+N/r/+f5nX7/P/9f/prd/6/zH33x9mUpP8DwAAAHUQc//nwkzkfwAAAKiMmPt/N8xE/gcAAIDKiLn/98JMapL/9f/1//X/9f/1//X/V5L+/+L+f/4apv9f0P/X/y/z+vX/9f/prd/6/zH3fz7MpCb5HwAAAOog5v7fDzOR/wEAAKAyYu7/gzAT+R8AAAAqI+b+B8JMapL/9f/1//X/9f/1//X/V5L+v8//70b/X/+/zOvX/9f/p7d+6//H3P+FMJOa5H8AAACog5j7/zDMRP4HAACAyoi5f2+YifwPAAAAlRFz/4NhJjXJ//r/+v/6//r/+v/6/ytJ/1//vxv9f/3/Mq9f/1//n976rf8fc/++MJM9rTcDAAAAlFfM/V8MM6nJv/8DAABAHcTcvz/MRP4HAACAyoi5/0CYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/zOvX/9f/p7d+6//H3D8dZlKT/A8AAAB1EHP/wTAT+R8AAAAqI+b+Q2Em8j8AAABURsz9h8NMapL/9f/1//X/a9v/f+n7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+4+EmdQk/wMAAEAdxNz/pTAT+R8AAAAqI+b+L4eZyP8AAABQGTH3Hw0zqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4f+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/mNhJjXJ/wAAAFAHMfcfDzOR/wEAAKAyYu4/EWYi/wMAAEBlxNx/MsykJvlf///c+v8DS3QD9f87r1//vwL9/yb6//r/50P/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/KsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afDTGqS//+fvfte8qys9jjcNGcOQ1HeA+UdeAVegtdgleUlmAOYMSvmnDAnzIo555wxZ1EUc6zSonuthQw9e/cw/et597ue5w8Wp+EULwVW+a3xUxsAAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/98l/b/+f4n+X/+/5ffr//X/rBut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBq5+x8at9j/AAAAMI3c/Q+LW5rsf/2//l//r//X/+v/d0n/r/9fov/X/2/5/fp//T/rRuv/c/c/PG5psv8BAACgg9z9j4hb7H8AAACYRu7+R8Yt9j8AAABMI3f/NXFLk/2v/9f/6/832P//n/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7/9q4pcn+BwAAgA5y9z8qbrH/AQAAYHPuef+jf567/9Fxi/0PAAAA08jd/5i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYOvO5O/k7n9C3NJk/+v/T6//v0z/r//X/+v/9f8nTv+v/9/T/99tl7qf3/r79f/6f9btvP+/z3UH97j9f+7+6+KWJvsfAAAAOsjd/8S4xf4HAACAaeTuf1LcYv8DAADANHL3PzluabL/9f++/39H//+fy/T/+n/9/x0/1/+fDP2//n+J/l//v+X36//1/6zbef+/0vuf+3/n7n9K3NJk/wMAAEAHufufGrfY/wAAADCN3P1Pi1vsfwAAAJhG7v6nxy1N9r/+X//v+//6f/2//n+X9P/D9v/n/kfvzvT/x6L/1/+fr/+/9zHer/+ng9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7//q4xf4HAACAaeTuf1bc0mT/6//1//p//f+d+//9lv3/7T/T/++G/n/Y/n+Z/v9Y9P/6f9//1/+zbLT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9u2b9ULzpd+n/9v/5f/39R3/+/fI7+3/f/d0f/r/9fov/X/2/5/fp//T/rRuv/c/c/P27x6/8AAAAwh/292v0viFvsfwAAAJhG7v4Xxi32PwAAAEwjd/+L4pYm+1//r//X/+v/L6r/n+T7//r/3dH/6/+XHLf/39P/19+L/n+c9+v/9f+sG63/z93/4rilyf4HAACADnL3vyRusf8BAABgGrn7Xxq32P8AAAAwjdz9L4tbmux//b/+X/+v/9f/6/93Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/Vdxy7v7fP81XnR79v/5f/6//1//r/3dJ/6//X6L/P7r/P3uev57+f6z36//1/6wbrf/P3X9D3OLX/wEAAGAauftfHbfY/wAAADCN3P2viVvsfwAAAJhG7v7Xxi1N9v/5+v/brjr84/r/49H/H/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/dXFLk/0PAAAAHeTuf33cYv8DAADANHL3vyFusf8BAABgGrn73xi3NNn/J//9/6v1//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xS3NNn/AAAA0EHu/jfHLfY/AAAATCN3/1viFvsfAAAAppG7/61xS5P9f/L9v+//6/8vsP/f1/8n/X/8c9X/6/8vwFb7/339/wH9v/5/y+/X/+v/WTda/5+7/8aDqddv/wMAAEAHNx789uze2+IW+x8AAACmkbv/7XGL/Q8AAADTyN3/jrilyf7X/+v/L3n/7/v/Rf8f/1z1//r/C7DV/t/3/w/p//X/W36//l//z7rR+v/c/e+MW5rsfwAAAOggd/+74hb7HwAAAKYRu//wf/xu/wMAAMCU3n3w27N774lbmuz/xv3/1Rfb/1/5P7+v/z/6/fr/E+n/bzz33z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Rv/PeEbr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAmEbu/pviFvsfAAAAppG7//1xS5P937j/n+T7//e9NV6g/5+3//f9/7j6f/3/UfT/E/T/t//XL/1//fX1/9t5/zj9v+//M67R+v/c/R+IW5rsfwAAAOggd/8H4xb7HwAAAKaRu/9DcYv9DwAAANPI3f/huKXJ/tf/b73/9/1//b/+X/8/Nv2//n+J7//r/7f8fv2//p91o/X/ufs/Erc02f8AAADQQe7+j8Yt9j8AAABMI3f/x+IW+x8AAACmkbv/43FLk/2v/9f/76r/v/0vov9v0v9fe0X++fp//f9d6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/ELU32PwAAAHSQu/+TcYv9DwAAANPI3f+puMX+BwAAgGnk7v903HCve1y6J52sM+f5eeS6+n/9v+//6/99/1//v0v6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLX/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5/s/3/lfr/O79f/z8m/b/+f4n+X/+/5fcfu/+/+ej/f/0/HYzW/+fu/0Lc0mT/AwAAQAe5+78Yt9j/AAAAMI3c/V+KW+x/AAAAmEbu/i/HLU32v/5f/6//32z/7/v/57xf/z8m/b/+/9AtR/5U/6//3/L7ff9f/8+60fr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACmkbv/a3GL/Q8AAADTyN3/9bilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt+v/9f/s260/j93/zfilib7HwAAADrI3f/NuMX+BwAAgGnk7v9W3GL/AwAAwDRy9387bmmy/2fu/5f+NP3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+sG63/z93/nbilyf4HAACADnL3fzdusf8BAABgGrn7b45b7H8AAACYRu7+78UtTfb/zP3/Ev3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+su0T9/5m98/T/ufu/H7c02f8AAADQQe7+H8Qt9j8AAABMI3f/D+MW+x8AAACmkbv/R3HLPPv/fjct/EH9/4n3/wf/Eun/9f97+n/9v/7/gP5f/79E/6//3/L79f/6f9aN9v3/3P0/jlvm2f8AAADQXu7+n8Qt9j8AAABMI3f/T+MW+x8AAACmkbv/Z3FLk/2v//f9f/1/q/7/8j39v/7/lOn/9f9L9P/6/y2/X/+v/2fdaP1/7v6fxy05/K66O3+XAAAAwEhy9/8ibmny6/8AAADQQe7+X8Yt9j8AAABMI3f/r+KWJvtf/6//1/+36v99/1//f+r0//r/Jfp//f+W35/9f/57p//X/3NXo/X/uft/Hbc02f8AAADQQe7+W+IW+x8AAACmkbv/N3GL/Q8AAADTyN3/27ilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt/v+//6f9aN1v/n7r81bmmy/wEAAKCD3P2/i1vsfwAAAJhG7v7fxy32PwAAAEwjd/9tcUuT/a//1/9P2f9fof/X/+v/R6H/1/8v0f/r/7f8fv2//p91o/X/ufv/ELc02f8AAADQQe7+P8Yt9j8AAABMI3f/n+IW+x8AAACmkbv/z3FLk/2v/9f/X3j/f6b+voft/33/X/+v/x/GvP3//+v/j+r/z17Y+7v3/9ffcPhj/f8236//1/+zbrT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAaeTu/1vcYv8DAADANHL3/z1uabL/9f/6/ym//6//1//r/4cxb//v+/++/+/7//p//b/+nzWj9f+5+/8RtzTZ/wAAANBB7v5/xi32PwAAAEwjd/+/4hb7HwAAAKaRu//fcUuT/a//1//r//X/+n/9/y7p//X/S/T/+v8tv1//r/9n3Wj9f+7+/wYAAP//lgIt2A==") r0 = openat(0xffffffffffffff9c, &(0x7f000004c100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f000004c140)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f000004c180)='./file1\x00', 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f000004e200)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffe82) 2.507892159s ago: executing program 2 (id=1266): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.312022623s ago: executing program 2 (id=1267): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1}) unshare(0x2040400) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0xe5}) 1.860987264s ago: executing program 8 (id=1268): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x730) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x34, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0xfffd, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x17c1, 0x12, 0x0, @gue={{0x2}, "a007"}}}}}}, 0x0) 1.860825264s ago: executing program 5 (id=1269): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,checkpoint=disable,flush_merge,fault_injection=00000000000000001262,acl,noacl,compress_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c006973636172645f756e6974497365676d656e742c6661756c745f747970653d303030303e3030303030303030303030303030b88a00"], 0x1, 0x5505, &(0x7f0000000300)="$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") r0 = open(&(0x7f0000005840)='./file0\x00', 0x14937e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000005880)='./file2\x00', 0x103042, 0x0) write$nci(r1, &(0x7f0000005a40)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x3}, 0x4) pwrite64(r1, &(0x7f0000005900)='!', 0x1, 0x400b5e) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000005940)={r0}) 1.262605889s ago: executing program 2 (id=1270): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x25b8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r0, &(0x7f00000001c0)='#', 0x1) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) 1.23133244s ago: executing program 7 (id=1271): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x28008) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.042746734s ago: executing program 2 (id=1272): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 411.40409ms ago: executing program 8 (id=1273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2}], 0x1, 0x2, 0x0) timer_create(0x0, &(0x7f00000008c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 0 (id=1274): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) kernel console output (not intermixed with test programs): 155.824214][ T6015] prepare_creds+0x3c/0x610 [ 155.828788][ T6015] cap_task_prctl+0x60a/0xc00 [ 155.833511][ T6015] security_task_prctl+0x75/0x100 [ 155.838595][ T6015] __se_sys_prctl+0xc2/0x1100 [ 155.843344][ T6015] ? __x64_sys_prctl+0xc0/0xc0 [ 155.848171][ T6015] ? lockdep_hardirqs_on+0x94/0x140 [ 155.853435][ T6015] ? __x64_sys_prctl+0x1c/0xc0 [ 155.858261][ T6015] do_syscall_64+0x4c/0xa0 [ 155.862730][ T6015] ? clear_bhb_loop+0x60/0xb0 [ 155.867496][ T6015] ? clear_bhb_loop+0x60/0xb0 [ 155.872230][ T6015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.878182][ T6015] RIP: 0033:0x7f159419e559 [ 155.882652][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.902317][ T6015] RSP: 002b:00007f1595100028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 155.910800][ T6015] RAX: ffffffffffffffda RBX: 00007f1594425fa0 RCX: 00007f159419e559 [ 155.918855][ T6015] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 000000000000002f [ 155.926880][ T6015] RBP: 00007f1594235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 155.934910][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.942926][ T6015] R13: 00007f1594426038 R14: 00007f1594425fa0 R15: 00007ffd237ed888 [ 155.950971][ T6015] [ 156.565831][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.8.518'. [ 156.608242][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.8.518'. [ 157.581762][ T6074] loop5: detected capacity change from 0 to 512 [ 157.708783][ T6074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 157.724583][ T6074] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.859873][ T6084] loop7: detected capacity change from 0 to 2048 [ 158.010980][ T6084] NILFS (loop7): invalid segment: Magic number mismatch [ 158.068096][ T6084] NILFS (loop7): trying rollback from an earlier position [ 158.149808][ T4818] EXT4-fs (loop5): unmounting filesystem. [ 158.181242][ T6084] NILFS (loop7): recovery complete [ 158.255233][ T6099] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.250681][ T6100] loop0: detected capacity change from 0 to 32768 [ 159.301985][ T6100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.537 (6100) [ 159.369259][ T6100] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.400190][ T6100] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 159.427514][ T6100] BTRFS info (device loop0): use zlib compression, level 3 [ 159.454762][ T6100] BTRFS info (device loop0): turning on sync discard [ 159.495551][ T6100] BTRFS info (device loop0): using free space tree [ 159.563201][ T126] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 159.774120][ T126] usb 9-1: Using ep0 maxpacket: 16 [ 159.782606][ T126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 159.823307][ T126] usb 9-1: config 9 has an invalid interface number: 57 but max is 0 [ 159.885866][ T126] usb 9-1: config 9 has no interface number 0 [ 159.892032][ T126] usb 9-1: config 9 interface 57 has no altsetting 0 [ 159.928848][ T6100] BTRFS info (device loop0): enabling ssd optimizations [ 159.975985][ T126] usb 9-1: string descriptor 0 read error: -22 [ 159.982328][ T126] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 160.033048][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.523545][ T4280] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.980868][ T6176] eCryptfs: maximum fs stacking depth exceeded [ 161.085194][ T6176] Reading sb failed; rc = [-22] [ 161.154690][ T126] radio-keene 9-1:9.57: V4L2 device registered as radio48 [ 161.358698][ T4356] usb 9-1: USB disconnect, device number 2 [ 161.502433][ T6206] loop7: detected capacity change from 0 to 4096 [ 161.539512][ T6206] EXT4-fs: Ignoring removed nobh option [ 162.123446][ T6206] EXT4-fs: Ignoring removed bh option [ 162.135291][ T6206] EXT4-fs (loop7): Test dummy encryption mode enabled [ 162.197958][ T6236] FAULT_INJECTION: forcing a failure. [ 162.197958][ T6236] name fail_futex, interval 1, probability 0, space 0, times 1 [ 162.216561][ T6206] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 162.253253][ T6236] CPU: 1 PID: 6236 Comm: syz.2.567 Not tainted syzkaller #0 [ 162.260631][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.270738][ T6236] Call Trace: [ 162.274055][ T6236] [ 162.277032][ T6236] dump_stack_lvl+0x188/0x24e [ 162.281750][ T6236] ? show_regs_print_info+0x12/0x12 [ 162.286986][ T6236] ? load_image+0x410/0x410 [ 162.291524][ T6236] ? sched_slice+0x430/0x430 [ 162.296206][ T6236] should_fail_ex+0x390/0x4c0 [ 162.300921][ T6236] get_futex_key+0x1b1/0x1000 [ 162.305628][ T6236] ? futex_setup_timer+0xc0/0xc0 [ 162.310587][ T6236] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.316665][ T6236] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.321741][ T6236] ? lock_chain_count+0x20/0x20 [ 162.326660][ T6236] futex_wait_setup+0xb8/0x270 [ 162.331468][ T6236] ? futex_wait_multiple+0x920/0x920 [ 162.336796][ T6236] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 162.342734][ T6236] ? _raw_spin_unlock+0x40/0x40 [ 162.347634][ T6236] futex_wait+0x1b8/0x5c0 [ 162.352027][ T6236] ? futex_wait_setup+0x270/0x270 [ 162.357163][ T6236] ? slab_free_freelist_hook+0x133/0x1b0 [ 162.362866][ T6236] do_futex+0x310/0x320 [ 162.367098][ T6236] ? kmem_cache_free+0xf7/0x2a0 [ 162.372022][ T6236] ? __ia32_sys_get_robust_list+0x100/0x100 [ 162.377989][ T6236] ? getname_flags+0x273/0x500 [ 162.382827][ T6236] ? putname+0x1e/0x150 [ 162.387045][ T6236] __se_sys_futex+0x381/0x410 [ 162.391762][ T6236] ? __x64_sys_name_to_handle_at+0xc0/0xc0 [ 162.397599][ T6236] ? __x64_sys_futex+0xf0/0xf0 [ 162.402399][ T6236] ? __x64_sys_futex+0x1d/0xf0 [ 162.407195][ T6236] do_syscall_64+0x4c/0xa0 [ 162.411643][ T6236] ? clear_bhb_loop+0x60/0xb0 [ 162.416355][ T6236] ? clear_bhb_loop+0x60/0xb0 [ 162.421071][ T6236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.426992][ T6236] RIP: 0033:0x7f64d519e559 [ 162.431436][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.451080][ T6236] RSP: 002b:00007f64d5fcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 162.459525][ T6236] RAX: ffffffffffffffda RBX: 00007f64d5425fa8 RCX: 00007f64d519e559 [ 162.467527][ T6236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f64d5425fa8 [ 162.475532][ T6236] RBP: 00007f64d5425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 162.483537][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.491530][ T6236] R13: 00007f64d5426038 R14: 00007fff936a2f10 R15: 00007fff936a2ff8 [ 162.499542][ T6236] [ 162.841545][ T6251] loop2: detected capacity change from 0 to 1024 [ 162.901533][ T6251] EXT4-fs: Ignoring removed nobh option [ 162.911798][ T6253] FAULT_INJECTION: forcing a failure. [ 162.911798][ T6253] name failslab, interval 1, probability 0, space 0, times 0 [ 162.928513][ T6251] EXT4-fs: Ignoring removed bh option [ 162.943216][ T6251] EXT4-fs: Ignoring removed nobh option [ 162.959119][ T6253] CPU: 1 PID: 6253 Comm: syz.0.569 Not tainted syzkaller #0 [ 162.966496][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.976687][ T6253] Call Trace: [ 162.980014][ T6253] [ 162.983016][ T6253] dump_stack_lvl+0x188/0x24e [ 162.987804][ T6253] ? show_regs_print_info+0x12/0x12 [ 162.993073][ T6253] ? load_image+0x410/0x410 [ 162.997644][ T6253] ? __lock_acquire+0x7ea0/0x7ea0 [ 163.002746][ T6253] ? aa_get_newest_label+0xf9/0x5b0 [ 163.008109][ T6253] should_fail_ex+0x390/0x4c0 [ 163.012860][ T6253] should_failslab+0x5/0x20 [ 163.017427][ T6253] slab_pre_alloc_hook+0x59/0x300 [ 163.022519][ T6253] kmem_cache_alloc+0x56/0x2f0 [ 163.027338][ T6253] ? prepare_creds+0x3c/0x610 [ 163.032106][ T6253] prepare_creds+0x3c/0x610 [ 163.036852][ T6253] __sys_setresgid+0x57a/0x8e0 [ 163.041683][ T6253] do_syscall_64+0x4c/0xa0 [ 163.046165][ T6253] ? clear_bhb_loop+0x60/0xb0 [ 163.050909][ T6253] ? clear_bhb_loop+0x60/0xb0 [ 163.055665][ T6253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.061631][ T6253] RIP: 0033:0x7f435c79e559 [ 163.066096][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.085780][ T6253] RSP: 002b:00007f435d66e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 163.094272][ T6253] RAX: ffffffffffffffda RBX: 00007f435ca25fa0 RCX: 00007f435c79e559 [ 163.102314][ T6253] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.110342][ T6253] RBP: 00007f435c835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 163.118368][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.126409][ T6253] R13: 00007f435ca26038 R14: 00007f435ca25fa0 R15: 00007ffe53de91a8 [ 163.134452][ T6253] [ 163.204972][ T6251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.274129][ T6251] EXT4-fs (loop2): shut down requested (2) [ 163.366000][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 163.406092][ T6206] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 163.697303][ T5742] EXT4-fs (loop7): unmounting filesystem. [ 163.833653][ T6277] loop0: detected capacity change from 0 to 512 [ 163.911860][ T6277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 163.933198][ T6277] System zones: 1-12 [ 163.964930][ T6277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.576: missing EA_INODE flag [ 164.005633][ T6277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.576: error while reading EA inode 12 err=-117 [ 164.043513][ T6277] EXT4-fs (loop0): 1 orphan inode deleted [ 164.083199][ T6277] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.362554][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 164.633338][ T4376] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 164.849533][ T4376] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.873046][ T4376] usb 6-1: config 0 has no interface number 0 [ 164.898411][ T4376] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.933373][ T4376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.941636][ T4376] usb 6-1: Product: syz [ 164.953109][ T4376] usb 6-1: Manufacturer: syz [ 164.957790][ T4376] usb 6-1: SerialNumber: syz [ 165.012230][ T4376] usb 6-1: config 0 descriptor?? [ 165.180193][ T6315] loop8: detected capacity change from 0 to 1024 [ 165.223492][ T6315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.259867][ T4376] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 165.320641][ T4376] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.350388][ T6315] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 165.371516][ T4376] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 165.428825][ T26] audit: type=1804 audit(1792434252.312:11): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.582" name="/newroot/16/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 165.459709][ T4376] usb 6-1: media controller created [ 165.474527][ T6292] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 165.517937][ T6324] bridge0: port 3(syz_tun) entered blocking state [ 165.525866][ T6324] bridge0: port 3(syz_tun) entered disabled state [ 165.536414][ T6324] device syz_tun entered promiscuous mode [ 165.542750][ T6324] bridge0: port 3(syz_tun) entered blocking state [ 165.549382][ T6324] bridge0: port 3(syz_tun) entered forwarding state [ 165.591394][ T4376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.695426][ T4376] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 165.755852][ T5779] EXT4-fs (loop8): unmounting filesystem. [ 165.789168][ T6188] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.832246][ T4376] usb 6-1: USB disconnect, device number 4 [ 165.927078][ T6333] loop2: detected capacity change from 0 to 256 [ 165.983486][ T6188] usb 1-1: Using ep0 maxpacket: 8 [ 166.000293][ T6188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.061892][ T6188] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 166.089028][ T6188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.140938][ T6188] usb 1-1: config 0 descriptor?? [ 166.159595][ T6188] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 166.480599][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.600'. [ 166.511245][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'. [ 166.741301][ T6356] loop5: detected capacity change from 0 to 16 [ 166.787865][ T6356] erofs: (device loop5): mounted with root inode @ nid 36. [ 166.839621][ T6356] overlayfs: failed to get metacopy (-117) [ 167.182950][ T6368] device batadv_slave_1 entered promiscuous mode [ 167.214305][ T6367] device batadv_slave_1 left promiscuous mode [ 167.308065][ T6366] loop5: detected capacity change from 0 to 4096 [ 167.403145][ T6188] gspca_vc032x: reg_w err -71 [ 167.416861][ T6188] vc032x: probe of 1-1:0.0 failed with error -71 [ 167.447446][ T6366] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 167.465604][ T6188] usb 1-1: USB disconnect, device number 5 [ 167.883476][ T4818] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 168.775225][ T6411] bridge0: port 3(erspan0) entered blocking state [ 168.852735][ T6411] bridge0: port 3(erspan0) entered disabled state [ 168.929077][ T6411] device erspan0 entered promiscuous mode [ 168.984314][ T6411] bridge0: port 3(erspan0) entered blocking state [ 168.991238][ T6411] bridge0: port 3(erspan0) entered forwarding state [ 169.072333][ T6413] device erspan0 left promiscuous mode [ 169.115114][ T6413] bridge0: port 3(erspan0) entered disabled state [ 170.021567][ T6442] loop5: detected capacity change from 0 to 512 [ 170.098942][ T26] audit: type=1800 audit(1792434256.982:12): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.635" name="file1" dev="loop5" ino=1048688 res=0 errno=0 [ 170.303046][ T126] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 170.503069][ T126] usb 9-1: Using ep0 maxpacket: 16 [ 170.515476][ T126] usb 9-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 170.532982][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.541073][ T126] usb 9-1: Product: syz [ 170.563057][ T126] usb 9-1: Manufacturer: syz [ 170.567731][ T126] usb 9-1: SerialNumber: syz [ 170.575721][ T126] usb 9-1: config 0 descriptor?? [ 170.603077][ T126] usb 9-1: selecting invalid altsetting 1 [ 170.608885][ T126] technisat-usb2: could not set alternate setting to 0 [ 170.638418][ T6458] loop0: detected capacity change from 0 to 8192 [ 170.700302][ T6458] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.724884][ T6458] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 170.763255][ T6458] REISERFS (device loop0): using ordered data mode [ 170.770218][ T6458] reiserfs: using flush barriers [ 170.779871][ T6458] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.805116][ T126] technisat-usb2: firmware version: 0.0 [ 170.805775][ T6458] REISERFS (device loop0): checking transaction log (loop0) [ 170.811106][ T126] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 170.862311][ T6458] REISERFS (device loop0): Using rupasov hash to sort names [ 170.873695][ T6458] REISERFS (device loop0): using 3.5.x disk format [ 170.896744][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 170.964111][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 170.996875][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.017572][ T6458] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 171.034430][ T6458] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 171.088525][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.119102][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.159929][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.215412][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.226678][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.240202][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.251649][ T6458] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 171.268029][ T6458] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 171.279668][ T6458] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 171.294032][ T6458] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 171.317751][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.343678][ T126] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 171.360816][ T126] usb 9-1: media controller created [ 171.379068][ T126] technisat-usb2: i2c-error: out failed 53 = -22 [ 171.399684][ T126] dvb-usb: MAC address reading failed. [ 171.404769][ T6480] loop7: detected capacity change from 0 to 1024 [ 171.436809][ T6480] EXT4-fs: Ignoring removed nobh option [ 171.453776][ T6480] EXT4-fs: Ignoring removed bh option [ 171.459278][ T6480] EXT4-fs: Ignoring removed nobh option [ 171.460387][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.516961][ T6444] technisat-usb2: i2c TX buffer can't exceed 62 bytes (dev 0x00) [ 171.543179][ T6444] technisat-usb2: i2c RX buffer can't exceed 62 bytes (dev 0x00) [ 171.551000][ T6444] technisat-usb2: i2c-error: out failed 00 = -22 [ 171.598410][ T6480] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 171.645816][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 171.707386][ T6480] EXT4-fs (loop7): shut down requested (2) [ 171.718099][ T126] DVB: Unable to find symbol stv090x_attach() [ 171.729995][ T126] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 171.855913][ T14] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.873091][ T126] rc_core: IR keymap rc-technisat-usb2 not found [ 171.891984][ T126] Registered IR keymap rc-empty [ 171.896445][ T5742] EXT4-fs (loop7): unmounting filesystem. [ 171.905480][ T14] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.931253][ T126] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 171.942169][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.950720][ T14] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 171.964147][ T126] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input8 [ 171.976375][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.001352][ T14] usb 3-1: config 0 descriptor?? [ 172.006964][ T126] dvb-usb: schedule remote query interval to 100 msecs. [ 172.023530][ T126] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 172.074712][ T126] usb 9-1: USB disconnect, device number 3 [ 172.113222][ T4376] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.249907][ T126] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 172.305917][ T4376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.333946][ T4376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 172.372997][ T4376] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 172.402354][ T4376] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 172.431451][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.489011][ T14] input: HID 5543:0064 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0064.0002/input/input9 [ 172.549132][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.655'. [ 172.587311][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.655'. [ 172.663330][ T14] uclogic 0003:5543:0064.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 172.881067][ T4376] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 172.891277][ T4376] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 172.909477][ T4376] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 172.935175][ T4376] cxacru: probe of 1-1:1.0 failed with error -71 [ 172.965954][ T4376] usb 1-1: USB disconnect, device number 6 [ 173.053647][ T6511] loop5: detected capacity change from 0 to 512 [ 173.108645][ T6511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 173.133094][ T6511] System zones: 1-12 [ 173.139101][ T6511] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.658: missing EA_INODE flag [ 173.206605][ T4346] usb 3-1: USB disconnect, device number 3 [ 173.228190][ T6511] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.658: error while reading EA inode 12 err=-117 [ 173.271681][ T6506] fido_id[6506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 173.307046][ T6511] EXT4-fs (loop5): 1 orphan inode deleted [ 173.321479][ T6511] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 173.589083][ T6518] loop7: detected capacity change from 0 to 1024 [ 173.669492][ T6518] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 173.789901][ T6518] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 173.805772][ T6518] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 173.912548][ T4818] EXT4-fs (loop5): unmounting filesystem. [ 174.027137][ T5742] EXT4-fs (loop7): unmounting filesystem. [ 174.672117][ T6556] loop2: detected capacity change from 0 to 16 [ 174.714031][ T6556] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.794758][ T6556] overlayfs: failed to get metacopy (-117) [ 175.068519][ T6536] loop5: detected capacity change from 0 to 32768 [ 175.097861][ T6536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.663 (6536) [ 175.147994][ T6536] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.173115][ T6536] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 175.194588][ T6536] BTRFS info (device loop5): use zlib compression, level 3 [ 175.229832][ T6536] BTRFS info (device loop5): turning on sync discard [ 175.252415][ T6536] BTRFS info (device loop5): using free space tree [ 175.381504][ T6536] BTRFS info (device loop5): enabling ssd optimizations [ 175.450277][ T6581] rxe_eth0 speed is unknown, defaulting to 1000 [ 175.618815][ T4818] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.680011][ T6195] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 175.886456][ T6195] usb 8-1: Using ep0 maxpacket: 16 [ 175.943445][ T6598] 9pnet: p9_errstr2errno: server reported unknown error ¡¤@ [ 175.972744][ T6195] usb 8-1: unable to get BOS descriptor or descriptor too short [ 175.993638][ T6195] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 176.001294][ T6195] usb 8-1: can't read configurations, error -71 [ 177.264905][ T6632] loop8: detected capacity change from 0 to 16 [ 177.331167][ T6632] erofs: (device loop8): mounted with root inode @ nid 36. [ 177.413648][ T6632] overlayfs: failed to get metacopy (-117) [ 177.939958][ T6649] loop2: detected capacity change from 0 to 4096 [ 178.087990][ T6660] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.484473][ T6668] loop8: detected capacity change from 0 to 512 [ 178.646150][ T6671] loop0: detected capacity change from 0 to 256 [ 178.826958][ T6649] syz.2.692 (6649): drop_caches: 2 [ 178.844536][ T6671] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d) [ 178.876817][ T6668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 178.914242][ T6671] exFAT-fs (loop0): failed to load alloc-bitmap [ 178.917503][ T6668] System zones: 1-12 [ 178.948151][ T6668] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.697: missing EA_INODE flag [ 178.963185][ T6671] exFAT-fs (loop0): failed to recognize exfat type [ 179.027362][ T6668] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.697: error while reading EA inode 12 err=-117 [ 179.090006][ T6668] EXT4-fs (loop8): 1 orphan inode deleted [ 179.147879][ T6668] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 179.489805][ T5779] EXT4-fs (loop8): unmounting filesystem. [ 180.174511][ T6704] vivid-000: disconnect [ 180.208487][ T6703] vivid-000: reconnect [ 180.265187][ T6708] device gretap1 entered promiscuous mode [ 180.350138][ T6681] loop5: detected capacity change from 0 to 40427 [ 180.414143][ T6681] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 180.421956][ T6681] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 180.484375][ T6717] loop2: detected capacity change from 0 to 16 [ 180.510437][ T6681] F2FS-fs (loop5): invalid crc value [ 180.519807][ T6717] erofs: Unknown parameter '0xffffffffffffffffÂQ‘¡reû«H K^ì¦"0ûã}í9ŒÂ«ÐË«Š”¤_~NÄ["Þ¶gÔÉ*±S ’Õµ_XŠ€"½?ƒâguIjx÷™úaú8/™‘<ÒÕys²Ñ]JÂDÐú†î hjƽ"Î2ßàîæªÏ ú©ñcT£Ë+Ì .dø3sM5—Ë~[z' [ 180.577078][ T6681] F2FS-fs (loop5): Found nat_bits in checkpoint [ 180.807893][ T6681] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 180.845831][ T6681] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 181.053563][ T6737] Bluetooth: MGMT ver 1.22 [ 181.373006][ T6747] Dead loop on virtual device ip6_vti0, fix it urgently! [ 181.937444][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.8.722'. [ 182.119049][ T6771] loop5: detected capacity change from 0 to 2048 [ 182.214351][ T6771] loop5: p1 < > p3 < p5 > p4 [ 182.220575][ T6771] loop5: partition table partially beyond EOD, truncated [ 182.249914][ T6771] loop5: p1 start 3405780737 is beyond EOD, truncated [ 183.064834][ T6802] bridge0: port 4(erspan0) entered blocking state [ 183.084109][ T6802] bridge0: port 4(erspan0) entered disabled state [ 183.117214][ T6802] device erspan0 entered promiscuous mode [ 183.128432][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 183.148179][ T6805] loop0: detected capacity change from 0 to 1024 [ 183.166409][ T6802] bridge0: port 4(erspan0) entered blocking state [ 183.173089][ T6802] bridge0: port 4(erspan0) entered forwarding state [ 183.201585][ T6806] device erspan0 left promiscuous mode [ 183.215325][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 183.252186][ T6806] bridge0: port 4(erspan0) entered disabled state [ 183.275574][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 183.303179][ T4346] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.468715][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 183.494907][ T4346] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.529756][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 183.537039][ T4346] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.599730][ T4346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.620452][ T4346] usb 6-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 183.646531][ T4346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.673958][ T4346] usb 6-1: config 0 descriptor?? [ 183.736115][ T6813] loop8: detected capacity change from 0 to 8192 [ 183.756580][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 183.783726][ T6813] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.863231][ T6813] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 183.884016][ T6813] REISERFS (device loop8): using ordered data mode [ 183.898709][ T6813] reiserfs: using flush barriers [ 183.922268][ T6813] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.949083][ T6813] REISERFS (device loop8): checking transaction log (loop8) [ 183.966038][ T6813] REISERFS (device loop8): Using rupasov hash to sort names [ 183.983067][ T6813] REISERFS (device loop8): using 3.5.x disk format [ 184.010331][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.030288][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.072432][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.133559][ T6813] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 184.162694][ T4346] thrustmaster 0003:044F:B65A.0003: ignoring exceeding usage max [ 184.191927][ T4346] thrustmaster 0003:044F:B65A.0003: unbalanced collection at end of report description [ 184.193245][ T6813] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 184.243619][ T4346] thrustmaster 0003:044F:B65A.0003: parse failed [ 184.274341][ T4346] thrustmaster: probe of 0003:044F:B65A.0003 failed with error -22 [ 184.302040][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.371370][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.403614][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.439660][ T6601] usb 6-1: USB disconnect, device number 5 [ 184.464910][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.476222][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.487762][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.498917][ T6813] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 184.518395][ T6813] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 184.529725][ T6813] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 184.544967][ T6813] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 184.761131][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 184.834197][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 186.099745][ T6865] loop7: detected capacity change from 0 to 131072 [ 186.113161][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 186.122804][ T6865] F2FS-fs (loop7): invalid crc value [ 186.136801][ T6865] F2FS-fs (loop7): Found nat_bits in checkpoint [ 186.220166][ T6865] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 186.220277][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 186.243539][ T6865] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 186.523697][ T6601] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 186.714844][ T6601] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 186.728091][ T6601] usb 3-1: config 0 has no interface number 0 [ 186.745732][ T6601] usb 3-1: config 0 interface 41 has no altsetting 0 [ 186.759696][ T6601] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 186.783530][ T6601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.791660][ T6601] usb 3-1: Product: syz [ 186.803693][ T6601] usb 3-1: Manufacturer: syz [ 186.809372][ T6601] usb 3-1: SerialNumber: syz [ 186.834744][ T6601] usb 3-1: config 0 descriptor?? [ 187.656784][ T6601] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 187.741164][ T6912] loop7: detected capacity change from 0 to 128 [ 187.895771][ T6601] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 187.919765][ T6601] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 187.935616][ T6601] CoreChips: probe of 3-1:0.41 failed with error -71 [ 187.965985][ T6601] usb 3-1: USB disconnect, device number 4 [ 188.039574][ T6919] loop7: detected capacity change from 0 to 512 [ 188.051846][ T6919] ext2: Unknown parameter 'bsdgroups2' [ 188.373015][ T4346] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.564975][ T4346] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.595751][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.617199][ T4346] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.687074][ T4346] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.716740][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.763018][ T4346] usb 1-1: Product: syz [ 188.777491][ T4346] usb 1-1: Manufacturer: syz [ 188.782214][ T4346] usb 1-1: SerialNumber: syz [ 188.787356][ T6946] input: syz1 as /devices/virtual/input/input10 [ 188.991148][ T6953] input: syz0 as /devices/virtual/input/input11 [ 189.576074][ T6975] loop7: detected capacity change from 0 to 16 [ 189.625059][ T6975] erofs: (device loop7): mounted with root inode @ nid 36. [ 189.655937][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 189.744738][ T4278] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -35 in[4096, 0] out[1832] [ 189.763629][ T6975] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -35 in[4096, 0] out[1832] [ 189.833291][ T26] audit: type=1800 audit(1792434276.682:13): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.780" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 189.981304][ T6975] syz.7.780 (6975) used greatest stack depth: 20544 bytes left [ 190.042346][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 190.055624][ T4346] cdc_ncm 1-1:1.0: bind() failure [ 190.116405][ T4346] usbtest: probe of 1-1:1.1 failed with error -71 [ 190.135403][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 190.196418][ T4346] usb 1-1: USB disconnect, device number 7 [ 190.402873][ C1] sched: RT throttling activated [ 190.505150][ T6969] loop5: detected capacity change from 0 to 131072 [ 190.514528][ T6969] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 190.523159][ T6969] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 190.539161][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 190.556412][ T6969] F2FS-fs (loop5): invalid crc value [ 190.597196][ T6969] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.599370][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 190.684474][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.786'. [ 190.695538][ T6969] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 190.702713][ T6969] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 190.758381][ T6969] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 190.778415][ T6969] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 191.106144][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 191.147123][ T6999] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.161002][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 191.723125][ T6195] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 191.928644][ T6195] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.951719][ T7016] loop5: detected capacity change from 0 to 512 [ 191.964300][ T6195] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.994753][ T6195] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.010871][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 192.050130][ T7016] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.791: inode has both inline data and extents flags [ 192.072320][ T6195] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.072345][ T7016] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.791: couldn't read orphan inode 15 (err -117) [ 192.113084][ T7016] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 192.133025][ T6195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.180913][ T6195] usb 8-1: config 0 descriptor?? [ 192.293216][ T7021] loop0: detected capacity change from 0 to 4096 [ 192.317316][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 192.388430][ T7027] netlink: 'syz.8.799': attribute type 4 has an invalid length. [ 192.425844][ T7028] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.481974][ T7029] netlink: 'syz.8.799': attribute type 4 has an invalid length. [ 192.498862][ T4818] EXT4-fs (loop5): unmounting filesystem. [ 192.562445][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 192.587853][ T26] audit: type=1800 audit(1792434409.478:14): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.797" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 192.625137][ T6195] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 192.670415][ T6195] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 192.926501][ T6195] usb 8-1: USB disconnect, device number 4 [ 193.051986][ T7044] input: syz1 as /devices/virtual/input/input12 [ 193.473956][ T4278] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 193.485443][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.583176][ T4346] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 193.758124][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.7.809'. [ 193.773294][ T6601] kernel read not supported for file /kmsg (pid: 6601 comm: kworker/1:18) [ 193.780721][ T4346] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.813269][ T4346] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.852974][ T4346] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.874009][ T4346] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.932987][ T4346] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 193.942127][ T4346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.197856][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204314][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.229065][ T7064] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.323712][ T7064] bond2: (slave lo): Enslaving as an active interface with an up link [ 194.355995][ T7064] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 194.449382][ T26] audit: type=1326 audit(1792434411.338:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.7.813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1f759e559 code=0x0 [ 195.046462][ T4346] [drm] Initialized gud 1.0.0 20200422 for 9-1:1.0 on minor 2 [ 195.275244][ T4346] gud 9-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 195.308672][ T4346] usb 9-1: USB disconnect, device number 4 [ 195.469323][ T7091] loop7: detected capacity change from 0 to 1024 [ 195.499222][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 195.555918][ T7091] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 195.573124][ T7091] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.928828][ T7107] binder: 7105:7107 ioctl 4018620d 0 returned -22 [ 196.055807][ T5742] EXT4-fs (loop7): unmounting filesystem. [ 196.107218][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 196.151463][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 196.170157][ T7111] WARNING! power/level is deprecated; use power/control instead [ 196.353103][ T4287] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 196.801227][ T7130] loop8: detected capacity change from 0 to 512 [ 196.826499][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 196.884369][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 196.894651][ T7130] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 196.935034][ T7130] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.838: bg 0: block 67: padding at end of block bitmap is not set [ 196.953247][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 197.074249][ T7140] loop5: detected capacity change from 0 to 128 [ 197.084127][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 197.099135][ T5779] EXT4-fs (loop8): unmounting filesystem. [ 197.145599][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 197.165996][ T7140] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 197.186476][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 197.224366][ T7140] hpfs: filesystem error: improperly stopped [ 197.230438][ T7140] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 197.249726][ T7142] loop2: detected capacity change from 0 to 1024 [ 197.267609][ T7140] hpfs: You really don't want any checks? You are crazy... [ 197.277941][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 197.298342][ T7140] hpfs: Code page index out of array [ 197.311580][ T7142] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.323190][ T7140] hpfs: code page support is disabled [ 197.342998][ T7140] hpfs: hpfs_map_4sectors(): unaligned read [ 197.356824][ T7142] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.371636][ T7140] hpfs: hpfs_map_4sectors(): unaligned read [ 197.378076][ T7140] hpfs: filesystem error: unable to find root dir [ 197.627429][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 197.661088][ T6209] udevd[6209]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 197.939831][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 198.324550][ T7181] FAULT_INJECTION: forcing a failure. [ 198.324550][ T7181] name failslab, interval 1, probability 0, space 0, times 0 [ 198.337526][ T7181] CPU: 0 PID: 7181 Comm: syz.2.858 Not tainted syzkaller #0 [ 198.344918][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.355027][ T7181] Call Trace: [ 198.358346][ T7181] [ 198.361324][ T7181] dump_stack_lvl+0x188/0x24e [ 198.366061][ T7181] ? show_regs_print_info+0x12/0x12 [ 198.371369][ T7181] ? load_image+0x410/0x410 [ 198.375934][ T7181] ? __might_sleep+0xd0/0xd0 [ 198.380582][ T7181] ? __lock_acquire+0x7ea0/0x7ea0 [ 198.385673][ T7181] should_fail_ex+0x390/0x4c0 [ 198.390424][ T7181] should_failslab+0x5/0x20 [ 198.394980][ T7181] slab_pre_alloc_hook+0x59/0x300 [ 198.400063][ T7181] ? io_ring_ctx_alloc+0x279/0xc85 [ 198.405235][ T7181] __kmem_cache_alloc_node+0x4f/0x270 [ 198.410672][ T7181] ? io_ring_ctx_alloc+0x279/0xc85 [ 198.415841][ T7181] kmalloc_trace+0x26/0xe0 [ 198.420312][ T7181] io_ring_ctx_alloc+0x279/0xc85 [ 198.425307][ T7181] io_uring_create+0x29f/0xd6c [ 198.430140][ T7181] ? __might_fault+0xc2/0x120 [ 198.434874][ T7181] ? __might_fault+0xa6/0x120 [ 198.439615][ T7181] __x64_sys_io_uring_setup+0x21b/0x230 [ 198.444013][ T4287] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 198.445198][ T7181] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 198.457004][ T7181] ? lockdep_hardirqs_on+0x94/0x140 [ 198.462290][ T7181] do_syscall_64+0x4c/0xa0 [ 198.466768][ T7181] ? clear_bhb_loop+0x60/0xb0 [ 198.471514][ T7181] ? clear_bhb_loop+0x60/0xb0 [ 198.476257][ T7181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.482203][ T7181] RIP: 0033:0x7f64d519e559 [ 198.486670][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.506331][ T7181] RSP: 002b:00007f64d5fccfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 198.514806][ T7181] RAX: ffffffffffffffda RBX: 0000200000000380 RCX: 00007f64d519e559 [ 198.522833][ T7181] RDX: 0000200000000440 RSI: 0000200000000380 RDI: 0000000000000020 [ 198.530855][ T7181] RBP: 00007f64d5235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 198.538876][ T7181] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000440 [ 198.546906][ T7181] R13: 0000200000000480 R14: 0000200000000400 R15: 00007fff936a2ff8 [ 198.554984][ T7181] [ 198.558576][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.107114][ T7200] loop0: detected capacity change from 0 to 1024 [ 199.153697][ T7200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.166918][ T7200] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.568460][ T26] audit: type=1326 audit(1792434416.458:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 199.596490][ T7210] syz.8.868 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.633521][ T26] audit: type=1326 audit(1792434416.458:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 199.723015][ T26] audit: type=1326 audit(1792434416.488:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 199.813640][ T26] audit: type=1326 audit(1792434416.488:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 199.891890][ T26] audit: type=1326 audit(1792434416.488:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 199.977472][ T26] audit: type=1326 audit(1792434416.548:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 200.052559][ T26] audit: type=1326 audit(1792434416.548:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f159419e2c2 code=0x7ffc0000 [ 200.082273][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 200.117765][ T26] audit: type=1326 audit(1792434416.548:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f159419e357 code=0x7ffc0000 [ 200.162381][ T26] audit: type=1326 audit(1792434416.548:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f159415b251 code=0x7ffc0000 [ 200.220304][ T7221] netlink: 27 bytes leftover after parsing attributes in process `syz.7.873'. [ 200.233094][ T4356] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 200.233110][ T26] audit: type=1326 audit(1792434416.548:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.8.868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f159419f349 code=0x7ffc0000 [ 200.312722][ T7225] loop0: detected capacity change from 0 to 1024 [ 200.334809][ T7225] EXT4-fs: Ignoring removed bh option [ 200.384357][ T7225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 200.424747][ T4356] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.437587][ T4356] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.448620][ T4356] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 200.458307][ T4356] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.475873][ T4356] usb 9-1: config 0 descriptor?? [ 200.640250][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 200.666049][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 200.716263][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 200.786296][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 200.802359][ T7234] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 200.827554][ T7234] netlink: 'syz.0.877': attribute type 2 has an invalid length. [ 201.077649][ T7242] FAULT_INJECTION: forcing a failure. [ 201.077649][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.092360][ T4356] usb 9-1: language id specifier not provided by device, defaulting to English [ 201.127713][ T7242] CPU: 1 PID: 7242 Comm: syz.2.880 Not tainted syzkaller #0 [ 201.135098][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.145212][ T7242] Call Trace: [ 201.148528][ T7242] [ 201.151497][ T7242] dump_stack_lvl+0x188/0x24e [ 201.156268][ T7242] ? show_regs_print_info+0x12/0x12 [ 201.161515][ T7242] ? load_image+0x410/0x410 [ 201.166085][ T7242] ? __lock_acquire+0x7ea0/0x7ea0 [ 201.171184][ T7242] should_fail_ex+0x390/0x4c0 [ 201.175923][ T7242] _copy_to_user+0x2c/0x130 [ 201.180471][ T7242] bpf_verifier_vlog+0x172/0x3a0 [ 201.185442][ T7242] __btf_verifier_log+0xdf/0x130 [ 201.190428][ T7242] ? btf_check_sec_info+0x350/0x350 [ 201.195694][ T7242] ? btf_parse_hdr+0x1dd/0x7d0 [ 201.200496][ T7242] btf_parse_hdr+0x456/0x7d0 [ 201.205134][ T7242] btf_new_fd+0x367/0x760 [ 201.209506][ T7242] __sys_bpf+0x612/0x780 [ 201.213795][ T7242] ? bpf_link_show_fdinfo+0x380/0x380 [ 201.219241][ T7242] ? lock_chain_count+0x20/0x20 [ 201.224132][ T7242] __x64_sys_bpf+0x78/0x90 [ 201.228587][ T7242] do_syscall_64+0x4c/0xa0 [ 201.233041][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 201.237753][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 201.242486][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.248463][ T7242] RIP: 0033:0x7f64d519e559 [ 201.252918][ T7242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.272565][ T7242] RSP: 002b:00007f64d5fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.281013][ T7242] RAX: ffffffffffffffda RBX: 00007f64d5425fa0 RCX: 00007f64d519e559 [ 201.289010][ T7242] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 201.297006][ T7242] RBP: 00007f64d5235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 201.304999][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.312991][ T7242] R13: 00007f64d5426038 R14: 00007f64d5425fa0 R15: 00007fff936a2ff8 [ 201.321045][ T7242] [ 201.555746][ T4356] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0005/input/input13 [ 201.603816][ T4356] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0005/input/input14 [ 201.649654][ T6196] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 201.654834][ T4356] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0005/input/input15 [ 201.721593][ T4356] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0005/input/input16 [ 201.772028][ T4356] uclogic 0003:256C:006D.0005: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 201.787906][ T7260] loop0: detected capacity change from 0 to 512 [ 201.852972][ T6196] usb 8-1: Using ep0 maxpacket: 8 [ 201.859192][ T7260] EXT4-fs: Ignoring removed bh option [ 201.866991][ T6196] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 201.882063][ T6495] udevd[6495]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 201.911061][ T4356] usb 9-1: USB disconnect, device number 5 [ 201.917993][ T7260] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.948916][ T6196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.962150][ T7264] loop2: detected capacity change from 0 to 16 [ 202.013940][ T6196] usb 8-1: Product: syz [ 202.018186][ T6196] usb 8-1: Manufacturer: syz [ 202.068354][ T7264] erofs: (device loop2): mounted with root inode @ nid 36. [ 202.088647][ T6196] usb 8-1: SerialNumber: syz [ 202.142588][ T7260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 202.152253][ T4278] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[4096, 0] out[1832] [ 202.166735][ T7264] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[4096, 0] out[1832] [ 202.178177][ T7260] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.202250][ T6196] usb 8-1: config 0 descriptor?? [ 202.258383][ T6196] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 202.315635][ T7272] udevd[7272]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 202.350359][ T6498] udevd[6498]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 202.406637][ T6498] udevd[6498]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 202.617587][ T7276] loop5: detected capacity change from 0 to 4096 [ 202.647282][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 202.658116][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 202.698296][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 202.700697][ T7282] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.757857][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 203.228145][ T7290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.896'. [ 203.270290][ T6196] gspca_sonixj: reg_w1 err -71 [ 203.301150][ T7276] syz.5.890 (7276): drop_caches: 2 [ 203.333190][ T6196] sonixj: probe of 8-1:0.0 failed with error -71 [ 203.350020][ T6196] usb 8-1: USB disconnect, device number 5 [ 203.548965][ T7296] loop2: detected capacity change from 0 to 512 [ 203.599469][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 203.676440][ T7296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 203.853641][ T7296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.893: bg 0: block 67: padding at end of block bitmap is not set [ 204.087483][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 204.458803][ T7324] loop8: detected capacity change from 0 to 512 [ 204.476613][ T7324] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.910: inode has both inline data and extents flags [ 204.491144][ T7324] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.910: couldn't read orphan inode 15 (err -117) [ 204.505327][ T7324] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 204.792982][ T5779] EXT4-fs (loop8): unmounting filesystem. [ 205.421741][ T7343] loop7: detected capacity change from 0 to 512 [ 205.498571][ T7343] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 205.613194][ T7343] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.916: bg 0: block 67: padding at end of block bitmap is not set [ 205.845100][ T5742] EXT4-fs (loop7): unmounting filesystem. [ 205.898641][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 205.945565][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 205.966576][ T7352] loop0: detected capacity change from 0 to 4096 [ 206.006339][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 206.072724][ T7357] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.435162][ T7341] loop8: detected capacity change from 0 to 32768 [ 206.445305][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 206.469207][ T7363] loop2: detected capacity change from 0 to 512 [ 206.502564][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 206.603033][ T4356] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 206.793141][ T4356] usb 8-1: Using ep0 maxpacket: 8 [ 206.803307][ T4356] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 206.822746][ T4356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.842019][ T4356] usb 8-1: Product: syz [ 206.856608][ T4356] usb 8-1: Manufacturer: syz [ 206.861312][ T4356] usb 8-1: SerialNumber: syz [ 206.888309][ T4356] usb 8-1: config 0 descriptor?? [ 206.898862][ T7367] binder: 7366:7367 ioctl c0306201 2000000003c0 returned -14 [ 206.910504][ T4356] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 207.410296][ T7352] syz.0.919 (7352): drop_caches: 2 [ 207.460407][ T7363] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 207.483746][ T7341] XFS (loop8): Mounting V5 Filesystem [ 207.578571][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 207.640081][ T7341] XFS (loop8): Ending clean mount [ 207.674746][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 207.728748][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 207.784673][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 207.801338][ T7341] XFS (loop8): Quotacheck needed: Please wait. [ 207.921088][ T4356] gspca_sonixj: reg_w1 err -71 [ 207.944042][ T7341] XFS (loop8): Quotacheck: Done. [ 207.963130][ T6196] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 208.043553][ T4356] sonixj: probe of 8-1:0.0 failed with error -71 [ 208.051941][ T4356] usb 8-1: USB disconnect, device number 6 [ 208.058141][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 208.058157][ T26] audit: type=1800 audit(1792434424.936:50): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.915" name="bus" dev="loop8" ino=6155 res=0 errno=0 [ 208.163667][ T26] audit: type=1800 audit(1792434424.986:51): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.915" name="file1" dev="loop8" ino=6150 res=0 errno=0 [ 208.170475][ T7341] XFS (loop8): Unmounting Filesystem [ 208.195775][ T6196] usb 6-1: not running at top speed; connect to a high speed hub [ 208.214522][ T6196] usb 6-1: config 6 has an invalid interface number: 6 but max is 0 [ 208.222587][ T6196] usb 6-1: config 6 has no interface number 0 [ 208.249599][ T6196] usb 6-1: config 6 interface 6 has no altsetting 0 [ 208.290484][ T6196] usb 6-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 208.304419][ T6196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.322012][ T6196] usb 6-1: Product: syz [ 208.333040][ T6196] usb 6-1: Manufacturer: syz [ 208.348087][ T6196] usb 6-1: SerialNumber: syz [ 208.642255][ T6196] uvcvideo 6-1:6.6: Found Unit with invalid ID 0 [ 208.681492][ T6196] usb 6-1: Found UVC 0.00 device syz (174f:8a12) [ 208.692679][ T6196] usb 6-1: No valid video chain found. [ 208.728144][ T6196] usb 6-1: USB disconnect, device number 6 [ 208.739437][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 208.780399][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 208.925333][ T7398] virtio-fs: tag not found [ 209.453759][ T7415] af_packet: packet size is too long (4294966816 > 2016) [ 209.746331][ T7418] loop7: detected capacity change from 0 to 2048 [ 210.133289][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.949'. [ 210.254360][ T7442] netlink: 48 bytes leftover after parsing attributes in process `syz.8.955'. [ 211.003243][ T7459] loop8: detected capacity change from 0 to 8192 [ 211.013186][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 211.048419][ T7459] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.074948][ T7467] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.094880][ T7459] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 211.138624][ T7459] REISERFS (device loop8): using ordered data mode [ 211.145841][ T7459] reiserfs: using flush barriers [ 211.152348][ T7459] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.170788][ T7459] REISERFS (device loop8): checking transaction log (loop8) [ 211.359506][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 211.378414][ T7459] REISERFS (device loop8): Using tea hash to sort names [ 211.386114][ T7459] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 211.400907][ T7459] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 211.466571][ T26] audit: type=1800 audit(1792434428.356:52): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.963" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 211.486862][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.575046][ T7477] "syz.7.980" (7477) uses obsolete ecb(arc4) skcipher [ 211.600623][ T7477] syz.7.980 sent an empty control message without MSG_MORE. [ 211.830703][ T26] audit: type=1800 audit(1792434428.716:53): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.963" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 211.855617][ T7475] syz.8.963 (7475) used greatest stack depth: 19632 bytes left [ 211.923670][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.973'. [ 212.007808][ T7489] loop7: detected capacity change from 0 to 4096 [ 212.018405][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 212.097572][ T7495] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.120028][ T7492] device geneve1 entered promiscuous mode [ 212.221764][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 212.286108][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 212.480493][ T7504] loop5: detected capacity change from 0 to 2048 [ 212.524398][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 212.801268][ T7511] device syzkaller1 entered promiscuous mode [ 213.001600][ T7513] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.385000][ T6601] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 213.444543][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 213.491092][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 213.512054][ T7489] syz.7.971 (7489): drop_caches: 2 [ 213.593131][ T6601] usb 9-1: Using ep0 maxpacket: 16 [ 213.608536][ T6601] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 213.636448][ T7531] loop0: detected capacity change from 0 to 128 [ 213.651984][ T6601] usb 9-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 213.681270][ T6601] usb 9-1: config 0 has no interface number 0 [ 213.707121][ T6601] usb 9-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 213.709473][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 213.743951][ T6601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.757517][ T7531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 213.773550][ T7531] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.776604][ T6601] usb 9-1: Product: syz [ 213.797491][ T6601] usb 9-1: Manufacturer: syz [ 213.803085][ T6601] usb 9-1: SerialNumber: syz [ 213.810275][ T6601] usb 9-1: config 0 descriptor?? [ 214.026274][ T6601] usb 9-1: USB disconnect, device number 6 [ 214.069866][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 214.100921][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 214.128984][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 214.170235][ T7546] ip_tables: iptables: counters copy to user failed while replacing table [ 214.213760][ T7546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 214.242759][ T7546] ip_tables: iptables: counters copy to user failed while replacing table [ 214.245624][ T7550] loop0: detected capacity change from 0 to 512 [ 214.282801][ T7550] EXT4-fs (loop0): Test dummy encryption mode enabled [ 214.293502][ T7552] loop7: detected capacity change from 0 to 128 [ 214.328433][ T7550] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #11: comm syz.0.996: casefold flag without casefold feature [ 214.396435][ T7550] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.996: couldn't read orphan inode 11 (err -117) [ 214.450903][ T7550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.536528][ T7557] syz.7.998: attempt to access beyond end of device [ 214.536528][ T7557] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 214.574346][ T26] audit: type=1800 audit(1792434431.466:54): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.996" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 214.777420][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 215.537948][ T7592] FAULT_INJECTION: forcing a failure. [ 215.537948][ T7592] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.601069][ T7588] loop8: detected capacity change from 0 to 4096 [ 215.603850][ T7592] CPU: 1 PID: 7592 Comm: syz.7.1011 Not tainted syzkaller #0 [ 215.614889][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.624999][ T7592] Call Trace: [ 215.628328][ T7592] [ 215.631308][ T7592] dump_stack_lvl+0x188/0x24e [ 215.636056][ T7592] ? show_regs_print_info+0x12/0x12 [ 215.641316][ T7592] ? load_image+0x410/0x410 [ 215.645866][ T7592] ? fsnotify+0x5da/0x1df0 [ 215.650338][ T7592] should_fail_ex+0x390/0x4c0 [ 215.655082][ T7592] get_futex_key+0x1b1/0x1000 [ 215.659820][ T7592] ? futex_setup_timer+0xc0/0xc0 [ 215.664821][ T7592] futex_wake+0x123/0x4f0 [ 215.669196][ T7592] ? futex_wake_mark+0x150/0x150 [ 215.674169][ T7592] ? __lock_acquire+0x7ea0/0x7ea0 [ 215.679240][ T7592] ? file_end_write+0x156/0x250 [ 215.684139][ T7592] ? vfs_write+0x777/0x9a0 [ 215.688594][ T7592] do_futex+0x2e2/0x320 [ 215.692783][ T7592] ? __ia32_sys_get_robust_list+0x100/0x100 [ 215.698711][ T7592] __se_sys_futex+0x381/0x410 [ 215.703421][ T7592] ? __x64_sys_futex+0xf0/0xf0 [ 215.708221][ T7592] ? __x64_sys_futex+0x1d/0xf0 [ 215.713012][ T7592] do_syscall_64+0x4c/0xa0 [ 215.717475][ T7592] ? clear_bhb_loop+0x60/0xb0 [ 215.722177][ T7592] ? clear_bhb_loop+0x60/0xb0 [ 215.726886][ T7592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.732809][ T7592] RIP: 0033:0x7fc1f759e559 [ 215.737257][ T7592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.756899][ T7592] RSP: 002b:00007fc1f84d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 215.765345][ T7592] RAX: ffffffffffffffda RBX: 00007fc1f7825fa8 RCX: 00007fc1f759e559 [ 215.773344][ T7592] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc1f7825fac [ 215.781340][ T7592] RBP: 00007fc1f7825fa0 R08: 001d07d3d230390c R09: 0000000000000000 [ 215.789337][ T7592] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 215.797450][ T7592] R13: 00007fc1f7826038 R14: 00007fff1b2e7510 R15: 00007fff1b2e75f8 [ 215.805496][ T7592] [ 215.850372][ T7596] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.371114][ T7578] loop5: detected capacity change from 0 to 32768 [ 216.411164][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 216.469019][ T7588] syz.8.1009 (7588): drop_caches: 2 [ 216.556966][ T7578] XFS (loop5): Mounting V5 Filesystem [ 216.668046][ T7578] XFS (loop5): Ending clean mount [ 217.116603][ T4818] XFS (loop5): Unmounting Filesystem [ 217.427756][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 217.461166][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 217.693477][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 217.764158][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 217.926165][ T7644] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.204723][ T7663] virtio-fs: tag not found [ 218.242554][ T7665] binder: 7664:7665 ioctl c0306201 2000000003c0 returned -14 [ 218.468748][ T7672] FAULT_INJECTION: forcing a failure. [ 218.468748][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 218.513423][ T7672] CPU: 1 PID: 7672 Comm: syz.5.1030 Not tainted syzkaller #0 [ 218.520986][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.531121][ T7672] Call Trace: [ 218.534443][ T7672] [ 218.537498][ T7672] dump_stack_lvl+0x188/0x24e [ 218.542231][ T7672] ? show_regs_print_info+0x12/0x12 [ 218.547468][ T7672] ? load_image+0x410/0x410 [ 218.552004][ T7672] ? __might_sleep+0xd0/0xd0 [ 218.556718][ T7672] ? __lock_acquire+0x7ea0/0x7ea0 [ 218.561786][ T7672] should_fail_ex+0x390/0x4c0 [ 218.566511][ T7672] should_failslab+0x5/0x20 [ 218.571050][ T7672] slab_pre_alloc_hook+0x59/0x300 [ 218.576111][ T7672] ? __kernfs_new_node+0xa6/0x7f0 [ 218.581198][ T7672] ? rcu_is_watching+0x11/0xa0 [ 218.586011][ T7672] kmem_cache_alloc+0x56/0x2f0 [ 218.590814][ T7672] ? __kernfs_new_node+0xe1/0x7f0 [ 218.595973][ T7672] __kernfs_new_node+0xe1/0x7f0 [ 218.600878][ T7672] ? __lock_acquire+0x7ea0/0x7ea0 [ 218.605943][ T7672] ? kernfs_new_node+0x250/0x250 [ 218.610908][ T7672] ? rwsem_write_trylock+0x135/0x1c0 [ 218.616245][ T7672] ? clear_nonspinnable+0x60/0x60 [ 218.621335][ T7672] ? up_write+0x1b6/0x410 [ 218.625709][ T7672] kernfs_new_node+0x148/0x250 [ 218.630515][ T7672] __kernfs_create_file+0x47/0x2e0 [ 218.635668][ T7672] cgroup_addrm_files+0x80c/0xd50 [ 218.640743][ T7672] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 218.646936][ T7672] ? mark_lock+0x94/0x320 [ 218.651310][ T7672] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 218.657372][ T7672] ? css_next_descendant_pre+0x179/0x250 [ 218.663050][ T7672] css_populate_dir+0x1da/0x3b0 [ 218.667958][ T7672] cgroup_mkdir+0xc61/0xe70 [ 218.672497][ T7672] ? css_task_iter_end+0x280/0x280 [ 218.677649][ T7672] ? kernfs_iop_permission+0x26d/0x350 [ 218.683143][ T7672] ? css_task_iter_end+0x280/0x280 [ 218.688291][ T7672] kernfs_iop_mkdir+0x23d/0x3d0 [ 218.693201][ T7672] vfs_mkdir+0x386/0x570 [ 218.697486][ T7672] do_mkdirat+0x1d8/0x440 [ 218.701856][ T7672] ? vfs_mkdir+0x570/0x570 [ 218.706305][ T7672] __x64_sys_mkdirat+0x85/0x90 [ 218.711128][ T7672] do_syscall_64+0x4c/0xa0 [ 218.715606][ T7672] ? clear_bhb_loop+0x60/0xb0 [ 218.720339][ T7672] ? clear_bhb_loop+0x60/0xb0 [ 218.725092][ T7672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.731024][ T7672] RIP: 0033:0x7f444d19e559 [ 218.735472][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.755136][ T7672] RSP: 002b:00007f444df80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 218.763609][ T7672] RAX: ffffffffffffffda RBX: 00007f444d425fa0 RCX: 00007f444d19e559 [ 218.771632][ T7672] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 218.779631][ T7672] RBP: 00007f444d235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 218.787656][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.795662][ T7672] R13: 00007f444d426038 R14: 00007f444d425fa0 R15: 00007ffdf2a55ea8 [ 218.803689][ T7672] [ 219.198663][ T7683] loop0: detected capacity change from 0 to 4096 [ 219.225794][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 219.307238][ T7688] loop7: detected capacity change from 0 to 512 [ 219.343987][ T7691] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.386084][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 219.396072][ T7688] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 219.455157][ T7688] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 219.497085][ T7683] syz.0.1033 (7683): drop_caches: 2 [ 219.508041][ T7694] FAULT_INJECTION: forcing a failure. [ 219.508041][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 219.539479][ T7694] CPU: 1 PID: 7694 Comm: syz.2.1036 Not tainted syzkaller #0 [ 219.546947][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.554210][ T7672] cgroup: cgroup_addrm_files: failed to add tasks, err=-12 [ 219.557037][ T7694] Call Trace: [ 219.557048][ T7694] [ 219.570547][ T7694] dump_stack_lvl+0x188/0x24e [ 219.575287][ T7694] ? show_regs_print_info+0x12/0x12 [ 219.580554][ T7694] ? load_image+0x410/0x410 [ 219.585119][ T7694] ? __might_sleep+0xd0/0xd0 [ 219.589765][ T7694] ? __lock_acquire+0x7ea0/0x7ea0 [ 219.594854][ T7694] should_fail_ex+0x390/0x4c0 [ 219.599641][ T7694] should_failslab+0x5/0x20 [ 219.604198][ T7694] slab_pre_alloc_hook+0x59/0x300 [ 219.609284][ T7694] ? nd_alloc_stack+0x7b/0xf0 [ 219.614061][ T7694] __kmem_cache_alloc_node+0x4f/0x270 [ 219.619499][ T7694] ? nd_alloc_stack+0x7b/0xf0 [ 219.624239][ T7694] kmalloc_trace+0x26/0xe0 [ 219.628705][ T7694] nd_alloc_stack+0x7b/0xf0 [ 219.633257][ T7694] pick_link+0xc5b/0xe20 [ 219.637562][ T7694] step_into+0xc14/0xee0 [ 219.641873][ T7694] ? set_root+0x3a0/0x3a0 [ 219.646261][ T7694] ? lookup_fast+0xb3/0x4c0 [ 219.650828][ T7694] ? bpf_lsm_inode_permission+0x5/0x10 [ 219.656374][ T7694] ? security_inode_permission+0xac/0xf0 [ 219.662073][ T7694] link_path_walk+0x744/0xea0 [ 219.666924][ T7694] ? handle_lookup_down+0x130/0x130 [ 219.672196][ T7694] ? walk_component+0x17b/0x3e0 [ 219.677111][ T7694] path_lookupat+0x83/0x420 [ 219.681689][ T7694] filename_lookup+0x229/0x580 [ 219.686516][ T7694] ? hashlen_string+0x110/0x110 [ 219.691449][ T7694] ? strncpy_from_user+0x1dc/0x340 [ 219.696621][ T7694] ? getname_flags+0x206/0x500 [ 219.701437][ T7694] user_path_at_empty+0x3e/0x60 [ 219.706344][ T7694] __se_sys_mount+0x2a4/0x3d0 [ 219.711089][ T7694] ? __x64_sys_mount+0xc0/0xc0 [ 219.715923][ T7694] ? lockdep_hardirqs_on+0x94/0x140 [ 219.721187][ T7694] ? __x64_sys_mount+0x1c/0xc0 [ 219.726060][ T7694] do_syscall_64+0x4c/0xa0 [ 219.730529][ T7694] ? clear_bhb_loop+0x60/0xb0 [ 219.734814][ T7688] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.1034: invalid indirect mapped block 32768 (level 2) [ 219.735280][ T7694] ? clear_bhb_loop+0x60/0xb0 [ 219.735316][ T7694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.735344][ T7694] RIP: 0033:0x7f64d519e559 [ 219.735364][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.784039][ T7694] RSP: 002b:00007f64d5fcd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.792527][ T7694] RAX: ffffffffffffffda RBX: 00007f64d5425fa0 RCX: 00007f64d519e559 [ 219.800553][ T7694] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000000 [ 219.808670][ T7694] RBP: 00007f64d5235ad8 R08: 0000200000000640 R09: 0000000000000000 [ 219.816693][ T7694] R10: 0000000000100422 R11: 0000000000000246 R12: 0000000000000000 [ 219.824716][ T7694] R13: 00007f64d5426038 R14: 00007f64d5425fa0 R15: 00007fff936a2ff8 [ 219.832758][ T7694] [ 219.859413][ T7688] EXT4-fs (loop7): 1 orphan inode deleted [ 219.912951][ T7688] EXT4-fs (loop7): 1 truncate cleaned up [ 219.953241][ T7688] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 220.083121][ T7688] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 220.260250][ T5742] EXT4-fs (loop7): unmounting filesystem. [ 220.308572][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 220.345648][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 220.572258][ T7713] netlink: 316 bytes leftover after parsing attributes in process `syz.7.1043'. [ 220.822212][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1046'. [ 221.020451][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 221.092222][ T7729] netlink: 194236 bytes leftover after parsing attributes in process `syz.8.1048'. [ 221.123058][ T7729] netlink: zone id is out of range [ 221.128949][ T7729] netlink: zone id is out of range [ 221.161121][ T7729] netlink: get zone limit has 8 unknown bytes [ 221.347342][ T7730] loop7: detected capacity change from 0 to 8192 [ 221.411582][ T7730] loop7: p1 p2 < > p4 < p5 > [ 221.419212][ T7730] loop7: partition table partially beyond EOD, truncated [ 221.463395][ T7730] loop7: p1 start 16777216 is beyond EOD, truncated [ 221.470383][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 221.511461][ T7730] loop7: p5 start 16777216 is beyond EOD, truncated [ 221.521549][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 221.526261][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 221.579152][ T7745] af_packet: packet size is too long (4294966816 > 1518) [ 221.816916][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 221.860916][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 222.610295][ T7781] loop7: detected capacity change from 0 to 2048 [ 222.620145][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 222.677999][ T7781] Alternate GPT is invalid, using primary GPT. [ 222.693623][ T7781] loop7: p2 p3 p7 [ 222.700589][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 222.747964][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 222.761614][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 222.776529][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 222.875277][ T7797] loop8: detected capacity change from 0 to 164 [ 223.008264][ T7802] loop7: detected capacity change from 0 to 128 [ 223.058859][ T7802] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 223.084342][ T7802] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.132502][ T7807] input: syz1 as /devices/virtual/input/input17 [ 223.293119][ T4356] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 223.320893][ T5742] EXT4-fs (loop7): unmounting filesystem. [ 223.466217][ T7817] loop7: detected capacity change from 0 to 512 [ 223.484807][ T4356] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 223.503146][ T4356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 223.520480][ T4356] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.561115][ T4356] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.582190][ T4356] usb 6-1: Product: syz [ 223.587914][ T7817] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 223.590388][ T4356] usb 6-1: Manufacturer: syz [ 223.601994][ T4356] usb 6-1: SerialNumber: syz [ 223.609392][ T4356] usb 6-1: config 0 descriptor?? [ 223.615369][ T7803] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 223.632150][ T4356] usb 6-1: selecting invalid altsetting 0 [ 223.669499][ T7817] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.776996][ T7817] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1082: corrupted inode contents [ 223.808033][ T7817] EXT4-fs (loop7): Remounting filesystem read-only [ 223.833102][ T7817] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #2: comm syz.7.1082: mark_inode_dirty error [ 223.882168][ T7803] usb 6-1: BOGUS urb xfer, pipe 0 != type 3 [ 223.892350][ T7817] EXT4-fs (loop7): Remounting filesystem read-only [ 223.912651][ T7817] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1082: corrupted inode contents [ 223.941719][ T7817] EXT4-fs (loop7): Remounting filesystem read-only [ 223.957995][ T7817] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.1082: mark_inode_dirty error [ 223.977076][ T7817] EXT4-fs (loop7): Remounting filesystem read-only [ 223.992410][ T7817] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1082: corrupted inode contents [ 224.005068][ T6601] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 224.017220][ T7817] EXT4-fs (loop7): Remounting filesystem read-only [ 224.024659][ T7817] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #2: comm syz.7.1082: mark_inode_dirty error [ 224.037660][ T7817] EXT4-fs (loop7): Remounting filesystem read-only [ 224.044907][ T7817] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1082: corrupted inode contents [ 224.057616][ T7817] EXT4-fs (loop7): Remounting filesystem read-only [ 224.065462][ T7826] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #2: comm syz.7.1082: corrupted inode contents [ 224.083207][ T7826] EXT4-fs (loop7): Remounting filesystem read-only [ 224.090036][ T7826] EXT4-fs error (device loop7): add_dirent_to_buf:2218: inode #2: comm syz.7.1082: mark_inode_dirty error [ 224.102455][ T7826] EXT4-fs (loop7): Remounting filesystem read-only [ 224.202961][ T6601] usb 1-1: Using ep0 maxpacket: 16 [ 224.210236][ T6601] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.236531][ T7835] loop8: detected capacity change from 0 to 4096 [ 224.247176][ T6601] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.278219][ T6601] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.289233][ T6601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.297502][ T6601] usb 1-1: Product: syz [ 224.302019][ T6601] usb 1-1: Manufacturer: syz [ 224.306895][ T6601] usb 1-1: SerialNumber: syz [ 224.340105][ T7836] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.395780][ T7835] syz.8.1089 (7835): drop_caches: 2 [ 224.529700][ T6601] usb 1-1: 0:2 : does not exist [ 224.548537][ T6601] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 224.598699][ T6601] usb 1-1: USB disconnect, device number 8 [ 224.694198][ T7830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.710648][ T7830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.744700][ T7830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.786597][ T7830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.792709][ T7830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.813680][ T7830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 225.254090][ T7855] loop0: detected capacity change from 0 to 128 [ 225.292629][ T7855] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 225.325050][ T7855] hpfs: filesystem error: improperly stopped [ 225.338763][ T7855] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 225.346983][ T7855] hpfs: You really don't want any checks? You are crazy... [ 225.354499][ T7855] hpfs: Code page index out of array [ 225.360104][ T7855] hpfs: code page support is disabled [ 225.367718][ T7855] hpfs: hpfs_map_4sectors(): unaligned read [ 225.373934][ T7855] hpfs: hpfs_map_4sectors(): unaligned read [ 225.380063][ T7855] hpfs: filesystem error: unable to find root dir [ 225.680109][ T6198] usb 6-1: USB disconnect, device number 7 [ 225.713132][ T4356] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 225.915451][ T4356] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.933110][ T4356] usb 3-1: too many endpoints for config 1 interface 1 altsetting 200: 93, using maximum allowed: 30 [ 225.953046][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.960748][ T4356] usb 3-1: config 1 interface 1 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 93 [ 225.984185][ T4356] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 225.995607][ T4356] usb 3-1: config 1 interface 1 has no altsetting 0 [ 226.007166][ T4356] usb 3-1: string descriptor 0 read error: -22 [ 226.014270][ T4356] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 226.023598][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.042220][ T4356] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 226.059385][ T4356] usb 3-1: selecting invalid altsetting 0 [ 226.065472][ T4356] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 226.833137][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.092498][ T4356] usb 3-1: USB disconnect, device number 5 [ 228.033231][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 228.046953][ T26] audit: type=1326 audit(1792434700.931:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.150793][ T26] audit: type=1326 audit(1792434700.931:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.174805][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.246977][ T26] audit: type=1326 audit(1792434700.961:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.298971][ T7937] loop0: detected capacity change from 0 to 1024 [ 228.321903][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 228.336679][ T26] audit: type=1326 audit(1792434700.961:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.445808][ T26] audit: type=1326 audit(1792434700.961:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.491289][ T7937] Invalid argument reading file caps for ./file0 [ 228.537337][ T26] audit: type=1326 audit(1792434700.961:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.611231][ T26] audit: type=1326 audit(1792434700.961:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.658321][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 228.700446][ T7944] FAULT_INJECTION: forcing a failure. [ 228.700446][ T7944] name failslab, interval 1, probability 0, space 0, times 0 [ 228.714184][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 228.737369][ T26] audit: type=1326 audit(1792434700.961:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 228.743309][ T7944] CPU: 0 PID: 7944 Comm: syz.7.1133 Not tainted syzkaller #0 [ 228.768723][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.778811][ T7944] Call Trace: [ 228.782118][ T7944] [ 228.785096][ T7944] dump_stack_lvl+0x188/0x24e [ 228.789844][ T7944] ? show_regs_print_info+0x12/0x12 [ 228.795080][ T7944] ? load_image+0x410/0x410 [ 228.799618][ T7944] ? __might_sleep+0xd0/0xd0 [ 228.804262][ T7944] ? __lock_acquire+0x7ea0/0x7ea0 [ 228.809326][ T7944] should_fail_ex+0x390/0x4c0 [ 228.814042][ T7944] should_failslab+0x5/0x20 [ 228.818570][ T7944] slab_pre_alloc_hook+0x59/0x300 [ 228.823632][ T7944] ? __kernfs_new_node+0xa6/0x7f0 [ 228.828689][ T7944] ? rcu_is_watching+0x11/0xa0 [ 228.833494][ T7944] kmem_cache_alloc+0x56/0x2f0 [ 228.838282][ T7944] ? __kernfs_new_node+0xe1/0x7f0 [ 228.843337][ T7944] __kernfs_new_node+0xe1/0x7f0 [ 228.848221][ T7944] ? mark_lock+0x94/0x320 [ 228.852587][ T7944] ? kernfs_new_node+0x250/0x250 [ 228.857558][ T7944] ? mark_lock+0x94/0x320 [ 228.861923][ T7944] ? __lock_acquire+0x1359/0x7ea0 [ 228.866987][ T7944] kernfs_new_node+0x148/0x250 [ 228.871784][ T7944] __kernfs_create_file+0x47/0x2e0 [ 228.877011][ T7944] cgroup_addrm_files+0x80c/0xd50 [ 228.882075][ T7944] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 228.888256][ T7944] ? mark_lock+0x94/0x320 [ 228.892628][ T7944] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 228.898686][ T7944] ? css_next_descendant_pre+0x179/0x250 [ 228.904353][ T7944] css_populate_dir+0x1da/0x3b0 [ 228.909239][ T7944] cgroup_mkdir+0xc61/0xe70 [ 228.913801][ T7944] ? css_task_iter_end+0x280/0x280 [ 228.918968][ T7944] ? kernfs_iop_permission+0x26d/0x350 [ 228.924455][ T7944] ? css_task_iter_end+0x280/0x280 [ 228.929625][ T7944] kernfs_iop_mkdir+0x23d/0x3d0 [ 228.934514][ T7944] vfs_mkdir+0x386/0x570 [ 228.938796][ T7944] do_mkdirat+0x1d8/0x440 [ 228.943162][ T7944] ? vfs_mkdir+0x570/0x570 [ 228.947627][ T7944] __x64_sys_mkdirat+0x85/0x90 [ 228.952421][ T7944] do_syscall_64+0x4c/0xa0 [ 228.956871][ T7944] ? clear_bhb_loop+0x60/0xb0 [ 228.961577][ T7944] ? clear_bhb_loop+0x60/0xb0 [ 228.966376][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.972303][ T7944] RIP: 0033:0x7fc1f759e559 [ 228.976745][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.996387][ T7944] RSP: 002b:00007fc1f84d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 229.004859][ T7944] RAX: ffffffffffffffda RBX: 00007fc1f7825fa0 RCX: 00007fc1f759e559 [ 229.012878][ T7944] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 229.021002][ T7944] RBP: 00007fc1f7635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 229.029037][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.037145][ T7944] R13: 00007fc1f7826038 R14: 00007fc1f7825fa0 R15: 00007fff1b2e75f8 [ 229.045172][ T7944] [ 229.048303][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.052520][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 229.074047][ T7944] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 229.116348][ T7946] loop0: detected capacity change from 0 to 1024 [ 229.124017][ T7946] EXT4-fs: Ignoring removed oldalloc option [ 229.129990][ T7946] EXT4-fs: Ignoring removed oldalloc option [ 229.130309][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 229.155856][ T26] audit: type=1326 audit(1792434700.961:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 229.173606][ T7946] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.179895][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.248800][ T26] audit: type=1326 audit(1792434700.961:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.8.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159419e559 code=0x7ffc0000 [ 229.309723][ T7946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 229.527899][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 229.597496][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 229.629787][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 230.113228][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 230.206366][ T7972] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.243223][ T7967] loop5: detected capacity change from 0 to 2048 [ 230.275845][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 230.320390][ T7967] Alternate GPT is invalid, using primary GPT. [ 230.348206][ T7967] loop5: p2 p3 p7 [ 230.360593][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 230.397751][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 230.411214][ T7263] udevd[7263]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 230.647707][ T7984] loop0: detected capacity change from 0 to 512 [ 230.678325][ T7984] EXT4-fs (loop0): Test dummy encryption mode enabled [ 230.719800][ T7984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.773211][ T4566] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 230.843240][ T7984] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.1148: bad orphan inode 131083 [ 230.882421][ T7984] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 230.983460][ T4566] usb 9-1: Using ep0 maxpacket: 16 [ 230.993650][ T4566] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 231.023116][ T4566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.065591][ T4566] usb 9-1: Product: syz [ 231.069842][ T4566] usb 9-1: Manufacturer: syz [ 231.083025][ T4566] usb 9-1: SerialNumber: syz [ 231.084612][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 231.175492][ T8002] loop8: detected capacity change from 0 to 8 [ 231.229465][ T8002] Dev loop8: unable to read RDB block 8 [ 231.238850][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 231.250906][ T8002] loop8: unable to read partition table [ 231.273895][ T8002] loop8: partition table beyond EOD, truncated [ 231.280222][ T8002] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 231.330802][ T4566] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 231.377027][ T4566] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.408007][ T4566] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 231.431957][ T4566] usb 9-1: media controller created [ 231.512360][ T4566] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.581938][ T4566] zl10353_read_register: readreg error (reg=127, ret==-32) [ 231.814868][ T8025] FAULT_INJECTION: forcing a failure. [ 231.814868][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 231.860766][ T8025] CPU: 0 PID: 8025 Comm: syz.0.1160 Not tainted syzkaller #0 [ 231.868255][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.878391][ T8025] Call Trace: [ 231.881738][ T8025] [ 231.884751][ T8025] dump_stack_lvl+0x188/0x24e [ 231.889517][ T8025] ? show_regs_print_info+0x12/0x12 [ 231.894806][ T8025] ? load_image+0x410/0x410 [ 231.899403][ T8025] ? __might_sleep+0xd0/0xd0 [ 231.904072][ T8025] ? __lock_acquire+0x7ea0/0x7ea0 [ 231.909191][ T8025] should_fail_ex+0x390/0x4c0 [ 231.913961][ T8025] should_failslab+0x5/0x20 [ 231.918532][ T8025] slab_pre_alloc_hook+0x59/0x300 [ 231.923622][ T8025] ? __kernfs_new_node+0xa6/0x7f0 [ 231.928714][ T8025] ? rcu_is_watching+0x11/0xa0 [ 231.933572][ T8025] kmem_cache_alloc+0x56/0x2f0 [ 231.938402][ T8025] ? __kernfs_new_node+0xe1/0x7f0 [ 231.943500][ T8025] __kernfs_new_node+0xe1/0x7f0 [ 231.948431][ T8025] ? __lock_acquire+0x7ea0/0x7ea0 [ 231.953529][ T8025] ? kernfs_new_node+0x250/0x250 [ 231.959116][ T8025] ? rwsem_write_trylock+0x135/0x1c0 [ 231.964469][ T8025] ? clear_nonspinnable+0x60/0x60 [ 231.969567][ T8025] ? up_write+0x1b6/0x410 [ 231.973964][ T8025] kernfs_new_node+0x148/0x250 [ 231.978834][ T8025] __kernfs_create_file+0x47/0x2e0 [ 231.984015][ T8025] cgroup_addrm_files+0x80c/0xd50 [ 231.989121][ T8025] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 231.995332][ T8025] ? mark_lock+0x94/0x320 [ 231.999775][ T8025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 232.005871][ T8025] ? css_next_descendant_pre+0x179/0x250 [ 232.011568][ T8025] css_populate_dir+0x1da/0x3b0 [ 232.016478][ T8025] cgroup_mkdir+0xc61/0xe70 [ 232.021100][ T8025] ? css_task_iter_end+0x280/0x280 [ 232.026279][ T8025] ? kernfs_iop_permission+0x26d/0x350 [ 232.031801][ T8025] ? css_task_iter_end+0x280/0x280 [ 232.036983][ T8025] kernfs_iop_mkdir+0x23d/0x3d0 [ 232.042104][ T8025] vfs_mkdir+0x386/0x570 [ 232.046473][ T8025] do_mkdirat+0x1d8/0x440 [ 232.050871][ T8025] ? vfs_mkdir+0x570/0x570 [ 232.055373][ T8025] __x64_sys_mkdirat+0x85/0x90 [ 232.060211][ T8025] do_syscall_64+0x4c/0xa0 [ 232.064706][ T8025] ? clear_bhb_loop+0x60/0xb0 [ 232.069439][ T8025] ? clear_bhb_loop+0x60/0xb0 [ 232.074225][ T8025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.080187][ T8025] RIP: 0033:0x7f435c79e559 [ 232.084665][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.104335][ T8025] RSP: 002b:00007f435d66e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 232.112806][ T8025] RAX: ffffffffffffffda RBX: 00007f435ca25fa0 RCX: 00007f435c79e559 [ 232.120838][ T8025] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 232.128863][ T8025] RBP: 00007f435c835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 232.136898][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.144947][ T8025] R13: 00007f435ca26038 R14: 00007f435ca25fa0 R15: 00007ffe53de91a8 [ 232.152987][ T8025] [ 232.156151][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.202406][ T8025] cgroup: cgroup_addrm_files: failed to add tasks, err=-12 [ 232.386354][ T4566] dvb_usb_gl861: probe of 9-1:157.0 failed with error -5 [ 232.433730][ T4566] usb 9-1: USB disconnect, device number 7 [ 232.540740][ T8037] loop0: detected capacity change from 0 to 8192 [ 232.773720][ T8045] device syzkaller1 entered promiscuous mode [ 232.955389][ T8052] loop2: detected capacity change from 0 to 256 [ 233.377983][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1174'. [ 233.726121][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1180'. [ 234.026069][ T8048] loop0: detected capacity change from 0 to 40427 [ 234.044543][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 234.065034][ T8048] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 234.105387][ T8048] F2FS-fs (loop0): invalid crc value [ 234.137240][ T8048] F2FS-fs (loop0): Found nat_bits in checkpoint [ 234.150538][ T8087] loop2: detected capacity change from 0 to 4096 [ 234.177782][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 234.239705][ T8097] device gretap0 entered promiscuous mode [ 234.305835][ T8048] F2FS-fs (loop0): Start checkpoint disabled! [ 234.389790][ T8048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 234.490914][ T8048] syz.0.1167: attempt to access beyond end of device [ 234.490914][ T8048] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 234.542421][ T8048] syz.0.1167: attempt to access beyond end of device [ 234.542421][ T8048] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 234.729694][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 234.787685][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 234.976149][ T4352] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of __write_node_page+0xdd1/0x2010 [ 235.017671][ T4352] kworker/u4:5: attempt to access beyond end of device [ 235.017671][ T4352] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 235.417292][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 235.438672][ T4352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.483425][ T4352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.520444][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 235.747906][ T4352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.803643][ T4352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.060935][ T4352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.122424][ T4352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.160135][ T8113] loop2: detected capacity change from 0 to 32768 [ 236.206370][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 236.285019][ T8143] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.304232][ T4352] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.317183][ T4352] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.356162][ T8113] XFS (loop2): Mounting V5 Filesystem [ 236.418273][ T8113] XFS (loop2): Ending clean mount [ 236.666387][ T8154] netlink: 'syz.5.1200': attribute type 13 has an invalid length. [ 236.710572][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 236.747634][ T8154] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.756777][ T8154] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.766124][ T8154] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.775239][ T8154] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.819802][ T4284] XFS (loop2): Unmounting Filesystem [ 236.874646][ T8154] netlink: 'syz.5.1200': attribute type 13 has an invalid length. [ 236.891504][ T8160] loop8: detected capacity change from 0 to 4096 [ 236.908680][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 236.930650][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 237.011751][ T8160] ntfs3: loop8: Failed to load $Extend. [ 237.035141][ T8160] ntfs3: loop8: Failed to load root. [ 237.121618][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 237.179441][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 238.502105][ T8169] loop8: detected capacity change from 0 to 32768 [ 238.664983][ T8169] JBD2: Ignoring recovery information on journal [ 238.689790][ T8217] input: syz0 as /devices/virtual/input/input18 [ 238.870356][ T8169] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 239.041167][ T8219] loop2: detected capacity change from 0 to 8192 [ 239.096783][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 239.275626][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 239.366260][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 239.587413][ T5779] (syz-executor,5779,1):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 239.616064][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 239.693789][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 239.723122][ T5779] ocfs2: Unmounting device (7,8) on (node local) [ 239.782663][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 239.834651][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 239.851436][ T4352] device hsr_slave_0 left promiscuous mode [ 239.884849][ T4352] device hsr_slave_1 left promiscuous mode [ 239.936275][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.970788][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.003979][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.021760][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.030128][ T4352] device bridge_slave_1 left promiscuous mode [ 240.056211][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.085123][ T4352] device bridge_slave_0 left promiscuous mode [ 240.093328][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.122402][ T7273] udevd[7273]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 240.172299][ T7273] udevd[7273]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 240.187165][ T8250] block nbd0: shutting down sockets [ 240.251840][ T4352] device veth1_macvtap left promiscuous mode [ 240.258499][ T4352] device veth0_macvtap left promiscuous mode [ 240.283142][ T4352] device veth1_vlan left promiscuous mode [ 240.299315][ T4352] device veth0_vlan left promiscuous mode [ 240.303202][ T126] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 240.419034][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 240.419050][ T26] audit: type=1800 audit(1792434713.301:102): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1229" name="streaming_maxpacket" dev="configfs" ino=49601 res=0 errno=0 [ 240.504875][ T126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.527658][ T126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.573736][ T126] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.591893][ T126] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 240.600735][ T126] usb 8-1: Manufacturer: syz [ 240.618897][ T126] usb 8-1: config 0 descriptor?? [ 240.646949][ T8262] FAULT_INJECTION: forcing a failure. [ 240.646949][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 240.674042][ T8262] CPU: 0 PID: 8262 Comm: syz.2.1230 Not tainted syzkaller #0 [ 240.681516][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.691625][ T8262] Call Trace: [ 240.694995][ T8262] [ 240.698002][ T8262] dump_stack_lvl+0x188/0x24e [ 240.702748][ T8262] ? show_regs_print_info+0x12/0x12 [ 240.708023][ T8262] ? load_image+0x410/0x410 [ 240.712591][ T8262] ? __lock_acquire+0x7ea0/0x7ea0 [ 240.717694][ T8262] should_fail_ex+0x390/0x4c0 [ 240.722457][ T8262] should_failslab+0x5/0x20 [ 240.727015][ T8262] slab_pre_alloc_hook+0x59/0x300 [ 240.732130][ T8262] ? alloc_ucounts+0x155/0x4c0 [ 240.736966][ T8262] __kmem_cache_alloc_node+0x4f/0x270 [ 240.742376][ T8262] ? alloc_ucounts+0x155/0x4c0 [ 240.747178][ T8262] kmalloc_trace+0x26/0xe0 [ 240.751648][ T8262] alloc_ucounts+0x155/0x4c0 [ 240.756274][ T8262] ? safesetid_task_fix_setuid+0xc2/0x9e0 [ 240.762058][ T8262] ? cap_task_fix_setuid+0x275/0xa40 [ 240.767472][ T8262] set_cred_ucounts+0x109/0x1b0 [ 240.772384][ T8262] __sys_setuid+0x2b8/0x580 [ 240.776927][ T8262] do_syscall_64+0x4c/0xa0 [ 240.781385][ T8262] ? clear_bhb_loop+0x60/0xb0 [ 240.786104][ T8262] ? clear_bhb_loop+0x60/0xb0 [ 240.790835][ T8262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.796760][ T8262] RIP: 0033:0x7f64d519e559 [ 240.801208][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.820847][ T8262] RSP: 002b:00007f64d5fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 240.829308][ T8262] RAX: ffffffffffffffda RBX: 00007f64d5425fa0 RCX: 00007f64d519e559 [ 240.837313][ T8262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 240.845312][ T8262] RBP: 00007f64d5235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 240.853314][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.861530][ T8262] R13: 00007f64d5426038 R14: 00007f64d5425fa0 R15: 00007fff936a2ff8 [ 240.869544][ T8262] [ 241.440302][ T8270] loop0: detected capacity change from 0 to 8192 [ 241.488402][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 241.500684][ T8270] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.529544][ T8270] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 241.540676][ T8270] REISERFS (device loop0): using ordered data mode [ 241.547345][ T8270] reiserfs: using flush barriers [ 241.555901][ T8270] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.575868][ T8270] REISERFS (device loop0): checking transaction log (loop0) [ 241.734186][ T126] uclogic 0003:256C:006D.0006: v1 frame probing failed: -71 [ 241.747695][ T126] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 241.758251][ T8270] REISERFS (device loop0): Using tea hash to sort names [ 241.770294][ T126] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 241.777031][ T8270] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 241.814163][ T126] usb 8-1: USB disconnect, device number 7 [ 242.215313][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 242.242141][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 242.267939][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 242.377179][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 242.481154][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.570270][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.240639][ T4352] bond0 (unregistering): Released all slaves [ 243.337254][ T8256] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1224'. [ 243.386529][ T8279] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.1236'. [ 243.414970][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 243.465023][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 243.504636][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 243.533361][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 243.578064][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 243.633222][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 243.669141][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 243.767006][ T8299] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 244.499151][ T7273] udevd[7273]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory [ 244.545488][ T8334] block nbd8: shutting down sockets [ 244.565067][ T8324] loop2: detected capacity change from 0 to 8192 [ 244.584324][ T7273] udevd[7273]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory [ 244.630045][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.667101][ T8324] loop2: p1 p2 < > p4 < p5 > [ 244.672711][ T8324] loop2: partition table partially beyond EOD, truncated [ 244.716079][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.726199][ T8324] loop2: p1 start 16777216 is beyond EOD, truncated [ 244.773221][ T8324] loop2: p5 start 16777216 is beyond EOD, truncated [ 244.778525][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 244.802313][ T7267] udevd[7267]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 244.841181][ T8306] loop0: detected capacity change from 0 to 32768 [ 244.874731][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 244.944734][ T8306] XFS (loop0): Mounting V5 Filesystem [ 245.007757][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 245.047124][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 245.083075][ T8306] XFS (loop0): Ending clean mount [ 245.339854][ T8326] loop5: detected capacity change from 0 to 32768 [ 245.395483][ T7273] udevd[7273]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 245.463157][ T8326] JBD2: Ignoring recovery information on journal [ 245.582173][ T8326] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 245.683017][ T126] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 245.692379][ T8326] FAULT_INJECTION: forcing a failure. [ 245.692379][ T8326] name failslab, interval 1, probability 0, space 0, times 0 [ 245.722875][ T8326] CPU: 1 PID: 8326 Comm: syz.5.1254 Not tainted syzkaller #0 [ 245.730353][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 245.740638][ T8326] Call Trace: [ 245.743983][ T8326] [ 245.747001][ T8326] dump_stack_lvl+0x188/0x24e [ 245.751747][ T8326] ? show_regs_print_info+0x12/0x12 [ 245.757055][ T8326] ? load_image+0x410/0x410 [ 245.761633][ T8326] ? __might_sleep+0xd0/0xd0 [ 245.766293][ T8326] ? __lock_acquire+0x7ea0/0x7ea0 [ 245.771659][ T8326] should_fail_ex+0x390/0x4c0 [ 245.776425][ T8326] should_failslab+0x5/0x20 [ 245.780979][ T8326] slab_pre_alloc_hook+0x59/0x300 [ 245.786068][ T8326] ? __lock_acquire+0x7ea0/0x7ea0 [ 245.791161][ T8326] ? do_raw_spin_lock+0x128/0x2f0 [ 245.796249][ T8326] ? ocfs2_reserve_new_inode+0x103/0xd70 [ 245.801992][ T8326] __kmem_cache_alloc_node+0x4f/0x270 [ 245.807454][ T8326] ? ocfs2_reserve_new_inode+0x103/0xd70 [ 245.813349][ T8326] kmalloc_trace+0x26/0xe0 [ 245.817835][ T8326] ocfs2_reserve_new_inode+0x103/0xd70 [ 245.823405][ T8326] ? ocfs2_check_dir_for_entry+0x25d/0x450 [ 245.829274][ T8326] ? ocfs2_reserve_new_metadata+0x60/0x60 [ 245.835161][ T8326] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 245.840948][ T8326] ? mark_lock+0x94/0x320 [ 245.845354][ T8326] ocfs2_mknod+0xbb7/0x2500 [ 245.849939][ T8326] ? ocfs2_mkdir+0x4b0/0x4b0 [ 245.854588][ T8326] ? __lock_acquire+0x142d/0x7ea0 [ 245.859723][ T8326] ? __rwlock_init+0x140/0x140 [ 245.864616][ T8326] ? verify_lock_unused+0x140/0x140 [ 245.870253][ T8326] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 245.876048][ T8326] ? __kmem_cache_free+0xb6/0x200 [ 245.881135][ T8326] ? __lock_acquire+0x7ea0/0x7ea0 [ 245.886232][ T8326] ? do_raw_spin_lock+0x128/0x2f0 [ 245.887511][ T126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.891306][ T8326] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 245.908185][ T8326] ? __lock_acquire+0x7ea0/0x7ea0 [ 245.913288][ T8326] ? __rwlock_init+0x140/0x140 [ 245.918196][ T8326] ? ocfs2_lookup+0x51c/0xae0 [ 245.922927][ T8326] ? do_raw_spin_unlock+0x11d/0x230 [ 245.928183][ T8326] ? put_pid+0xda/0x120 [ 245.932404][ T8326] ocfs2_mkdir+0x1b6/0x4b0 [ 245.936889][ T8326] ? make_kgid+0x650/0x650 [ 245.941360][ T8326] ? ocfs2_symlink+0x2810/0x2810 [ 245.943180][ T126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.946327][ T8326] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 245.946356][ T8326] ? ocfs2_getattr+0x360/0x360 [ 245.946385][ T8326] ? inode_permission+0xef/0x480 [ 245.946407][ T8326] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 245.975904][ T8326] ? security_inode_mkdir+0xb3/0x100 [ 245.981255][ T8326] vfs_mkdir+0x386/0x570 [ 245.985598][ T8326] do_mkdirat+0x1d8/0x440 [ 245.990013][ T8326] ? vfs_mkdir+0x570/0x570 [ 245.994497][ T8326] __x64_sys_mkdirat+0x85/0x90 [ 245.999361][ T8326] do_syscall_64+0x4c/0xa0 [ 246.003830][ T8326] ? clear_bhb_loop+0x60/0xb0 [ 246.008605][ T8326] ? clear_bhb_loop+0x60/0xb0 [ 246.013336][ T8326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.019278][ T8326] RIP: 0033:0x7f444d19e559 [ 246.023201][ T126] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.023717][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.056285][ T8326] RSP: 002b:00007f444df80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 246.064772][ T8326] RAX: ffffffffffffffda RBX: 00007f444d425fa0 RCX: 00007f444d19e559 [ 246.072836][ T8326] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 246.080865][ T8326] RBP: 00007f444d235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 246.089343][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.097380][ T8326] R13: 00007f444d426038 R14: 00007f444d425fa0 R15: 00007ffdf2a55ea8 [ 246.105445][ T8326] [ 246.111677][ T126] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.169719][ T8337] loop8: detected capacity change from 0 to 32768 [ 246.176870][ T126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.201140][ T8337] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1258 (8337) [ 246.253040][ T126] usb 8-1: config 0 descriptor?? [ 246.262672][ T8337] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.293031][ T8337] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 246.322779][ T8337] BTRFS info (device loop8): using free space tree [ 246.366025][ T4280] XFS (loop0): Unmounting Filesystem [ 246.372171][ T8326] (syz.5.1254,8326,1):ocfs2_reserve_new_inode:1058 ERROR: status = -12 [ 246.453506][ T8326] (syz.5.1254,8326,1):ocfs2_reserve_new_inode:1136 ERROR: status = -12 [ 246.523844][ T8326] (syz.5.1254,8326,1):ocfs2_mknod:307 ERROR: status = -12 [ 246.531055][ T8326] (syz.5.1254,8326,1):ocfs2_mknod:504 ERROR: status = -12 [ 246.661816][ T8326] (syz.5.1254,8326,1):ocfs2_mkdir:661 ERROR: status = -12 [ 246.675994][ T126] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 246.715339][ T126] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 246.773375][ T8337] BTRFS info (device loop8): enabling ssd optimizations [ 246.979865][ T4818] (syz-executor,4818,0):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 247.013477][ T4818] ocfs2: Unmounting device (7,5) on (node local) [ 247.057183][ T6601] usb 8-1: USB disconnect, device number 8 [ 247.168119][ T5779] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.041346][ T8415] rxe_eth0 speed is unknown, defaulting to 1000 [ 248.092172][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1268'. [ 248.288683][ T8397] loop0: detected capacity change from 0 to 32768 [ 248.602293][ T8397] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 248.602293][ T8397] [ 248.671857][ T8397] ERROR: (device loop0): remounting filesystem as read-only [ 248.693455][ T8402] loop5: detected capacity change from 0 to 40427 [ 248.710212][ T8397] syz.0.1265: attempt to access beyond end of device [ 248.710212][ T8397] loop0: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 248.733832][ T8402] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 248.766347][ T8402] F2FS-fs (loop5): invalid crc value [ 248.791553][ T8402] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.898443][ T4280] ------------[ cut here ]------------ [ 248.904596][ T4280] kernel BUG at fs/jfs/inode.c:175! [ 248.952209][ T4280] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 248.958357][ T4280] CPU: 1 PID: 4280 Comm: syz-executor Not tainted syzkaller #0 [ 248.965941][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 248.976018][ T4280] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 248.981600][ T4280] Code: e6 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ba 59 e6 fe e9 16 fe ff ff e8 d0 fd 94 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 249.001247][ T4280] RSP: 0018:ffffc90003ed7b08 EFLAGS: 00010293 [ 249.007361][ T4280] RAX: ffffffff82ed48b0 RBX: ffff88805344bbb0 RCX: ffff88801f6a9e00 [ 249.015376][ T4280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805344bbb0 [ 249.023404][ T4280] RBP: 0000000000000001 R08: ffffffff91934427 R09: 1ffffffff2326884 [ 249.031417][ T4280] R10: dffffc0000000000 R11: fffffbfff2326885 R12: dffffc0000000000 [ 249.039434][ T4280] R13: dffffc0000000000 R14: ffff88805344b838 R15: ffff88805344bbd8 [ 249.047448][ T4280] FS: 000055558cf30500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 249.056421][ T4280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.063047][ T4280] CR2: 00007ffe53de7dc0 CR3: 000000005bb11000 CR4: 00000000003506e0 [ 249.071051][ T4280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.079060][ T4280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.087069][ T4280] Call Trace: [ 249.090376][ T4280] [ 249.093339][ T4280] ? jfs_write_inode+0x220/0x220 [ 249.098349][ T4280] evict+0x4b6/0x8b0 [ 249.102306][ T4280] ? evict_inodes+0x577/0x6e0 [ 249.107022][ T4280] ? proc_nr_inodes+0x2f0/0x2f0 [ 249.111938][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 249.117173][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 249.122422][ T4280] evict_inodes+0x650/0x6e0 [ 249.126968][ T4280] ? clear_inode+0x150/0x150 [ 249.131589][ T4280] ? dput+0x37/0x1d0 [ 249.135511][ T4280] generic_shutdown_super+0x93/0x340 [ 249.140822][ T4280] kill_block_super+0x7c/0xe0 [ 249.145544][ T4280] deactivate_locked_super+0x93/0xf0 [ 249.150904][ T4280] cleanup_mnt+0x471/0x4f0 [ 249.155352][ T4280] task_work_run+0x1d0/0x260 [ 249.160035][ T4280] ? task_work_cancel+0x220/0x220 [ 249.165090][ T4280] ? exit_to_user_mode_loop+0x3b/0x110 [ 249.170587][ T4280] exit_to_user_mode_loop+0xe6/0x110 [ 249.175903][ T4280] exit_to_user_mode_prepare+0xee/0x180 [ 249.181481][ T4280] syscall_exit_to_user_mode+0x16/0x40 [ 249.186978][ T4280] do_syscall_64+0x58/0xa0 [ 249.191439][ T4280] ? clear_bhb_loop+0x60/0xb0 [ 249.196145][ T4280] ? clear_bhb_loop+0x60/0xb0 [ 249.200851][ T4280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.206771][ T4280] RIP: 0033:0x7f435c79f797 [ 249.211206][ T4280] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 249.230840][ T4280] RSP: 002b:00007ffe53de8418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 249.239277][ T4280] RAX: 0000000000000000 RBX: 00007f435c834f1b RCX: 00007f435c79f797 [ 249.247369][ T4280] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe53de84d0 [ 249.255376][ T4280] RBP: 00007ffe53de84d0 R08: 00007ffe53de94d0 R09: 00000000ffffffff [ 249.263376][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe53de9560 [ 249.271366][ T4280] R13: 00007f435c834f1b R14: 000000000003cb2f R15: 00007ffe53de95a0 [ 249.279370][ T4280] [ 249.282417][ T4280] Modules linked in: [ 249.288510][ T8402] F2FS-fs (loop5): Start checkpoint disabled! [ 249.327013][ T8402] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 249.416993][ T8402] syz.5.1269: attempt to access beyond end of device [ 249.416993][ T8402] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 249.464341][ T8402] syz.5.1269: attempt to access beyond end of device [ 249.464341][ T8402] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 249.530900][ T4280] ---[ end trace 0000000000000000 ]--- [ 249.537302][ T4280] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 249.543092][ T4280] Code: e6 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ba 59 e6 fe e9 16 fe ff ff e8 d0 fd 94 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 249.585503][ T4280] RSP: 0018:ffffc90003ed7b08 EFLAGS: 00010293 [ 249.606538][ T4280] RAX: ffffffff82ed48b0 RBX: ffff88805344bbb0 RCX: ffff88801f6a9e00 [ 249.625795][ T4280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805344bbb0 [ 249.649026][ T4280] RBP: 0000000000000001 R08: ffffffff91934427 R09: 1ffffffff2326884 [ 249.664886][ T4280] R10: dffffc0000000000 R11: fffffbfff2326885 R12: dffffc0000000000 [ 249.693895][ T4280] R13: dffffc0000000000 R14: ffff88805344b838 R15: ffff88805344bbd8 [ 249.701790][ T5836] F2FS-fs (loop5) : inject checkpoint error in f2fs_balance_fs of __write_node_page+0xdd1/0x2010 [ 249.721258][ T4280] FS: 000055558cf30500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 249.737528][ T5836] kworker/u4:9: attempt to access beyond end of device [ 249.737528][ T5836] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 249.749649][ T4280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.776102][ T4280] CR2: 0000001b2fe0cff8 CR3: 000000005bb11000 CR4: 00000000003506e0 [ 249.799814][ T4280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.824606][ T4280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.850585][ T4280] Kernel panic - not syncing: Fatal exception [ 249.856881][ T4280] Kernel Offset: disabled [ 249.861221][ T4280] Rebooting in 86400 seconds..