last executing test programs: 41.1191759s ago: executing program 0 (id=188): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 40.499917184s ago: executing program 0 (id=194): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x81) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100}) 38.271129728s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6) r3 = openat(r1, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0x0104\x00', 0x6) r4 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r4, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r5 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r1, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r1, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r7 = openat(r1, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r7, &(0x7f0000000700)='Loopback.usb0\x00') r8 = openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r8, &(0x7f0000000780)='usbip-vudc.0\n\x00', 0xd) 37.305954171s ago: executing program 0 (id=205): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@random={'osx.', 'workdir'}) 36.031912582s ago: executing program 0 (id=209): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) fcntl$dupfd(r0, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 34.342652233s ago: executing program 0 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x1d6b\x00', 0x6) r5 = openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0x0104\x00', 0x6) r6 = openat(r3, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r6, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r3, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r7 = openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r3, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r3, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r9 = openat(r3, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r9, &(0x7f0000000700)='Loopback.usb0\x00') r10 = openat(r3, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r10, &(0x7f0000000780)='usbip-vudc.0\n\x00', 0xd) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000880)='5\x00', 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='6 ', 0x2}, {&(0x7f00000009c0)='0 3\n', 0x4}], 0x3) 33.671886699s ago: executing program 32 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x1d6b\x00', 0x6) r5 = openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0x0104\x00', 0x6) r6 = openat(r3, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r6, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r3, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r7 = openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r3, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r3, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r9 = openat(r3, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r9, &(0x7f0000000700)='Loopback.usb0\x00') r10 = openat(r3, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r10, &(0x7f0000000780)='usbip-vudc.0\n\x00', 0xd) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000880)='5\x00', 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='6 ', 0x2}, {&(0x7f00000009c0)='0 3\n', 0x4}], 0x3) 11.085126643s ago: executing program 3 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x1d6b\x00', 0x6) r5 = openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0x0104\x00', 0x6) r6 = openat(r3, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r6, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r3, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r7 = openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r3, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r3, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r9 = openat(r3, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r9, &(0x7f0000000700)='Loopback.usb0\x00') r10 = openat(r3, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r10, &(0x7f0000000780)='usbip-vudc.0\n\x00', 0xd) write(r0, &(0x7f0000000880)='5\x00', 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='6 ', 0x2}, {&(0x7f00000009c0)='0 3\n', 0x4}], 0x3) nanosleep(&(0x7f0000000a00)={0x0, 0x1dcd6500}, 0x0) 9.974522069s ago: executing program 3 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 9.642425128s ago: executing program 3 (id=322): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='100\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000700)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='200\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000900)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='400\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000a00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='8\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000b00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='16\x00', 0x3}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x6, 0x0, 0x0, 0x0, 0x0) 9.284304706s ago: executing program 3 (id=327): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x484043000) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101442, 0x10d) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='i', 0x1}]) 8.899623835s ago: executing program 4 (id=331): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) setns(0xc9, 0x0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x40, 0x6b9, 0x4061, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100", 0x2a) bind(r1, &(0x7f0000000300)=@generic={0x8, "ffff00002000"}, 0xc) 8.382349458s ago: executing program 3 (id=335): syz_usb_connect$midi(0x1, 0x3e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x9, 0x0, 0x84, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xf4, [@ms_header={0x7, 0x24, 0x1, 0xab06, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x1, 0x1}], [{{0x9, 0x5, 0x80, 0x2, 0x10, 0x7f, 0x34, 0x5, {0x4}}}]}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x1ba, 0x0, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000003c0)=ANY=[@ANYBLOB="80000000ffffffffffffffffffffffff50505050505000000000000000000000640001000006020202020202"], 0x59) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 7.330795243s ago: executing program 3 (id=340): r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x9, 0x1000, 0x32314d56, 0x1, 0xfffffffe, 0x0, 0x9, 0x40, 0x1, 0x3, 0x0, 0x5}}) 6.63509575s ago: executing program 33 (id=340): r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x9, 0x1000, 0x32314d56, 0x1, 0xfffffffe, 0x0, 0x9, 0x40, 0x1, 0x3, 0x0, 0x5}}) 6.62517865s ago: executing program 5 (id=342): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) fcntl$dupfd(r0, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 6.60761607s ago: executing program 4 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x1d6b\x00', 0x6) r5 = openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0x0104\x00', 0x6) r6 = openat(r3, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r6, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r3, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r7 = openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r3, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r3, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r9 = openat(r3, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r9, &(0x7f0000000700)='Loopback.usb0\x00') r10 = openat(r3, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r10, &(0x7f0000000780)='usbip-vudc.0\n\x00', 0xd) write(r0, &(0x7f0000000880)='5\x00', 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='6 ', 0x2}, {&(0x7f00000009c0)='0 3\n', 0x4}], 0x3) nanosleep(&(0x7f0000000a00)={0x0, 0x1dcd6500}, 0x0) 5.705983782s ago: executing program 4 (id=346): unshare(0x44040000) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file1\x00', 0x0, &(0x7f0000001880)={[{@prjquota}, {@prjquota}, {@gqnoenforce}, {@gquota}]}, 0x1, 0x9715, &(0x7f0000012ec0)="$eJzs3Qe0JHWhaP0zCYYcREUUJQkIklEyknPOOUjOCIjkIBIERZKgIAISJIgiggIiyYwiCAqISBRM5JznW8PMwDhu+PS9ux733r33Wme6u051nX//f1V1umfB1AbLrb3UwMDkA6Mac/tmNx40/aArnlxhwWPn2HuBK8eb7uHRi4ePuhk2+uGwQaNvBw8MDAwavZ3Rywbvftnlg0c+YfDY2514gokGTTwwsPXoh0uMvl1g1M0k24xZb8Q48UAPGfnjjh71NeqHDgwMTDDyzmGznL7P2NsZPa7r/uWFSttgyeWXe9PqDbeR8zd09P2xv8Yb9TXJ5gMDk2wywPvHoHf2Fb3+85e46Pyn9n2Hx/E/og2WXH7FcfxHHotDRi9bYOQxPu4xaGzc/XyL/XY5fvQUDhrr/PU/rg2WXG6Vgbc+zw/cs+gOt454/bw5eJ+BgcH7DgwM3m9gYPD+AwODDxgYGHzgO+1S/3e9oztfVVVVvSMtudR8S438vDfO+4HhY97X0vvCSx+/f/PRH/6HDAwMPmfUZ8HBZw4MTLLFO/tqqqqqqqqqqopacqn5lobP/5O/3ef/jc5f58I+/1dVVVVVVVX9z2nFJZeab+Rn/XE+/0/9dp//7zxv/1dG/7f/C4x61mvv6GuoqqqqqqqqqrdvrVVf//w/0Tif/6d7u8//R6z04pj/t3rM3xu8OtYmB4313xO8PNbyIWOt/9JYy4eOtXzs9YcPDAzeffTyV95cPHifgYGB8f51/cEHvfn/MQ8bOtbyg8daPt5Yyw8Z+TpHb+fFsZafOXqsI9cff6zlZ4+1neH/ztxWVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV/bu99uhV17x5zfeDBsa6fvsb13Ef/e8CDLrkultueccG+t+jQf/67yEc8k6P6f+2kc7DL5xuYGDXdd/podQ70KB3egD1jpa/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7i+v/LzHm9txtl7l69KoLLH3XwsuM/dwdxro//P/pqN+x/rde/39gh0EDA6N9Jx/putqSa60z68DAwDIL37X0/ANvfG/Bkd9bZMohA0Nef+qsr/85bNhbbHmqUTeHjF519DYueX37K444a8igcQYxVotd+8C522/w/Pzj3s781q9j8Jg7aw59+uwRI0aM+KeFo3ur/XTM9se8lnGdR4991pFjn2uvXXafa89995tjh1223G6b7bbZdaF5511g/gXmXmjeubbdYedt5h7151vN2XSv/znk35mzqceds0eXHHvOxn1tbzVn0739nL2+xTP2OWbvMXM29D+csyFvP2fT7TD6Bw0bGDawxetzM2hgYNjQYQP7jHwwz/gj96DR6049ct1Fpxw8MHDcmy905L3x39gHBx0ycp0Nllt7qYGByUevMfm/jO1fj9OxX8qYyR82+ocMGz0Pkw+8uSsO3v2yywePfMI/TfPEE0w0aOKBga1HP1xi9O1Co7+71Zj1RowTD3Sk8qCjR3294THByDun7T3swbG38xYE/xX9H/3+/xevBQe9MVGDRn+NXmeU15LLr/jmz3p9GkbO3ZDRyxYYaTLunP1X9i/jnW74yMPrLce74pJLzTdy8TjzP+YpuH/tfsfl14zetxYY9azX/o9R+Nyxyqhv/jvnjoG3P3cMefPum0u3uWnacc8dK7/1EP/puBgzR+OPs9JbnTvmPnyxg0duf+Dtzx2r7DD65b557hg8MDBsyJhzx8gTyXjDBo4b+WDekQ/GHzZw/sgH873+YIKB60Y+mHOr3XbeeuSC4WPmZO6R211iykGvv/gzJ5ztxBEnjhgxdPRYDhrnxDp6/5hu7N+PS045atrGPJe2u8+lr9z22okjRow3ersH/wfbHfNc2u7c54763vijt3vmONsd8jbbHfPcMcfDyFVfPx5mHfTGjvAWx+9y4xy/o98zvv7rYtA4X+ON+ppk84GBSTYh3//0vEPH7+RvM94ll5pv6ZHje6vzLx2/Z8636uyjd7chAwODzxk19sFnDgxMssV/Mta3Gu/wtx/vUjDe4W833vGvX/X2/4LxDhprvP+0n61x+Kh9Zfjo/ezs/2D/HfPccc9jw8ZiGP7vnMeW+Jfz2KFDBo8z+LF6q/dAW8P6o+5P/cbWlt7xlsfGzP24Q/v/ew80/O3PY5PvMM7z1tliYBDN+SU3L3rzoJPefs6HDfzze/Uxcz7muW835+P/65wP+pc5X/Dt5/zffd8564yjvj/kbeb82OumOHfMnI/3H875+P/pnA8MDKE53/6GUfP2dufTt5rzMc/95zkfOrDswMDATKPnfLx/Zz+f+79mP58Q1h91/6E3Fl18xPhTjXWOGfSfzPl4/+Gcr37fG/v5TK9/b4bBA+ONN7DPlnvttcc8o/4c83DeUX/yuej8O0bN89v9Ln0rozHPfbvjYui/YzTdf43RNEP/df0xHzrGPB5876VD/k/PRUP/M6NBq1/H56Kjnh81b2/3vuit5nzMc+n34HRjPX/cz3Vrrfr6++6Jxvk9+MZHWPo9ePLdE8w1ZpOjn/bqOMMc83v15bGWDxlr/ZfGWj50rOUv//O0D9599PJX3lw8eJ+Rh/i/rj/4oDdZh431kXrwwWMtH+uUN3jkLjbd6O28ONbyM988hQ4b6+314LPH2s7/zV+//dNuO+bv+HYY9yRf/1vr7//d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Ftc//+QMdf/v3aFUy8afa3mYSdcd8GR7/R43+H+V1//f7TvP13//8gLrjth8MAb33vb67OPWue/5fXZFxh1M8k2Y9Yb9/rgPNC3vj777XPtP/nA/5vrs/8fNeZY/Teu49f5313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uLa7/f93o20MWv23mW0dfCH3Y5PMd9PA7Pd53uP/V1/8f7ftP1/9/+KD5Jh888Mb33vb6/6PWcVz/f/tbl39l4L/x9f/HHKtd/7/+f8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MXx9f8Hjb4duG6nQdNNNPJ25ONTFr/p8nd6vO9w/1uv/z/8wukGBnZd950eSr0Ddf53l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5ixt9/f+BUdf/H9OgJdovMLj+///s3sJ/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WgMDA+O/U2P6b5zFf+2Of8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4fzJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/Kn/M4r9H/pjFf8/8MYv/XvljFv9P549Z/PfOH7P4fyZ/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/Z/PHLP6H5Y9Z/D+XP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/z+ePWfyPzh+z+B+TP2bx/0L+mMX/i/ljFv9j88cs/l/KH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv8v549Z/E/OH7P4n5I/ZvH/Sv6Yxf+r+WMW/1Pzxyz+p+WPWfy/lj9m8T89f8zi//X8MYv/GfljFv8z88cs/mflj1n8v5E/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv9v5o9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/1v5Yxb/i/PHLP7fzh+z+H8nf8zif0n+mMX/u/ljFv9L88cs/t/LH7P4X5Y/ZvG/PH/M4v/9/DGL/w/yxyz+V+SPWfyvzB+z+F+VP2bx/2H+mMX/6vwxi/+P8scs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/x/ljFv+f5I9Z/H+aP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bxvzF/zOL/q/wxi/+v88cs/jflj1n8f5M/ZvG/OX/M4n9L/pjF/7f5Yxb/W/PHLP635Y9Z/H+XP2bx/33+mMX/9vwxi/8d+WMW/zvzxyz+f8gfs/jflT9m8f9j/pjF/+78MYv/n/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/n/PHLP4P5Y9Z/B/OH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4/yN/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/xH5YxL/1+/m/69Z/Aflj1n8B+ePWfyH5I9Z/Ifmj1n8h+WPWfzHyx+z+I+fP2bxH54/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMX/XfljFv+p8scs/u/OH7P4vyd/zOL/3vwxi//U+WMW//flj1n8p8kfs/i/P3/M4v+B/DGL/7T5Yxb/D+aPWfw/lD9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+H84fs/jPnD9m8Z8lf8ziP2v+mMX/I/ljFv/Z8scs/rPnj1n8P5o/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8f9Y/pjF/+P5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv9P5I9Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f9k/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx3yx+z+O+eP2bx/1T+mMV/j/wxi/+e+WMW/73yxyz+n84fs/jvnT9m8f9M/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8/mj1n8D8sfs/h/Ln/M4n94/pjF/4j8MYv/kfljFv+j8scs/p/PH7P4H50/ZvE/Jn/M4v+F/DGL/xfzxyz+x+aPWfy/lD9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+X84fs/ifnD9m8T8lf8zi/5X8MYv/V/PHLP6n5o9Z/E/LH7P4fy1/zOJ/ev6Yxf/r+WMW/zPyxyz+Z+aPWfzPyh+z+H8jf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+38wfs/ifnz9m8b8gf8zif2H+mMX/ovwxi/+38scs/hfnj1n8v50/ZvH/Tv6Yxf+S/DGL/3fzxyz+l+aPWfy/lz9m8b8sf8zif3n+mMX/+/ljFv8f5I9Z/K/IH7P4X5k/ZvG/Kn/M4v/D/DGL/9X5Yxb/H+WPWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/4/zxyz+P8kfs/j/NH/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4n9j/pjF/1f5Yxb/X+ePWfxvyh+z+P8mf8zif3P+mMX/lvwxi/9v88cs/rfmj1n8b8sfs/j/Ln/M4v/7/DGL/+35Yxb/O/LHLP535o9Z/P+QP2bxvyt/zOL/x/wxi//d+WMW/z/lj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/z/nj1n8H8ofs/g/nD9m8f9L/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP4j8sck/kMG8scs/oPyxyz+g/PHLP5D8scs/kPzxyz+w/LHLP7j5Y9Z/MfPH7P4D88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOL/rvwxi/9U+WMW/3fnj1n835M/ZvF/b/6YxX/q/DGL//vyxyz+0+SPWfzfnz9m8f9A/pjFf9r8MYv/B/PHLP4fyh+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/D+ePWfxnzh+z+M+SP2bxnzV/zOL/kfwxi/9s+WMW/9nzxyz+H80fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H8sf8zi//H8MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8n8scs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+H8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyp/zOK/R/6YxX/P/DGL/175Yxb/T+ePWfz3zh+z+H8mf8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2fzxyz+h+WPWfw/lz9m8T88f8zif0T+mMX/yPwxi/9R+WMW/8/nj1n8j84fs/gfkz9m8f9C/pjF/4v5Yxb/Y/PHLP5fyh+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/L+ePWfxPzh+z+J+SP2bx/0r+mMX/q/ljFv9T88cs/qflj1n8v5Y/ZvE/PX/M4v/1/DGL/xn5Yxb/M/PHLP5n5Y9Z/L+RP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/b+aPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf9b+WMW/4vzxyz+384fs/h/J3/M4n9J/pjF/7v5Yxb/S/PHLP7fyx+z+F+WP2bxvzx/zOL//fwxi/8P8scs/lfkj1n8r8wfs/hflT9m8f9h/pjF/+r8MYv/j/LHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8f5Yxb/n+SPWfx/mj9m8f9Z/pjF/+f5Yxb/X+SPWfx/mT9m8b8xf8zi/6v8MYv/r/PHLP435Y9Z/H+TP2bxvzl/zOJ/S/6Yxf+3+WMW/1vzxyz+t+WPWfx/lz9m8f99/pjF//b8MYv/HfljFv8788cs/n/IH7P435U/ZvH/Y/6Yxf/u/DGL/5/yxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/5/zxyz+D+WPWfwfzh+z+P8lf8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv8R+WMS/6ED+WMW/0H5Yxb/wfljFv8h+WMW/6H5Yxb/YfljFv/x8scs/uPnj1n8h+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvF/V/6YxX+q/DGL/7vzxyz+78kfs/i/N3/M4j91/pjF/335Yxb/afLHLP7vzx+z+H8gf8ziP23+mMX/g/ljFv8P5Y9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/h/PHLP4z549Z/GfJH7P4z5o/ZvH/SP6YxX+2/DGL/+z5Yxb/j+aPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/D+WP2bx/3j+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6Yxf8T+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/D+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n8P5U/ZvHfI3/M4r9n/pjFf6/8MYv/p/PHLP57549Z/D+TP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7P5Yxb/w/LHLP6fyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/+fzxyz+R+ePWfyPyR+z+H8hf8zi/8X8MYv/sfljFv8v5Y9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/l/PHLP4n549Z/E/JH7P4fyV/7H+3/wRjlg79av7Y/27/Nxp6av6Yxf+0/DGL/9fyxyz+p+ePWfy/nj9m8T8jf8zif2b+mMX/rPwxi/838scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi/838MYv/+fljFv8L8scs/hfmj1n8L8ofs/h/K3/M4n9x/pjF/9v5Yxb/7+SPWfwvyR+z+H83f8zif2n+mMX/e/ljFv/L8scs/pfnj1n8v58/ZvH/Qf6Yxf+K/DGL/5X5Yxb/q/LHLP4/zB+z+F+dP2bx/1H+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+P84f8zi/5P8MYv/T/PHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP435o9Z/H+VP2bx/3X+mMX/pvwxi/9v8scs/jfnj1n8b8kfs/j/Nn/M4n9r/pjF/7b8MYv/7/LHLP6/zx+z+N+eP2bxvyN/zOJ/Z/6Yxf8P+WMW/7vyxyz+f8wfs/jfnT9m8f9T/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8f9z/pjF/6H8MYv/w/ljFv+/5I9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/B/5Z/92hdFZ/B8NHbP4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxH5E/JvEfNpA/ZvEflD9m8R+cP2bxH5I/ZvEfmj9m8R+WP2bxHy9/zOI/fv6YxX94/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/3flj1n8p8ofs/i/O3/M4v+e/DGL/3vzxyz+U+ePWfzflz9m8Z8mf8zi//78MYv/B/LHLP7T5o9Z/D+YP2bx/1D+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+H84f8ziP3P+mMV/lvwxi/+s+WMW/4/kj1n8Z8sfs/jPnj9m8f9o/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/Y/ljFv+P549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8P5E/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/k/ljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6Yxf9T+WMW/z3yxyz+e+aPWfz3yh+z+H86f8ziv3f+mMX/M/ljFv998scs/vvmj1n898sfs/jv/xb+Q/9fjeu/aRb/Azr+MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8f9s/pjF/7D8MYv/5/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4v/5/DGL/9H5Yxb/Y/LHLP5fyB+z+H8xf8zif2z+mMX/S/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/+X8MYv/yfljFv9T8scs/l/JH7P4fzV/zOJ/av6Yxf+0/DGL/9fyxyz+p+ePWfy/nj9m8T8jf8zif2b+mMX/rPwxi/838scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi/838MYv/+fljFv8L8scs/hfmj1n8L8ofs/h/K3/M4n9x/pjF/9v5Yxb/7+SPWfwvyR+z+H83f8zif2n+mMX/e/ljFv/L8scs/pfnj1n8v58/ZvH/Qf6Yxf+K/DGL/5X5Yxb/q/LHLP4/zB+z+F+dP2bx/1H+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+P84f8zi/5P8MYv/T/PHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP435o9Z/H+VP2bx/3X+mMX/pvwxi/9v8scs/jfnj1n8b8kfs/j/Nn/M4n9r/pjF/7b8MYv/7/LHLP6/zx+z+N+eP2bxvyN/zOJ/Z/6Yxf8P+WMW/7vyxyz+f8wfs/jfnT9m8f9T/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8f9z/pjF/6H8MYv/w/ljFv+/5I9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOI/In9M4j/eQP6YxX9Q/pjFf3D+mMV/SP6YxX9o/pjFf1j+mMV/vPwxi//4+WMW/+H5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv8p8scs/lPmj1n835U/ZvGfKn/M4v/u/DGL/3vyxyz+780fs/hPnT9m8X9f/pjFf5r8MYv/+/PHLP4fyB+z+E+bP2bx/2D+mMX/Q/ljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8zi/+H8MYv/zPljFv9Z8scs/rPmj1n8P5I/ZvGfLX/M4j97/pjF/6P5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv+P5Y9Z/D+eP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/RP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9P5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/0/lj1n898gfs/jvmT9m8d8rf8zi/+n8MYv/3vljFv/P5I9Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8f9s/pjF/7D8MYv/5/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4v/5/DGL/9H5Yxb/Y/LHLP5fyB+z+H8xf8zif2z+mMX/S/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/+X8MYv/yfljFv9T8scs/l/JH7P4fzV/zOJ/av6Yxf+0/DGL/9fyxyz+p+ePWfy/nj9m8T8jf8zif2b+mMX/rPwxi/838scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi/838MYv/+fljFv8L8scs/hfmj1n8L8ofs/h/K3/M4n9x/pjF/9v5Yxb/7+SPWfwvyR+z+H83f8zif2n+mMX/e/ljFv/L8scs/pfnj1n8v58/ZvH/Qf6Yxf+K/DGL/5X5Yxb/q/LHLP4/zB+z+F+dP2bx/1H+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+P84f8zi/5P8MYv/T/PHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP435o9Z/H+VP2bx/3X+mMX/pvwxi/9v8scs/jfnj1n8b8kfs/j/Nn/M4n9r/pjF/7b8MYv/7/LHLP6/zx+z+N+eP2bxvyN/zOJ/Z/6Yxf8P+WMW/7vyxyz+f8wfs/jfnT9m8f9T/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8f9z/pjF/6H8MYv/w/ljFv+/5I9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOI/In9M4j/+QP6YxX9Q/pjFf3D+mMV/SP6YxX9o/pjFf1j+mMV/vPwxi//4+WMW/+H5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv8p8scs/lPmj1n835U/ZvGfKn/M4v/u/DGL/3vyxyz+780fs/hPnT9m8X9f/pjFf5r8MYv/+/PHLP4fyB+z+E+bP2bx/2D+mMX/Q/ljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8zi/+H8MYv/zPljFv9Z8scs/rPmj1n8P5I/ZvGfLX/M4j97/pjF/6P5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv+P5Y9Z/D+eP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/RP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9P5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/0/lj1n898gfs/jvmT9m8d8rf8zi/+n8MYv/3vljFv/P5I9Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8f9s/pjF/7D8MYv/5/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4v/5/DGL/9H5Yxb/Y/LHLP5fyB+z+H8xf8zif2z+mMX/S/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/+X8MYv/yfljFv9T8scs/l/JH7P4fzV/zOJ/av6Yxf+0/DGL/9fyxyz+p+ePWfy/nj9m8T8jf8zif2b+mMX/rPwxi/838scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi/838MYv/+fljFv8L8scs/hfmj1n8L8ofs/h/K3/M4n9x/pjF/9v5Yxb/7+SPWfwvyR+z+H83f8zif2n+mMX/e/ljFv/L8scs/pfnj1n8v58/ZvH/Qf6Yxf+K/DGL/5X5Yxb/q/LHLP4/zB+z+F+dP2bx/1H+mMX/Gp3/iBH/zloW/2t1/v9eFv/r8scs/tfnj1n8b8gfs/j/OH/M4v+T/DGL/0/zxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+N+aPWfx/lT9m8f91/pjF/6b8MYv/b/LHLP43549Z/G/JH7P4/zZ/zOJ/a/6Yxf+2/DGL/+/yxyz+v88fs/jfnj9m8b8jf8zif2f+mMX/D/ljFv+78scs/n/MH7P4350/ZvH/U/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvH/c/6Yxf+h/DGL/8P5Yxb/v+SPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8ziPyJ/TOI/fCB/zOI/KH/M4j84f8ziPyR/zOI/NH/M4j8sf8ziP17+mMV//Pwxi//w/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/u/KH7P4T5U/ZvF/d/6Yxf89+WMW//fmj1n8p84fs/i/L3/M4j9N/pjF//35Yxb/D+SPWfynzR+z+H8wf8zi/6H8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8f9w/pjFf+b8MYv/LPljFv9Z88cs/h/JH7P4z5Y/ZvGfPX/M4v/R/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/x/LHLP4fzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fyJ/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/J/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/+n8scs/nvkj1n898wfs/jvlT9m8f90/pjFf+/8MYv/Z/LHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/h/Nn/M4n9Y/pjF/3P5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvH/fP6Yxf/o/DGL/zH5Yxb/L+SPWfy/mD9m8T82f8zi/6X8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8f9y/pjF/+T8MYv/KfljFv+v5I9Z/L+aP2bxPzV/zOJ/Wv6Yxf9r+WMW/9Pzxyz+X88fs/ifkT9m8T8zf8zif1b+mMX/G/ljFv+z88cs/ufkj1n8z80fs/iflz9m8f9m/pjF//z8MYv/BfljFv8L88cs/hflj1n8v5U/ZvG/OH/M4v/t/DGL/3fyxyz+l+SPWfy/mz9m8b80f8zi/738MYv/ZfljFv/L88cs/t/PH7P4/yB/zOJ/Rf6Yxf/K/DGL/1X5Yxb/H+aPWfyvzh+z+P8of8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfx/nD9m8f9J/pjF/6f5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/G/PHLP6/yh+z+P86f8zif1P+mMX/N/ljFv+b88cs/rfkj1n8f5s/ZvG/NX/M4n9b/pjF/3f5Yxb/3+ePWfxvzx+z+N+RP2bxvzN/zOL/h/wxi/9d+WMW/z/mj1n8784fs/j/KX/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/j/OX/M4v9Q/pjF/+H8MYv/X/LHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8mRr/Wwd2pQ/32z+D/V8Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMV/RP6YxH+Cgfwxi/+g/DGL/+D8MYv/kPwxi//Q/DGL/7D8MYv/ePljFv/x88cs/sPzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4vyt/zOI/Vf6Yxf/d+WMW//fkj1n835s/ZvGfOn/M4v++/DGL/zT5Yxb/9+ePWfw/kD9m8Z82f8zi/8H8MYv/h/LHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/8P5Yxb/mfPHLP6z5I9Z/GfNH7P4fyR/zOI/W/6YxX/2/DGL/0fzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4fyx+z+H88f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/ifwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6fzB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/p/KH7P475E/ZvHfM3/M4r9X/pjF/9P5Yxb/vfPHLP6fyR+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4v/Z/DGL/2H5Yxb/z+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/z+WMW/6Pzxyz+x+SPWfy/kD9m8f9i/pjF/9j8MYv/l/LHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/8v5Yxb/k/PHLP6n5I9Z/L+SP2bx/2r+mMX/1Pwxi/9p+WMW/6/lj1n8T88fs/h/PX/M4n9G/pjF/8z8MYv/WfljFv9v5I9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/5v5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/Vv6Yxf/i/DGL/7fzxyz+38kfs/hfkj9m8f9u/pjF/9L8MYv/9/LHLP6X5Y9Z/C/PH7P4fz9/zOL/g/wxi/8V+WMW/yvzxyz+V+WPWfx/mD9m8b86f8zi/6P8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8f9x/pjF/yf5Yxb/n+aPWfx/lj9m8f95/pjF/xf5Yxb/X+aPWfxvzB+z+P8qf8zi/+v8MYv/TfljFv/f5I9Z/G/OH7P435I/ZvH/bf6Yxf/W/DGL/235Yxb/3+WPWfx/nz9m8b89f8zif0f+mMX/zvwxi/8f8scs/nflj1n8/5g/ZvG/O3/M4v+n/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v/n/DGL/0P5Yxb/h/PHLP5/yR+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMV/RP6YxH/Cgfwxi/+g/DGL/+D8MYv/kPwxi//Q/DGL/7D8MYv/ePljFv/x88cs/sPzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4vyt/zOI/Vf6Yxf/d+WMW//fkj1n835s/ZvGfOn/M4v++/DGL/zT5Yxb/9+ePWfw/kD9m8Z82f8zi/8H8MYv/h/LHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/8P5Yxb/mfPHLP6z5I9Z/GfNH7P4fyR/zOI/W/6YxX/2/DGL/0fzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4fyx+z+H88f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/ifwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6fzB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/p/KH7P475E/ZvHfM3/M4r9X/pjF/9P5Yxb/vfPHLP6fyR+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4v/Z/DGL/2H5Yxb/z+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/z+WMW/6Pzxyz+x+SPWfy/kD9m8f9i/pjF/9j8MYv/l/LHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/8v5Yxb/k/PHLP6n5I9Z/L+SP2bx/2r+mMX/1Pwxi/9p+WMW/6/lj1n8T88fs/h/PX/M4n9G/pjF/8z8MYv/WfljFv9v5I9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/5v5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/Vv6Yxf/i/DGL/7fzxyz+38kfs/hfkj9m8f9u/pjF/9L8MYv/9/LHLP6X5Y9Z/C/PH7P4fz9/zOL/g/wxi/8V+WMW/yvzxyz+V+WPWfx/mD9m8b86f8zi/6P8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8f9x/pjF/yf5Yxb/n+aPWfx/lj9m8f95/pjF/xf5Yxb/X+aPWfxvzB+z+P8qf8zi/+v8MYv/TfljFv/f5I9Z/G/OH7P435I/ZvH/bf6Yxf/W/DGL/235Yxb/3+WPWfx/nz9m8b89f8zif0f+mMX/zvwxi/8f8scs/nflj1n8/5g/ZvG/O3/M4v+n/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v/n/DGL/0P5Yxb/h/PHLP5/yR+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMV/RP6YxH+igfwxi/+g/DGL/+D8MYv/kPwxi//Q/DGL/7D8MYv/ePljFv/x88cs/sPzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4vyt/zOI/Vf6Yxf/d+WMW//fkj1n835s/ZvGfOn/M4v++/DGL/zT5Yxb/9+ePWfw/kD9m8Z82f8zi/8H8MYv/h/LHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/8P5Yxb/mfPHLP6z5I9Z/GfNH7P4fyR/zOI/W/6YxX/2/DGL/0fzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4fyx+z+H88f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/ifwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6fzB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/p/KH7P475E/ZvHfM3/M4r9X/pjF/9P5Yxb/vfPHLP6fyR+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4v/Z/DGL/2H5Yxb/z+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/z+WMW/6Pzxyz+x+SPWfy/kD9m8f9i/pjF/9j8MYv/l/LHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/8v5Yxb/k/PHLP6n5I9Z/L+SP2bx/2r+mMX/1Pwxi/9p+WMW/6/lj1n8T88fs/h/PX/M4n9G/pjF/8z8MYv/WfljFv9v5I9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/5v5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/Vv6Yxf/i/DGL/7fzxyz+38kfs/hfkj9m8f9u/pjF/9L8MYv/9/LHLP6X5Y9Z/C/PH7P4fz9/zOL/g/wxi/8V+WMW/yvzxyz+V+WPWfx/mD9m8b86f8zi/6P8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8f9x/pjF/yf5Yxb/n+aPWfx/lj9m8f95/pjF/xf5Yxb/X+aPWfxvzB+z+P8qf8zi/+v8MYv/TfljFv/f5I9Z/G/OH7P435I/ZvH/bf6Yxf/W/DGL/235Yxb/3+WPWfx/nz9m8b89f8zif0f+mMX/zvwxi/8f8scs/nflj1n8/5g/ZvG/O3/M4v+n/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v/n/DGL/0P5Yxb/h/PHLP5/yR+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMV/RP6YxH/igfwxi/+g/DGL/+D8MYv/kPwxi//Q/DGL/7D8MYv/ePljFv/x88cs/sPzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4vyt/zOI/Vf6Yxf/d+WMW//fkj1n835s/ZvGfOn/M4v++/DGL/zT5Yxb/9+ePWfw/kD9m8Z82f8zi/8H8MYv/h/LHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/8P5Yxb/mfPHLP6z5I9Z/GfNH7P4fyR/zOI/W/6YxX/2/DGL/0fzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4fyx+z+H88f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/ifwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6fzB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r+Lzf+ec/6t1Sz+u9r8/80s/rvlj1n8d88fs/h/Kn/M4r9H/pjFf8/8MYv/XvljFv9P549Z/PfOH7P4fyZ/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/Z/PHLP6H5Y9Z/D+XP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/z+ePWfyPzh+z+B+TP2bx/0L+mMX/i/ljFv9j88cs/l/KH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv8v549Z/E/OH7P4n5I/ZvH/Sv6Yxf+r+WMW/1Pzxyz+p+WPWfy/lj9m8T89f8zi//X8MYv/GfljFv8z88cs/mflj1n8v5E/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv9v5o9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/1v5Yxb/i/PHLP7fzh+z+H8nf8zif0n+mMX/u/ljFv9L88cs/t/LH7P4X5Y/ZvG/PH/M4v/9/DGL/w/yxyz+V+SPWfyvzB+z+F+VP2bx/2H+mMX/6vwxi/+P8scs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/x/ljFv+f5I9Z/H+aP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bxvzF/zOL/q/wxi/+v88cs/jflj1n8f5M/ZvG/OX/M4n9L/pjF/7f5Yxb/W/PHLP635Y9Z/H+XP2bx/33+mMX/9vwxi/8d+WMW/zvzxyz+f8gfs/jflT9m8f9j/pjF/+78MYv/n/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/n/PHLP4P5Y9Z/B/OH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4/yN/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/xH5YxL/SQbyxyz+g/LHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPlj1n8x88fs/gPzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+u/DGL/1T5Yxb/d+ePWfzfkz9m8X9v/pjFf+r8MYv/+/LHLP7T5I9Z/N+fP2bx/0D+mMV/2vwxi/8H88cs/h/KH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv8P549Z/GfOH7P4z5I/ZvGfNX/M4v+R/DGL/2z5Yxb/2fPHLP4fzR+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4fyx/zOL/8fwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/yfyxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4fzJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/Kn/M4r9H/pjFf8/8MYv/XvljFv9P549Z/PfOH7P4fyZ/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/Z/PHLP6H5Y9Z/D+XP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/z+ePWfyPzh+z+B+TP2bx/0L+mMX/i/ljFv9j88cs/l/KH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv8v549Z/E/OH7P4n5I/ZvH/Sv6Yxf+r+WMW/1Pzxyz+p+WPWfy/lj9m8T89f8zi//X8MYv/GfljFv8z88cs/mflj1n8v5E/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv9v5o9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/1v5Yxb/i/PHLP7fzh+z+H8nf8zif0n+mMX/u/ljFv9L88cs/t/LH7P4X5Y/ZvG/PH/M4v/9/DGL/w/yxyz+V+SPWfyvzB+z+F+VP2bx/2H+mMX/6vwxi/+P8scs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/x/ljFv+f5I9Z/H+aP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bxvzF/zOL/q/wxi/+v88cs/jflj1n8f5M/ZvG/OX/M4n9L/pjF/7f5Yxb/W/PHLP635Y9Z/H+XP2bx/33+mMX/9vwxi/8d+WMW/zvzxyz+f8gfs/jflT9m8f9j/pjF/+78MYv/n/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/n/PHLP4P5Y9Z/B/OH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4/yN/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/xH5YxL/SQfyxyz+g/LHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPlj1n8x88fs/gPzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+u/DGL/1T5Yxb/d+ePWfzfkz9m8X9v/pjFf+r8MYv/+/LHLP7T5I9Z/N+fP2bx/0D+mMV/2vwxi/8H88cs/h/KH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv8P549Z/GfOH7P4z5I/ZvGfNX/M4v+R/DGL/2z5Yxb/2fPHLP4fzR+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4fyx/zOL/8fwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/yfyxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4fzJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/Kn/M4r9H/pjFf8/8MYv/XvljFv9P549Z/PfOH7P4fyZ/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/Z/PHLP6H5Y9Z/D+XP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/z+ePWfyPzh+z+B+TP2bx/0L+mMX/i/ljFv9j88cs/l/KH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv8v549Z/E/OH7P4n5I/ZvH/Sv6Yxf+r+WMW/1Pzxyz+p+WPWfy/lj9m8T89f8zi//X8MYv/GfljFv8z88cs/mflj1n8v5E/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv9v5o9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/1v5Yxb/i/PHLP7fzh+z+H8nf8zif0n+mMX/u/ljFv9L88cs/t/LH7P4X5Y/ZvG/PH/M4v/9/DGL/w/yxyz+V+SPWfyvzB+z+F+VP2bx/2H+mMX/6vwxi/+P8scs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/x/ljFv+f5I9Z/H+aP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bxvzF/zOL/q/wxi/+v88cs/jflj1n8f5M/ZvG/OX/M4n9L/pjF/7f5Yxb/W/PHLP635Y9Z/H+XP2bx/33+mMX/9vwxi/8d+WMW/zvzxyz+f8gfs/jflT9m8f9j/pjF/+78MYv/n/LHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/n/PHLP4P5Y9Z/B/OH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4/yN/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/xH5YxL/yQbyxyz+g/LHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPlj1n8x88fs/gPzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+u/DGL/1T5Yxb/d+ePWfzfkz9m8X9v/pjFf+r8MYv/+/LHLP7T5I9Z/N+fP2bx/0D+mMV/2vwxi/8H88cs/h/KH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv8P549Z/GfOH7P4z5I/ZvGfNX/M4v+R/DGL/2z5Yxb/2fPHLP4fzR+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4fyx/zOL/8fwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/yfyxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfM//9j396D7KzrO46f3c1vN2AMASMggiFcowSSLJEAEqnYdpo6xrHSqdp2hpiEkJCIuYhJrBAUULCgQbRArRQwVrERJLYC3kJRoRIrWsV6a8QLXioB0QZabdc5yW7Mbr7usE+ePMzk+3r9sbvnrN/D5T3jh7OZDWXp/xr9Q1n6z9U/lKX/PP1DWfrP1z+Upf/Z+oey9F+gfyhL/3P0D2Xpv1D/UJb+i/QPZel/rv6hLP0X6x/K0n+J/qEs/V+rfyhL//P0D2Xp/zr9Q1n6L9U/lKX/Mv1DWfov1z+Upf8K/UNZ+r9e/1CW/ufrH8rS/w36h7L0X6l/KEv/VfqHsvRfrX8oS/836h/K0v+v9A9l6f8m/UNZ+l+gfyhL/wv1D2Xpv0b/UJb+F+kfytL/zfqHsvR/i/6hLP0v1j+Upf8l+oey9L9U/1CW/m/VP5Sl/9v0D2Xpf5n+oSz9L9c/lKX/2/UPZen/1/qHsvS/Qv9Qlv5X6h/K0v8d+oey9H+n/qEs/dfqH8rS/yr9Q1n6v0v/UJb+V+sfytL/3fqHsvR/j/6hLP3/Rv9Qlv7X6B/K0v9a/UNZ+l+nfyhL/7/VP5Sl/3v1D2Xp/3f6h7L0f5/+oSz9r9c/lKX/3+sfytL/Bv1DWfrfqH8oS/+b9A9l6f9+/UNZ+q/TP5Sl/wf0D2Xp/w/6h7L0/6D+oSz9P6R/KEv/m/UPZen/Yf1DWfr/o/6hLP3X6x/K0v8j+oey9L9F/1CW/rfqH8rS/6P6h7L0v03/UJb+G/TfybQdX2Xp/zH9Q1n6/5P+oSz9/1n/UJb+H9c/lKX/7fqHsvS/Q/9Qlv536h/K0v8T+oey9P+k/qEs/T+lfyhL/0/rH8rS/zP6h7L036h/KEv/u/QPZen/L/qHsvS/W/9Qlv6f1T+Upf/n9A9l6f95/UNZ+t+jfyhL/3v1D2Xp/6/6h7L0/4L+oSz979M/lKX/Jv1DWfp/Uf9Qlv7/pn8oS/8v6R/K0v9+/UNZ+n9Z/1CW/l/RP5Sl/7/rH8rS/6v6h7L0/5r+oSz9H9A/lKX/1/UPZen/H/qHsvT/hv6hLP2/qX8oS/9v6R/K0v/b+oey9P+O/qEs/f9T/1CW/pv1D2Xp/139Q1n6P6h/KEv/7+kfytL/+/qHsvT/gf6hLP1/qH8oS/+H9A9l6f8j/UNZ+v9Y/1CW/j/RP5Sl/0/1D2Xp/1/6h7L0/5n+oSz9H9Y/lKX/Fv1DWfo/on8oS/9H9Q9l6f9z/UNZ+j+mfyhL/1/oH8rS/5f6h7L0/2/9Q1n6b9U/lKX/4/qHsvR/Qv9Qlv7/o38oS///1T+Upf+v9A9l6f9r/UNZ+v+f/qEs/f9f/1CW/n36h5L0H9fSP5Slf4f+oSz9O/UPZenfpX8oS/9R+oey9C/6h7L079Y/lKV/j/6hLP1H6x/K0n8f/UNZ+u+rfyhL/6fpH8rSf4z+oSz9n65/KEv/sfqHsvTfT/9Qlv7j9A9l6b+//qEs/Q/QP5Sl/zP0D2XpP17/UJb+z9Q/lKX/gfqHsvQ/SP/Q3t9/3I5v6b+rvb//NuOepX8oS/9D9A9l6f9s/UNZ+h+qfyhL/8P0D2Xp/xz9Q1n6T9A/lKX/4fqHsvSfqH8oS/8j9A9l6X+k/qEs/Y/SP5Sl/9H6h7L0P0b/UJb+x+ofytJ/kv6hLP2fq38oS//n6R/K0v84/UNZ+k/WP5Sl//H6h7L0P0H/UJb+U/QPZek/Vf9Qlv7T9A9l6d+rfyhL/xP1D2XpP13/UJb+z9c/lKX/SfqHsvSfoX8oS/+T9Q9l6X+K/qEs/U/VP5Sl/wv0D2Xpf5r+oSz9Z+ofytL/hfqHsvQ/Xf/QXtcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPak5atWnztn8eL5y3zhC1/4YscXT/X/MwEAAHX77X/0P9V/JwAAAMCeMmv2ix7u6hj0VNfODw774vxtn6c//spz1n3vMzMHPvd/+yXBS3bu/KCvr6/vnvsefWX/w55Wq9X+q/1e/+PRQ4/br3/hzEumbn9UWl+4YGLH7T//o5OvPP78GXd0H/5Q2fZsaZ119sLF86d2tlqlq7RWth9M62i1SndpvbP9oLf9oKe0Pth+cOK2B/u0NrYfnDD3vMXz2k/s8pcGgDRmzV7T6hq02K1B/zWw8/5fOPPWSQOfh3nJgVcb1erf/0v+9PZvDfnegN+x/wOvXzqG7v+I/wEBgF2MbP/vvnXg8zAvucv7/wcmbb0m+t7v3v+B1y+d9h8A6hf8/H/QRg/9uf+Qn/8fHrzkjvvz377y+vb+nzH3ZeP7nxr1ZH7+/9vXL11D979z0M//O1qtMmrg5/89rVYpu/mvAwBSmDX7ooeHe/8//P6POmTITcfO+9912+bO9v6/YczVV/U/VUa4/6OGe///so2D/14BgCdn1uwb+oa8/x/B/reOCV5yx/7f9ItRL2/v/2O3dK7Y6Xsj2f8ydP+nrFjyuinLV60+fuGSOQvmL5j/2lN6e2dMnzH1lN4p234isP3jbv5LAYC93O69/2/tO+Smo9X64Y778T2Xrm/v/9ljxhzR/9ToEe5/97Dv/7/r/T8ADHJEZ6u7u7VyzooVy6Zt/zjwsHf7x+3/s2D/R/Dn/0cO/B7AwO8MdrRaB++4X7f/xivb+39p5xs/0v9U9wj3v2e4/T9zyO8qAgBPzm6+/5835GbQ/m+5f9GL2/v/tk3Xj+1/aqR//j962P0/y/t/AKhi1uw9+ya6vf+//7nLH6x2Xfbx+38AUL8m9n/SV3/5F9Wuy772HwDq18T+37R19X3VrsvT7D8A1K+J/e9Y84Mjq12XMfYfAOrXxP5ffuOij1W7Lk+3/wBQvyb2/6EN4/epdl3G2n8AqF8T+79k7XXvq3Zd9rP/AFC/Jvb/urs+9I5q12Wc/QeA+jWx//t//9iDq12X/e0/ANSvif1/02OvWlftuhxg/wGgfk3s/9b7v95b7bo8w/4DQP2a2P8zPzDrm9Wuy3j7DwD1a2L/N198z0urXZdn2n8AqF8T+7/h3Xc8Wu26HGj/AaB+Tez/yR+fsaDadTnI/gNA/ZrY/+6xC4+qdl0Otv8AUL8m9v+KyT/aUO26PMv+A0D9mtj/B2deO7badTnE/gNA/ZrY/0UTDrq22nV5tv0HgPo1sf/3LrxsabXrcqj9B4D6NbH/L35JT8XdLofZfwCoXxP7P+XVq/682nV5jv0HgPo1sf/vX/n4pmrXZYL9B4D67bn9f9W2j+39v+tXE1ZVe41yuP0HgPo18f7/j7+xdku16zLR/gNA/ZrY/2PufeQV1a7LEfYfAOrXxP6v/+mcz1a7LkfafwCoXxP7v997+yZXuy5H2X8AqF8T+3/xp5d+otp1Odr+A0D9mtj/H9+yX3e163KM/QeA+jWx/3OvuGhttetyrP0HgPo1sf9/OX3zV6pdl0n2HwDq18T+P3Dgy/+g2nV5rv0HgPo1sf939kx5otp1eZ79B4D6NbH/046+4bxq1+U4+w8A9Wti/9/1itPfWu26TLb/AFC/Jvb/4KUfHVftuhxv/wGgfk3s/4qzvrS+2nU5wf4DQP2a2P++M150arXrMsX+A0D9mtj/0QcsO67adZlq/wGgfk3s/1um/vqT1a7LNPsPAPVrYv8fmfjmjmrXpdf+A0D9mtj/eV1j3lPtupxo/wGgfk3s/+dff9UF1a7LdPsPAPVrYv9f+meH/qTadXm+/QeA+jWx/xP/8DVnVrsuJ9l/AKhfE/t/87yf3V3tusyw/wBQvyb2/+rv3Lam2nU52f4DQP2a2P8JfacdVO26nGL/AaB+Tez/8i1n3Fztupxq/wGgfk3s/xObNs2sdl1eYP8BoH5N7P+r7/yTr1W7LqfZfwCoXxP7/+Vrvn1Gtesy0/4DQP2a2P9PXXZjX7Xr8kL7DwD1a2L/T/rw5HOqXZfT7T8AAAAAAAAAAAAAAAAAGS1ftfrcOYsXz1+2B794qv8ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgNO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhzIAAAAAAjzt86j/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BQAAP//DuPynQ==") r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x0, 0x5, 0xffffffffffffff03, 0x8d3f, 0x80000000]}, &(0x7f0000000100)=0x78) 5.023902969s ago: executing program 5 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x60}}, 0x0) 4.716753076s ago: executing program 5 (id=348): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 4.493387931s ago: executing program 5 (id=350): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 4.176735259s ago: executing program 5 (id=351): syz_mount_image$xfs(&(0x7f000000b840), &(0x7f000000b880)='./file0\x00', 0x0, &(0x7f000000b8c0), 0x1, 0xb82b, &(0x7f000000b900)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGZsJMIbZUAM1p/fcrr3rGvof/38d+3yS9dxzbn9nt/fb/7mUrG337HkdWVaTlfRmlW5aevwLjTe3/+CbUx44cuH1Va+VjrZNKO5uKLb7F9tJWf/J2vLb1aVDNd9Z+YvqfKd68Hn3qK+vek+Wva/YbSu2raXNlU3l9+urUByeWL6/euBhVH219GdAff7my7MmXTD4PPk7Zll2+HYf6G6qu33O7OI5yQZ1G1fcXbXtvv5tTenPMX/MsmNWZzv8/BhT+eOceNaKLzw91g9kV9DdPqezon9b0bmqWI8NlWtwd1T5eX7+2U1LiqewavD1aFfT3T77xGyEdfzPv3yjt6903azNsqwuy7LxWZZNGOsevD3aO1o68mt+eb/IXl7/E4f7vLj7v9f+LMuydxevE0eUXwuAXUt7R8uxw6z/upHW/z0nrL3F+oddX2d7R0u+1ivW/4SR1v+Ue4+bX3zR3VqaenNsPwgAAAAAYFhLr1h+8YLFi3suc8MNN9wYuDHWVyYgtm2LfqwfCZBaiv+cGOuPEQAAAHZ3nV3tL42rGnJo3OCdfR/t6d9O39p90fJ7Z51U3hZ3zx3mlEO+z7+vr69v5ZmLzyt2x1d8v+yEyuH8/IseWHB5sdtQ+f0Htf1Ha7NzL1y0uOfw/K+aXJtdnu805eedUpt9Ld9pznem1mZ35jst/Tv12ap857Dzlyy+ID9wUOAz9s7S2dWbjRtSLBvy2TC4/6IHen9V3o5wyvLZ+n+oRN5/S9Nt91TcV7aD/gPn3///8OcLvKOMrv9115W3I5xyu/W/duGMpuHu23H/gfNP0j+uYa7/QxpVXvcrrv8Nw5xyYP7XZ3z9hbz/tJ+uub44VPNWrv+Dzj+5sn//yQeu//mpDihf//PXlgN36snYDXV2XfPSSOt/5P41HyrerXrQ7MDZWvru+Eze/74b2p4sDtWOsv8BI63/qobtrieMUmfXLX0V638U/bOpw5xyoMm7ZnWuzPu/+sZjjw+6bzT9D6zs37jsks82Lr1i+bRFlyxY2LOw59KW5hmtza1NM2fOaOy/JJTe7tyTshvZufWf7VExU5VlBw7Mz7zquHV5/z/fevrtxaEJo+w/ZcT1f+7Qx8ogk6qzurrs8gXLll3WVHpb3m0uvS292zD9R/H6P7n8RVR9sa3Ksg8OzB989WuH5v3vXrf5tuJQ3Sj7Tx2pf922v5dAO7n+L6iYGdL/kcd6bs37Lz3kwxcXh0b7+n/QiOu/1/rfWZ1dFf/D522W9z91y1HrA8cP9vVfXCn6169vXRE4/hH940rRf9XGljsDxw/RP64U/e9/sPGswPFD9Y8rRf/PPXzI8sDxafrHlaL/tGem7h04fpj+caXo/4+nJk8PHG/UP64U/U95/uJrA8cP1z+uFP2/+8qSmwPHm/SPK0X/3/ed/3DgeLP+caXov+emhS8HjrfoH1eK/sueu3KfwPHp+seVov9v1159dOD4R/WPK0X/9auWnhY4PkP/uFL0b1zz+csCx1v1jytF/40bfvibwPGZ+seVon/Di7d9L3D8CP3jStH/yq0/+Vfg+JH6x5Wi/z2v3/VE4PhR+seVov+j6345JXD8aP3jStG/5umfh/47zY/pH1eK/uc8dP9FgeMf1z+uFP2/tfrekwPHj9E/rhT9+54/+fnA8Tb940rRf8Yrc0N/P2y7/nGl6H9J35wfB4536B9Xiv63bzr2K4Hjx+ofV4r+zz53zlWB47P0jytF//eunT8/cPw4/eNK0b9z1RnNgeOz9Y8rRf/eNfPeHzg+R/+4UvSfveFLfw0cP17/uFL0X/Hitf8JHO/UP64U/f+09fobA8dP0D+uFP33fX3FysDxufrHlaL/eetubA8cP1H/uFL0v+vpb18YOH6S/nGl6L/poZv2Chzv0j+uFP2PWP390B+2frL+caXof8Or624KHD9F/7hS9J/15hP3BY5/Qv+4UvTf7+XnngwcP1X/uFL0f+rvz24OHJ+nf1wp+v/osdXjA8c/qX9cKfqf+7s/DPd7Qt6K0/SPK0X/ox5f0xk4frr+caXov/lvj1waOH6G/nGl6D/93/vcETjerX9cKfq/sWW/awLHP6V/XCn637F+7w2B45/WP64U/Zds/MCawPH5+seVov/EB/c8MnD8TP3jStH/mYf32jdw/Cz940rR/4vPjFsWOH62/nGl6D/3qfHzAsfP0R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuA1qusmD/9iQkNAEBUREFQweloxRRIUgRxUITUKRIDdIEpCtgQYoFRBTEQgexoYAKSFFBFATpvffee/1WSMKL4Q4vuvz+vHpf11o5U89kz/Pbe8/kPGd2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/RGsutsvRgMGzspd1edvvB23zw1vkPGXnkAXOc9Z6N9xny8Jhrl5p07M0jnh/P4IUHW2r0bUPH3GXYgSccOXT0haEvfdzJJ5tsyFSDIdPlpdp57f9lsaced2bMg44YDAZD9h7z50WTjf6y5E03Xfq/PFa1NUYuv9zowRvz58VuE429eez1L54fNubPEusMBkusNZjg+vHaW/muqx99rZfhP8EaI5dfYbz+g7GdX+g+/vbdavz1/KSLNlviNQ33b7LGyOVWHN16Qtvx0asvdeTzL+zXhx0yGAw7dDAYdthgMOzw17oH/x4jl1546dH7/HGXx1TfbdwbgrR/HzLzKmtOPhgMho95nRh2xLjXAuA/y8ilF/5A2P4nHnd72v6XvGmqGWz/8J9vhZFLLzx4yfv8MdfuNu7f93H7v3WilfZ77ZYYAAAA+Gc9d+/Jp42d6xs6GMw0GG++9wVjfy4w5LgzLrjgNVvQ/xvCPNnLf2fiP8zozpMeO2Iw2GK113pReA0Mea0XgNeU/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+lfbALz/1OPOx25/6rvH3vX2RedbvUTxv/+0ddN+v98qV8z/63z/4NRQ8a0HN181GAw+OjIlVedazAYnLD6dIvOMnjxtsVG37bEtBONPUDAXC98nX0CDzzipaeTv/gYx73w+Cs8f+hEQ8ZbiJf4yDKn7LTJGo+/a/zTOSf8PF48vsQJKywzxbjPsgwd704TWlfHPf645zJ+57HLPtfoZZ9/2823mn+bHXead9Tm62284cYbbrHwQossutCiCy622CLzbzRqsw0XGPN1AmM2ZlRmfTVjNvH4Y3bvyJeO2fjPbUJjNuKVx+yFR7x1v9VPGjdmw/7JMZv1lcdsxKhxyzpi+GDdF4Zm9F852/DBDqMvLDjJS/Yt04++73unHToY7Ps/T3T0uUleXAeH7Dbq33DckrGnM489nSUet+TECR23ZDDuuCXjDpiw+JiTbU8dd7/xP2c99upXfdyS7Zd+ZpbByz6X9f+Lf+n1/2W9Fhvy4kCNO2jI2PuM6fU/x5kYN2xLveQ4E4umY8n8O71seUcMfXG9Tss79nNxQ8Yb/1f6XNxg4412mX1s1EXHfNdz/3KUvO9Y8YWvE9qeR4x3+kr7jon+5+z/XLvheTOOv+/48IQX8R+2i3FjNMl4d5rQvmOH9c4a9dJ90wT2HSuOGvtB4//Zd4z+a2cdt+8YvexzDB/sO/rCQqMvzDl8cMzoCwu/cGGywRmjL8y3/pabbTDkhderl60Hcw35h194DOvtcuOtt6/i+DhLnjMYLHl2el4THs4srbcTv8Ly5s9zD17x89ynrzfz8YPBYMqxz2vxccv+r0jLO+yVlzccf2LwSsefGBx6wXaH/5uX98Xt7IV1bexueq4JfM8/bGdTv2w7232il2wZr/Z9zQbh/mPOT//iox224fnnjhuj4eM97v/2Gj3uuaT+497zvdSQ3QZDXmlsJvQ+7B/GZqpXHptX+/5lrrFvMCZ7hbGZ5+Fd5x43NhP/k2Mz5wTG5qXvh19q4sFgsn8cm2GDZUe/oxk7NnO8mrGZ4t+z3kwe7j/m/OwvXnX5srssNm5swljE1/9xjz/HPzk2Q9Z9cb2Z7YXbZhk6mHjiwQ7rbbvt1guO+Tru4kJjvr7yNjjbqxnLSf89YznD2L3O0JcPzotXbXrU8wv/q9vgbP/sWI4YDB33b+5R428s/z5+/tNN/276d9O/m/7d9O+mfzf9i01g/n/EuJ8L7jXkiFXG/jBm+JmPT7Pta728r7H/6vn/sX3/Yf5/22keP3Po4MXbXnF+dsx9/k/Ozy465mTnBcfdb/z5wbFXv+r52Uf3OXvNwf+b+dl/ybht9VX83ND+v5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/276V9sAvP/C4z7PYALt3nmiLETocO3WXWJp1/r5X2N/VfP/4/t+w/z/08vseo2Qwcv3vaK8/9j7tMx/7/E9QftMfg/PP8/bls1/8//Qv9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30LzaB+f+lxv0ewPAtZp113O8DXHz/nhO91sv7Gvtvnf/3///3sv/vpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276Fxs7/z8Y7789/Lj1Igrz///ZJtB/Jf2jlv4r6x+19F9F/6il/6r6Ry39V9M/aun/Cf2jlv6r6x+19F9D/6il/5r6Ry39P6l/1NL/U/pHLf3X0j9q6f9p/aOW/mvrH7X0X0f/qKX/uvpHLf3X0z9q6f8Z/aOW/uvrH7X030D/qKX/hvpHLf030j9q6b+x/lFL/030j1r6j9I/aum/qf5RS//P6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+n9O/6il/9b6Ry39t9E/aum/rf5RS//P6x+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+u+sf9TSfxf9o5b+X9A/aun/Rf2jlv676h+19N9N/6il/+76Ry39v6R/1NL/y/pHLf2/on/U0v+r+kct/ffQP2rp/zX9o5b+e+oftfTfS/+opf/e+kct/ffRP2rp/3X9o5b+39A/aun/Tf2jlv7f0j9q6b+v/lFL//30j1r6f1v/qKX//vpHLf2/o3/U0v8A/aOW/t/VP2rp/z39o5b+B+oftfQ/SP+opf/39Y9a+h+sf9TS/wf6Ry39f6h/1NL/R/pHLf1/rH/U0v8Q/aOW/ofqH7X0P0z/qKX/4fpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv4/0T9q6X+s/lFL/5/qH7X0/5n+UUv/n+sftfT/hf5RS/9f6h+19D9O/6il/6/0j1r6/1r/qKX/8fpHLf1P0D9q6X+i/lFL/9/oH7X0/63+UUv/3+kftfQ/Sf+opf/J+kct/U/RP2rp/3v9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rp/wf9o5b+f9Q/aun/J/2jlv5n6h+19D9L/6il/5/1j1r6n61/1NL/L/pHLf3/qn/U0v8c/aOW/ufqH7X0/5v+UUv/8/SPWvqfr3/U0v/v+kct/S/QP2rpf6H+UUv/i/SPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv7X6h+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5b+z+oftfR/Tv+opf/z+kcl/YcM9I9a+g/RP2rpP1T/qKX/RPpHLf2H6R+19B+uf9TSf2L9o5b+k+gftfSfVP+opf9k+kct/SfXP2rp/zr9o5b+U+gftfSfUv+opf9U+kct/V+vf9TSf2r9o5b+0+gftfSfVv+opf8b9I9a+k+nf9TS/436Ry3936R/1NL/zfpHLf2n1z9q6f8W/aOW/jPoH7X0f6v+UUv/t+kftfSfUf+opf9M+kct/d+uf9TSf4T+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/7n1j1r6v0P/qKX/O/WPWvrPo3/U0n9e/aOW/vPpH7X0n1//qKX/AvpHLf0X1D9q6b+Q/lFL/4X1j1r6v0v/qKX/u/WPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/e/SPWvovoX/U0v+9+kct/d+nf9TS//36Ry39l9Q/aum/lP5RS/+R+kct/ZfWP2rp/wH9o5b+y+gftfRfVv+opf9y+kct/ZfXP2rp/0H9o5b+K+gftfT/kP5RS/8P6x+19F9R/6il/0f0j1r6f1T/qKX/x/SPWvp/XP+opf9K+kct/VfWP2rpv4r+UUv/VfWPWvqvpn/U0v8T+kct/VfXP2rpv4b+UUv/NfWPWvp/Uv+opf+n9I9a+q+lf9TS/9P6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TS/zP6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfQfpX/U0n9T/aOW/p/VP2rpv5n+UUv/zfWPWvpvoX/U0n9L/aOW/lvpH7X0/5z+UUv/rfWPWvpvo3/U0n9b/aOW/p/XP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/LvpHLf2/oH/U0v+L+kct/XfVP2rpv5v+UUv/3fWPWvp/Sf+opf+X9Y9a+n9F/6il/1f1j1r676F/1NL/a/pHLf331D9q6b+X/lFL/731j1r676N/1NL/6/pHLf2/oX/U0v+b+kct/b+lf9TSf1/9o5b+++kftfT/tv5RS//99Y9a+n9H/6il/wH6Ry39v6t/1NL/e/pHLf0P1D9q6X+Q/lFL/+/rH7X0P1j/qKX/D/SPWvr/UP+opf+P9I9a+v9Y/6il/yH6Ry39D9U/aul/mP5RS//D9Y9a+h+hf9TS/0j9o5b+R+kftfQ/Wv+opf8x+kct/X+if9TS/1j9o5b+P9U/aun/M/2jlv4/1z9q6f8L/aOW/r/UP2rpf5z+UUv/X+kftfT/tf5RS//j9Y9a+p+gf9TS/0T9o5b+v9E/aun/W/2jlv6/0z9q6X+S/lFL/5P1j1r6n6J/1NL/9/pHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/D/pHLf3/qH/U0v9P+kct/c/UP2rpf5b+UUv/P+sftfQ/W/+opf9f9I9a+v9V/6il/zn6Ry39z9U/aun/N/2jlv7n6R+19D9f/6il/9/1j1r6X6B/1NL/Qv2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aul/mf5RS//L9Y9a+l+hf9TS/0r9o5b+V+kftfS/Wv+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHLf2f1T9q6f+c/lFL/+f1j0r6v3BW/5dr6T9E/6il/1D9o5b+E+kftfQfpn/U0n+4/lFL/4n1j1r6T6J/1NJ/Uv2jlv6T6R+19J9c/6il/+v0j1r6T6F/1NJ/Sv2jlv5T6R+19H+9/lFL/6n1j1r6T6N/1NJ/Wv2jlv5v0D9q6T+d/lFL/zfqH7X0f5P+UUv/N+sftfSfXv+opf9b9I9a+s+gf9TS/636Ry3936Z/1NJ/Rv2jlv4z6R+19H+7/lFL/xH6Ry39Z9Y/auk/i/5RS/9Z9Y9a+s+mf9TSf3b9o5b+c+gftfSfU/+opf9c+kct/efWP2rp/w79o5b+79Q/auk/j/5RS/959Y9a+s+nf9TSf379o5b+C+gftfRfUP+opf9C+kct/RfWP2rp/y79o5b+79Y/aum/iP5RS/9F9Y9a+i+mf9TSf3H9o5b+79E/aum/hP5RS//36h+19H+f/lFL//frH7X0X1L/qKX/UvpHLf1H6h+19F9a/6il/wf0j1r6L6N/1NJ/Wf2jlv7L6R+19F9e/6il/wf1j1r6r6B/1NL/Q/pHLf0/rH/U0n9F/aOW/h/RP2rp/1H9o5b+H9M/aun/cf2jlv4r6R+19F9Z/6il/yr6Ry39V9U/aum/mv5RS/9P6B+19F9d/6il/xr6Ry3919Q/aun/Sf2jlv6f0j9q6b+W/lFL/0/rH7X0X1v/qKX/OvpHLf3X1T9q6b+e/lFL/8/oH7X0X1//qKX/BvpHLf031D9q6b+R/lFL/431j1r6b6J/1NJ/lP5RS/9N9Y9a+n9W/6il/2b6Ry39N9c/aum/hf5RS/8t9Y9a+m+lf9TS/3P6Ry39t9Y/aum/jf5RS/9t9Y9a+n9e/6il/3b6Ry39t9c/aum/g/5RS/8d9Y9a+u+kf9TSf2f9o5b+u+gftfT/gv5RS/8v6h+19N9V/6il/276Ry39d9c/aun/Jf2jlv5f1j9q6f8V/aOW/l/VP2rpv4f+UUv/r+kftfTfU/+opf9e+kct/ffWP2rpv4/+UUv/r+sftfT/hv5RS/9v6h+19P+W/lFL/331j1r676d/1NL/2/pHLf331z9q6f8d/aOW/gfoH7X0/67+UUv/7+kftfQ/UP+opf9B+kct/b+vf9TS/2D9o5b+P9A/aun/Q/2jlv4/0j9q6f9j/aOW/ofoH7X0P1T/qKX/YfpHLf0P1z9q6X+E/lFL/yP1j1r6H6V/1NL/aP2jlv7H6B+19P+J/lFL/2P1j1r6/1T/qKX/z/SPWvr/XP+opf8v9I9a+v9S/6il/3H6Ry39f6V/1NL/1/pHLf2P1z9q6X+C/lFL/xP1j1r6/0b/qKX/b/WPWvr/Tv+opf9J+kct/U/WP2rpf4r+UUv/3+sftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/P+gftfT/o/5RS/8/6R+19D9T/6il/1n6Ry39/6x/1NL/bP2jlv5/0T9q6f9X/aOW/ufoH7X0P1f/qKX/3/SPWvqfp3/U0v98/aOW/n/XP2rpf4H+UUv/C/WPWvpfpH/U0v9i/aOW/pfoH7X0v1T/qKX/ZfpHLf0v1z9q6X+F/lFL/yv1j1r6X6V/1NL/av2jlv7X6B+19L9W/6il/3X6Ry39r9c/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+t+gftfS/Vf+opf9t+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/vfoH7X0v1f/qKX/ffpHLf3v1z9q6f+A/lFL/wf1j1r6P6R/1NL/Yf2jlv6P6B+19H9U/6il/2P6Ry39H9c/aun/hP5RS/8n9Y9a+j+lf9TS/2n9o5b+z+gftfR/Vv+opf9z+kct/Z/XPyrpP9FA/6il/xD9o5b+Q/WPWvpPpH/U0n+Y/lFL/+H6Ry39J9Y/auk/if5RS/9J9Y9a+k+mf9TSf3L9o5b+r9M/auk/hf5RS/8p9Y9a+k+lf9TS//X6Ry39p9Y/auk/jf5RS/9p9Y9a+r9B/6il/3T6Ry3936h/1NL/TfpHLf3frH/U0n96/aOW/m/RP2rpP4P+UUv/t+oftfR/m/5RS/8Z9Y9a+s+kf9TS/+36Ry39R+gftfSfWf+opf8s+kct/WfVP2rpP5v+UUv/2fWPWvrPoX/U0n9O/aOW/nPpH7X0n1v/qKX/O/SPWvq/U/+opf88+kct/efVP2rpP5/+UUv/+fWPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/u/SPWvq/W/+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvq/R/+opf8S+kct/d+rf9TS/336Ry39369/1NJ/Sf2jlv5L6R+19B+pf9TSf2n9o5b+H9A/aum/jP5RS/9l9Y9a+i+nf9TSf3n9o5b+H9Q/aum/gv5RS/8P6R+19P+w/lFL/xX1j1r6f0T/qKX/R/WPWvp/TP+opf/H9Y9a+q+kf9TSf2X9o5b+q+gftfRfVf+opf9q+kct/T+hf9TSf3X9o5b+a+gftfRfU/+opf8n9Y9a+n9K/6il/1r6Ry39P61/1NJ/bf2jlv7r6B+19F9X/6il/3r6Ry39P6N/1NJ/ff2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/9R+kct/TfVP2rp/1n9o5b+m+kftfTfXP+opf8W+kct/bfUP2rpv5X+UUv/z+kftfTfWv+opf82+kct/bfVP2rp/3n9o5b+2+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvrvon/U0v8L+kct/b+of9TSf1f9o5b+u+kftfTfXf+opf+X9I9a+n9Z/6il/1f0j1r6f1X/qKX/HvpHLf2/pn/U0n9P/aOW/nvpH7X031v/qKX/PvpHLf2/rn/U0v8b+kct/b+pf9TS/1v6Ry3999U/aum/n/5RS/9v6x+19N9f/6il/3f0j1r6H6B/1NL/u/pHLf2/p3/U0v9A/aOW/gfpH7X0/77+UUv/g/WPWvr/QP+opf8P9Y9a+v9I/6il/4/1j1r6H6J/1NL/UP2jlv6H6R+19D9c/6il/xH6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/yf6Ry39j9U/aun/U/2jlv4/0z9q6f9z/aOW/r/QP2rp/0v9o5b+x+kftfT/lf5RS/9f6x+19D9e/6il/wn6Ry39T9Q/aun/G/2jlv6/1T9q6f87/aOW/ifpH7X0P1n/qKX/KfpHLf1/r3/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3/oH/U0v+P+kct/f+kf9TS/0z9o5b+Z+kftfT/s/5RS/+z9Y9a+v9F/6il/1/1j1r6n6N/1NL/XP2jlv5/0z9q6X+e/lFL//P1j1r6/13/qKX/BfpHLf0v1D9q6X+R/lFL/4v1j1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/xX6Ry39r9Q/aul/lf5RS/+r9Y9a+l+jf9TS/1r9o5b+1+kftfS/Xv+opf8N+kct/W/UP2rpf5P+UUv/m/WPWvrfon/U0v9W/aOW/rfpH7X0v13/qKX/HfpHLf3v1D9q6X+X/lFL/7v1j1r636N/1NL/Xv2jlv736R+19L9f/6il/wP6Ry39H9Q/aun/kP5RS/+H9Y9a+j+if9TS/1H9o5b+j+kftfR/XP+opf8T+kct/Z/UP2rp/5T+UUv/p/WPWvo/o3/U0v9Z/aOW/s/pH7X0f17/qKT/sIH+UUv/IfpHLf2H6h+19J9I/6il/zD9o5b+w/WPWvpPrH/U0n8S/aOW/pPqH7X0n0z/qKX/5PpHLf1fp3/U0n8K/aOW/lPqH7X0n0r/qKX/6/WPWvpPrX/U0n8a/aOW/tPqH7X0f4P+UUv/6fSPWvq/Uf+opf+b9I9a+r9Z/6il//T6Ry3936J/1NJ/Bv2jlv5v1T9q6f82/aOW/jPqH7X0n0n/qKX/2/WPWvqP0D9q6T+z/lFL/1n0j1r6z6p/1NJ/Nv2jlv6z6x+19J9D/6il/5z6Ry3959I/auk/t/5RS/936B+19H+n/lFL/3n0j1r6z6t/1NJ/Pv2jlv7z6x+19F9A/6il/4L6Ry39F9I/aum/sP5RS/936R+19H+3/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19H+P/lFL/yX0j1r6v1f/qKX/+/SPWvq/X/+opf+S+kct/ZfSP2rpP1L/qKX/0vpHLf0/oH/U0n8Z/aOW/svqH7X0X07/qKX/8vpHLf0/qH/U0n8F/aOW/h/SP2rp/2H9o5b+K+oftfT/iP5RS/+P6h+19P+Y/lFL/4/rH7X0X0n/qKX/yvpHLf1X0T9q6b+q/lFL/9X0j1r6f0L/qKX/6vpHLf3X0D9q6b+m/lFL/0/qH7X0/5T+UUv/tfSPWvp/Wv+opf/a+kct/dfRP2rpv67+UUv/9fSPWvp/Rv+opf/6+kct/TfQP2rpv6H+UUv/jfSPWvpvrH/U0n8T/aOW/qP0j1r6b6p/1NL/s/pHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv6f0z9q6b+1/lFL/230j1r6b6t/1NL/8/pHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19N9F/6il/xf0j1r6f1H/qKX/rvpHLf130z9q6b+7/lFL/y/pH7X0/7L+UUv/r+gftfT/qv5RS/899I9a+n9N/6il/576Ry3999I/aum/t/5RS/999I9a+n9d/6il/zf0j1r6f1P/qKX/t/SPWvrvq3/U0n8//aOW/t/WP2rpv7/+UUv/7+gftfQ/QP+opf939Y9a+n9P/6il/4H6Ry39D9I/aun/ff2jlv4H6x+19P+B/lFL/x/qH7X0/5H+UUv/H+sftfQ/RP+opf+h+kct/Q/TP2rpf7j+UUv/I/SPWvofqX/U0v8o/aOW/kfrH7X0P0b/qKX/T/SPWvofq3/U0v+n+kct/X+mf9TS/+f6Ry39f6F/1NL/l/pHLf2P0z9q6f8r/aOW/r/WP2rpf7z+UUv/E/SPWvqfqH/U0v83+kct/X+rf9TS/3f6Ry39T9I/aul/sv5RS/9T9I9a+v9e/6il/6n6Ry39T9M/aul/uv5RS/8z9I9a+v9B/6il/x/1j1r6/0n/qKX/mfpHLf3P0j9q6f9n/aOW/mfrH7X0/4v+UUv/v+oftfQ/R/+opf+5+kct/f+mf9TS/zz9o5b+5+sftfT/u/5RS/8L9I9a+l+of9TS/yL9o5b+F+sftfS/RP+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvpfqX/U0v8q/aOW/lfrH7X0v0b/qKX/tfpHLf2v0z9q6X+9/lFL/xv0j1r636h/1NL/Jv2jlv436x+19L9F/6il/636Ry39b9M/aul/u/5RS/879I9a+t+pf9TS/y79o5b+d+sftfS/R/+opf+9+kct/e/TP2rpf7/+UUv/B/SPWvo/qH/U0v8h/aOW/g/rH7X0f0T/qKX/o/pHLf0f0z9q6f+4/lFL/yf0j1r6P6l/1NL/Kf2jlv5P6x+19H9G/6il/7P6Ry39n9M/aun/vP5RSf/hA/2jlv5D9I9a+g/VP2rpP5H+UUv/YfpHLf2H6x+19J9Y/6il/yT6Ry39J9U/auk/mf5RS//J9Y9a+r9O/6il/xT6Ry39p9Q/auk/lf5RS//X6x+19J9a/6il/zT6Ry39p9U/aun/Bv2jlv7T6R+19H+j/lFL/zfpH7X0f7P+UUv/6fWPWvq/Rf+opf8M+kct/d+qf9TS/236Ry39Z9Q/auk/k/5RS/+36x+19B+hf9TSf2b9o5b+s+gftfSfVf+opf9s+kct/WfXP2rpP4f+UUv/OfWPWvrPpX/U0n9u/aOW/u/QP2rp/079o5b+8+gftfSfV/+opf98+kct/efXP2rpv4D+UUv/BfWPWvovpH/U0n9h/aOW/u/SP2rp/279o5b+i+gftfRfVP+opf9i+kct/RfXP2rp/x79o5b+S+gftfR/r/5RS//36R+19H+//lFL/yX1j1r6L6V/1NJ/pP5RS/+l9Y9a+n9A/6il/zL6Ry39l9U/aum/nP5RS//l9Y9a+n9Q/6il/wr6Ry39P6R/1NL/w/pHLf1X1D9q6f8R/aOW/h/VP2rp/zH9o5b+H9c/aum/kv5RS/+V9Y9a+q+if9TSf1X9o5b+q+kftfT/hP5RS//V9Y9a+q+hf9TSf039o5b+n9Q/aun/Kf2jlv5r6R+19P+0/lFL/7X1j1r6r6N/1NJ/Xf2jlv7r6R+19P+M/lFL//X1j1r6b6B/1NJ/Q/2jlv4b6R+19N9Y/6il/yb6Ry39R+kftfTfVP+opf9n9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/T+nf9TSf2v9o5b+2+gftfTfVv+opf/n9Y9a+m+nf9TSf3v9o5b+O+gftfTfUf+opf9O+kct/XfWP2rpv4v+UUv/L+gftfT/ov5RS/9d9Y9a+u+mf9TSf3f9o5b+X9I/aun/Zf2jlv5f0T9q6f9V/aOW/nvoH7X0/5r+UUv/PfWPWvrvpX/U0n9v/aOW/vvoH7X0/7r+UUv/b+gftfT/pv5RS/9v6R+19N9X/6il/376Ry39v61/1NJ/f/2jlv7f0T9q6X+A/lFL/+/qH7X0/57+UUv/A/WPWvofpH/U0v/7+kct/Q/WP2rp/wP9o5b+P9Q/aun/I/2jlv4/1j9q6X+I/lFL/0P1j1r6H6Z/1NL/cP2jlv5H6B+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/+f6B+19D9W/6il/0/1j1r6/0z/qKX/z/WPWvr/Qv+opf8v9Y9a+h+nf9TS/1f6Ry39f61/1NL/eP2jlv4n6B+19D9R/6il/2/0j1r6/1b/qKX/7/SPWvqfpH/U0v9k/aOW/qfoH7X0/73+UUv/U/WPWvqfpn/U0v90/aOW/mfoH7X0/4P+UUv/P+oftfT/k/5RS/8z9Y9a+p+lf9TS/8/6Ry39z9Y/aun/F/2jlv5/1T9q6X+O/lFL/3P1j1r6/03/qKX/efpHLf3P1z9q6f93/aOW/hfoH7X0v1D/qKX/RfpHLf0v1j9q6X+J/lFL/0v1j1r6X6Z/1NL/cv2jlv5X6B+19L9S/6il/1X6Ry39r9Y/aul/jf5RS/9r9Y9a+l+nf9TS/3r9o5b+N+gftfS/Uf+opf9N+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v92/aOW/nfoH7X0v1P/qKX/XfpHLf3v1j9q6X+P/lFL/3v1j1r636d/1NL/fv2jlv4P6B+19H9Q/6il/0P6Ry39H9Y/aun/iP5RS/9H9Y9a+j+mf9TS/3H9o5b+T+gftfR/Uv+opf9T+kct/Z/WP2rp/4z+UUv/Z/WPWvo/p3/U0v95/aOS/hMP9I9a+g/RP2rpP1T/qKX/RPpHLf2H6R+19B+uf9TSf2L9o5b+k+gftfSfVP+opf9k+kct/SfXP2rp/zr9o5b+U+gftfSfUv+opf9U+kct/V+vf9TSf2r9o5b+0+gftfSfVv+opf8b9I9a+k+nf9TS/436Ry3936R/1NL/zfpHLf2n1z9q6f8W/aOW/jPoH7X0f6v+UUv/t+kftfSfUf+opf9M+kct/d+uf9TSf4T+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/7n1j1r6v0P/qKX/O/WPWvrPo3/U0n9e/aOW/vPpH7X0n1//qKX/AvpHLf0X1D9q6b+Q/lFL/4X1j1r6v0v/qKX/u/WPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/e/SPWvovoX/U0v+9+kct/d+nf9TS//36Ry39l9Q/aum/lP5RS/+R+kct/ZfWP2rp/wH9o5b+y+gftfRfVv+opf9y+kct/ZfXP2rp/0H9o5b+K+gftfT/kP5RS/8P6x+19F9R/6il/0f0j1r6f1T/qKX/x/SPWvp/XP+opf9K+kct/VfWP2rpv4r+UUv/VfWPWvqvpn/U0v8T+kct/VfXP2rpv4b+UUv/NfWPWvp/Uv+opf+n9I9a+q+lf9TS/9P6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TS/zP6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfQfpX/U0n9T/aOW/p/VP2rpv5n+UUv/zfWPWvpvoX/U0n9L/aOW/lvpH7X0/5z+UUv/rfWPWvpvo3/U0n9b/aOW/p/XP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/LvpHLf2/oH/U0v+L+kct/XfVP2rpv5v+UUv/3fWPWvp/Sf+opf+X9Y9a+n9F/6il/1f1j1r676F/1NL/a/pHLf331D9q6b+X/lFL/731j1r676N/1NL/6/pHLf2/oX/U0v+b+kct/b+lf9TSf1/9o5b+++kftfT/tv5RS//99Y9a+n9H/6il/wH6Ry39v6t/1NL/e/pHLf0P1D9q6X+Q/lFL/+/rH7X0P1j/qKX/D/SPWvr/UP+opf+P9I9a+v9Y/6il/yH6Ry39D9U/aul/mP5RS//D9Y9a+h+hf9TS/0j9o5b+R+kftfQ/Wv+opf8x+kct/X+if9TS/1j9o5b+P9U/aun/M/2jlv4/1z9q6f8L/aOW/r/UP2rpf5z+UUv/X+kftfT/tf5RS//j9Y9a+p+gf9TS/0T9o5b+v9E/aun/W/2jlv6/0z9q6X+S/lFL/5P1j1r6n6J/1NL/9/pHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/D/pHLf3/qH/U0v9P+kct/c/UP2rpf5b+UUv/P+sftfQ/W/+opf9f9I9a+v9V/6il/zn6Ry39z9U/aun/N/2jlv7n6R+19D9f/6il/9/1j1r6X6B/1NL/Qv2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aul/mf5RS//L9Y9a+l+hf9TS/0r9o5b+V+kftfS/Wv+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHLf2f1T9q6f+c/lFL/+f1j0r6TzLQP2rpP0T/qKX/UP2jlv4T6R+19B+mf9TSf7j+UUv/ifWPWvpPon/U0n9S/aOW/pPpH7X0n1z/qKX/6/SPWvpPoX/U0n9K/aOW/lPpH7X0f73+UUv/qfWPWvpPo3/U0n9a/aOW/m/QP2rpP53+UUv/N+oftfR/k/5RS/836x+19J9e/6il/1v0j1r6z6B/1NL/rfpHLf3fpn/U0n9G/aOW/jPpH7X0f7v+UUv/EfpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry3959Y/aun/Dv2jlv7v1D9q6T+P/lFL/3n1j1r6z6d/1NJ/fv2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aun/Lv2jlv7v1j9q6b+I/lFL/0X1j1r6L6Z/1NJ/cf2jlv7v0T9q6b+E/lFL//fqH7X0f5/+UUv/9+sftfRfUv+opf9S+kct/UfqH7X0X1r/qKX/B/SPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/B/WPWvqvoH/U0v9D+kct/T+sf9TSf0X9o5b+H9E/aun/Uf2jlv4f0z9q6f9x/aOW/ivpH7X0X1n/qKX/KvpHLf1X1T9q6b+a/lFL/0/oH7X0X13/qKX/GvpHLf3X1D9q6f9J/aOW/p/SP2rpv5b+UUv/T+sftfRfW/+opf86+kct/dfVP2rpv57+UUv/z+gftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0n+U/lFL/031j1r6f1b/qKX/ZvpHLf031z9q6b+F/lFL/y31j1r6b6V/1NL/c/pHLf231j9q6b+N/lFL/231j1r6f17/qKX/dvpHLf231z9q6b+D/lFL/x31j1r676R/1NJ/Z/2jlv676B+19P+C/lFL/y/qH7X031X/qKX/bvpHLf131z9q6f8l/aOW/l/WP2rp/xX9o5b+X9U/aum/h/5RS/+v6R+19N9T/6il/176Ry3999Y/aum/j/5RS/+v6x+19P+G/lFL/2/qH7X0/5b+UUv/ffWPWvrvp3/U0v/b+kct/ffXP2rp/x39o5b+B+gftfT/rv5RS//v6R+19D9Q/6il/0H6Ry39v69/1NL/YP2jlv4/0D9q6f9D/aOW/j/SP2rp/2P9o5b+h+gftfQ/VP+opf9h+kct/Q/XP2rpf4T+UUv/I/WPWvofpX/U0v9o/aOW/sfoH7X0/4n+UUv/Y/WPWvr/VP+opf/P9I9a+v9c/6il/y/0j1r6/1L/qKX/cfpHLf1/pX/U0v/X+kct/Y/XP2rpf4L+UUv/E/WPWvr/Rv+opf9v9Y9a+v9O/6il/0n6Ry39T9Y/aul/iv5RS//f6x+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8/6B+19P+j/lFL/z/pH7X0P1P/qKX/WfpHLf3/rH/U0v9s/aOW/n/RP2rp/1f9o5b+5+gftfQ/V/+opf/f9I9a+p+nf9TS/3z9o5b+f9c/aul/gf5RS/8L9Y9a+l+kf9TS/2L9o5b+l+gftfS/VP+opf9l+kct/S/XP2rpf4X+UUv/K/WPWvpfpX/U0v9q/aOW/tfoH7X0v1b/qKX/dfpHLf2v1z9q6X+D/lFL/xv1j1r636R/1NL/Zv2jlv636B+19L9V/6il/236Ry39b9c/aul/h/5RS/879Y9a+t+lf9TS/279o5b+9+gftfS/V/+opf99+kct/e/XP2rp/4D+UUv/B/WPWvo/pH/U0v9h/aOW/o/oH7X0f1T/qKX/Y/pHLf0f1z9q6f+E/lFL/yf1j1r6P6V/1NL/af2jlv7P6B+19H9W/6il/3P6Ry39n9c/Kuk/6UD/qKX/EP2jlv5D9Y9a+k+kf9TSf5j+UUv/4fpHLf0n1j9q6T+J/lFL/0n1j1r6T6Z/1NJ/cv2jlv6v0z9q6T+F/lFL/yn1j1r6T6V/1NL/9fpHLf2n1j9q6T+N/lFL/2n1j1r6v0H/qKX/dPpHLf3fqH/U0v9N+kct/d+sf9TSf3r9o5b+b9E/auk/g/5RS/+36h+19H+b/lFL/xn1j1r6z6R/1NL/7fpHLf1H6B+19J9Z/6il/yz6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfSfW/+opf879I9a+r9T/6il/zz6Ry3959U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf+79I9a+r9b/6il/yL6Ry39F9U/aum/mP5RS//F9Y9a+r9H/6il/xL6Ry3936t/1NL/ffpHLf3fr3/U0n9J/aOW/kvpH7X0H6l/1NJ/af2jlv4f0D9q6b+M/lFL/2X1j1r6L6d/1NJ/ef2jlv4f1D9q6b+C/lFL/w/pH7X0/7D+UUv/FfWPWvp/RP+opf9H9Y9a+n9M/6il/8f1j1r6r6R/1NJ/Zf2jlv6r6B+19F9V/6il/2r6Ry39P6F/1NJ/df2jlv5r6B+19F9T/6il/yf1j1r6f0r/qKX/WvpHLf0/rX/U0n9t/aOW/uvoH7X0X1f/qKX/evpHLf0/o3/U0n99/aOW/hvoH7X031D/qKX/RvpHLf031j9q6b+J/lFL/1H6Ry39N9U/aun/Wf2jlv6b6R+19N9c/6il/xb6Ry39t9Q/aum/lf5RS//P6R+19N9a/6il/zb6Ry39t9U/aun/ef2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TS/wv6Ry39v6h/1NJ/V/2jlv676R+19N9d/6il/5f0j1r6f1n/qKX/V/SPWvp/Vf+opf8e+kct/b+mf9TSf0/9o5b+e+kftfTfW/+opf8++kct/b+uf9TS/xv6Ry39v6l/1NL/W/pHLf331T9q6b+f/lFL/2/rH7X031//qKX/d/SPWvofoH/U0v+7+kct/b+nf9TS/0D9o5b+B+kftfT/vv5RS/+D9Y9a+v9A/6il/w/1j1r6/0j/qKX/j/WPWvofon/U0v9Q/aOW/ofpH7X0P1z/qKX/EfpHLf2P1D9q6X+U/lFL/6P1j1r6H6N/1NL/J/pHLf2P1T9q6f9T/aOW/j/TP2rp/3P9o5b+v9A/aun/S/2jlv7H6R+19P+V/lFL/1/rH7X0P17/qKX/CfpHLf1P1D9q6f8b/aOW/r/VP2rp/zv9o5b+J+kftfQ/Wf+opf8p+kct/X+vf9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/f+gf9TS/4/6Ry39/6R/1NL/TP2jlv5n6R+19P+z/lFL/7P1j1r6/0X/qKX/X/WPWvqfo3/U0v9c/aOW/n/TP2rpf57+UUv/8/WPWvr/Xf+opf8F+kct/S/UP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf2v1D9q6X+V/lFL/6v1j1r6X6N/1NL/Wv2jlv7X6R+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/1b9o5b+t+kftfS/Xf+opf8d+kct/e/UP2rpf5f+UUv/u/WPWvrfo3/U0v9e/aOW/vfpH7X0v1//qKX/A/pHLf0f1D9q6f+Q/lFL/4f1j1r6P6J/1NL/Uf2jlv6P6R+19H9c/6il/xP6Ry39n9Q/aun/lP5RS/+n9Y9a+j+jf9TS/1n9o5b+z+kftfR/Xv+opP9kA/2jlv5D9I9a+g/VP2rpP5H+UUv/YfpHLf2H6x+19J9Y/6il/yT6Ry39J9U/auk/mf5RS//J9Y9a+r9O/6il/xT6Ry39p9Q/auk/lf5RS//X6x+19J9a/6il/zT6Ry39p9U/aun/Bv2jlv7T6R+19H+j/lFL/zfpH7X0f7P+UUv/6fWPWvq/Rf+opf8M+kct/d+qf9TS/236Ry39Z9Q/auk/k/5RS/+36x+19B+hf9TSf2b9o5b+s+gftfSfVf+opf9s+kct/WfXP2rpP4f+UUv/OfWPWvrPpX/U0n9u/aOW/u/QP2rp/079o5b+8+gftfSfV/+opf98+kct/efXP/qv6w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw5IAAAAAAT9f92OQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4KAAD//xKe9GQ=") r0 = open(&(0x7f0000017140)='file_test0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0xe00000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xe00000) fallocate(r0, 0x3, 0x100000, 0x100000) fallocate(0xffffffffffffffff, 0x0, 0xe00000, 0x100000) 3.436343617s ago: executing program 4 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) 2.402630142s ago: executing program 4 (id=356): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) fcntl$dupfd(r0, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 2.227284226s ago: executing program 4 (id=357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x54}}, 0x0) 2.188499097s ago: executing program 2 (id=358): r0 = inotify_init() ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.910563994s ago: executing program 2 (id=361): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='100\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000800)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='300\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000900)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='400\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000a00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='8\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000b00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='16\x00', 0x3}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x6, 0x0, 0x0, 0x0, 0x0) 1.791859176s ago: executing program 1 (id=362): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 1.665239099s ago: executing program 2 (id=363): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 1.538687943s ago: executing program 5 (id=364): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) setns(0xc9, 0x0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x40, 0x6b9, 0x4061, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500", 0x3f) bind(r1, &(0x7f0000000300)=@generic={0x8, "ffff00002000"}, 0xc) 1.508232513s ago: executing program 1 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1.386839656s ago: executing program 2 (id=366): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) fcntl$dupfd(r0, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 1.195628721s ago: executing program 1 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x1d6b\x00', 0x6) r5 = openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0x0104\x00', 0x6) r6 = openat(r3, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r6, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r3, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r7 = openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r3, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r3, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r9 = openat(r3, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000580)='strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', r9, &(0x7f0000000700)='Loopback.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000780)='usbip-vudc.0\n\x00', 0xd) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000880)='5\x00', 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='6 ', 0x2}, {&(0x7f00000009c0)='0 3\n', 0x4}], 0x3) nanosleep(&(0x7f0000000a00)={0x0, 0x1dcd6500}, 0x0) 1.164914802s ago: executing program 2 (id=368): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='10', 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @multicast1, 0x4e24, 0x3, 'none\x00', 0x5, 0x5, 0x77}, {@remote, 0x4e20, 0x10002, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 983.816546ms ago: executing program 2 (id=369): syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000280)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@nobarrier}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x78, 0x38, 0x67, 0x6b, 0x32, 0xb61148b71cab6665]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x36e, 0x10000) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001100)={[{@clear_cache}, {@compress}, {@ssd_spread}, {@rescan_uuid_tree}, {@skip_balance}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) r2 = openat(r1, &(0x7f0000000140)='./file1\x00', 0x500, 0x112) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) ioctl$FITRIM(r2, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002480)={{r1}, 0x0, 0x0, @inherit={0x68, 0x0}, @subvolid=0x3}) 366.400181ms ago: executing program 1 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000440), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='10\x00', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) 164.663986ms ago: executing program 1 (id=371): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 1 (id=372): mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) kernel console output (not intermixed with test programs): 34633][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.544728][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.568620][ T4273] device veth0_vlan entered promiscuous mode [ 86.579671][ T4272] device veth1_vlan entered promiscuous mode [ 86.615927][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.625445][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.685465][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.695213][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.723243][ T4273] device veth1_vlan entered promiscuous mode [ 86.731562][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.740481][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.757415][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.767361][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.776296][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.808912][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.817243][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.826467][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.839379][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.847432][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.862742][ T4277] device veth0_vlan entered promiscuous mode [ 86.870289][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.891363][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.926449][ T4272] device veth0_macvtap entered promiscuous mode [ 86.946989][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.957699][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.980536][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.992956][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.009529][ T4280] device veth0_vlan entered promiscuous mode [ 87.036048][ T4277] device veth1_vlan entered promiscuous mode [ 87.055246][ T4272] device veth1_macvtap entered promiscuous mode [ 87.064010][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.076678][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.086354][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.095671][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.120489][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.145600][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.166441][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.187278][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.200442][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.210478][ T4280] device veth1_vlan entered promiscuous mode [ 87.230241][ T4273] device veth0_macvtap entered promiscuous mode [ 87.238688][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.247190][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.263800][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.273806][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.284347][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.294052][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.306214][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.316487][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.334285][ T4277] device veth0_macvtap entered promiscuous mode [ 87.352547][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.378718][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.406747][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.420461][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.439006][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.464842][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.475494][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.488845][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.501982][ T4277] device veth1_macvtap entered promiscuous mode [ 87.521691][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.532806][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.544744][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.554465][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.569994][ T4273] device veth1_macvtap entered promiscuous mode [ 87.582087][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.645002][ T4280] device veth0_macvtap entered promiscuous mode [ 87.688829][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.727660][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.748785][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.770957][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.785627][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.794650][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.807716][ T4359] loop3: detected capacity change from 0 to 64 [ 87.819731][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.869087][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.900784][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.966764][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.987491][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.003142][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.015258][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.025486][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.036333][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 88.036375][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 88.062443][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.076303][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.094090][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.108994][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 88.109014][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 88.115047][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 88.157381][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.189641][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.203060][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.215955][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.227139][ T4280] device veth1_macvtap entered promiscuous mode [ 88.242590][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.252114][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.262977][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.273971][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.285033][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.295726][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.319566][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.338599][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.355580][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.366462][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.381008][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.391991][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.404321][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.416015][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.426309][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.437922][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.447038][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.484092][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.506230][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.522509][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.532037][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542542][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.553427][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.574131][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.587097][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.600058][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.610883][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.621551][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.632416][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.642648][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.653523][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.665930][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.698275][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.714676][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.745137][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.759422][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.769796][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.781393][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.791643][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.802612][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.812859][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.826782][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.840246][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.896364][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.906808][ T4361] loop3: detected capacity change from 0 to 32768 [ 88.924880][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.938949][ T4361] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (4361) [ 88.953044][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.979530][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.000278][ T4361] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.001805][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.020531][ T4361] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 89.031806][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.042415][ T4361] BTRFS info (device loop3): setting nodatasum [ 89.052960][ T4361] BTRFS info (device loop3): using free space tree [ 89.144343][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.172985][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.194556][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.201945][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.202012][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.241981][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.320615][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.351015][ T4361] BTRFS info (device loop3): enabling ssd optimizations [ 89.366466][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.421204][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.429227][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.438002][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.502253][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.515886][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.540271][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.557978][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.637978][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.673254][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.719501][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.752557][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.774045][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.842364][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.897876][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.945928][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.073919][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.083447][ T4387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.201243][ T4386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.528283][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.537349][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.537487][ T4395] loop2: detected capacity change from 0 to 32768 [ 91.723618][ T4395] XFS (loop2): Mounting V5 Filesystem [ 91.923392][ T4393] loop1: detected capacity change from 0 to 32768 [ 91.936689][ T4393] ======================================================= [ 91.936689][ T4393] WARNING: The mand mount option has been deprecated and [ 91.936689][ T4393] and is ignored by this kernel. Remove the mand [ 91.936689][ T4393] option from the mount to silence this warning. [ 91.936689][ T4393] ======================================================= [ 91.979354][ T127] cfg80211: failed to load regulatory.db [ 91.998272][ T4395] XFS (loop2): Ending clean mount [ 92.006806][ T4393] xfs: Bad value for 'logbufs' [ 92.086546][ T4395] XFS (loop2): Quotacheck needed: Please wait. [ 92.121579][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.179320][ T4395] XFS (loop2): Quotacheck: Done. [ 92.838429][ T4417] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.383219][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.522623][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.639628][ T4420] loop3: detected capacity change from 0 to 32768 [ 93.682293][ T4420] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.8 (4420) [ 93.821526][ T4420] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 93.854471][ T4420] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.891643][ T4420] BTRFS info (device loop3): enabling ssd optimizations [ 93.923746][ T4420] BTRFS info (device loop3): not using ssd optimizations [ 93.943548][ T4420] BTRFS info (device loop3): turning off barriers [ 93.975074][ T4420] BTRFS info (device loop3): use no compression [ 94.003662][ T4420] BTRFS info (device loop3): using free space tree [ 94.533072][ T4417] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.575154][ T4417] usb 3-1: no configurations [ 94.608640][ T4417] usb 3-1: can't read configurations, error -22 [ 94.632153][ T4422] loop1: detected capacity change from 0 to 32768 [ 94.670768][ T4422] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.9 (4422) [ 94.695881][ T4280] XFS (loop2): Unmounting Filesystem [ 94.780953][ T4422] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.799903][ T4422] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 94.812151][ T4422] BTRFS info (device loop1): use zlib compression, level 3 [ 94.829988][ T4422] BTRFS info (device loop1): using free space tree [ 94.868277][ T4274] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 94.952933][ T4385] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.988524][ T4385] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.997510][ T4385] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.078243][ T4385] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.104340][ T4422] BTRFS info (device loop1): enabling ssd optimizations [ 95.132746][ T4383] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop3 scanned by udevd (4383) [ 95.850592][ T4272] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 96.712127][ T4460] loop3: detected capacity change from 0 to 32768 [ 96.751012][ T4460] XFS (loop3): Mounting V5 Filesystem [ 96.821947][ T4460] XFS (loop3): Ending clean mount [ 96.877558][ T4460] XFS (loop3): Quotacheck needed: Please wait. [ 97.000442][ T4460] XFS (loop3): Quotacheck: Done. [ 97.189890][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.197912][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.326365][ T4274] XFS (loop3): Unmounting Filesystem [ 97.653535][ T4497] loop4: detected capacity change from 0 to 32768 [ 97.784273][ T4497] JBD2: Ignoring recovery information on journal [ 97.923156][ T4469] loop0: detected capacity change from 0 to 65536 [ 97.954525][ T4497] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.062290][ T27] audit: type=1800 audit(1785478871.978:2): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 98.088290][ T4469] XFS (loop0): Mounting V5 Filesystem [ 98.180669][ T4469] XFS (loop0): Ending clean mount [ 98.199837][ T4469] XFS (loop0): Quotacheck needed: Please wait. [ 98.278464][ T4469] XFS (loop0): Quotacheck: Done. [ 98.358751][ T4469] XFS (loop0): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 98.491035][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.556891][ T4277] XFS (loop0): Unmounting Filesystem [ 98.600112][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.125701][ T4515] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.256295][ T4497] (syz.4.15,4497,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 99.695986][ T4464] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.714283][ T4464] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.723447][ T4464] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.732768][ T4464] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.766114][ T4497] syz.4.15 (4497) used greatest stack depth: 18432 bytes left [ 99.924730][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 99.962054][ T4473] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.014382][ T4465] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 100.063372][ T4465] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.085319][ T4468] bridge0: port 3(syz_tun) entered blocking state [ 100.104283][ T4468] bridge0: port 3(syz_tun) entered disabled state [ 100.120907][ T4468] device syz_tun entered promiscuous mode [ 100.150898][ T4477] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 100.168408][ T4473] usb 4-1: Using ep0 maxpacket: 32 [ 100.176171][ T4473] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 100.195477][ T4477] bridge0: port 3(syz_tun) entered blocking state [ 100.202347][ T4477] bridge0: port 3(syz_tun) entered forwarding state [ 100.228262][ T4473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 100.276561][ T4473] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.277342][ T4477] bridge0: port 3(syz_tun) entered disabled state [ 100.313756][ T4473] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.332287][ T4473] usb 4-1: Product: syz [ 100.346782][ T4473] usb 4-1: Manufacturer: syz [ 100.357392][ T4473] usb 4-1: SerialNumber: syz [ 100.418427][ T4473] usb 4-1: config 0 descriptor?? [ 100.493105][ T4473] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.565360][ T4473] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 100.738791][ T4414] usb 4-1: USB disconnect, device number 2 [ 100.744888][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 100.775585][ T4414] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 100.967803][ T4523] ldusb: No device or device unplugged -19 [ 101.017811][ T4525] loop4: detected capacity change from 0 to 32768 [ 101.066833][ T4525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.20 (4525) [ 101.128532][ T4525] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.146068][ T4525] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 101.155911][ T4525] BTRFS info (device loop4): enabling auto defrag [ 101.162941][ T4525] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.177317][ T4532] device syzkaller0 entered promiscuous mode [ 101.223242][ T4525] BTRFS info (device loop4): use zstd compression, level 3 [ 101.244740][ T4525] BTRFS info (device loop4): turning on async discard [ 101.300340][ T4525] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 101.328671][ T4525] BTRFS info (device loop4): trying to use backup root at mount time [ 101.357433][ T4525] BTRFS info (device loop4): enabling ssd optimizations [ 101.378228][ T4525] BTRFS info (device loop4): using spread ssd allocation scheme [ 101.385975][ T4525] BTRFS info (device loop4): setting nodatacow, compression disabled [ 101.430642][ T4525] BTRFS info (device loop4): using free space tree [ 101.516721][ T4528] loop2: detected capacity change from 0 to 32768 [ 101.615757][ T4528] XFS (loop2): Mounting V5 Filesystem [ 101.793702][ T76] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 101.856074][ T4525] BTRFS error (device loop4): failed to load root extent [ 101.872614][ T4528] XFS (loop2): Ending clean mount [ 101.889264][ T4525] BTRFS warning (device loop4): try to load backup roots slot 1 [ 101.940104][ T4299] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 101.977165][ T4525] BTRFS warning (device loop4): couldn't read tree root [ 101.988036][ T4525] BTRFS warning (device loop4): try to load backup roots slot 2 [ 102.035152][ T4525] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 102.067069][ T4525] BTRFS warning (device loop4): couldn't read tree root [ 102.083687][ T4525] BTRFS warning (device loop4): try to load backup roots slot 3 [ 102.193736][ T4525] BTRFS info (device loop4): rebuilding free space tree [ 102.327483][ T4525] BTRFS info (device loop4): checking UUID tree [ 102.334783][ T4280] XFS (loop2): Unmounting Filesystem [ 102.424570][ T4536] loop1: detected capacity change from 0 to 32768 [ 102.560944][ T4536] add_index: next_index = 0. Resetting! [ 102.566934][ T4536] find_entry called with index >= next_index [ 102.621197][ T4536] find_entry called with index >= next_index [ 102.627280][ T4536] find_entry called with index >= next_index [ 102.709255][ T4536] find_entry called with index >= next_index [ 102.750260][ T4577] find_entry called with index >= next_index [ 102.756355][ T4577] find_entry called with index >= next_index [ 102.842354][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.857981][ T4577] find_entry called with index >= next_index [ 102.878246][ T4577] find_entry called with index >= next_index [ 102.904489][ T4577] find_entry called with index >= next_index [ 102.913523][ T4577] find_entry called with index >= next_index [ 102.967734][ T4578] find_entry called with index >= next_index [ 104.665619][ T4589] loop4: detected capacity change from 0 to 65536 [ 104.732079][ T4600] loop1: detected capacity change from 0 to 32768 [ 104.746398][ T4600] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.40 (4600) [ 104.779229][ T4600] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 104.808650][ T4600] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 104.828493][ T4600] BTRFS error (device loop1): superblock checksum mismatch [ 104.871319][ T4589] XFS (loop4): Mounting V5 Filesystem [ 104.905184][ T4600] BTRFS error (device loop1): open_ctree failed: -22 [ 104.912596][ T4609] loop3: detected capacity change from 0 to 32768 [ 104.944415][ T4609] JBD2: Ignoring recovery information on journal [ 104.994458][ T4589] XFS (loop4): Ending clean mount [ 105.024005][ T4589] XFS (loop4): Quotacheck needed: Please wait. [ 105.106742][ T4609] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.133744][ T4589] XFS (loop4): Quotacheck: Done. [ 105.386214][ T4362] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4362) [ 106.826879][ T27] audit: type=1800 audit(1785478880.738:3): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 106.893971][ T4273] XFS (loop4): Unmounting Filesystem [ 106.903137][ T27] audit: type=1800 audit(1785478880.738:4): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 107.320912][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 107.617203][ T4650] loop0: detected capacity change from 0 to 32768 [ 107.771054][ T4650] XFS (loop0): Mounting V5 Filesystem [ 107.962258][ T4650] XFS (loop0): Ending clean mount [ 107.995962][ T4650] XFS (loop0): Quotacheck needed: Please wait. [ 108.136862][ T4650] XFS (loop0): Quotacheck: Done. [ 108.334502][ T4277] XFS (loop0): Unmounting Filesystem [ 108.668368][ T4414] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.730903][ T4654] loop2: detected capacity change from 0 to 65536 [ 108.868920][ T4414] usb 1-1: Dual-Role OTG device on HNP port [ 108.896475][ T4654] XFS (loop2): Mounting V5 Filesystem [ 108.902229][ T4414] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.01 [ 108.928344][ T4414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.951203][ T4414] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 109.053602][ T4654] XFS (loop2): Ending clean mount [ 109.068973][ T4670] loop4: detected capacity change from 0 to 32768 [ 109.141006][ T4672] loop1: detected capacity change from 0 to 40427 [ 109.162111][ T4670] XFS (loop4): Mounting V5 Filesystem [ 109.248668][ T4672] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x3ffff [ 109.281442][ T4280] XFS (loop2): Unmounting Filesystem [ 109.383409][ T4670] XFS (loop4): Ending clean mount [ 109.408152][ T130] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.430047][ T4670] XFS (loop4): Quotacheck needed: Please wait. [ 109.529901][ T4670] XFS (loop4): Quotacheck: Done. [ 109.598239][ T130] usb 4-1: Using ep0 maxpacket: 8 [ 109.606297][ T130] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 109.644444][ T130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.704219][ T130] usbsevseg 4-1:1.0: USB 7 Segment device now attached [ 109.754489][ T4273] XFS (loop4): Unmounting Filesystem [ 110.705067][ T4704] loop1: detected capacity change from 0 to 32768 [ 110.906284][ T4414] usb 4-1: USB disconnect, device number 3 [ 110.919918][ T4414] usbsevseg 4-1:1.0: USB 7 Segment now disconnected [ 111.605103][ T4327] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.668346][ T27] audit: type=1800 audit(1785478885.578:5): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.77" name="idVendor" dev="configfs" ino=35523 res=0 errno=0 [ 111.704937][ T27] audit: type=1800 audit(1785478885.588:6): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.77" name="idProduct" dev="configfs" ino=35524 res=0 errno=0 [ 111.745519][ T4736] usbip-vudc usbip-vudc.0: gadget not bound [ 111.781224][ T27] audit: type=1800 audit(1785478885.588:7): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.77" name="serialnumber" dev="configfs" ino=35526 res=0 errno=0 [ 111.826865][ T4327] usb 3-1: Using ep0 maxpacket: 8 [ 111.835426][ T4736] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 111.842572][ T4736] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.860067][ T4327] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 111.868390][ T27] audit: type=1800 audit(1785478885.608:8): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.77" name="UDC" dev="configfs" ino=35529 res=0 errno=0 [ 111.925882][ T4736] vhci_hcd vhci_hcd.0: Device attached [ 111.965231][ T4327] usb 3-1: config 0 has no interface number 0 [ 111.977267][ T4327] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 112.002263][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.029212][ T4327] usb 3-1: config 0 descriptor?? [ 112.072949][ T4726] loop1: detected capacity change from 0 to 32768 [ 112.103441][ T27] audit: type=1800 audit(1785478886.018:9): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 112.163251][ T4327] viperboard 3-1:0.143: version 0.00 found at bus 003 address 004 [ 112.198263][ T4411] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 112.247266][ T4728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.258769][ T4728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.263902][ T4327] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 112.297504][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.311572][ T4327] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 112.324337][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.336235][ T4737] vhci_hcd: connection reset by peer [ 112.362574][ T4337] vhci_hcd: stop threads [ 112.386335][ T4337] vhci_hcd: release socket [ 112.397724][ T4337] vhci_hcd: disconnect device [ 112.473025][ T130] usb 3-1: USB disconnect, device number 4 [ 112.557685][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.585441][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.002978][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.055427][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.101255][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.166685][ T4762] device bridge_slave_0 left promiscuous mode [ 113.206742][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.236520][ T4762] device bridge_slave_1 left promiscuous mode [ 113.248828][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.289066][ T4762] bond0: (slave bond_slave_0): Releasing backup interface [ 113.333397][ T4762] bond0: (slave bond_slave_1): Releasing backup interface [ 113.432980][ T4762] team0: Port device team_slave_0 removed [ 113.480309][ T4762] team0: Port device team_slave_1 removed [ 113.501211][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.519509][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.544322][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.568982][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.615428][ T4765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 113.707573][ T4765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.786861][ T4760] loop3: detected capacity change from 0 to 40427 [ 113.821696][ T4766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.851422][ T4760] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 113.873510][ T4760] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.940584][ T4760] F2FS-fs (loop3): invalid crc value [ 114.000979][ T4760] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.212277][ T4760] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.228623][ T4760] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.335673][ T4770] loop4: detected capacity change from 0 to 65536 [ 114.462352][ T4770] XFS (loop4): Mounting V5 Filesystem [ 114.542052][ T4770] XFS (loop4): Ending clean mount [ 114.611501][ T4770] XFS (loop4): Quotacheck needed: Please wait. [ 114.668784][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 114.714108][ T4770] XFS (loop4): Quotacheck: Done. [ 114.803514][ T127] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x8004 [ 114.863521][ T127] XFS (loop4): Unmount and run xfs_repair [ 114.914818][ T127] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 114.937521][ T127] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 114.964411][ T127] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 114.975757][ T4784] loop2: detected capacity change from 0 to 32768 [ 114.995286][ T127] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 115.014388][ T127] 00000030: 00 00 00 01 21 53 59 0a 00 00 00 05 00 00 00 03 ....!SY......... [ 115.040243][ T127] 00000040: 00 00 07 a4 00 00 3b 5c 00 00 00 00 00 00 00 00 ......;\........ [ 115.079478][ T127] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.095631][ T127] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.106175][ T127] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.120592][ T4770] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8004 len 2 error 74 [ 115.167829][ T4784] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.219476][ T4784] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 115.245355][ T4784] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.286690][ T4784] BTRFS info (device loop2): use zstd compression, level 3 [ 115.307318][ T4273] XFS (loop4): Unmounting Filesystem [ 115.323705][ T4784] BTRFS info (device loop2): using free space tree [ 115.447042][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.504681][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.612442][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.629703][ T4784] BTRFS info (device loop2): enabling ssd optimizations [ 115.671623][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.986921][ T4280] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.028558][ T4417] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.247428][ T4417] usb 4-1: config index 0 descriptor too short (expected 32, got 21) [ 116.266244][ T4417] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 116.285329][ T4813] loop1: detected capacity change from 0 to 32768 [ 116.292542][ T4417] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.314271][ T4417] usb 4-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice= 0.00 [ 116.323821][ T4417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.332466][ T4417] usb 4-1: Product: syz [ 116.336763][ T4417] usb 4-1: Manufacturer: syz [ 116.341896][ T4417] usb 4-1: SerialNumber: syz [ 116.351598][ T4417] ftdi_sio 4-1:1.0: FTDI USB Serial Device converter detected [ 116.361557][ T4417] usb 4-1: Detected SIO [ 116.367638][ T4417] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.441266][ T4813] XFS (loop1): Mounting V5 Filesystem [ 116.661923][ T4813] XFS (loop1): Ending clean mount [ 116.705549][ T4813] XFS (loop1): Quotacheck needed: Please wait. [ 116.748589][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 116.880326][ T4813] XFS (loop1): Quotacheck: Done. [ 117.086820][ T4272] XFS (loop1): Unmounting Filesystem [ 117.308286][ T4411] vhci_hcd: vhci_device speed not set [ 117.633140][ T127] usb 4-1: USB disconnect, device number 4 [ 117.654771][ T127] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.672380][ T127] ftdi_sio 4-1:1.0: device disconnected [ 117.738598][ T4860] loop2: detected capacity change from 0 to 32768 [ 117.785199][ T4860] add_index: next_index = 0. Resetting! [ 117.799372][ T4860] find_entry called with index >= next_index [ 117.820929][ T4860] find_entry called with index >= next_index [ 117.862738][ T4860] find_entry called with index >= next_index [ 117.888990][ T4860] find_entry called with index >= next_index [ 118.399067][ T4878] Zero length message leads to an empty skb [ 118.408339][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.446270][ T4864] loop1: detected capacity change from 0 to 32768 [ 118.533709][ T4864] add_index: next_index = 0. Resetting! [ 118.548211][ T4864] find_entry called with index >= next_index [ 118.555318][ T4864] find_entry called with index >= next_index [ 118.608241][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 118.617076][ T4318] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 118.625629][ T4864] find_entry called with index >= next_index [ 118.644962][ T4318] usb 3-1: config 0 has no interface number 0 [ 118.649016][ T4864] find_entry called with index >= next_index [ 118.674456][ T4318] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 118.698534][ T4882] find_entry called with index >= next_index [ 118.713568][ T4882] find_entry called with index >= next_index [ 118.715260][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.748628][ T4882] find_entry called with index >= next_index [ 118.758829][ T4882] find_entry called with index >= next_index [ 118.767241][ T4882] find_entry called with index >= next_index [ 118.799205][ T4318] usb 3-1: config 0 descriptor?? [ 118.818860][ T4882] find_entry called with index >= next_index [ 118.918708][ T4318] viperboard 3-1:0.143: version 0.00 found at bus 003 address 005 [ 118.976678][ T4318] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 118.988269][ T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.007575][ T4318] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 119.017391][ T4874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.038522][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.181965][ T127] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.249877][ T127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.290221][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.307979][ T4870] loop0: detected capacity change from 0 to 32768 [ 119.328164][ T127] usb 5-1: SerialNumber: syz [ 119.373795][ T4417] usb 3-1: USB disconnect, device number 5 [ 119.529158][ T4870] XFS (loop0): Mounting V5 Filesystem [ 119.682031][ T4870] XFS (loop0): Ending clean mount [ 119.693444][ T4870] XFS (loop0): Quotacheck needed: Please wait. [ 119.774874][ T4870] XFS (loop0): Quotacheck: Done. [ 119.856616][ T27] audit: type=1804 audit(1785478893.768:10): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.111" name="/newroot/19/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 119.948601][ T27] audit: type=1804 audit(1785478893.798:11): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.111" name="/newroot/19/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 120.030977][ T127] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 120.105541][ T4277] XFS (loop0): Unmounting Filesystem [ 120.430784][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 0 < 1 [ 120.475949][ T4894] loop3: detected capacity change from 0 to 32768 [ 120.558503][ T4894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.121 (4894) [ 120.646077][ T4894] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.688247][ T4894] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 120.697002][ T4894] BTRFS info (device loop3): force clearing of disk cache [ 120.759565][ T4894] BTRFS info (device loop3): enabling auto defrag [ 120.778340][ T4894] BTRFS info (device loop3): max_inline at 428 [ 120.784598][ T4894] BTRFS info (device loop3): enabling disk space caching [ 120.818179][ T4894] BTRFS info (device loop3): disk space caching is enabled [ 120.840602][ T4903] loop1: detected capacity change from 0 to 32768 [ 120.903177][ T4903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.122 (4903) [ 121.005890][ T4903] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.024045][ T4894] BTRFS info (device loop3): enabling ssd optimizations [ 121.028670][ T4903] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 121.035770][ T4894] BTRFS info (device loop3): rebuilding free space tree [ 121.062039][ T4894] BTRFS info (device loop3): disabling free space tree [ 121.069801][ T4894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.081674][ T4894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.147004][ T4903] BTRFS info (device loop1): setting nodatacow, compression disabled [ 121.192232][ T4940] loop0: detected capacity change from 0 to 4096 [ 121.203612][ T4903] BTRFS info (device loop1): setting datasum, datacow enabled [ 121.252199][ T4903] BTRFS info (device loop1): force clearing of disk cache [ 121.283232][ T4903] BTRFS info (device loop1): enabling ssd optimizations [ 121.346653][ T4903] BTRFS info (device loop1): using spread ssd allocation scheme [ 121.380566][ T4903] BTRFS info (device loop1): turning on sync discard [ 121.440483][ T4903] BTRFS info (device loop1): turning on flush-on-commit [ 121.453484][ T4903] BTRFS info (device loop1): not using ssd optimizations [ 121.467758][ T4903] BTRFS info (device loop1): not using spread ssd allocation scheme [ 121.478940][ T4903] BTRFS info (device loop1): using free space tree [ 121.701278][ T4884] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.779751][ T4903] BTRFS info (device loop1): rebuilding free space tree [ 121.839492][ T4526] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 121.873360][ T4411] usb 5-1: USB disconnect, device number 2 [ 121.880575][ T4411] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 122.011855][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.306537][ T4914] loop2: detected capacity change from 0 to 32768 [ 122.583535][ T4914] JBD2: Ignoring recovery information on journal [ 122.870009][ T4914] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 123.315705][ T4280] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 123.363701][ T4280] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 123.388987][ T4272] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.417502][ T4280] OCFS2: File system is now read-only. [ 123.447336][ T4280] (syz-executor,4280,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 123.478511][ T4280] (syz-executor,4280,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 123.498205][ T4280] (syz-executor,4280,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 123.527250][ T4280] (syz-executor,4280,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 123.563806][ T4280] (syz-executor,4280,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 123.627796][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 123.739691][ T4971] loop4: detected capacity change from 0 to 32768 [ 123.844627][ T4971] add_index: next_index = 0. Resetting! [ 123.867335][ T4971] find_entry called with index >= next_index [ 123.905105][ T4971] find_entry called with index >= next_index [ 123.947531][ T4971] find_entry called with index >= next_index [ 123.973105][ T4971] find_entry called with index >= next_index [ 124.008691][ T4986] find_entry called with index >= next_index [ 124.015259][ T4986] find_entry called with index >= next_index [ 124.027832][ T4986] find_entry called with index >= next_index [ 124.053863][ T4985] loop0: detected capacity change from 4096 to 4095 [ 124.079691][ T4986] find_entry called with index >= next_index [ 124.106186][ T4986] find_entry called with index >= next_index [ 124.140884][ T4986] find_entry called with index >= next_index [ 124.618716][ T4996] Mass Storage Function, version: 2009/09/11 [ 124.625344][ T4996] LUN: removable file: (no medium) [ 124.697502][ T27] audit: type=1800 audit(1785478898.608:12): pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.133" name="cdrom" dev="configfs" ino=34501 res=0 errno=0 [ 124.788457][ T27] audit: type=1800 audit(1785478898.658:13): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.133" name="file" dev="configfs" ino=34504 res=0 errno=0 [ 124.903189][ T27] audit: type=1800 audit(1785478898.708:14): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.133" name="UDC" dev="configfs" ino=34505 res=0 errno=0 [ 125.169334][ T27] audit: type=1800 audit(1785478899.088:15): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="idVendor" dev="configfs" ino=35784 res=0 errno=0 [ 125.215628][ T4977] loop3: detected capacity change from 0 to 65536 [ 125.280549][ T27] audit: type=1800 audit(1785478899.138:16): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="idProduct" dev="configfs" ino=35785 res=0 errno=0 [ 125.427298][ T4977] XFS (loop3): Mounting V5 Filesystem [ 125.448522][ T27] audit: type=1800 audit(1785478899.158:17): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="serialnumber" dev="configfs" ino=35786 res=0 errno=0 [ 125.567327][ T4977] XFS (loop3): Ending clean mount [ 125.648568][ T4977] XFS (loop3): Quotacheck needed: Please wait. [ 125.667613][ T4299] XFS (loop3): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x8002 [ 125.693757][ T14] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 125.727997][ T4299] XFS (loop3): Unmount and run xfs_repair [ 125.734451][ T14] XFS (loop3): Unmount and run xfs_repair [ 125.752686][ T4299] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 125.765531][ T14] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 125.813505][ T14] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 125.825006][ T4299] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 125.854692][ T4299] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 125.866419][ T14] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 125.915631][ T4299] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.925233][ T14] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 125.968183][ T4299] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.977143][ T4299] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.986617][ T14] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 126.008863][ T14] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 126.028411][ T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 126.048191][ T4299] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 126.057142][ T4299] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 126.078326][ T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.118186][ T14] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.127175][ T9] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 126.140034][ T4299] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 126.161735][ T4299] XFS (loop3): metadata I/O error in "xfs_read_agi+0x2a2/0x660" at daddr 0x8002 len 1 error 74 [ 126.180276][ T4977] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 126.348010][ T4274] XFS (loop3): Unmounting Filesystem [ 126.431117][ T5002] loop2: detected capacity change from 0 to 32768 [ 126.643835][ T5002] XFS (loop2): Mounting V5 Filesystem [ 126.780877][ T5046] loop1: detected capacity change from 0 to 32768 [ 126.802389][ T5046] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.145 (5046) [ 126.835593][ T5046] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 126.874547][ T5046] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 126.898631][ T5046] BTRFS info (device loop1): enabling disk space caching [ 126.919409][ T5002] XFS (loop2): Ending clean mount [ 126.934503][ T5002] XFS (loop2): Quotacheck needed: Please wait. [ 126.940117][ T5046] BTRFS info (device loop1): force clearing of disk cache [ 126.978316][ T5046] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 127.034595][ T5046] BTRFS info (device loop1): use zstd compression, level 3 [ 127.065430][ T5002] XFS (loop2): Quotacheck: Done. [ 127.065711][ T5046] BTRFS info (device loop1): disk space caching is enabled [ 127.149495][ T27] audit: type=1804 audit(1785478901.068:18): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.135" name="/newroot/27/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 127.261902][ T5040] loop4: detected capacity change from 0 to 32768 [ 127.262923][ T4280] XFS (loop2): Unmounting Filesystem [ 127.280354][ T27] audit: type=1804 audit(1785478901.088:19): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.135" name="/newroot/27/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 127.354090][ T5040] XFS (loop4): Mounting V5 Filesystem [ 127.410022][ T5045] loop0: detected capacity change from 0 to 32768 [ 127.427278][ T5046] BTRFS info (device loop1): enabling ssd optimizations [ 127.436738][ T5046] BTRFS info (device loop1): rebuilding free space tree [ 127.469793][ T5046] BTRFS info (device loop1): disabling free space tree [ 127.485053][ T5045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.146 (5045) [ 127.514961][ T5045] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.518510][ T5046] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.545434][ T5046] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.597061][ T5040] XFS (loop4): Ending clean mount [ 127.627700][ T5040] XFS (loop4): Quotacheck needed: Please wait. [ 127.659332][ T5045] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 127.681400][ T5045] BTRFS info (device loop0): using free space tree [ 127.798830][ T5040] XFS (loop4): Quotacheck: Done. [ 127.857307][ T5045] BTRFS info (device loop0): enabling ssd optimizations [ 127.906323][ T5040] 9pnet_virtio: no channels available for device syz [ 128.153658][ T4277] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.177434][ T4272] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 128.210636][ T27] audit: type=1800 audit(1785478902.128:20): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.149" name="idVendor" dev="configfs" ino=34678 res=0 errno=0 [ 128.305073][ T27] audit: type=1800 audit(1785478902.158:21): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.149" name="idProduct" dev="configfs" ino=34679 res=0 errno=0 [ 128.420455][ T27] audit: type=1800 audit(1785478902.168:22): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.149" name="serialnumber" dev="configfs" ino=34680 res=0 errno=0 [ 128.520497][ T27] audit: type=1800 audit(1785478902.178:23): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.149" name="UDC" dev="configfs" ino=34681 res=0 errno=0 [ 128.916326][ T5109] loop3: detected capacity change from 0 to 256 [ 129.021151][ T4273] XFS (loop4): Unmounting Filesystem [ 129.233100][ T5109] FAT-fs (loop3): Directory bread(block 64) failed [ 129.273581][ T5109] FAT-fs (loop3): Directory bread(block 65) failed [ 129.319260][ T5109] FAT-fs (loop3): Directory bread(block 66) failed [ 129.325916][ T5109] FAT-fs (loop3): Directory bread(block 67) failed [ 129.397637][ T5109] FAT-fs (loop3): Directory bread(block 68) failed [ 129.432330][ T5109] FAT-fs (loop3): Directory bread(block 69) failed [ 129.461107][ T5109] FAT-fs (loop3): Directory bread(block 70) failed [ 129.495679][ T5109] FAT-fs (loop3): Directory bread(block 71) failed [ 129.532529][ T5109] FAT-fs (loop3): Directory bread(block 72) failed [ 129.559302][ T5109] FAT-fs (loop3): Directory bread(block 73) failed [ 130.214599][ T5107] loop0: detected capacity change from 0 to 32768 [ 130.294485][ T5107] add_index: next_index = 0. Resetting! [ 130.313041][ T5107] find_entry called with index >= next_index [ 130.332415][ T5107] find_entry called with index >= next_index [ 130.343820][ T5107] find_entry called with index >= next_index [ 130.368339][ T5123] svc: failed to register lockdv1 RPC service (errno 111). [ 130.383889][ T5107] find_entry called with index >= next_index [ 130.407541][ T5130] find_entry called with index >= next_index [ 130.414299][ T5123] lockd_up: makesock failed, error=-111 [ 130.438580][ T5130] find_entry called with index >= next_index [ 130.444691][ T5130] find_entry called with index >= next_index [ 130.513322][ T5130] find_entry called with index >= next_index [ 130.531152][ T5130] find_entry called with index >= next_index [ 130.537295][ T5130] find_entry called with index >= next_index [ 130.609533][ T5131] find_entry called with index >= next_index [ 131.109632][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 131.109650][ T27] audit: type=1800 audit(1785478905.028:27): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name="cdrom" dev="configfs" ino=36092 res=0 errno=0 [ 131.113741][ T5128] loop1: detected capacity change from 0 to 32768 [ 131.144547][ T27] audit: type=1800 audit(1785478905.058:28): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name="file" dev="configfs" ino=36093 res=0 errno=0 [ 131.256624][ T5128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.158 (5128) [ 131.269711][ T27] audit: type=1800 audit(1785478905.088:29): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.162" name="idVendor" dev="configfs" ino=34748 res=0 errno=0 [ 131.394444][ T27] audit: type=1800 audit(1785478905.088:30): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.162" name="idProduct" dev="configfs" ino=34749 res=0 errno=0 [ 131.420429][ T5128] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.452486][ T5128] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 131.488411][ T27] audit: type=1800 audit(1785478905.088:31): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.162" name="serialnumber" dev="configfs" ino=34750 res=0 errno=0 [ 131.515849][ T5128] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.585736][ T5128] BTRFS info (device loop1): trying to use backup root at mount time [ 131.606782][ T27] audit: type=1800 audit(1785478905.098:32): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.162" name="UDC" dev="configfs" ino=34751 res=0 errno=0 [ 131.658185][ T5128] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 131.733001][ T5128] BTRFS info (device loop1): use lzo compression, level 0 [ 131.754272][ T27] audit: type=1800 audit(1785478905.378:33): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.163" name="cdrom" dev="configfs" ino=34764 res=0 errno=0 [ 131.785003][ T5128] BTRFS info (device loop1): turning on flush-on-commit [ 131.811347][ T5128] BTRFS info (device loop1): using free space tree [ 131.843278][ T27] audit: type=1800 audit(1785478905.428:34): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.164" name="idVendor" dev="configfs" ino=36098 res=0 errno=0 [ 132.020852][ T27] audit: type=1800 audit(1785478905.428:35): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.164" name="idProduct" dev="configfs" ino=36099 res=0 errno=0 [ 132.042055][ T27] audit: type=1800 audit(1785478905.428:36): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.164" name="serialnumber" dev="configfs" ino=36100 res=0 errno=0 [ 132.115242][ T5128] BTRFS info (device loop1): enabling ssd optimizations [ 132.363338][ T4272] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.687966][ T5183] syz.4.174 uses obsolete (PF_INET,SOCK_PACKET) [ 132.912807][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922407][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.394194][ T5197] CIFS: Attempting to mount \\127.0.0.1\share [ 133.407938][ T5177] loop0: detected capacity change from 0 to 32768 [ 133.426485][ T5197] CIFS: VFS: No username specified [ 133.460795][ T5177] add_index: next_index = 0. Resetting! [ 133.489738][ T5177] find_entry called with index >= next_index [ 133.495835][ T5177] find_entry called with index >= next_index [ 133.527965][ T5177] find_entry called with index >= next_index [ 133.550836][ T5183] loop4: detected capacity change from 0 to 32768 [ 133.555074][ T5177] find_entry called with index >= next_index [ 133.619938][ T5201] find_entry called with index >= next_index [ 133.640776][ T5183] JBD2: Ignoring recovery information on journal [ 133.808209][ T5201] find_entry called with index >= next_index [ 133.814300][ T5201] find_entry called with index >= next_index [ 133.852638][ T5183] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.857357][ T5201] find_entry called with index >= next_index [ 133.932142][ T5201] find_entry called with index >= next_index [ 133.959259][ T5213] device syzkaller0 entered promiscuous mode [ 133.980590][ T5201] find_entry called with index >= next_index [ 134.034483][ T5203] find_entry called with index >= next_index [ 134.078992][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 134.556828][ T5204] loop3: detected capacity change from 0 to 32768 [ 134.605796][ T5204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.182 (5204) [ 134.678169][ T5204] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.718244][ T5204] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 134.750339][ T5228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.191'. [ 134.759848][ T5204] BTRFS info (device loop3): using free space tree [ 135.017359][ T5204] BTRFS info (device loop3): enabling ssd optimizations [ 135.257912][ T5258] loop1: detected capacity change from 0 to 2048 [ 135.362472][ T5258] loop1: p2 p3 < > p4 < p5 > [ 135.367890][ T5258] loop1: partition table partially beyond EOD, truncated [ 135.390626][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.430992][ T5258] loop1: p3 start 4225 is beyond EOD, truncated [ 135.703851][ T5248] loop0: detected capacity change from 0 to 32768 [ 136.067086][ T5248] JBD2: Ignoring recovery information on journal [ 136.346916][ T5259] loop4: detected capacity change from 0 to 32768 [ 136.400432][ T5248] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.520025][ T5259] XFS (loop4): Mounting V5 Filesystem [ 136.724344][ T5259] XFS (loop4): Ending clean mount [ 136.769103][ T5259] XFS (loop4): Quotacheck needed: Please wait. [ 136.794556][ T5270] loop3: detected capacity change from 0 to 32768 [ 136.801335][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 136.801351][ T27] audit: type=1800 audit(1785478910.718:51): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 136.884751][ T5259] XFS (loop4): Quotacheck: Done. [ 136.916722][ T5270] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.198 (5270) [ 136.937165][ T5265] loop2: detected capacity change from 0 to 32768 [ 136.994635][ T5270] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 137.044736][ T5265] add_index: next_index = 0. Resetting! [ 137.050554][ T5270] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 137.050604][ T5270] BTRFS info (device loop3): enabling disk space caching [ 137.050623][ T5270] BTRFS info (device loop3): force clearing of disk cache [ 137.050645][ T5270] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 137.050799][ T5270] BTRFS info (device loop3): use zstd compression, level 3 [ 137.148666][ T5265] find_entry called with index >= next_index [ 137.155144][ T5265] find_entry called with index >= next_index [ 137.167215][ T5265] find_entry called with index >= next_index [ 137.174808][ T4273] XFS (loop4): Unmounting Filesystem [ 137.198694][ T5270] BTRFS info (device loop3): disk space caching is enabled [ 137.208691][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 137.240034][ T5265] find_entry called with index >= next_index [ 137.269905][ T5282] find_entry called with index >= next_index [ 137.275994][ T5282] find_entry called with index >= next_index [ 137.307815][ T5282] find_entry called with index >= next_index [ 137.378343][ T5282] find_entry called with index >= next_index [ 137.384447][ T5282] find_entry called with index >= next_index [ 137.391914][ T5282] find_entry called with index >= next_index [ 137.401043][ T5283] find_entry called with index >= next_index [ 137.452045][ T5267] loop1: detected capacity change from 0 to 32768 [ 137.582216][ T5267] XFS (loop1): Mounting V5 Filesystem [ 137.588290][ T5270] BTRFS info (device loop3): enabling ssd optimizations [ 137.628379][ T5270] BTRFS info (device loop3): rebuilding free space tree [ 137.744751][ T5270] BTRFS info (device loop3): disabling free space tree [ 137.775639][ T27] audit: type=1800 audit(1785478911.688:52): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.201" name="idVendor" dev="configfs" ino=37039 res=0 errno=0 [ 137.816626][ T5270] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.833877][ T5267] XFS (loop1): Ending clean mount [ 137.865691][ T5267] XFS (loop1): Quotacheck needed: Please wait. [ 137.882047][ T27] audit: type=1800 audit(1785478911.718:53): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.201" name="idProduct" dev="configfs" ino=37040 res=0 errno=0 [ 137.916882][ T5270] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.988133][ T27] audit: type=1800 audit(1785478911.718:54): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.201" name="serialnumber" dev="configfs" ino=37041 res=0 errno=0 [ 138.001556][ T4471] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 138.049021][ T4471] XFS (loop1): Unmount and run xfs_repair [ 138.054933][ T4471] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 138.115195][ T27] audit: type=1800 audit(1785478911.818:55): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.201" name="UDC" dev="configfs" ino=36311 res=0 errno=0 [ 138.119935][ T4471] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 138.225347][ T4471] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 138.265868][ T4471] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 138.296267][ T4471] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 138.336802][ T4471] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 138.367172][ T4471] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.397545][ T4471] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.427924][ T4471] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.458184][ T4337] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 138.526263][ T5267] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 138.664419][ T5326] loop0: detected capacity change from 0 to 1024 [ 138.704655][ T22] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 138.739677][ T22] XFS (loop1): Unmount and run xfs_repair [ 138.772153][ T22] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 138.789863][ T22] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 138.813439][ T22] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 138.844909][ T22] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 138.867301][ T5326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.883877][ T22] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 138.959257][ T22] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 138.999549][ T22] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.048736][ T22] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.085517][ T22] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.121170][ T5267] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 139.165908][ T4274] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 139.481503][ T14] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 139.506655][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.518614][ T14] XFS (loop1): Unmount and run xfs_repair [ 139.524404][ T14] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 139.575844][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.579982][ T14] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 139.629082][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.653222][ T27] audit: type=1800 audit(1785478913.568:56): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.208" name="idVendor" dev="configfs" ino=37069 res=0 errno=0 [ 139.678979][ T14] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 139.697525][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.728787][ T14] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 139.748522][ T27] audit: type=1800 audit(1785478913.608:57): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.208" name="idProduct" dev="configfs" ino=37070 res=0 errno=0 [ 139.775717][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.788646][ T14] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 139.835316][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.841955][ T14] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 139.855463][ T27] audit: type=1800 audit(1785478913.608:58): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.208" name="serialnumber" dev="configfs" ino=37071 res=0 errno=0 [ 139.888696][ T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.889735][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 139.909024][ T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.917946][ T14] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.948269][ T9] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 139.962872][ T27] audit: type=1800 audit(1785478913.638:59): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.208" name="UDC" dev="configfs" ino=37072 res=0 errno=0 [ 140.003237][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.026999][ T9] XFS (loop1): page discard on page ffffea0001506640, inode 0x244b, pos 0. [ 140.027984][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.082634][ T4277] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 140.105694][ T4272] XFS (loop1): Unmounting Filesystem [ 140.601406][ T130] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.778848][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 140.798229][ T130] usb 4-1: Using ep0 maxpacket: 32 [ 140.805473][ T130] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 140.823750][ T130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 140.870582][ T130] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 140.888443][ T130] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 140.918149][ T130] usb 4-1: Product: syz [ 140.923624][ T130] usb 4-1: Manufacturer: syz [ 140.932729][ T130] usb 4-1: SerialNumber: syz [ 140.961557][ T130] usb 4-1: config 0 descriptor?? [ 141.017571][ T130] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.057927][ T130] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.385250][ T5345] loop4: detected capacity change from 0 to 32768 [ 141.427793][ T5345] add_index: next_index = 0. Resetting! [ 141.443881][ T5345] find_entry called with index >= next_index [ 141.474577][ T5345] find_entry called with index >= next_index [ 141.498824][ T5345] find_entry called with index >= next_index [ 141.504988][ T5345] find_entry called with index >= next_index [ 141.557043][ T5348] find_entry called with index >= next_index [ 141.587218][ T5348] find_entry called with index >= next_index [ 141.628491][ T5348] find_entry called with index >= next_index [ 141.634630][ T5348] find_entry called with index >= next_index [ 141.658170][ T5348] find_entry called with index >= next_index [ 141.664574][ T5348] find_entry called with index >= next_index [ 141.703510][ T5347] loop1: detected capacity change from 0 to 32768 [ 141.732879][ T5349] find_entry called with index >= next_index [ 141.830477][ T5347] add_index: next_index = 0. Resetting! [ 141.836229][ T5347] find_entry called with index >= next_index [ 141.889551][ T5347] find_entry called with index >= next_index [ 141.895645][ T5347] find_entry called with index >= next_index [ 141.959903][ T5347] find_entry called with index >= next_index [ 142.005777][ T5352] find_entry called with index >= next_index [ 142.057050][ T5352] find_entry called with index >= next_index [ 142.103235][ T5352] find_entry called with index >= next_index [ 142.138452][ T5352] find_entry called with index >= next_index [ 142.144786][ T5352] find_entry called with index >= next_index [ 142.228264][ T5352] find_entry called with index >= next_index [ 142.238466][ T5352] read_mapping_page failed! [ 142.272890][ T5352] ERROR: (device loop1): txCommit: [ 142.272890][ T5352] [ 142.315309][ T5352] ERROR: (device loop1): remounting filesystem as read-only [ 143.072212][ T5372] usbip-vudc usbip-vudc.0: gadget not bound [ 143.103873][ T5372] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 143.110500][ T5372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.129211][ T5372] vhci_hcd vhci_hcd.0: Device attached [ 143.176844][ T5374] vhci_hcd: connection closed [ 143.181344][ T4337] vhci_hcd: stop threads [ 143.253664][ T5377] loop1: detected capacity change from 0 to 512 [ 143.261301][ T4337] vhci_hcd: release socket [ 143.280031][ T4337] vhci_hcd: disconnect device [ 143.348511][ T130] vhci_hcd: vhci_device speed not set [ 143.369764][ T5377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.444221][ T5377] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.450809][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.471295][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.480395][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.489897][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.520705][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.528638][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.199089][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 145.006736][ T4299] device hsr_slave_0 left promiscuous mode [ 145.043140][ T5398] loop4: detected capacity change from 0 to 32768 [ 145.056393][ T4299] device hsr_slave_1 left promiscuous mode [ 145.067132][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.109382][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.117422][ T4299] device bridge_slave_1 left promiscuous mode [ 145.128325][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.133649][ T5398] add_index: next_index = 0. Resetting! [ 145.155462][ T4299] device bridge_slave_0 left promiscuous mode [ 145.163347][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.187629][ T5398] find_entry called with index >= next_index [ 145.198409][ T5398] find_entry called with index >= next_index [ 145.204487][ T5398] find_entry called with index >= next_index [ 145.217696][ T5398] find_entry called with index >= next_index [ 145.257012][ T5407] find_entry called with index >= next_index [ 145.273171][ T5407] find_entry called with index >= next_index [ 145.338829][ T5407] find_entry called with index >= next_index [ 145.344912][ T5407] find_entry called with index >= next_index [ 145.386840][ T5407] find_entry called with index >= next_index [ 145.401415][ T5407] find_entry called with index >= next_index [ 145.443933][ T5408] find_entry called with index >= next_index [ 145.460121][ T5401] loop1: detected capacity change from 0 to 32768 [ 145.554419][ T5401] add_index: next_index = 0. Resetting! [ 145.562382][ T5401] find_entry called with index >= next_index [ 145.592945][ T5401] find_entry called with index >= next_index [ 145.616513][ T5401] find_entry called with index >= next_index [ 145.628231][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 145.645387][ T5401] find_entry called with index >= next_index [ 145.663866][ T5412] find_entry called with index >= next_index [ 145.738296][ T5412] find_entry called with index >= next_index [ 145.744447][ T5412] find_entry called with index >= next_index [ 145.765110][ T5412] find_entry called with index >= next_index [ 145.788458][ T5412] find_entry called with index >= next_index [ 145.795130][ T5412] find_entry called with index >= next_index [ 145.820812][ T5401] find_entry called with index >= next_index [ 146.163752][ T27] audit: type=1800 audit(1785478920.078:60): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.236" name="cdrom" dev="configfs" ino=37194 res=0 errno=0 [ 146.191423][ T5342] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 146.304161][ T4316] usb 4-1: USB disconnect, device number 5 [ 146.352582][ T4316] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 146.899218][ T5423] loop4: detected capacity change from 0 to 32768 [ 147.145849][ T5431] loop3: detected capacity change from 0 to 32768 [ 147.159145][ T5433] binder_alloc: 5432: binder_alloc_buf, no vma [ 147.180279][ T5431] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.239 (5431) [ 147.217737][ T5431] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 147.241368][ T5431] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 147.275359][ T5431] BTRFS info (device loop3): enabling ssd optimizations [ 147.308209][ T5431] BTRFS info (device loop3): not using ssd optimizations [ 147.315453][ T5431] BTRFS info (device loop3): turning off barriers [ 147.328679][ T5431] BTRFS info (device loop3): use no compression [ 147.335020][ T5431] BTRFS info (device loop3): using free space tree [ 147.337697][ T5434] binder_alloc: 5432: binder_alloc_buf, no vma [ 147.539351][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 147.587664][ T4274] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 147.708474][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 147.782451][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 147.915372][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.128634][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.635921][ T5458] loop3: detected capacity change from 0 to 32768 [ 148.723696][ T5458] add_index: next_index = 0. Resetting! [ 148.731620][ T5458] find_entry called with index >= next_index [ 148.738417][ T5458] find_entry called with index >= next_index [ 148.771921][ T5458] find_entry called with index >= next_index [ 148.806738][ T5458] find_entry called with index >= next_index [ 148.821570][ T5461] find_entry called with index >= next_index [ 148.827640][ T5461] find_entry called with index >= next_index [ 148.867405][ T5461] find_entry called with index >= next_index [ 148.901500][ T5461] find_entry called with index >= next_index [ 148.955648][ T5461] find_entry called with index >= next_index [ 148.997667][ T5461] find_entry called with index >= next_index [ 149.049381][ T5458] find_entry called with index >= next_index [ 149.077645][ T5460] loop4: detected capacity change from 0 to 32768 [ 149.186165][ T5460] XFS (loop4): Mounting V5 Filesystem [ 149.318834][ T5460] XFS (loop4): Ending clean mount [ 149.354060][ T5460] XFS (loop4): Quotacheck needed: Please wait. [ 149.411494][ T4299] bond0 (unregistering): Released all slaves [ 149.471709][ T5460] XFS (loop4): Quotacheck: Done. [ 149.540302][ T4273] XFS (loop4): Unmounting Filesystem [ 149.686021][ T5381] chnl_net:caif_netlink_parms(): no params data found [ 149.788380][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 150.108409][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.180480][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.196537][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.235751][ T5381] device bridge_slave_0 entered promiscuous mode [ 150.255589][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.296653][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.308249][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 150.318513][ T4316] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 150.357880][ T5381] device bridge_slave_1 entered promiscuous mode [ 150.371985][ T4316] usb 2-1: config 0 has no interface number 0 [ 150.395563][ T4316] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 150.425756][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.476270][ T4316] usb 2-1: config 0 descriptor?? [ 150.503093][ T5381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.537603][ T27] audit: type=1800 audit(1785478924.448:61): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.246" name="cdrom" dev="configfs" ino=37245 res=0 errno=0 [ 150.572628][ T5381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.620900][ T27] audit: type=1800 audit(1785478924.478:62): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.246" name="file" dev="configfs" ino=37246 res=0 errno=0 [ 150.648564][ T4316] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 150.706003][ T5475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.745904][ T4316] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 150.760720][ T5475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.775548][ T5381] team0: Port device team_slave_0 added [ 150.782138][ T4316] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 150.815932][ T5480] loop3: detected capacity change from 0 to 32768 [ 150.840183][ T4316] usb 2-1: USB disconnect, device number 2 [ 150.904793][ T5381] team0: Port device team_slave_1 added [ 150.955403][ T5480] add_index: next_index = 0. Resetting! [ 150.992709][ T5480] find_entry called with index >= next_index [ 151.001919][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.048205][ T5480] find_entry called with index >= next_index [ 151.054301][ T5480] find_entry called with index >= next_index [ 151.058591][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.114544][ T5480] find_entry called with index >= next_index [ 151.148610][ T5381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.178473][ T5499] find_entry called with index >= next_index [ 151.190651][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.228552][ T5499] find_entry called with index >= next_index [ 151.234634][ T5499] find_entry called with index >= next_index [ 151.238685][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.318226][ T5499] find_entry called with index >= next_index [ 151.325933][ T5499] find_entry called with index >= next_index [ 151.356866][ T5499] find_entry called with index >= next_index [ 151.374424][ T27] audit: type=1800 audit(1785478925.288:63): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.252" name="cdrom" dev="configfs" ino=36693 res=0 errno=0 [ 151.396162][ T5502] find_entry called with index >= next_index [ 151.402566][ T5381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.513853][ T27] audit: type=1800 audit(1785478925.288:64): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.252" name="file" dev="configfs" ino=36694 res=0 errno=0 [ 151.583150][ T5381] device hsr_slave_0 entered promiscuous mode [ 151.608720][ T27] audit: type=1800 audit(1785478925.368:65): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.252" name="UDC" dev="configfs" ino=36695 res=0 errno=0 [ 151.654147][ T5381] device hsr_slave_1 entered promiscuous mode [ 151.681740][ T5381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.724049][ T5381] Cannot create hsr debugfs directory [ 151.868273][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 152.341135][ T5381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.403365][ T5381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.449717][ T5381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.501629][ T5381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.824832][ T5381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.887324][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.903580][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.936992][ T5381] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.967503][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.991423][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.016846][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.024124][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.070178][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.122045][ T5517] loop4: detected capacity change from 0 to 32768 [ 153.129587][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.162591][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.196674][ T5517] add_index: next_index = 0. Resetting! [ 153.216180][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.223457][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.232803][ T5517] find_entry called with index >= next_index [ 153.250212][ T5519] loop3: detected capacity change from 0 to 32768 [ 153.262085][ T5517] find_entry called with index >= next_index [ 153.280903][ T5517] find_entry called with index >= next_index [ 153.290888][ T5517] find_entry called with index >= next_index [ 153.302854][ T5543] find_entry called with index >= next_index [ 153.312119][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.322198][ T5543] find_entry called with index >= next_index [ 153.336478][ T5543] find_entry called with index >= next_index [ 153.407631][ T5519] XFS (loop3): Mounting V5 Filesystem [ 153.409042][ T5543] find_entry called with index >= next_index [ 153.427822][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.465915][ T5543] find_entry called with index >= next_index [ 153.483219][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.495272][ T5543] find_entry called with index >= next_index [ 153.541390][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.554548][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.559719][ T4471] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.585348][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.620288][ T5519] XFS (loop3): Ending clean mount [ 153.650531][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.655892][ T5517] find_entry called with index >= next_index [ 153.668573][ T5519] XFS (loop3): Quotacheck needed: Please wait. [ 153.693570][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.719946][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.785000][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.793285][ T4471] usb 2-1: Using ep0 maxpacket: 8 [ 153.800653][ T4471] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 153.815182][ T4471] usb 2-1: config 0 has no interface number 0 [ 153.824976][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.852888][ T4471] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 153.863356][ T4471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.876877][ T5519] XFS (loop3): Quotacheck: Done. [ 153.893242][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.927728][ T4471] usb 2-1: config 0 descriptor?? [ 154.039380][ T4274] XFS (loop3): Unmounting Filesystem [ 154.069442][ T4471] viperboard 2-1:0.143: version 0.00 found at bus 002 address 003 [ 154.228209][ T4471] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 154.238218][ T5542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.248409][ T4471] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 154.312684][ T5542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.381010][ T4471] usb 2-1: USB disconnect, device number 3 [ 155.217573][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.236452][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.303861][ T5381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.415027][ T27] audit: type=1800 audit(1785478929.328:66): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="idVendor" dev="configfs" ino=37580 res=0 errno=0 [ 155.514139][ T5592] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 155.514147][ T27] audit: type=1800 audit(1785478929.358:67): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="idProduct" dev="configfs" ino=37581 res=0 errno=0 [ 155.514186][ T27] audit: type=1800 audit(1785478929.358:68): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="serialnumber" dev="configfs" ino=37582 res=0 errno=0 [ 155.520721][ T5592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.539686][ T5592] vhci_hcd vhci_hcd.0: Device attached [ 155.629567][ T27] audit: type=1800 audit(1785478929.358:69): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="UDC" dev="configfs" ino=37583 res=0 errno=0 [ 155.768236][ T5574] loop4: detected capacity change from 0 to 32768 [ 155.808478][ T4411] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 155.826518][ T5574] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.267 (5574) [ 155.916580][ T5574] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 155.946239][ T5574] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 155.970495][ T5574] BTRFS info (device loop4): enabling ssd optimizations [ 155.977639][ T5574] BTRFS info (device loop4): not using ssd optimizations [ 155.989851][ T5574] BTRFS info (device loop4): turning off barriers [ 155.996845][ T5574] BTRFS info (device loop4): use no compression [ 156.004776][ T5574] BTRFS info (device loop4): using free space tree [ 156.046266][ T5611] loop3: detected capacity change from 0 to 128 [ 156.102818][ T5593] vhci_hcd: connection reset by peer [ 156.109696][ T4337] vhci_hcd: stop threads [ 156.114012][ T4337] vhci_hcd: release socket [ 156.161003][ T4337] vhci_hcd: disconnect device [ 156.205613][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.243803][ T5611] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.536859][ T4273] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 156.600433][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 157.033434][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.085046][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.204456][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.230465][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.290799][ T5381] device veth0_vlan entered promiscuous mode [ 157.318989][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.337691][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.390351][ T5381] device veth1_vlan entered promiscuous mode [ 157.513187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.545120][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.584185][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.642326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.682762][ T5381] device veth0_macvtap entered promiscuous mode [ 157.739838][ T5381] device veth1_macvtap entered promiscuous mode [ 157.845290][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.889206][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.928167][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.959229][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.994469][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.028736][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.046998][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.056302][ T27] audit: type=1800 audit(1785478931.968:70): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.285" name="idVendor" dev="configfs" ino=37916 res=0 errno=0 [ 158.082361][ T5644] loop3: detected capacity change from 0 to 32768 [ 158.093230][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.111472][ T5645] loop1: detected capacity change from 0 to 32768 [ 158.138727][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.149122][ T27] audit: type=1800 audit(1785478932.018:71): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.285" name="idProduct" dev="configfs" ino=37917 res=0 errno=0 [ 158.191460][ T5669] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 158.198074][ T5669] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.210127][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.222145][ T5644] add_index: next_index = 0. Resetting! [ 158.239258][ T5644] find_entry called with index >= next_index [ 158.248458][ T5644] find_entry called with index >= next_index [ 158.265001][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.275667][ T27] audit: type=1800 audit(1785478932.018:72): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.285" name="serialnumber" dev="configfs" ino=37918 res=0 errno=0 [ 158.305294][ T5644] find_entry called with index >= next_index [ 158.311822][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.320751][ T5669] vhci_hcd vhci_hcd.0: Device attached [ 158.328696][ T5645] add_index: next_index = 0. Resetting! [ 158.339566][ T5645] find_entry called with index >= next_index [ 158.353752][ T5644] find_entry called with index >= next_index [ 158.362890][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.379341][ T27] audit: type=1800 audit(1785478932.018:73): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.285" name="UDC" dev="configfs" ino=37919 res=0 errno=0 [ 158.403889][ T5673] find_entry called with index >= next_index [ 158.410144][ T5645] find_entry called with index >= next_index [ 158.446863][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.453884][ T5673] find_entry called with index >= next_index [ 158.486360][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.498318][ T5645] find_entry called with index >= next_index [ 158.507153][ T5673] find_entry called with index >= next_index [ 158.515274][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.550468][ T5673] find_entry called with index >= next_index [ 158.556573][ T5673] find_entry called with index >= next_index [ 158.563988][ T5645] find_entry called with index >= next_index [ 158.571249][ T5381] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.605019][ T5381] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.632031][ T5381] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.658534][ T5675] find_entry called with index >= next_index [ 158.670769][ T5381] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.678402][ T5673] find_entry called with index >= next_index [ 158.709923][ T5675] find_entry called with index >= next_index [ 158.728220][ T5670] vhci_hcd: connection closed [ 158.728550][ T9] vhci_hcd: stop threads [ 158.737649][ T9] vhci_hcd: release socket [ 158.746753][ T9] vhci_hcd: disconnect device [ 158.758338][ T5675] find_entry called with index >= next_index [ 158.782532][ T5676] find_entry called with index >= next_index [ 158.800583][ T5675] find_entry called with index >= next_index [ 158.806700][ T5675] find_entry called with index >= next_index [ 158.918553][ T5675] find_entry called with index >= next_index [ 158.986393][ T5677] find_entry called with index >= next_index [ 159.041551][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.067213][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.133733][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.256992][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.270286][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.295634][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.939867][ T5688] loop4: detected capacity change from 0 to 32768 [ 159.968561][ T5688] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.288 (5688) [ 160.015071][ T5688] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 160.075531][ T5688] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 160.088488][ T4409] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 160.108829][ T5688] BTRFS info (device loop4): enabling ssd optimizations [ 160.146534][ T5688] BTRFS info (device loop4): using spread ssd allocation scheme [ 160.176926][ T5688] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 160.233127][ T5688] BTRFS info (device loop4): trying to use backup root at mount time [ 160.262385][ T5688] BTRFS info (device loop4): disabling tree log [ 160.288303][ T4409] usb 2-1: Using ep0 maxpacket: 8 [ 160.289397][ T5688] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.308876][ T4409] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 160.348493][ T4409] usb 2-1: config 0 has no interface number 0 [ 160.359871][ T5688] BTRFS info (device loop4): force zstd compression, level 3 [ 160.367367][ T5688] BTRFS info (device loop4): enabling disk space caching [ 160.386666][ T4409] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 160.420065][ T4409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.433591][ T5688] BTRFS info (device loop4): allowing degraded mounts [ 160.453063][ T5688] BTRFS error (device loop4): cannot disable free space tree [ 160.473862][ T4409] usb 2-1: config 0 descriptor?? [ 160.554685][ T5688] BTRFS error (device loop4): open_ctree failed: -22 [ 160.618764][ T4409] viperboard 2-1:0.143: version 0.00 found at bus 002 address 004 [ 160.679300][ T4409] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 160.706221][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.719197][ T4409] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 160.745987][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.812415][ T4409] usb 2-1: USB disconnect, device number 4 [ 160.908521][ T4411] vhci_hcd: vhci_device speed not set [ 160.948899][ T27] audit: type=1800 audit(1785478934.868:74): pid=5718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.296" name="file" dev="configfs" ino=37763 res=0 errno=0 [ 161.061640][ T27] audit: type=1800 audit(1785478934.978:75): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="idVendor" dev="configfs" ino=37767 res=0 errno=0 [ 161.134778][ T27] audit: type=1800 audit(1785478935.008:76): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="idProduct" dev="configfs" ino=37768 res=0 errno=0 [ 161.198357][ T5725] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 161.205025][ T5725] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.235967][ T27] audit: type=1800 audit(1785478935.018:77): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="serialnumber" dev="configfs" ino=37769 res=0 errno=0 [ 161.263789][ T5725] vhci_hcd vhci_hcd.0: Device attached [ 161.313966][ T27] audit: type=1800 audit(1785478935.018:78): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="UDC" dev="configfs" ino=37770 res=0 errno=0 [ 161.748217][ T4411] usb 33-1: device descriptor read/64, error -110 [ 161.775201][ T5726] vhci_hcd: connection closed [ 161.775534][ T4337] vhci_hcd: stop threads [ 161.798302][ T4337] vhci_hcd: release socket [ 161.837405][ T4337] vhci_hcd: disconnect device [ 161.868536][ T5688] loop4: detected capacity change from 0 to 32768 [ 161.958453][ T4411] vhci_hcd: vhci_device speed not set [ 161.982317][ T5688] JBD2: Ignoring recovery information on journal [ 162.208354][ T5688] JBD2: recovery failed [ 162.212665][ T5688] (syz.4.288,5688,1):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 162.269268][ T5688] (syz.4.288,5688,1):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 162.358334][ T5688] (syz.4.288,5688,1):ocfs2_check_volume:2487 ERROR: status = -5 [ 162.366089][ T5688] (syz.4.288,5688,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 162.432909][ T5729] loop5: detected capacity change from 0 to 32768 [ 162.478412][ T5688] (syz.4.288,5688,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 162.521931][ T5729] add_index: next_index = 0. Resetting! [ 162.576610][ T5729] find_entry called with index >= next_index [ 162.653932][ T5729] find_entry called with index >= next_index [ 162.716458][ T5729] find_entry called with index >= next_index [ 162.774361][ T5729] find_entry called with index >= next_index [ 162.858417][ T5749] find_entry called with index >= next_index [ 162.864495][ T5749] find_entry called with index >= next_index [ 162.918288][ T5749] find_entry called with index >= next_index [ 162.924371][ T5749] find_entry called with index >= next_index [ 163.023706][ T5749] find_entry called with index >= next_index [ 163.033844][ T5749] find_entry called with index >= next_index [ 163.134447][ T5752] find_entry called with index >= next_index [ 163.565646][ T27] audit: type=1800 audit(1785478937.478:79): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.308" name="cdrom" dev="configfs" ino=37825 res=0 errno=0 [ 163.599389][ T5748] loop3: detected capacity change from 0 to 32768 [ 163.726209][ T5748] JBD2: Ignoring recovery information on journal [ 163.861062][ T27] audit: type=1800 audit(1785478937.778:80): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.309" name="cdrom" dev="configfs" ino=38221 res=0 errno=0 [ 163.887626][ T5751] loop1: detected capacity change from 0 to 32768 [ 163.909512][ T5748] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.947364][ T27] audit: type=1800 audit(1785478937.808:81): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.309" name="file" dev="configfs" ino=38222 res=0 errno=0 [ 163.994704][ T5751] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.305 (5751) [ 164.060551][ T27] audit: type=1800 audit(1785478937.808:82): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.309" name="UDC" dev="configfs" ino=38223 res=0 errno=0 [ 164.100639][ T5751] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 164.118149][ T4411] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.155055][ T5751] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.228295][ T5751] BTRFS info (device loop1): enabling ssd optimizations [ 164.235356][ T5751] BTRFS info (device loop1): not using ssd optimizations [ 164.302559][ T5751] BTRFS info (device loop1): turning off barriers [ 164.322063][ T5751] BTRFS info (device loop1): use no compression [ 164.334872][ T4411] usb 5-1: Using ep0 maxpacket: 8 [ 164.342533][ T4411] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 164.349679][ T5751] BTRFS info (device loop1): using free space tree [ 164.384637][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 164.389101][ T4411] usb 5-1: config 0 has no interface number 0 [ 164.504014][ T4411] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 164.574882][ T4411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.601229][ T27] audit: type=1800 audit(1785478938.518:83): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.312" name="idVendor" dev="configfs" ino=38236 res=0 errno=0 [ 164.617731][ T4411] usb 5-1: config 0 descriptor?? [ 164.661183][ T5794] usbip-vudc usbip-vudc.0: gadget not bound [ 164.735008][ T27] audit: type=1800 audit(1785478938.548:84): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.312" name="idProduct" dev="configfs" ino=38237 res=0 errno=0 [ 164.742372][ T5799] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 164.761879][ T5799] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.772684][ T4411] viperboard 5-1:0.143: version 0.00 found at bus 005 address 003 [ 164.801024][ T4411] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 164.811448][ T4272] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 164.837994][ T5773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.847060][ T4411] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 164.868206][ T27] audit: type=1800 audit(1785478938.568:85): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.312" name="serialnumber" dev="configfs" ino=38241 res=0 errno=0 [ 164.880170][ T5773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.009444][ T4411] usb 5-1: USB disconnect, device number 3 [ 165.014614][ T27] audit: type=1800 audit(1785478938.568:86): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.312" name="UDC" dev="configfs" ino=38242 res=0 errno=0 [ 165.105930][ T5799] vhci_hcd vhci_hcd.0: Device attached [ 165.298282][ T5800] vhci_hcd: connection closed [ 165.299184][ T33] vhci_hcd: stop threads [ 165.328303][ T33] vhci_hcd: release socket [ 165.346510][ T33] vhci_hcd: disconnect device [ 165.368168][ T4316] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 165.386119][ T4316] usb 33-1: enqueue for inactive port 0 [ 165.518229][ T4316] vhci_hcd: vhci_device speed not set [ 166.060618][ T27] audit: type=1800 audit(1785478939.978:87): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.325" name="cdrom" dev="configfs" ino=38940 res=0 errno=0 [ 166.189111][ T27] audit: type=1800 audit(1785478940.008:88): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.325" name="file" dev="configfs" ino=38941 res=0 errno=0 [ 166.311664][ T5843] loop3: detected capacity change from 0 to 2048 [ 166.399564][ T5843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.581338][ T5843] loop3: detected capacity change from 2048 to 64 [ 166.616879][ T5855] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.327: corrupted xattr entries [ 166.673813][ T5855] EXT4-fs error (device loop3): ext4_ind_map_blocks:604: inode #15: comm syz.3.327: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 166.744048][ T5855] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 9470086 with max blocks 1 with error 117 [ 166.789360][ T5855] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.789360][ T5855] [ 166.868371][ T5852] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 166.918247][ T4316] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.085585][ T4299] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm kworker/u4:5: corrupted xattr entries [ 167.108383][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 167.115727][ T4316] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 167.137882][ T4316] usb 5-1: config 0 has no interface number 0 [ 167.146139][ T4299] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 1803188595: comm kworker/u4:5: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 167.174485][ T4316] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 167.194786][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.228442][ T4299] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 167.244934][ T4316] usb 5-1: config 0 descriptor?? [ 167.253676][ T4299] EXT4-fs (loop3): This should not happen!! Data will be lost [ 167.253676][ T4299] [ 167.283538][ T4299] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm kworker/u4:5: corrupted xattr entries [ 167.316519][ T4274] EXT4-fs (loop3): Inode 15 (ffff888071cdbc30): i_reserved_data_blocks (1) not cleared! [ 167.329268][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 167.369032][ T4316] viperboard 5-1:0.143: version 0.00 found at bus 005 address 004 [ 167.412554][ T4316] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 167.422478][ T5850] kmmpd-loop3: attempt to access beyond end of device [ 167.422478][ T5850] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 167.448524][ T5850] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 167.466782][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.476672][ T4316] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 167.508491][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.572635][ T4316] usb 5-1: USB disconnect, device number 4 [ 168.165076][ T5839] loop5: detected capacity change from 0 to 65536 [ 168.218756][ T4299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.321315][ T5839] XFS (loop5): Mounting V5 Filesystem [ 168.432337][ T5839] XFS (loop5): Ending clean mount [ 168.512939][ T4299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.685844][ T4299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.761307][ T5381] XFS (loop5): Unmounting Filesystem [ 168.906283][ T4299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.922845][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 168.922863][ T27] audit: type=1800 audit(1785478942.838:91): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.344" name="idVendor" dev="configfs" ino=39036 res=0 errno=0 [ 168.954034][ T5907] usbip-vudc usbip-vudc.0: gadget not bound [ 169.031917][ T27] audit: type=1800 audit(1785478942.868:92): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.344" name="idProduct" dev="configfs" ino=39037 res=0 errno=0 [ 169.058146][ T5907] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 169.064751][ T5907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.095398][ T5907] vhci_hcd vhci_hcd.0: Device attached [ 169.157435][ T27] audit: type=1800 audit(1785478942.868:93): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.344" name="serialnumber" dev="configfs" ino=39038 res=0 errno=0 [ 169.267247][ T27] audit: type=1800 audit(1785478942.868:94): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.344" name="UDC" dev="configfs" ino=39039 res=0 errno=0 [ 169.368450][ T22] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 169.561121][ T5910] vhci_hcd: connection reset by peer [ 169.602528][ T4337] vhci_hcd: stop threads [ 169.640366][ T4337] vhci_hcd: release socket [ 169.662271][ T4337] vhci_hcd: disconnect device [ 169.935967][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.947055][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.970236][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.983959][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.995811][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.004940][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.234709][ T5918] loop4: detected capacity change from 0 to 32768 [ 171.410631][ T5918] XFS (loop4): Mounting V5 Filesystem [ 171.443468][ T5919] chnl_net:caif_netlink_parms(): no params data found [ 171.520628][ T5918] XFS (loop4): Ending clean mount [ 171.566717][ T5918] XFS (loop4): Quotacheck needed: Please wait. [ 171.735069][ T5918] XFS (loop4): Quotacheck: Done. [ 171.980108][ T4273] XFS (loop4): Unmounting Filesystem [ 172.028617][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 172.588237][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.607598][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.638349][ T5919] device bridge_slave_0 entered promiscuous mode [ 172.665102][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.692959][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.714468][ T5919] device bridge_slave_1 entered promiscuous mode [ 172.765550][ T4299] device hsr_slave_0 left promiscuous mode [ 172.780350][ T4299] device hsr_slave_1 left promiscuous mode [ 172.795435][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.816391][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.838581][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.868380][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.888872][ T4299] device bridge_slave_1 left promiscuous mode [ 172.895313][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.931508][ T4299] device bridge_slave_0 left promiscuous mode [ 172.968440][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.042912][ T4299] device veth1_macvtap left promiscuous mode [ 173.056791][ T4299] device veth0_macvtap left promiscuous mode [ 173.064293][ T4299] device veth1_vlan left promiscuous mode [ 173.089697][ T4299] device veth0_vlan left promiscuous mode [ 173.357544][ T5954] loop5: detected capacity change from 0 to 65536 [ 173.453090][ T5954] XFS (loop5): Mounting V5 Filesystem [ 173.605568][ T5954] XFS (loop5): Ending clean mount [ 173.799911][ T5381] XFS (loop5): Unmounting Filesystem [ 174.110163][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 174.250513][ T27] audit: type=1800 audit(1785478948.168:95): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.367" name="idVendor" dev="configfs" ino=39168 res=0 errno=0 [ 174.291751][ T27] audit: type=1800 audit(1785478948.188:96): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.367" name="idProduct" dev="configfs" ino=39169 res=0 errno=0 [ 174.331648][ T6011] usbip-vudc usbip-vudc.0: gadget not bound [ 174.344737][ T27] audit: type=1800 audit(1785478948.198:97): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.367" name="serialnumber" dev="configfs" ino=39170 res=0 errno=0 [ 174.365726][ T6011] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 174.372302][ T6011] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.395232][ T6011] vhci_hcd vhci_hcd.0: Device attached [ 174.908283][ T6012] vhci_hcd: connection reset by peer [ 174.925344][ T47] vhci_hcd: stop threads [ 174.930729][ T47] vhci_hcd: release socket [ 174.948377][ T130] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.966396][ T47] vhci_hcd: disconnect device [ 175.022317][ T22] vhci_hcd: vhci_device speed not set [ 175.141654][ T130] usb 6-1: Using ep0 maxpacket: 8 [ 175.160398][ T130] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 175.178148][ T130] usb 6-1: config 0 has no interface number 0 [ 175.194662][ T130] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 175.203900][ T130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.231786][ T130] usb 6-1: config 0 descriptor?? [ 175.338531][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 175.367960][ T130] viperboard 6-1:0.143: version 0.00 found at bus 006 address 002 [ 175.406180][ T130] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 175.435959][ T130] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 175.457842][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.524711][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.569696][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 175.586813][ T4319] usb 6-1: USB disconnect, device number 2 [ 175.686152][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.744867][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.188527][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 176.262239][ T4299] bond0 (unregistering): Released all slaves [ 176.771122][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.813009][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.974936][ T5919] team0: Port device team_slave_0 added [ 176.997959][ T5919] team0: Port device team_slave_1 added [ 177.076690][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.123728][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.246594][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.276678][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.301982][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.370015][ T27] audit: type=1800 audit(1785478951.288:98): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.379" name="idVendor" dev="configfs" ino=38621 res=0 errno=0 [ 177.375549][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.435650][ T27] audit: type=1800 audit(1785478951.328:99): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.379" name="idProduct" dev="configfs" ino=38622 res=0 errno=0 [ 177.491295][ T6047] usbip-vudc usbip-vudc.0: gadget not bound [ 177.550171][ T6047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 177.556872][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.565240][ T27] audit: type=1800 audit(1785478951.348:100): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.379" name="serialnumber" dev="configfs" ino=38623 res=0 errno=0 [ 177.607722][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 177.640598][ T6026] loop5: detected capacity change from 0 to 65536 [ 177.691077][ T5919] device hsr_slave_0 entered promiscuous mode [ 177.738287][ T5919] device hsr_slave_1 entered promiscuous mode [ 177.746899][ T5919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.780893][ T6026] XFS (loop5): Mounting V5 Filesystem [ 177.802028][ T5919] Cannot create hsr debugfs directory [ 177.848334][ T6026] XFS (loop5): Ending clean mount [ 177.890141][ T6023] ------------[ cut here ]------------ [ 177.896417][ T6023] WARNING: CPU: 0 PID: 6023 at drivers/virtio/virtio.c:335 virtio_dev_remove+0x16f/0x1a0 [ 177.906604][ T6023] Modules linked in: [ 177.910791][ T6023] CPU: 0 PID: 6023 Comm: syz.1.372 Not tainted syzkaller #0 [ 177.918312][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.928557][ T6023] RIP: 0010:virtio_dev_remove+0x16f/0x1a0 [ 177.934360][ T6023] Code: 08 48 89 df e8 92 f4 5f fd 4c 89 f7 ff 13 0c 01 0f b6 f0 4c 89 f7 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d ff e0 e8 b1 c7 0e fd <0f> 0b e9 78 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c d8 fe ff ff 4c [ 177.954259][ T6023] RSP: 0018:ffffc900035078c0 EFLAGS: 00010246 [ 177.960598][ T6023] RAX: ffffffff8473666f RBX: ffff88801d3b2500 RCX: 0000000000080000 [ 177.968711][ T6023] RDX: ffffc9000c879000 RSI: 000000000007ffff RDI: 0000000000080000 [ 177.976740][ T6023] RBP: 00000000000000ff R08: ffffffff90b10277 R09: 1ffffffff216204e [ 177.984858][ T6023] R10: dffffc0000000000 R11: fffffbfff216204f R12: 1ffff11003a764a0 [ 177.992940][ T6023] R13: dffffc0000000000 R14: ffff88801d3b2000 R15: ffffffff8aeb95b8 [ 178.001208][ T6023] FS: 00007f04b4b276c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 178.010316][ T6023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.017105][ T6023] CR2: 00007f127c61a000 CR3: 0000000061719000 CR4: 00000000003506f0 [ 178.025207][ T6023] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.033486][ T6023] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.041702][ T6023] Call Trace: [ 178.045044][ T6023] [ 178.048021][ T6023] ? virtio_dev_probe+0xae0/0xae0 [ 178.053236][ T6023] device_release_driver_internal+0x47d/0x7c0 [ 178.059441][ T6023] bus_remove_device+0x2dd/0x400 [ 178.064543][ T6023] device_del+0x63f/0xa80 [ 178.069050][ T6023] ? kill_device+0x160/0x160 [ 178.073708][ T6023] ? pci_device_is_present+0x171/0x240 [ 178.079297][ T6023] ? pci_real_dma_dev+0x10/0x10 [ 178.083971][ T6049] vhci_hcd: connection closed [ 178.084192][ T6023] device_unregister+0x1c/0xc0 [ 178.093784][ T6023] unregister_virtio_device+0x33/0x60 [ 178.099354][ T6023] virtio_pci_remove+0x7b/0xf0 [ 178.104194][ T6023] pci_device_remove+0x93/0x230 [ 178.109232][ T6023] ? pci_device_probe+0x9b0/0x9b0 [ 178.114324][ T6023] device_release_driver_internal+0x47d/0x7c0 [ 178.120790][ T6023] pci_stop_bus_device+0x108/0x140 [ 178.125974][ T6023] pci_stop_and_remove_bus_device_locked+0x16/0x30 [ 178.132663][ T6023] remove_store+0xe2/0x140 [ 178.137147][ T6023] ? pci_dev_hp_attrs_are_visible+0xe0/0xe0 [ 178.143165][ T6023] ? __virt_addr_valid+0x188/0x540 [ 178.148407][ T6023] ? __virt_addr_valid+0x467/0x540 [ 178.153593][ T6023] ? sysfs_kf_write+0x183/0x2a0 [ 178.158609][ T6023] ? sysfs_kf_read+0x350/0x350 [ 178.163439][ T6023] kernfs_fop_write_iter+0x3a0/0x520 [ 178.168963][ T6023] vfs_write+0x482/0x9a0 [ 178.173284][ T6023] ? file_end_write+0x250/0x250 [ 178.178303][ T6023] ? __fget_files+0x3fc/0x460 [ 178.181648][ T33] vhci_hcd: stop threads [ 178.183036][ T6023] ? __fdget_pos+0x2ae/0x360 [ 178.187510][ T33] vhci_hcd: release socket [ 178.192227][ T6023] ? ksys_write+0x70/0x260 [ 178.201255][ T6023] ksys_write+0x14d/0x260 [ 178.205652][ T6023] ? __ia32_sys_read+0x80/0x80 [ 178.210577][ T6023] ? lockdep_hardirqs_on+0x94/0x140 [ 178.215848][ T6023] do_syscall_64+0x4c/0xa0 [ 178.220532][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 178.223479][ T33] vhci_hcd: disconnect device [ 178.225267][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 178.234812][ T6023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.240834][ T6023] RIP: 0033:0x7f04b3b9e019 [ 178.245315][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.265081][ T6023] RSP: 002b:00007f04b4b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.273676][ T6023] RAX: ffffffffffffffda RBX: 00007f04b3e25fa0 RCX: 00007f04b3b9e019 [ 178.281868][ T6023] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 178.289966][ T6023] RBP: 00007f04b3c3500c R08: 0000000000000000 R09: 0000000000000000 [ 178.298008][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.299304][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 178.306135][ T6023] R13: 00007f04b3e26038 R14: 00007f04b3e25fa0 R15: 00007ffc51c41738 [ 178.306176][ T6023] [ 178.323553][ T6023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.330879][ T6023] CPU: 0 PID: 6023 Comm: syz.1.372 Not tainted syzkaller #0 [ 178.338207][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.348308][ T6023] Call Trace: [ 178.351634][ T6023] [ 178.354610][ T6023] dump_stack_lvl+0x188/0x24e [ 178.359384][ T6023] ? memcpy+0x3c/0x60 [ 178.363415][ T6023] ? show_regs_print_info+0x12/0x12 [ 178.368669][ T6023] ? load_image+0x410/0x410 [ 178.373221][ T6023] panic+0x2d3/0x710 [ 178.377147][ T6023] ? bpf_jit_dump+0xd0/0xd0 [ 178.381690][ T6023] __warn+0x2f8/0x4f0 [ 178.385694][ T6023] ? virtio_dev_remove+0x16f/0x1a0 [ 178.390841][ T6023] ? virtio_dev_remove+0x16f/0x1a0 [ 178.395979][ T6023] report_bug+0x2ba/0x4f0 [ 178.400355][ T6023] ? virtio_dev_remove+0x16f/0x1a0 [ 178.405490][ T6023] handle_bug+0x3a/0x70 [ 178.409676][ T6023] exc_invalid_op+0x16/0x40 [ 178.414208][ T6023] asm_exc_invalid_op+0x16/0x20 [ 178.419086][ T6023] RIP: 0010:virtio_dev_remove+0x16f/0x1a0 [ 178.424863][ T6023] Code: 08 48 89 df e8 92 f4 5f fd 4c 89 f7 ff 13 0c 01 0f b6 f0 4c 89 f7 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d ff e0 e8 b1 c7 0e fd <0f> 0b e9 78 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c d8 fe ff ff 4c [ 178.444496][ T6023] RSP: 0018:ffffc900035078c0 EFLAGS: 00010246 [ 178.450609][ T6023] RAX: ffffffff8473666f RBX: ffff88801d3b2500 RCX: 0000000000080000 [ 178.458611][ T6023] RDX: ffffc9000c879000 RSI: 000000000007ffff RDI: 0000000000080000 [ 178.466610][ T6023] RBP: 00000000000000ff R08: ffffffff90b10277 R09: 1ffffffff216204e [ 178.474625][ T6023] R10: dffffc0000000000 R11: fffffbfff216204f R12: 1ffff11003a764a0 [ 178.482621][ T6023] R13: dffffc0000000000 R14: ffff88801d3b2000 R15: ffffffff8aeb95b8 [ 178.490643][ T6023] ? virtio_dev_remove+0x16f/0x1a0 [ 178.495796][ T6023] ? virtio_dev_probe+0xae0/0xae0 [ 178.500887][ T6023] device_release_driver_internal+0x47d/0x7c0 [ 178.507013][ T6023] bus_remove_device+0x2dd/0x400 [ 178.511992][ T6023] device_del+0x63f/0xa80 [ 178.516362][ T6023] ? kill_device+0x160/0x160 [ 178.520977][ T6023] ? pci_device_is_present+0x171/0x240 [ 178.526465][ T6023] ? pci_real_dma_dev+0x10/0x10 [ 178.531357][ T6023] device_unregister+0x1c/0xc0 [ 178.536150][ T6023] unregister_virtio_device+0x33/0x60 [ 178.541588][ T6023] virtio_pci_remove+0x7b/0xf0 [ 178.546381][ T6023] pci_device_remove+0x93/0x230 [ 178.551275][ T6023] ? pci_device_probe+0x9b0/0x9b0 [ 178.556326][ T6023] device_release_driver_internal+0x47d/0x7c0 [ 178.562423][ T6023] pci_stop_bus_device+0x108/0x140 [ 178.567566][ T6023] pci_stop_and_remove_bus_device_locked+0x16/0x30 [ 178.574099][ T6023] remove_store+0xe2/0x140 [ 178.578539][ T6023] ? pci_dev_hp_attrs_are_visible+0xe0/0xe0 [ 178.584453][ T6023] ? __virt_addr_valid+0x188/0x540 [ 178.589592][ T6023] ? __virt_addr_valid+0x467/0x540 [ 178.594757][ T6023] ? sysfs_kf_write+0x183/0x2a0 [ 178.599634][ T6023] ? sysfs_kf_read+0x350/0x350 [ 178.604444][ T6023] kernfs_fop_write_iter+0x3a0/0x520 [ 178.609759][ T6023] vfs_write+0x482/0x9a0 [ 178.614042][ T6023] ? file_end_write+0x250/0x250 [ 178.618932][ T6023] ? __fget_files+0x3fc/0x460 [ 178.623651][ T6023] ? __fdget_pos+0x2ae/0x360 [ 178.628278][ T6023] ? ksys_write+0x70/0x260 [ 178.632724][ T6023] ksys_write+0x14d/0x260 [ 178.637088][ T6023] ? __ia32_sys_read+0x80/0x80 [ 178.641895][ T6023] ? lockdep_hardirqs_on+0x94/0x140 [ 178.647115][ T6023] do_syscall_64+0x4c/0xa0 [ 178.651559][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 178.656263][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 178.660970][ T6023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.666896][ T6023] RIP: 0033:0x7f04b3b9e019 [ 178.671337][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.690973][ T6023] RSP: 002b:00007f04b4b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.699424][ T6023] RAX: ffffffffffffffda RBX: 00007f04b3e25fa0 RCX: 00007f04b3b9e019 [ 178.707416][ T6023] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 178.715406][ T6023] RBP: 00007f04b3c3500c R08: 0000000000000000 R09: 0000000000000000 [ 178.723398][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.731389][ T6023] R13: 00007f04b3e26038 R14: 00007f04b3e25fa0 R15: 00007ffc51c41738 [ 178.739395][ T6023] [ 178.742574][ T6023] Kernel Offset: disabled [ 178.747045][ T6023] Rebooting in 86400 seconds..