last executing test programs: 5.094891772s ago: executing program 0 (id=4527): syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b090505", @ANYRES16, @ANYRESDEC], 0x0) 4.954610977s ago: executing program 2 (id=4529): syz_usb_connect$uac2(0x5, 0x9e, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x80, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x4, 0x2c, 0x4}, [@source_unit={0x8, 0x24, 0xa, 0x5, 0x0, 0x40, 0x0, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x5, 0x3, 0x5, 0x3, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x5, [0x6, 0x1, 0x2, 0x9, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x6, {0x8, 0x25, 0x1, 0x82, 0x30, 0x1, 0x28}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe8, 0xff, 0x5, {0x8, 0x25, 0x1, 0x3, 0x0, 0x6, 0xf29}}}}}}}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) 4.773629194s ago: executing program 1 (id=4535): syz_emit_ethernet(0x196, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x160, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0xc, 0x1, 0xfffffff6, [{0x3, 0xb, "c89600000000a908579773e4fdb4ff0f370518410eb28612bfb469b49056984c75e6798dbbe693a653c442a0cea49aa52c1072d5bf00074e80b2222a500d57897826428840bf06061d20b18cd612cdeb36cf1990365b"}, {0x3, 0x2, "c8480000001ce4c408501af78df6"}, {0x3, 0x1d, "9d33a20a3a4b43e6a628ef0db7d56ee0601b14e59e9eec209fae0fa5dd17ef4d7c38e8133caa7c3eda34b93b6d408f281d476d0aa34a41ede61b65200649da6ab7e127b9d36ebc3ec292818accc6a572cb52d8b1f51dbcb4f1e4d042b980a0d0fa2973aa5832369e0fbed743eabb8c8f614c3cc678c85ffa79dffd3551aa39db1aed5193767fc83ef49f20300c4db48cd018e98e3d1e0fc7c418e941cd3c7661d2b88560b970d6ba65ef40453565ac6c2d8e19530540cc07196171253cc2e86186b33fb5a55f2854217213f6fdf6b773b46b4dd7e91dbf96dd093b2bc61a1b6ed82198221458"}]}}}}}}, 0x0) 4.682291017s ago: executing program 1 (id=4536): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630aacff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 4.634816619s ago: executing program 1 (id=4538): syz_usb_connect(0x2, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x16, 0x64, 0xe1, 0x8, 0x1164, 0x622, 0xefca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x34, 0x3, 0x1, 0xfe, 0xa6, 0x8b, 0x4, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x6, 0x7}}]}}, {{0x9, 0x4, 0x33, 0x2, 0x0, 0xff, 0x2, 0x48, 0x4}}]}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x5, &(0x7f00000011c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 2.88098315s ago: executing program 2 (id=4547): syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.880875159s ago: executing program 3 (id=4548): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691122000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 2.86802032s ago: executing program 0 (id=4557): syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0xf6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0xb8, 0xe6}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 2.808321403s ago: executing program 3 (id=4550): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902cfc15aa30009050402100000fa0009058202400000000000"], 0x0) 2.673005207s ago: executing program 2 (id=4551): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0xd6, 0xb6, 0x8d, 0x10, 0x5ac, 0x246, 0x27b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xfa, 0x10, 0x3f, "", [{{0x9, 0x4, 0x14, 0x4, 0x0, 0x3, 0x46, 0x2, 0x2}}]}}]}}, 0x0) 2.58370284s ago: executing program 1 (id=4552): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) 2.467810814s ago: executing program 1 (id=4553): mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) 2.410521436s ago: executing program 1 (id=4554): syz_mount_image$xfs(&(0x7f0000015bc0), &(0x7f0000015c00)='./file0\x00', 0x0, &(0x7f0000015c40), 0x1, 0x15ba2, &(0x7f0000015c80)="$eJzs3Q2QlHUdwPHngANRTCyaIdM6EUEU5eVAICO5ww5PBQEzAQVl9AQVjXgx0YZ8SZ1oxtFstLKs6M0yNbXS0lFHR0vLXhxHnbSGsWx68aXpDRP1mud293xuXXa8//X/Xwyfz8yx+zy7v+fe9rv/PW+9XdR2XGuW7ZKVXJhVm955/7ErlrRf9qUr2hc8s/yScaW9syoDTeXTfcuno7IsG1DePai0a7c/ff8HA/KNAcXj7jZ014bds2xgeXNW+XRa6WTt45XrdVYp7x5eubyh+8No2FR667JHlmVD8zN3n3P4PcXjlEcmvukT3UktapnT1v1lLH3fGkrfw6yxfL74Nrj09t6fld5q3j6K123oh08pf5/Dmx67//J+eN87nEUtc9qrvv95iwPL+/Iem6ob3BlV386Xn/vdmeUvYUP5/mhQVSs7hEUtbcdk272fz7JN//7XwZ2l+80hWWmhyO9Xd83vwrMsG9bf3xf6pqW1uTW/vVa2y9/2ym15eK3bxdezqz6RZdnU8hpQOQUAdhAtrc2za6z/u9Rb/+98cfQM6z8A7LjaW1qba6z/w+qt/3s/tP6Q8n8snFaaer1/PwkAoFfa2muu/8Prrf+Lv7x2i/UfAHZcC+d2rf+7Va3/I+qt/6ec/NxT5etVHje8Vjhk1/PHyvu3FfYPLOx/pbC/sXCc4vUHF/a/XNg/JL+sxvV3LzzvZnRh/9sK+8cU9u9R2H9AYf/wwnOe/lPYP7H8sebGbv8rCgD//xY2t83Oej4/Pjeycnmt9f+jS2+a318fLwAAAAAAAAAAAAAAAADsDNZuOP+s5atWdaxxxhlnnOk+09/3TEBsb0Tf3x8JAJBKih8n+vtzBAB6ap/X8sLAnq9WPbC4sc+jHV2nU7YuWnnxExc8XzktX3x0jUP2eJ3/zs7OzvHbHvpDeXNI4fWys/LrDPaQH3/90gfuLG82Vf/9wa4/wNvUmJ1y+hmrOibm72q/xuy8fGNSftwxjdmV+cbkfGNsY3ZDvtHctTE0uy/fOOTUj6w6raHqT/7Czql93oXZwB7F9nzt+mL/65f+5aeV0zqHrBxtUFbuf8nmTRdVXVaxnf67j7/v9l6XHui73vX/ysrKaZ1Dvmn9/+sn99pc67Lt9999/FH6h3hqPP7v0Wj14/6qx/9NNQ7ZPX/vnNtezPsfM+LWG8u7Br2Vx/+F4+9X3X/Xwbsf/+eHGl15/J//bLF/n74YsJNpn3fRC/XW//r9D9qraqah2P+hNzz17rz/+VMPvLq8q7GX/Y+ut/43fKXnxwr0Tvu8r3ZWrf+96L/H62lVdPd/xeqrRuX9/2j157YVLutN//tX9z9h3dmrJ6zdcP7BZ5y9fEXHio5zmidNmzpl8tSJEyd0PSIo/du3rwnsLPq2/me7Vs00ZFlH9/zGrRfekvc/bsGlS8q7dull/2Pqrv/3Wf+hplEDssGDs/OWr1u3ZlLp38rm5NK/pavV6L8XP//vV/klWuV1MRuybGT3/KO3DRmZ9/+b+edUfk84uJf9j63X/+A33i8QoI/r/2lVMz363zh95pa8/8brZy4t7+rtz/8H1F3/t1j/oS/a51U94ed/LO9//TdvvDtwfJzf/0E8KfpfvPDH1b/3f6sO1D/Ek6L/t4/f87OB4wfpH+JJ0f/ffr7+gsDx8fqHeFL0f9dtv3shcPxg/UM8Kfq/tu2XxwWOH6J/iCdF/89MP+3BwPEJ+od4UvR/1uOP1fv/heuZqH+IJ0X/Td/ZsCxwfJL+IZ4U/Q9btnJL4Phk/UM8Kfqf0/TAuYHjzfqHeFL0/437vvX5wPEp+od4UvT/4j3D9ggcn6p/iCdF//cftc+tgeOH6h/iSdH/p6b8cGzg+DT9Qzwp+t/62vQzA8en6x/iSdH/3Zdc/Wrg+Az9Qzwp+r/yYxe3Bo6/T/8QT4r+nx467vHA8cP0D/Gk6H/Gn+ceFjj+fv1DPCn6X3PtH28KHJ+pf4gnRf/LTt36jsDxD+gf4knR/zv3OenSwPHD9Q/xpOj/uROv2T1wfJb+IZ4U/d+8/8zrAsdb9A/xpOj/4l+PD31d7lb9Qzwp+n/4lstvDxyfrX+IJ0X/Bx37+5MCx4/QP8STov9TJh35SOD4B/UP8aTo/5gHF68LHG/TP8STov8hd/392cDxOfqHeFL0v2HNx28JHD9S/xBPiv4nD3tyRuB4u/4hnhT9v+flhy4PHD9K/xBPiv6Pv+zsPQPHj9Y/xJOi/ztOH/p64Pgx+od4UvT/6sjNKwPH5+of4knR/6+ev/2JwPF5+od4UvR/3WdGzgocP1b/EE+K/sdvvHlu4Ph8/UM8KfpfkTU+HTi+QP8QT4r+j/7niI7A8YX6h3hS9J9tuvcfgePH6R/iSdH/s2c+vXfg+If0D/Gk6P/bI1ZvChw/Xv8QT4r+L92yfErg+If1D/Gk6P8X1z+yOXD8BP1DPCn6/94JR7wUOL5I/xBPiv63jXtpQ+D4Yv1DPCn6f/K3r/8kcHyJ/iGeFP1/8WvHLwgcP1H/EE+K/jfOnnRP4PhJ+od4UvQ/deYXDggcX6p/iCdF/+96+NPXBI4v0z/Ek6L/hXc0hY6frH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYtXvXKIIoAOCzd/kwH4cWonamsNH2EFK6F7iwoBFjc1iZRhErsbFRAoKFiPgPWApiZWFnZ2klWNhYWFrYiIWSRCKbvY3DZiHFBZbjfj8Y2H2z2bzMu5vHZQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO0qB/vRfCseHZ5oH55d0PV2/fyJ68fJ5d+7rx+HwRvVT+wNJuRQihFcJSPjdVXLLw/d2rVn7Siu+7MDefdELSrs/q/s4haZ8oD5IijfzoaTH2HA8hzOUH9y5e+HL4KkyuQbraHy5jMqxbUtQwTP+P74+ZYpz9VYza10d8bdLU3/X6QedUU797nAzS1axS/1y7rF31/T2pqq/z91s/71SWcqryXhkLg7R/Oc+3fp8PYWP17s3dYl+fDUWjyPfV+XwLDyEsNl0XRpP2ur28/uV5UfXNqbL+dfv7TuvWxxBCp+wBAMB4SXvdlZr+X36+r+3/3358fqb/A8D4ytJeN0T/5yuim4vlfF3/Xz7dfttcxgDAqPpZbf/ff75e1/8frk0/ai5jAGBU61f2+v9Mpf+fLOfr+n/n3JtsOF0+N/gb3XLv+2PD+HYUb0fxrSg+Hd0nvn4miv+J4rNRvttHvBwAMBHWu/2VcPDz/5lyvq7//36x9qm5jAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe8u4GyrC4X9z6EbRFBspC06BZVQEEUaRAQFaaRLQrq7u7u7u7s7VRRURLqb/wc4x3s8Pofrvff9v77e53k+n5lda69Z+/fde62ZWTNrV1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXVv0tLzbvY3AMDow2+tNU/3D7r+9cstMrS8+9w+B7zL/LY8tt+5aNr5xzt/eE0MDAwwsDAxB9MNNJH04751HnHj/DBhRGGnu+Yo48xaOyBQSPyUq3/zn+y2OMNOTPow88ffL1Bu3z08WHjDgwMjP7BmWcfOfb8f24knC0113zzDh7GIW6Dzw+MPPj80B+jfPQxwZgDAxOMMcDPj6GnHfSvelyLPTHHQf+qr/3v1FJzzTf/MP4fNOIQu+G9zm0N+zxf9epnXxpmKEca5rXyb9FSc827wAf2vJ4fGFjp/eNPef/D9fqYLwwMjPniwMCYLw0MjPnywMCYrwwMjPnqv9ql/mfNNfcMc3/gP+Tyh+iDhmy7cf0+wtirTf3ewMDAqB89z8d8bci2oKqqqv49mmvuGeaB7f+QXwjg9v8TOx56Udv/qqqqf9/mn2vuGQaG+j3fh1cOGhhryO20/X98hk1G+RcuclVVVf0Pm3d+3P7/bf86bf+PX33Lm/6Fi1xVVVX/wxb90Yfb/1GH2f5PMOR22v4/v9aziw6+edDgu7071CwHDbU/4e2hrh9xqOvfGur6kYeaz9DTjzLU9W8Mdf1oAwNjPjX4+qH+TnDMFz64D8ynqqqqhmnRGeadZ+Aff/6faMjttP2f5rwZV/4XLnJVVVVVVVVV/Rd779lLrviP///94sBQ/7v6t/9hHfx7gUFnXXXXXf+yBf1/o0H/+PuQfzxmwr9ZHziPdsrEAwNrLfGvXpT6F/Rv87/q9f9L+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uOHs/x9vyOlG25841+BJZ7tyq6teH+quE682+Mys71+z0Gr/9xf9X9H/1v3/A6sNGhgY7DveB5YLzrXo4lMNDAy8ftVWV8488LfbZv3gttnHH3HgozdumOrDz5MPZ8ZzDn06wd/mcdaH85///aNHHDTMQgzVM5s9sM2qS70+47CnUwz/cfzt/SUm2XudPYb8L8sIw0w02nDuPGT+Qx7LsM6Dl32qD5Z9mg3WXGea9TfZ9Burrbn8KiutstJaM0w3y0wzTj/TtNNOs/Jqa6w0+PPwxuyjY+xP+s+M2VjDjtmzcw09ZsM+tuGN2cQfP2YfzvG5c+a7csiYjfRfHLNJP37MPlxPfLisE488sNyHY/PBl5xs5IGNP7gw3agfPIUGTzvRB9POMf4IAwN7/ccDHTT4YKMfTTNoq9X+B+9bMvjmIUPy5cGnk+D7lpw/vPctGRjyviVDuGb76GTVp4dMN+xx1gdf/U+/b8l9x593ycCw/5f1/0//re3/P3jNOuhvAzXkDRAGT/OR13+8z8SQ4Z9zqPeZmOWDK/87x6//Z/uH5Z14pL9h0PIOPi7OoOH50fNr9k2//+nBD26Wj+713n8bhZZ3rI9Z3sHH8Rt2eT/uOH4DW0y64MNDxv//0PIOs65b4MPPw1v/zDnM6cet6/CNgla6/QvDrut+OPxF/LvX8ZAxGnWYiYa3rrvo2mU3HHpdOpx13QKrDT6gwX+s6z74spMOWdd98IimGHlgrw8uTP/BhSlHHjjpgwszfHhh9IGrPrgw9Qprr7HioA+3r4PnO+0H851z/EEfYj1+5MWvv7/v++9PNnhZxh5mWQc/PyYeens+1/gfDeaQ+w6Z7weTDpnvU898dNuQbew4/4X5DrkvLe9eh3x025SD5zPtMPMd+WPmO+S+//B6mGrQ3/2hKqxv5h1mffNPvK/Rl2796ON//r5G9Pod7WOWd/BxuId9/X7ccbgH9l13tJcHBgZmGrzMQ07/qw0a3vKO9PHLOzcs78e9b8jAnkdefv7/geUdGGp5/+559sKTHz1Xpho8zbjwQIf3PBty32HXYx++lgev9qcazrL83Xps4n9Yj2094gjDDPZQDe97thVh+o/OT/S3uT3+rVm3GDL2Iw8z3//se7ahHssgWI+NN+zPc4MeHxhEY77x9HOdOuJ+Hz/mIw/8/c8WQ8Z8yH0/bsynHM7j+Lsx//zHj/k/+33yVIO/kR15mOUfeswnGvWc24eM+bAHwf3PxnzIYxnOtuMfxnyUgYGRacynnfyjcfu49enwxnzIfYeM+QcPcfbxRxr43gffkQ8e8+H9jPV3Yz7R/5nn+Rgw/UfnV/rbVWdu9frfnufDjvF/NuZDHss/O+aDrvrb83yyD2+bZISBUUYZ2Hj5DTZYb7qPPg+5OP1Hn3ldtPDIH43zx21Lh2c05L4f97qYbDiP+++MxvunjAYNO2bDnn52pGEm/I/zf5vb5x46aeb/7rpoyGP5p42O4nXRSSN8NG4f933R8MZ8yH1pOzjBUPcf9ufQwcfPGnOY7eDHHT9r4JCjj7pqyCwH3+3/5vGzRh3mOFmDhhquIeeHfnqNM9T1Q68axh3q+qE3jeMN9bPcm0NdP+1QT43hrdb/yw35neRqw67k65+t3/+7y99d/u7yd5e/uOHs/594yP7/dc59d/XB39OPPNGSVzz+r17ef3H/q/f/D/b9u/3/j1+x5Ie//Bp828fun/1omv8n98/O8tHJ+vcNmW7Y/YODr/6n988eMd6pMw3839k/+99qyGv1n/i5uPW/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xw9v9PO+TvAF6Zdt8RBu8IHXmBhbaa8F+9vP/i/lfv/x/s+3f7/yfcaqEFPngCDL7tY/f/fzSNY///CK9ut8zA/8P7/4e8Vtv/X/9J+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uOHs/59zyN8BPPnmVAsO+XuAUz552vAOO2fpf+v+/97/31vrf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4wfv/B4Z5m8SFe15gsP//37vh+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/zh+z+C+VP2bx/0n+mMV/6fwxi/9P88cs/svkj1n8l80fs/j/LH/M4v/z/DGL/3L5Yxb/5fPHLP6/yB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4/zJ/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv9f5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/9f5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/3+SPWfx/mz9m8f9d/pjF//H8MYv/7/PHLP5/yB+z+D+RP2bxfzJ/zOL/x/wxi/+f8scs/n/OH7P4P5U/ZvH/S/6Yxf/p/DGL/1/zxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388cs/u/kj1n8380fs/i/lz9m8X8/f0ziP2ggf8ziPyh/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9E/pjFf/z8MYv/J/PHLP4T5I9Z/CfMH7P4fyp/zOL/6fwxi/9E+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX/i/DGL/5fzxyz+k+SPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/5v5Yxb/2fPHLP5z5I9Z/L+VP2bx/3b+mMX/O/ljFv8588cs/nPlj1n8584fs/jPkz9m8f9u/pjF/3v5Yxb/efPHLP7z5Y9Z/L+fP2bxnz9/zOL/g/wxi/8P88cs/gvkj1n8f5Q/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/+P8MYv/UvljFv+f5I9Z/JfOH7P4/zR/zOK/TP6YxX/Z/DGL/8/yxyz+P88fs/gvlz9m8V8+f8zi/4v8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8v88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/1X+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfx/nT9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8f9N/pjF/7f5Yxb/3+WPWfwfzx+z+P8+f8zi/4f8MYv/E/ljFv8n88cs/n/MH7P4/yl/zOL/5/wxi/9T+WMW/7/kj1n8n84fs/j/NX/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5Yxb/9/PHJP4fns3/H7P4D8ofs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+RP2bxHz9/zOL/yfwxi/8E+WMW/wnzxyz+n8ofs/h/On/M4j9R/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z84f8zi/+X8MYv/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/2b+mMV/9vwxi/8c+WMW/2/lj1n8v50/ZvH/Tv6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/L+bP2bx/17+mMV/3vwxi/98+WMW/+/nj1n8588fs/j/IH/M4v/D/DGL/wL5Yxb/H+WPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4/zh/zOK/VP6Yxf8n+WMW/6Xzxyz+P80fs/gvkz9m8V82f8zi/7P8MYv/z/PHLP7L5Y9Z/JfPH7P4/yJ/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4v/L/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8f5U/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv9f549Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/H+TP2bx/23+mMX/d/ljFv/H88cs/r/PH7P4/yF/zOL/RP6Yxf/J/DGL/x/zxyz+f8ofs/j/OX/M4v9U/pjF/y/5Yxb/p/PHLP5/zR+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f8zi/17+mMX//fwxif+IA/ljFv9B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/J/LHLP7j549Z/D+ZP2bxnyB/zOI/Yf6Yxf9T+WMW/0/nj1n8J8ofs/h/Jn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+E+ePWfy/nD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP7fzB+z+M+eP2bxnyN/zOL/rfwxi/+388cs/t/JH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/d/PHLP7fyx+z+M+bP2bxny9/zOL//fwxi//8+WMW/x/kj1n8f5g/ZvFfIH/M4v+j/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f549Z/JfKH7P4/yR/zOK/dP6Yxf+n+WMW/2Xyxyz+y+aPWfx/lj9m8f95/pjFf7n8MYv/8vljFv9f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5k/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/+v8scs/hvnj1n8N8kfs/hvmj9m8d8sf8zi/+v8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/b/LHLP6/zR+z+P8uf8zi/3j+mMX/9/ljFv8/5I9Z/J/IH7P4P5k/ZvH/Y/6Yxf9P+WMW/z/nj1n8n8ofs/j/JX/M4v90/pjF/6/5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyz+7+aPWfzfyx+z+L+fPybxH2kgf8ziPyh/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9E/pjFf/z8MYv/J/PHLP4T5I9Z/CfMH7P4fyp/zOL/6fwxi/9E+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX/i/DGL/5fzxyz+k+SPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/5v5Yxb/2fPHLP5z5I9Z/L+VP2bx/3b+mMX/O/ljFv8588cs/nPlj1n8584fs/jPkz9m8f9u/pjF/3v5Yxb/efPHLP7z5Y9Z/L+fP2bxnz9/zOL/g/wxi/8P88cs/gvkj1n8f5Q/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/+P8MYv/UvljFv+f5I9Z/JfOH7P4/zR/zOK/TP6YxX/Z/DGL/8/yxyz+P88fs/gvlz9m8V8+f8zi/4v8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8v88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/1X+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfx/nT9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8f9N/pjF/7f5Yxb/3+WPWfwfzx+z+P8+f8zi/4f8MYv/E/ljFv8n88cs/n/MH7P4/yl/zOL/5/wxi/9T+WMW/7/kj1n8n84fs/j/NX/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5Yxb/9/PHJP4jD+SPWfwH5Y9Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+n8gfs/iPnz9m8f9k/pjFf4L8MYv/hPljFv9P5Y9Z/D+dP2bxnyh/zOL/mfwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5w/ZvH/cv6YxX+S/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/h/M3/M4j97/pjFf478MYv/t/LHLP7fzh+z+H8nf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+380fs/h/L3/M4j9v/pjFf778MYv/9/PHLP7z549Z/H+QP2bx/2H+mMV/gfwxi/+P8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfx/nD9m8V8qf8zi/5P8MYv/0vljFv+f5o9Z/JfJH7P4L5s/ZvH/Wf6Yxf/n+WMW/+Xyxyz+y+ePWfx/kT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bx/2X+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP6/yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/6/zxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+v8kfs/j/Nn/M4v+7/DGL/+P5Yxb/3+ePWfz/kD9m8X8if8zi/2T+mMX/j/ljFv8/5Y9Z/P+cP2bxfyp/zOL/l/wxi//T+WMW/7/mj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/ZvF/L3/M4v9+/pjEf5SB/DGL/6D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6Yxf8T+WMW//Hzxyz+n8wfs/hPkD9m8Z8wf8zi/6n8MYv/p/PHLP4T5Y9Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+J88cs/l/OH7P4T5I/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8v5E/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/2/mj1n8Z88fs/jPkT9m8f9W/pjF/9v5Yxb/7+SPWfznzB+z+M+VP2bxnzt/zOI/T/6Yxf+7+WMW/+/lj1n8580fs/jPlz9m8f9+/pjFf/78MYv/D/LHLP4/zB+z+C+QP2bx/1H+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/4/zxyz+S+WPWfx/kj9m8V86f8zi/9P8MYv/MvljFv9l88cs/j/LH7P4/zx/zOK/XP6YxX/5/DGL/y/yxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP6/zB+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/1f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvH/df6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf83+WMW/9/mj1n8f5c/ZvF/PH/M4v/7/DGL/x/yxyz+T+SPWfyfzB+z+P8xf8zi/6f8MYv/n/PHLP5P5Y9Z/P+SP2bxfzp/zOL/1/wxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388cs/u/lj1n8388fk/iPOpA/ZvEflD9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyJ/zOI/fv6Yxf+T+WMW/wnyxyz+E+aPWfw/lT9m8f90/pjFf6L8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP3H+mMX/y/ljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOL/zfwxi//s+WMW/znyxyz+38ofs/h/O3/M4v+d/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4fzd/zOL/vfwxi/+8+WMW//nyxyz+388fs/jPnz9m8f9B/pjF/4f5Yxb/BfLHLP4/yh+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/cf6YxX+p/DGL/0/yxyz+S+ePWfx/mj9m8V8mf8ziv2z+mMX/Z/ljFv+f549Z/JfLH7P4L58/ZvH/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/5f5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/j/Kn/M4r9x/pjFf5P8MYv/pvljFv/N8scs/r/OH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx3yx+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4/yZ/zOL/2/wxi//v8scs/o/nj1n8f58/ZvH/Q/6Yxf+J/DGL/5P5Yxb/P+aPWfz/lD9m8f9z/pjF/6n8MYv/X/LHLP5P549Z/P+aP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf8zi/27+mMX/vfwxi//7+WMS/9EG8scs/oPyxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv9P5I9Z/MfPH7P4fzJ/zOI/Qf6YxX/C/DGL/6fyxyz+n84fs/hPlD9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfwnzh+z+H85f8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/L+ZP2bxnz1/zOI/R/6Yxf9b+WMW/2/nj1n8v5M/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv/v5o9Z/L+XP2bxnzd/zOI/X/6Yxf/7+WMW//nzxyz+P8gfs/j/MH/M4r9A/pjF/0f5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/OH7P4L5U/ZvH/Sf6YxX/p/DGL/0/zxyz+y+SPWfyXzR+z+P8sf8zi//P8MYv/cvljFv/l88cs/r/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/j/Mn/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/1/lj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/1/ljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/f5I9Z/H+bP2bx/13+mMX/8fwxi//v88cs/n/IH7P4P5E/ZvF/Mn/M4v/H/DGL/5/yxyz+f84fs/g/lT9m8f9L/pjF/+n8MYv/X/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+z+L+XP2bxfz9/TOI/+kD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8zi/4n8MYv/+PljFv9P5o9Z/CfIH7P4T5g/ZvH/VP6Yxf/T+WMW/4nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/8T5Yxb/L+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/N/PHLP6z549Z/OfIH7P4fyt/zOL/7fwxi/938scs/nPmj1n858ofs/jPnT9m8Z8nf8zi/938MYv/9/LHLP7z5o9Z/OfLH7P4fz9/zOI/f/6Yxf8H+WMW/x/mj1n8F8gfs/j/KH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/x/ljFv+l8scs/j/JH7P4L50/ZvH/af6YxX+Z/DGL/7L5Yxb/n+WPWfx/nj9m8V8uf8ziv3z+mMX/F/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/1/mj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/q/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+P86f8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/5v8MYv/b/PHLP6/yx+z+D+eP2bx/33+mMX/D/ljFv8n8scs/k/mj1n8/5g/ZvH/U/6Yxf/P+WMW/6fyxyz+f8kfs/g/nT9m8f9r/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5Yxb/9/LHLP7v549J/McYyB+z+A/KH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/kT9m8R8/f8zi/8n8MYv/BPljFv8J88cs/p/KH7P4fzp/zOI/Uf6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvGfOH/M4v/l/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8f9m/pjFf/b8MYv/HPljFv9v5Y9Z/L+dP2bx/07+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfy/mz9m8f9e/pjFf978MYv/fPljFv/v549Z/OfPH7P4/yB/zOL/w/wxi/8C+WMW/x/lj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+P84f8ziv1T+mMX/J/ljFv+l88cs/j/NH7P4L5M/ZvFfNn/M4v+z/DGL/8/zxyz+y+WPWfyXzx+z+P8if8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/y/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/H+VP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/X+ePWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfx/kz9m8f9t/pjF/3f5Yxb/x/PHLP6/zx+z+P8hf8zi/0T+mMX/yfwxi/8f88cs/n/KH7P4/zl/zOL/VP6Yxf8v+WMW/6fzxyz+f80fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/ZvF/N3/M4v9e/pjF//38MYn/mAP5Yxb/QfljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/yfyxyz+4+ePWfw/mT9m8Z8gf8ziP2H+mMX/U/ljFv9P549Z/CfKH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/hPnj1n8v5w/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+38wfs/jPnj9m8Z8jf8zi/638MYv/t/PHLP7fyR+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/3fzxyz+38sfs/jPmz9m8Z8vf8zi//38MYv//PljFv8f5I9Z/H+YP2bxXyB/zOL/o/wxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+ePWfyXyh+z+P8kf8ziv3T+mMX/p/ljFv9l8scs/svmj1n8f5Y/ZvH/ef6YxX+5/DGL//L5Yxb/X+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/H+ZP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/r/LHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4v/r/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/2/yxyz+v80fs/j/Ln/M4v94/pjF//f5Yxb/P+SPWfyfyB+z+D+ZP2bx/2P+mMX/T/ljFv8/549Z/J/KH7P4/yV/zOL/dP6Yxf+v+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938scs/u/mj1n838sfs/i/nz8m8R9rIH/M4j8of8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvH/RP6YxX/8/DGL/yfzxyz+E+SPWfwnzB+z+H8qf8zi/+n8MYv/RPljFv/P5I9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/4vwxi/+X88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf+b+WMW/9nzxyz+c+SPWfy/lT9m8f92/pjF/zv5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvH/bv6Yxf97+WMW/3nzxyz+8+WPWfy/nz9m8Z8/f8zi/4P8MYv/D/PHLP4L5I9Z/H+UP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v/j/DGL/1L5Yxb/n+SPWfyXzh+z+P80f8ziv0z+mMV/2fwxi//P8scs/j/PH7P4L5c/ZvFfPn/M4v+L/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/L/PHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8f9V/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8f50/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvH/Tf6Yxf+3+WMW/9/lj1n8H88fs/j/Pn/M4v+H/DGL/xP5Yxb/J/PHLP5/zB+z+P8pf8zi/+f8MYv/U/ljFv+/5I9Z/J/OH7P4/zV/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMW//fzxyT+Yw/kj1n8B+WPWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/p/IH7P4j58/ZvH/ZP6YxX+C/DGL/4T5Yxb/T+WPWfw/nT9m8Z8of8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+cP2bx/3L+mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzN/zOI/e/6YxX+O/DGL/7fyxyz+384fs/h/J3/M4j9n/pjFf678MYv/3PljFv958scs/t/NH7P4fy9/zOI/b/6YxX++/DGL//fzxyz+8+ePWfx/kD9m8f9h/pjFf4H8MYv/j/LHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5w/ZvFfKn/M4v+T/DGL/9L5Yxb/n+aPWfyXyR+z+C+bP2bx/1n+mMX/5/ljFv/l8scs/svnj1n8f5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9l/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+v8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi/+v88cs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/r/JH7P4/zZ/zOL/u/wxi//j+WMW/9/nj1n8/5A/ZvF/In/M4v9k/pjF/4/5Yxb/P+WPWfz/nD9m8X8qf8zi/5f8MYv/0/ljFv+/5o9Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+z+L+bP2bxfy9/zOL/fv6YxH+cgfwxi/+g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMX/E/ljFv/x88cs/p/MH7P4T5A/ZvGfMH/M4v+p/DGL/6fzxyz+E+WPWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/ifPHLP5fzh+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv9v5o9Z/GfPH7P4z5E/ZvH/Vv6Yxf/b+WMW/+/kj1n858wfs/jPlT9m8Z87f8ziP0/+mMX/u/ljFv/v5Y9Z/OfNH7P4z5c/ZvH/fv6YxX/+/DGL/w/yxyz+P8wfs/gvkD9m8f9R/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/+P88cs/kvlj1n8f5I/ZvFfOn/M4v/T/DGL/zL5Yxb/ZfPHLP4/yx+z+P88f8ziv1z+mMV/+fwxi/8v8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+v8wfs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf9X+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx/3X+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f+z/Y48eDAAxECAAnq23bdu2bdu2P7Zt27ZtOznbNtPAVpCdaWFa/if6j1r+J/mPWv4n+49a/qf4j1r+p/qPWv6n+Y9a/qf7j1r+Z/iPWv5n+o9a/mf5j1r+Z/uPWv7n+I9a/uf6j1r+5/mPWv7n+49a/hf4j1r+F/qPWv4X+Y9a/hf7j1r+l/iPWv6X+o9a/pf5j1r+l/uPWv5X+I9a/lf6j1r+V/mPWv5X+49a/tf4j1r+1/qPWv7X+Y9a/tf7j1r+N/iPWv43+o9a/jf5j1r+N/uPWv63+I9K/scP8B+1/A/0H7X8D/IftfwP9h+1/A/xH7X8D/UftfwP8x+1/A/3H7X8j/AftfyP9B+1/I/yH7X8j/YftfyP8R+1/I/1H7X8j/MftfyP9x+1/E/wH7X8P8l/1PL/ZP9Ry/9T/Ect/0/1H7X8P81/1PL/dP9Ry/8z/Ect/8/0H7X8P8t/1PL/bP9Ry/9z/Ect/8/1H7X8P89/1PL/fP9Ry/8L/Ect/y/0H7X8v8h/1PL/Yv9Ry/9L/Ect/y/1H7X8v8x/1PL/cv9Ry/8r/Ect/6/0H7X8v8p/1PL/av9Ry/9r/Ect/6/1H7X8v85/1PL/ev9Ry/8b/Ect/2/0H7X8v8l/1PL/Zv9Ry/9b/Ect/2/1H7X8v81/1PL/dv9Ry/87/Ect/+/0H7X8v8t/1PL/bv9Ry/97/Ect/+/1H7X8v89/1PL/fv9Ry/8H/Ect/x/0H7X8f8h/1PL/Yf9Ry/9H/Ect/x/1H7X8f8x/1PL/cf9Ry/8n/Ect/5/0H7X8f8p/1PL/af9Ry/9n/Ect/5/1H7X8f85/1PL/ef9Ry/8X/Ect/1/0H7X8f8l/1PL/Zf9Ry/9X/Ect/1/1H7X8f81/1PL/df9Ry/83/Ect/9/0H7X8f8t/1PL/bf9Ry/93/Ect/9/1H7X8f89/1PL/ff9Ry/8P/Ect/z/0H7X8/8h/1PL/Y/9Ry/9P/Ect/z/1H7X8/8x/1PL/c/9Ry/8v/Ect/7/0H7X8/8p/1PL/a/9Ry/9v/Ect/7/1H7X8/85/1PL/e/9Ry/8f/Ect/3/0H7X8/8l/1PL/Z/9Ry/9f/Ect/3/1H7X8/81/1PL/d/9Ry/8//Ect///0H7X8/8t/1PL/b/9Ry/9//Ect///1H7X8/89/1PL/f/9Ry/9W/qOW/639Ry3/2/iPWv639R+1/G/nP2r5395/1PK/g/+o5X9H/1HL/07+o5b/nf1HLf+7+I9a/nf1H7X87+Y/avnf3X/U8r+H/6jlf0//Ucv/Xv6jlv+9/Uct//v4j1r+9/Uftfzv5z9q+d/ff9Tyf4D/qOX/QP9Ry/9B/qOW/4P9Ry3/h/iPWv4P9R+1/B/mP2r5P9x/1PJ/hP+o5f9I/1HL/1H+o5b/o/1HLf/H+I9a/o/1H7X8H+c/avk/3n/U8n+C/6jl/0T/Ucv/Sf6jlv+T/Uct/6f4j1r+T/Uftfyf5j9q+T/df9Tyf4b/qOX/TP9Ry/9Z/qOW/7P9Ry3/5/iPWv7P9R+1/J/nP2r5P99/1PJ/gf+o5f9C/1HL/0X+o5b/i/1HLf+X+I9a/i/1H7X8X+Y/avm/3H/U8n+F/6jl/0r/Ucv/Vf6jlv+r/Uct/9f4j1r+r/Uftfxf5z9q+b/ef9Tyf4P/qOX/Rv9Ry/9N/qOW/5v9Ry3/t/iPWv5v9R+1/N/mP2r5v91/1PJ/h/+o5f9O/1HL/13+o5b/u/1HLf/3+I9a/u/1H7X83+c/avm/33/U8v+A/6jl/0H/Ucv/Q/6jlv+H/Uct/4/4j1r+H/Uftfw/5j9q+Z/oP2r5n+Q/avmf7D9q+Z/iP2r5n+o/avmf5j9q+Z/uP2r5n+E/avmf6T9q+Z/lP2r5n+0/avmf4z9q+Z/rP2r5n+c/avmf7z9q+V/gP2r5X+g/avlf5D9q+V/sP2r5X+I/avlf6j9q+V/mP2r5X+4/avlf4T9q+V/pP2r5X+U/avlf7T9q+V/jP2r5X+s/avlf5z9q+V/vP2r53+A/avnf6D9q+d/kP2r53+w/avnf4j8q+Z8wwH/U8j/Qf9TyP8h/1PI/2H/U8j/Ef9TyP9R/1PI/zH/U8j/cf9TyP8J/1PI/0n/U8j/Kf9TyP9p/1PI/xn/U8j/Wf9TyP85/1PI/3n/0hPsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HF24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVd+3dxGooDAP5yvR/eL3Rw0MkDXXQtgqPpQc+KIt6hFDcXncXJyYJyg4N/gOgiiLgLgoODo+BcBFdFcHQRT62kSeSRCxxch1Du84EHL++l6Wu+L+9LmgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+9XvbnVCOFRsDXb1nxu9v3L7Rm/72ePe1c83H5zOW8+XH1gbVYQQZkJYy/pm812Wv71+MZNtzMTHXV5cSlZD0qof1d3fewz7SFlJ8mFktUd5GTscQljMKnfOnhnufRYOrn660S1OY6uIW5LHMMwV9bjM5+XEj7zUzo9436Sp3/Xh2pedpr57mvTTjV4l/iGv57GrXt8HVXWefxoef1g5lbOVa2Uq9NPupSze9et8CG9OXd8Z5ev6QsgTRbauLmVLeAhhpem4MJm00+5k87XcHgc9GcyW8a+ZF63n30dZfl4tcwAAMF3STnu9Jv+X9/e1+f/d3MW38j8ATK9e2mmH6H++cWMyWCn76/L/rb9PthscMgAwoW6vNv//f75el/9Pvnx6ocEhAwAT2rw8zv/zlfx/tOyvy/9bH9v3i+7yucGf6JDj98eK9vgdrFbU/itqn4uOE+8/H7X/jNoXovF6xwsA9mGz3V0Pu+//j5X9dfn/1b3h1waHDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEwUAAD//7CbP8o=") 1.460792059s ago: executing program 4 (id=4562): syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x2001, 0x880b, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "416f9a89208a27f8bb5c52346eaac8b76b7517b29284f8bf", "7d4e140cdb775850165c6a94af86416d7b11de59292ff6277ac3389b64665ce6"}}}}}}, 0x0) 1.398522062s ago: executing program 4 (id=4563): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.301720145s ago: executing program 4 (id=4564): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 1.032090354s ago: executing program 4 (id=4565): timer_create(0xfffffff3, 0x0, 0x0) 950.627047ms ago: executing program 4 (id=4566): syz_read_part_table(0x107b, &(0x7f0000001080)="$eJzs0L1NBDEQBeC3vvN6lwRqISKmBzqgEAICiiK4JqiDlB8ho/Vp6QBIvi+wRxq9sTXhX92kjvthO16TZW+UkrSUUd8lbzksWfuaz8d26kmmlKtkOSRZ3nuve673fn1KchhTb2uOe6PNmftl8tGntK9s44djyk86L/P5zVKztrr/5z5bbAsPF9N0Lp6ef3M3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBXvgMAAP//XgUaOw==") 877.7769ms ago: executing program 0 (id=4567): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 751.867864ms ago: executing program 2 (id=4568): socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) 678.686806ms ago: executing program 0 (id=4569): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB="00000000d36c66ecc053c543da2e2e"], 0x48) 656.349387ms ago: executing program 3 (id=4570): request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVix:D0', 0x0) 592.26465ms ago: executing program 2 (id=4571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 580.13107ms ago: executing program 0 (id=4572): syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}}}, 0x0) 524.488982ms ago: executing program 4 (id=4573): syz_usb_connect$midi(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x763, 0x150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x5}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 476.148054ms ago: executing program 3 (id=4574): mq_open(&(0x7f0000005e40)='\xff\xff', 0x40, 0x81, &(0x7f0000005e80)={0x0, 0x8, 0xfffffffffffffffe, 0x5a51}) 434.011555ms ago: executing program 0 (id=4575): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x1, 0x552b, &(0x7f000000b2c0)="$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") 383.344747ms ago: executing program 2 (id=4576): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") 349.819208ms ago: executing program 3 (id=4577): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x30e, &(0x7f0000000900)="$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") 0s ago: executing program 3 (id=4578): syz_open_procfs$userns(0x0, &(0x7f0000000580)) kernel console output (not intermixed with test programs): vice strings: Mfr=1, Product=2, SerialNumber=3 [ 453.839166][ T5310] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 453.870959][ T5310] usb 2-1: config 1 has no interface number 0 [ 453.898000][ T5310] usb 2-1: config 1 interface 93 has no altsetting 0 [ 453.947692][ T4228] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 454.084394][ T5310] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a [ 454.101452][T12817] loop4: detected capacity change from 0 to 128 [ 454.111120][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.119391][ T5310] usb 2-1: Product: syz [ 454.123714][ T5310] usb 2-1: Manufacturer: syz [ 454.128690][ T5310] usb 2-1: SerialNumber: syz [ 454.147639][T12817] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 454.180108][ T4228] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 454.232440][ T4228] usb 4-1: USB disconnect, device number 99 [ 454.292687][ T5303] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 454.305411][T12817] hpfs: hpfs_map_sector(): read error [ 454.481155][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.498687][ T5310] option 2-1:1.93: GSM modem (1-port) converter detected [ 454.526505][ T5310] usb 2-1: USB disconnect, device number 108 [ 454.546987][ T5310] option 2-1:1.93: device disconnected [ 454.668843][T12827] loop4: detected capacity change from 0 to 1024 [ 454.715726][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.722084][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.731988][ T5303] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 454.742933][T12827] hfsplus: request for non-existent node 27148 in B*Tree [ 454.751039][ T5303] usb 3-1: config 0 has no interface number 0 [ 454.751080][ T5303] usb 3-1: config 0 interface 123 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 454.751111][ T5303] usb 3-1: config 0 interface 123 has no altsetting 0 [ 454.824925][T12827] hfsplus: request for non-existent node 27148 in B*Tree [ 454.832199][T12829] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 454.889423][ T5303] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 454.913572][ T5303] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 454.928217][ T5303] usb 3-1: Product: syz [ 454.932473][ T5303] usb 3-1: Manufacturer: syz [ 454.950999][ T5303] usb 3-1: config 0 descriptor?? [ 455.070629][T12821] loop0: detected capacity change from 0 to 32768 [ 455.084438][T12821] xfs: Bad value for 'swidth' [ 455.166262][ T26] audit: type=1326 audit(1775649256.556:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.0.3871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251e06c819 code=0x0 [ 455.194945][ T21] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 455.272031][ T5303] ftdi_sio 3-1:0.123: FTDI USB Serial Device converter detected [ 455.287818][ T5303] usb 3-1: Detected FT-X [ 455.311878][T12847] loop1: detected capacity change from 0 to 64 [ 455.331604][ T5303] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 455.338634][ T5310] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 455.363557][ T5303] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 455.385231][ T5303] ftdi_sio 3-1:0.123: GPIO initialisation failed: -71 [ 455.396189][ T5303] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 455.425901][T12847] hfs: get root inode failed [ 455.442936][ T5303] usb 3-1: USB disconnect, device number 106 [ 455.466414][ T5303] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 455.495821][ T5303] ftdi_sio 3-1:0.123: device disconnected [ 455.550233][ T5579] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 455.608594][ T5310] usb 5-1: Using ep0 maxpacket: 8 [ 455.609428][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.647670][T12849] ntfs: volume version 3.1. [ 455.652304][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 455.668422][T12849] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 455.682657][T12849] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 455.694846][T12849] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 455.779412][ T5310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.801356][ T5310] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 455.832041][ T21] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 455.849759][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.858487][ T21] usb 4-1: Product: syz [ 455.862982][ T21] usb 4-1: Manufacturer: syz [ 455.873794][ T21] usb 4-1: SerialNumber: syz [ 455.883162][ T21] usb 4-1: config 0 descriptor?? [ 455.907405][T12831] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 455.947057][T12851] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 455.958598][ T21] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 455.958638][ T21] usb 4-1: No valid video chain found. [ 455.961166][ T5579] usb 1-1: config 3 has an invalid interface number: 71 but max is 0 [ 455.993793][ T5579] usb 1-1: config 3 has no interface number 0 [ 455.999976][ T5579] usb 1-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 456.009939][ T5579] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 456.019078][ T5579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.035268][ T5310] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 456.054961][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.070051][ T5579] ati_remote_probe: Unexpected endpoint_in [ 456.103500][ T5310] usb 5-1: Product: syz [ 456.107738][ T5310] usb 5-1: Manufacturer: syz [ 456.118098][ T5310] usb 5-1: SerialNumber: syz [ 456.146279][ T5310] usb 5-1: config 0 descriptor?? [ 456.197260][ T5310] radioshark 5-1:0.0: Invalid radioSHARK device [ 456.205240][ T5310] radioshark: probe of 5-1:0.0 failed with error -22 [ 456.217509][ T5310] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 456.236430][ T5310] usb 4-1: USB disconnect, device number 100 [ 456.308247][ T5581] usb 1-1: USB disconnect, device number 101 [ 456.403765][ T5303] usb 5-1: USB disconnect, device number 101 [ 456.421094][ T5579] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 456.868360][ T5579] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.924802][ T5579] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 231 [ 456.949728][ T5579] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.968482][ T5579] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 456.977892][ T5579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.021351][ T5579] usb 3-1: config 0 descriptor?? [ 457.069398][T12860] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 457.138876][T12870] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 457.149401][T12870] ntfs3: loop0: try to read out of volume at offset 0x1ff000 [ 457.158034][T12870] ntfs3: loop0: Failed to load $MFT. [ 457.253799][T12881] syz.0.3889 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 457.341610][T12883] befs: Unrecognized mount option "$" or missing value [ 457.361060][T12883] befs: (nbd0): cannot parse mount options [ 457.363071][ T5579] ath6kl: Failed to submit usb control message: -71 [ 457.394364][T12879] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 457.419027][ T5579] ath6kl: unable to send the bmi data to the device: -71 [ 457.442227][T12879] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 457.457390][ T5579] ath6kl: Unable to send get target info: -71 [ 457.497440][ T5579] ath6kl: Failed to init ath6kl core: -71 [ 457.537738][ T5579] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 457.559643][T12879] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 457.614258][ T5579] usb 3-1: USB disconnect, device number 107 [ 457.774227][T12893] IPv6: addrconf: prefix option has invalid lifetime [ 457.820457][T12889] set_capacity_and_notify: 4 callbacks suppressed [ 457.820482][T12889] loop0: detected capacity change from 0 to 4096 [ 457.884691][T12889] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 457.934053][T12866] loop3: detected capacity change from 0 to 40427 [ 457.981272][T12889] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 458.057823][T12891] loop1: detected capacity change from 0 to 4096 [ 458.086933][T12866] F2FS-fs (loop3): Found nat_bits in checkpoint [ 458.294544][T12866] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 458.367460][T12866] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 458.412453][T12866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 458.593684][ T7] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 458.905082][T12929] loop2: detected capacity change from 0 to 65 [ 458.930658][T12931] loop1: detected capacity change from 0 to 22 [ 459.003404][T12933] loop0: detected capacity change from 0 to 8192 [ 459.013385][T12931] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 459.025613][T12929] BFS-fs: bfs_fill_super(): Impossible last inode number 3585 > 513 on loop2 [ 459.031601][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 459.048345][T12931] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 459.117033][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 459.265550][ T21] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 459.301383][T12943] loop0: detected capacity change from 0 to 1024 [ 459.329622][T12945] tmpfs: Bad value for 'size' [ 459.350805][T12943] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 459.350805][T12943] [ 459.389419][T12943] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 459.457332][ T7] usb 5-1: string descriptor 0 read error: -22 [ 459.463740][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 459.487756][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.563919][ T4228] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 459.747579][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.803965][ T7] usb 5-1: USB disconnect, device number 102 [ 459.868746][ T21] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.881699][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 459.974909][T12969] loop2: detected capacity change from 0 to 4096 [ 460.023508][T12969] ntfs: (device loop2): ntfs_read_locked_inode(): Found non-standard compression unit (0 instead of 4). Cannot handle this. [ 460.036840][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.047441][ T4228] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 460.059058][T12969] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 460.076791][T12969] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 460.099223][T12969] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 460.108745][ T21] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 460.117852][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.126591][T12969] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 460.140192][ T21] usb 4-1: Product: syz [ 460.144408][ T21] usb 4-1: Manufacturer: syz [ 460.149041][ T21] usb 4-1: SerialNumber: syz [ 460.283266][ T4228] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 460.287551][T12977] loop2: detected capacity change from 0 to 2048 [ 460.299451][ T5310] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 460.303512][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.320042][ T4228] usb 2-1: Product: syz [ 460.325163][ T4228] usb 2-1: Manufacturer: syz [ 460.329903][ T4228] usb 2-1: SerialNumber: syz [ 460.345936][T12977] loop2: p1 p2 p3 [ 460.345936][T12977] p1: [ 460.361869][T12977] loop2: p2 size 458752 extends beyond EOD, truncated [ 460.369770][T12977] loop2: p3 start 65280 is beyond EOD, truncated [ 460.387940][ T4228] snd-ua101 2-1:1.1: sample format descriptor not found [ 460.409094][ T4228] snd-ua101 2-1:1.0: invalid num_altsetting [ 460.474326][T12979] loop4: detected capacity change from 0 to 1024 [ 460.554596][T12979] hfsplus: invalid btree flag [ 460.555736][ T5310] usb 1-1: Using ep0 maxpacket: 32 [ 460.562496][T12979] hfsplus: failed to load catalog file [ 460.616724][ T21] usb 4-1: unit 3 not found! [ 460.629485][ T21] usb 4-1: unit 251 not found! [ 460.647795][ T7] usb 2-1: USB disconnect, device number 109 [ 460.683356][ T5310] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 460.713551][ T5310] usb 1-1: config 0 has no interface number 0 [ 460.729791][ T5310] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 460.751605][ T5310] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 460.809484][ T21] usb 4-1: USB disconnect, device number 101 [ 460.823180][ T5310] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.936409][ T6638] udevd[6638]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 460.950398][ T4505] udevd[4505]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 461.040858][ T5310] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 461.061152][ T5310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.093987][ T5310] usb 1-1: Product: syz [ 461.098227][ T5310] usb 1-1: Manufacturer: syz [ 461.125483][ T5310] usb 1-1: SerialNumber: syz [ 461.133732][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.159222][ T5310] usb 1-1: config 0 descriptor?? [ 461.184747][T12973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 461.230081][ T5310] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input33 [ 461.429584][T12999] FAT-fs (loop1): bogus logical sector size 1536 [ 461.436001][T12999] FAT-fs (loop1): Can't find a valid FAT filesystem [ 461.461872][T12995] ntfs: volume version 3.1. [ 461.499857][T12995] __ntfs_error: 3 callbacks suppressed [ 461.499875][T12995] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 461.532314][ T5310] usb 1-1: USB disconnect, device number 102 [ 461.579845][T12995] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 461.642856][T12995] ntfs: (device loop3): load_system_files(): Failed to load root directory. [ 461.674251][T12995] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 461.757480][T13001] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 461.915261][ T26] audit: type=1326 audit(1775649262.888:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13006 comm="syz.3.3950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc608d59819 code=0x0 [ 462.043465][ T26] audit: type=1326 audit(1775649263.010:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.2.3952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3347519819 code=0x0 [ 462.204791][T12990] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 462.227756][T13015] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 462.246585][T12990] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 462.256747][T13015] MINIX-fs: bad superblock [ 462.262230][T12990] F2FS-fs (loop4): Unrecognized mount option "su" or missing value [ 462.298454][T13013] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 462.308394][T13013] REISERFS (device loop3): using ordered data mode [ 462.315339][T13013] reiserfs: using flush barriers [ 462.322267][T13013] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 462.345233][T13013] REISERFS (device loop3): checking transaction log (loop3) [ 462.450350][T13024] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 462.591722][ T21] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 462.996761][T13036] EXT4-fs (loop4): Ignoring removed nobh option [ 463.003185][T13036] EXT4-fs (loop4): Test dummy encryption mode enabled [ 463.034616][T13036] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 463.044570][T13041] befs: Invalid gid -1, using default [ 463.044605][T13041] befs: (loop2): No write support. Marking filesystem read-only [ 463.079452][T13041] befs: (loop2): invalid magic header [ 463.151120][T13036] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.3964: orphan file block 0: bad magic [ 463.192631][T13052] set_capacity_and_notify: 11 callbacks suppressed [ 463.192651][T13052] loop3: detected capacity change from 0 to 8 [ 463.259639][T13036] EXT4-fs (loop4): Remounting filesystem read-only [ 463.274058][ T21] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 463.287080][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.295848][ T21] usb 2-1: Product: syz [ 463.300146][ T21] usb 2-1: Manufacturer: syz [ 463.304764][ T21] usb 2-1: SerialNumber: syz [ 463.317547][T13036] EXT4-fs (loop4): mount failed [ 463.334139][ T21] usb 2-1: config 0 descriptor?? [ 463.376571][T13052] SQUASHFS error: xz decompression failed, data probably corrupt [ 463.400419][T13052] SQUASHFS error: Failed to read block 0x108: -5 [ 463.412112][ T21] hub 2-1:0.0: bad descriptor, ignoring hub [ 463.425803][ T21] hub: probe of 2-1:0.0 failed with error -5 [ 463.427882][T13052] SQUASHFS error: Unable to read metadata cache entry [106] [ 463.440367][T13052] SQUASHFS error: Unable to read inode 0x11f [ 463.540382][ T4228] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 463.606462][ T21] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 463.684626][ T21] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 463.710294][ T21] dib0700: firmware download failed at 7 with -22 [ 463.770524][T13066] loop0: detected capacity change from 0 to 4096 [ 463.778329][ T21] usb 2-1: USB disconnect, device number 110 [ 463.849677][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 463.889722][T13072] loop4: detected capacity change from 0 to 8192 [ 463.913103][T13072] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 463.925813][T13072] REISERFS (device loop4): using ordered data mode [ 463.932377][T13072] reiserfs: using flush barriers [ 463.945521][T13072] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 464.043975][T13072] REISERFS (device loop4): checking transaction log (loop4) [ 464.063196][ T4228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 464.085305][T13072] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 464.138105][ T5581] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 464.204266][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.233384][ T4228] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.275320][ T4228] usb 3-1: config 1 interface 0 has no altsetting 0 [ 464.478989][ T4228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.488149][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.533768][ T4228] usb 3-1: Product: syz [ 464.538002][ T4228] usb 3-1: Manufacturer: syz [ 464.552683][T13096] loop0: detected capacity change from 0 to 128 [ 464.554188][ T4228] usb 3-1: SerialNumber: syz [ 464.589738][T13093] loop1: detected capacity change from 0 to 4096 [ 464.713582][ T5581] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 464.738675][ T5581] usb 4-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 464.770955][ T5581] usb 4-1: Product: syz [ 464.788779][ T5581] usb 4-1: config 0 descriptor?? [ 464.863972][ T5581] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 464.880978][ T5581] usb 4-1: Detected FT-X [ 464.938263][ T4228] usb 3-1: bad CDC descriptors [ 464.965094][ T4228] usb 3-1: USB disconnect, device number 108 [ 465.091972][ T5581] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 465.139803][ T5581] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 465.171626][ T5581] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 465.180371][ T5581] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 465.211405][ T5581] usb 4-1: USB disconnect, device number 102 [ 465.227572][ T5581] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 465.240629][ T5581] ftdi_sio 4-1:0.0: device disconnected [ 465.246326][ T5303] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 465.502106][ T5303] usb 5-1: Using ep0 maxpacket: 16 [ 465.582106][T13140] loop0: detected capacity change from 0 to 256 [ 465.800851][ T5303] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 465.810186][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.864750][ T5303] usb 5-1: Product: syz [ 465.868984][ T5303] usb 5-1: Manufacturer: syz [ 465.873607][ T5303] usb 5-1: SerialNumber: syz [ 465.905448][ T5303] usb 5-1: config 0 descriptor?? [ 465.912894][T13129] loop1: detected capacity change from 0 to 32768 [ 465.940444][ T4228] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 466.151259][ T150] block nbd0: Attempted send on invalid socket [ 466.157629][ T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.171900][ T150] block nbd0: Attempted send on invalid socket [ 466.178397][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.190444][ T150] block nbd0: Attempted send on invalid socket [ 466.197171][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.209969][ T264] block nbd0: Attempted send on invalid socket [ 466.216728][ T264] blk_update_request: I/O error, dev nbd0, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.250912][ T150] block nbd0: Attempted send on invalid socket [ 466.257169][ T150] blk_update_request: I/O error, dev nbd0, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.259519][ T5303] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 466.273712][ T150] block nbd0: Attempted send on invalid socket [ 466.281898][ T150] blk_update_request: I/O error, dev nbd0, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 466.291223][ T5303] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 466.343930][T13165] tmpfs: Bad value for 'mpol' [ 466.349034][ T5303] usb 5-1: USB disconnect, device number 103 [ 466.419372][ T4228] usb 3-1: config 6 has an invalid interface number: 117 but max is 0 [ 466.438601][ T4228] usb 3-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 466.472236][ T4228] usb 3-1: config 6 has no interface number 0 [ 466.484538][ T4228] usb 3-1: config 6 interface 117 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 466.495714][ T4228] usb 3-1: config 6 interface 117 has no altsetting 0 [ 466.578087][T13171] loop1: detected capacity change from 0 to 256 [ 466.685890][ T4228] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=c4.d1 [ 466.695109][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.736941][ T4228] usb 3-1: Product: syz [ 466.763611][ T4228] usb 3-1: Manufacturer: syz [ 466.768285][ T4228] usb 3-1: SerialNumber: syz [ 466.795896][ T21] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 466.812794][T13175] loop3: detected capacity change from 0 to 4096 [ 466.894744][T13175] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 466.920577][T13175] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 467.001937][T13175] ntfs: (device loop3): ntfs_read_inode_mount(): $MFT is too big! Aborting. [ 467.043302][T13175] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 467.058302][T13175] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata. [ 467.101397][ T5303] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 467.122840][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 467.161987][ T4228] comedi comedi5: Wrong number of endpoints [ 467.168149][ T4228] dt9812 3-1:6.117: driver 'dt9812' failed to auto-configure device. [ 467.212357][ T4228] usb 3-1: USB disconnect, device number 109 [ 467.272086][ T21] usb 1-1: config 32 has an invalid interface number: 197 but max is 0 [ 467.283882][ T21] usb 1-1: config 32 has no interface number 0 [ 467.290120][ T21] usb 1-1: config 32 interface 197 has no altsetting 0 [ 467.314514][ T5310] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 467.369112][ T5303] usb 2-1: Using ep0 maxpacket: 32 [ 467.470796][T13191] loop3: detected capacity change from 0 to 8192 [ 467.488583][T13191] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 467.498320][ T5303] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 467.507594][T13191] REISERFS (device loop3): using ordered data mode [ 467.521297][T13191] reiserfs: using flush barriers [ 467.529433][T13191] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 467.546443][T13191] REISERFS (device loop3): checking transaction log (loop3) [ 467.550011][ T21] usb 1-1: New USB device found, idVendor=0424, idProduct=9730, bcdDevice=89.14 [ 467.564379][T13191] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 467.570775][ T5310] usb 5-1: Using ep0 maxpacket: 32 [ 467.574697][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.589209][ T21] usb 1-1: Product: syz [ 467.605882][ T21] usb 1-1: Manufacturer: syz [ 467.610548][ T21] usb 1-1: SerialNumber: syz [ 467.677388][ T5303] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 467.697213][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.709266][ T5310] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 467.728516][ T5303] usb 2-1: Product: syz [ 467.733495][ T5310] usb 5-1: config 0 has no interface number 0 [ 467.750654][ T5303] usb 2-1: Manufacturer: syz [ 467.761576][ T5303] usb 2-1: SerialNumber: syz [ 467.922679][ T5310] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 467.922715][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.922738][ T5310] usb 5-1: Product: syz [ 467.964941][ T5310] usb 5-1: Manufacturer: syz [ 467.969706][ T5310] usb 5-1: SerialNumber: syz [ 467.976366][ T21] smsc95xx v2.0.0 [ 467.984750][ T21] smsc95xx 1-1:32.197 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 468.004334][ T5310] usb 5-1: config 0 descriptor?? [ 468.017594][ T21] smsc95xx: probe of 1-1:32.197 failed with error -22 [ 468.037432][ T21] usb 1-1: USB disconnect, device number 103 [ 468.062834][ T5310] smsc95xx v2.0.0 [ 468.182170][ T5303] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 468.213756][ T5303] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 468.221638][T13208] exfat: Deprecated parameter 'utf8' [ 468.227036][T13208] exfat: Deprecated parameter 'codepage' [ 468.245628][ T5303] usb 2-1: USB disconnect, device number 111 [ 468.252962][T13208] exfat: Bad value for 'codepage' [ 468.295480][ T5310] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 468.327480][ T5310] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 468.348875][ T5310] usb 5-1: USB disconnect, device number 104 [ 468.434469][T13201] (syz.2.4044,13201,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 468.470655][T13201] (syz.2.4044,13201,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 468.501706][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.586993][T13216] set_capacity_and_notify: 3 callbacks suppressed [ 468.587011][T13216] loop3: detected capacity change from 0 to 64 [ 468.601868][T13214] loop0: detected capacity change from 0 to 256 [ 468.652483][T13214] exFAT-fs (loop0): bogus sector size bits : 0 [ 468.652483][T13214] [ 468.691851][T13214] exFAT-fs (loop0): failed to read boot sector [ 468.719781][T13214] exFAT-fs (loop0): failed to recognize exfat type [ 468.781093][T13216] hfs: get root inode failed [ 468.955754][T13232] loop3: detected capacity change from 0 to 8 [ 469.023411][T13234] loop0: detected capacity change from 0 to 164 [ 469.064251][T13232] SQUASHFS error: lzo decompression failed, data probably corrupt [ 469.084577][T13232] SQUASHFS error: Failed to read block 0x91: -5 [ 469.107475][T13232] SQUASHFS error: Unable to read metadata cache entry [8f] [ 469.114843][T13232] SQUASHFS error: Unable to read inode 0x11f [ 469.127892][T13234] ISOFS: Bad logical zone size 25856 [ 469.277415][ T4228] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 469.483258][ T5303] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 469.546105][T13252] loop3: detected capacity change from 0 to 512 [ 469.594082][T13252] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 469.604465][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 469.664223][T13252] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 469.685217][T13252] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 469.721572][T13252] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 469.744182][T13252] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 469.754785][T13252] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e11c, mo2=0000] [ 469.766780][ T4228] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 469.773312][T13252] EXT4-fs (loop3): failed to initialize system zone (-117) [ 469.782609][ T4228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.794004][T13252] EXT4-fs (loop3): mount failed [ 469.816002][ T4228] usb 3-1: config 0 has no interface number 0 [ 469.836254][ T4228] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.894738][ T5303] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 469.906912][ T5303] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 469.915594][ T4228] usb 3-1: config 0 interface 85 has no altsetting 0 [ 469.930986][ T5303] usb 2-1: config 0 has no interface number 0 [ 469.940787][ T5303] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 469.954503][ T5303] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 469.978617][ T5303] usb 2-1: config 0 interface 48 has no altsetting 0 [ 469.985940][ T5303] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 470.026642][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.064244][ T5303] usb 2-1: config 0 descriptor?? [ 470.083863][T13238] loop4: detected capacity change from 0 to 40427 [ 470.130526][T13238] F2FS-fs (loop4): Invalid segment count (0) [ 470.169077][T13238] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 470.182712][ T4228] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 470.199917][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.215157][ T4228] usb 3-1: Product: syz [ 470.218013][T13238] F2FS-fs (loop4): invalid crc value [ 470.219376][ T4228] usb 3-1: Manufacturer: syz [ 470.239373][T13238] F2FS-fs (loop4): Wrong cp_pack_start_sum: 1 [ 470.246941][ T4228] usb 3-1: SerialNumber: syz [ 470.284148][T13238] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 470.291706][ T4228] usb 3-1: config 0 descriptor?? [ 470.344527][ T4228] appletouch 3-1:0.85: Could not find int-in endpoint [ 470.351383][ T4228] appletouch: probe of 3-1:0.85 failed with error -5 [ 470.379959][ T5303] usb 2-1: string descriptor 0 read error: -71 [ 470.386607][ T4228] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 470.416314][ T5303] usb 2-1: selecting invalid altsetting 0 [ 470.449583][ T5303] usb 2-1: USB disconnect, device number 112 [ 470.587856][ T5308] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 470.612591][ T7] usb 3-1: USB disconnect, device number 110 [ 470.720639][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.811719][ T5310] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 470.840459][T13272] loop0: detected capacity change from 0 to 40427 [ 470.977730][ T5308] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 470.992459][ T5308] usb 4-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.011821][ T5308] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 471.023371][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.072681][T13281] loop1: detected capacity change from 0 to 8 [ 471.087015][ T5310] usb 5-1: Using ep0 maxpacket: 32 [ 471.160650][T13281] Major/Minor mismatch, trying to mount newer 256.0 filesystem [ 471.216468][T13281] Please update your kernel [ 471.217826][ T5310] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 471.248704][ T5310] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 471.315472][ T5308] usb 4-1: USB disconnect, device number 103 [ 471.451491][ T5310] usb 5-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 471.478297][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.506250][ T5310] usb 5-1: Product: syz [ 471.521014][ T5310] usb 5-1: Manufacturer: syz [ 471.528983][ T5310] usb 5-1: SerialNumber: syz [ 471.576051][T13299] loop2: detected capacity change from 0 to 256 [ 471.596263][T13301] futex_wake_op: syz.1.4095 tries to shift op by 32; fix this program [ 471.778078][T13307] loop0: detected capacity change from 0 to 512 [ 471.860291][T13307] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 471.869479][T13307] UDF-fs: Scanning with blocksize 512 failed [ 471.876239][T13307] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 471.883871][T13307] UDF-fs: Scanning with blocksize 1024 failed [ 471.892485][T13307] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 471.900110][T13307] UDF-fs: Scanning with blocksize 2048 failed [ 471.917097][T13307] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 471.931598][ T5310] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 471.959167][T13307] UDF-fs: error (device loop0): udf_read_inode: (ino 28) failed !bh [ 471.967987][ T5310] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 471.976717][T13307] UDF-fs: Scanning with blocksize 4096 failed [ 472.037848][ T5310] usb 5-1: unit 130 not found! [ 472.070082][ T5310] usb 5-1: USB disconnect, device number 105 [ 472.108083][ T4228] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 472.116193][ T5306] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 472.293563][ T5303] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 472.316162][T13323] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 472.382231][ T6638] udevd[6638]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.548657][T13325] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 472.553114][ T5306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 472.579291][ T4228] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 472.608041][ T4228] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 472.629128][T13325] ntfs3: loop0: Failed to load $MFT. [ 472.645715][ T5303] usb 4-1: not running at top speed; connect to a high speed hub [ 472.649851][ T4228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.662463][ T5306] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 472.688124][ T5306] usb 2-1: config 1 interface 0 has no altsetting 0 [ 472.708459][ T4228] usb 3-1: config 0 has no interface number 0 [ 472.736602][ T4228] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 472.753319][ T4228] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 472.774372][ T4228] usb 3-1: config 0 interface 255 has no altsetting 0 [ 472.781225][ T4228] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 472.821062][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.839541][ T4228] usb 3-1: config 0 descriptor?? [ 472.870676][ T5306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.897680][ T4228] usb-storage 3-1:0.255: USB Mass Storage device detected [ 472.900052][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.930034][ T4228] usb-storage 3-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 472.934562][ T5303] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 472.969488][ T5306] usb 2-1: Product: syz [ 472.973877][ T5306] usb 2-1: Manufacturer: syz [ 472.986610][ T5303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.007909][ T5306] usb 2-1: SerialNumber: syz [ 473.018873][ T5303] usb 4-1: Product: syz [ 473.023097][ T5303] usb 4-1: Manufacturer: syz [ 473.045903][ T5303] usb 4-1: SerialNumber: syz [ 473.083691][T13313] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 473.155740][ T21] usb 3-1: USB disconnect, device number 111 [ 473.403321][ T5306] usb 2-1: bad CDC descriptors [ 473.418936][ T5306] usb 2-1: USB disconnect, device number 113 [ 473.479866][T13355] SQUASHFS error: Unable to read inode 0x11f [ 473.515338][ T5303] usb 4-1: USB disconnect, device number 104 [ 473.587650][T13343] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 473.621818][T13343] BTRFS info (device loop0): setting nodatasum [ 473.630348][T13343] BTRFS info (device loop0): force zlib compression, level 3 [ 473.644295][T13343] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 473.663402][T13343] BTRFS info (device loop0): use lzo compression, level 0 [ 473.672910][T13343] BTRFS info (device loop0): turning on flush-on-commit [ 473.694656][T13343] BTRFS error (device loop0): unrecognized commit_interval value 0x8000000000000001 [ 473.756231][T13343] BTRFS error (device loop0): open_ctree failed: -22 [ 473.884807][ T4453] udevd[4453]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.074117][ T5306] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 474.097783][T13370] set_capacity_and_notify: 5 callbacks suppressed [ 474.097802][T13370] loop0: detected capacity change from 0 to 2048 [ 474.130599][T13368] loop4: detected capacity change from 0 to 4096 [ 474.203986][T13368] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 474.253011][T13368] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 474.272292][T13368] ntfs3: loop4: Failed to load $MFT. [ 474.351464][ T5303] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 474.550352][T13388] loop4: detected capacity change from 0 to 8 [ 474.633662][T13388] unable to read xattr id index table [ 474.639526][ T5306] usb 3-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 474.662782][ T5306] usb 3-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 474.711561][ T5306] usb 3-1: Product: syz [ 474.721876][ T5306] usb 3-1: Manufacturer: syz [ 474.746558][ T5306] usb 3-1: SerialNumber: syz [ 474.767312][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 474.794660][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 474.822802][ T5306] usb 3-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 474.852235][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 474.868128][ T5306] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 474.878845][ T5303] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 474.904512][ T5306] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 474.919948][T13400] fuse: Bad value for 'rootmode' [ 474.923750][ T5306] usb 3-1: media controller created [ 474.931200][ T5303] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 474.954585][ T5303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.983100][ T5306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.994105][ T5303] usb 4-1: config 0 descriptor?? [ 475.012703][T13372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 475.059365][ T5306] usb 3-1: selecting invalid altsetting 1 [ 475.076080][ T5306] set interface failed [ 475.077245][ T5306] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 475.097732][ T5306] error writing reg: 0xff, val: 0x00 [ 475.144040][T13404] loop0: detected capacity change from 0 to 4096 [ 475.156151][T13402] loop4: detected capacity change from 0 to 2048 [ 475.177683][ T5306] dvb_usb_mxl111sf: probe of 3-1:2.0 failed with error -22 [ 475.187413][ T5306] usb 3-1: USB disconnect, device number 112 [ 475.221623][T13402] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 475.283825][T13404] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 475.295748][T13404] ntfs3: loop0: Failed to load $MFTMirr. [ 475.378202][ T5303] usbhid 4-1:0.0: can't add hid device: -71 [ 475.395978][ T5303] usbhid: probe of 4-1:0.0 failed with error -71 [ 475.450952][ T5303] usb 4-1: USB disconnect, device number 105 [ 475.677074][T13422] loop0: detected capacity change from 0 to 512 [ 475.732764][T13424] loop2: detected capacity change from 0 to 8 [ 475.739382][T13422] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 475.759122][ T5306] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 475.786211][T13422] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 475.799179][T13422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c02c, mo2=0002] [ 475.807917][ T4304] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 475.818339][T13422] System zones: 0-2, 18-18, 34-34 [ 475.824710][T13424] SQUASHFS error: xz decompression failed, data probably corrupt [ 475.840465][T13424] SQUASHFS error: Failed to read block 0x108: -5 [ 475.847269][T13424] SQUASHFS error: Unable to read metadata cache entry [106] [ 475.861287][T13424] SQUASHFS error: Unable to read inode 0x11f [ 475.869228][T13422] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.4152: bad orphan inode 15 [ 475.890449][T13422] EXT4-fs (loop0): Remounting filesystem read-only [ 475.904202][T13422] ext4_test_bit(bit=14, block=18) = 1 [ 475.909963][T13422] is_bad_inode(inode)=0 [ 475.914308][T13422] NEXT_ORPHAN(inode)=2264924160 [ 475.919486][T13422] max_ino=32 [ 475.922818][T13422] i_nlink=0 [ 475.929528][T13422] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.4152: corrupted inode contents [ 475.954872][T13422] EXT4-fs (loop0): Remounting filesystem read-only [ 475.961575][T13422] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #15: comm syz.0.4152: mark_inode_dirty error [ 475.973801][T13422] EXT4-fs (loop0): Remounting filesystem read-only [ 475.980595][T13422] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.4152: corrupted inode contents [ 475.994084][T13422] EXT4-fs (loop0): Remounting filesystem read-only [ 476.000648][T13422] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2952: inode #15: comm syz.0.4152: mark_inode_dirty error [ 476.013674][T13422] EXT4-fs (loop0): Remounting filesystem read-only [ 476.020714][T13422] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #15: comm syz.0.4152: mark inode dirty (error -117) [ 476.034141][T13422] EXT4-fs (loop0): Remounting filesystem read-only [ 476.043095][T13422] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 476.052821][T13422] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,. Quota mode: none. [ 476.154953][T13430] loop3: detected capacity change from 0 to 512 [ 476.265978][T13430] EXT4-fs (loop3): Invalid log cluster size: 327680 [ 476.292254][ T4304] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 476.313405][ T5306] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 476.333582][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.352841][ T5306] usb 5-1: Product: syz [ 476.363620][ T5306] usb 5-1: Manufacturer: syz [ 476.372890][ T5306] usb 5-1: SerialNumber: syz [ 476.383749][ T5306] usb 5-1: config 0 descriptor?? [ 476.405266][T13437] loop0: detected capacity change from 0 to 4096 [ 476.445942][ T5306] hub 5-1:0.0: bad descriptor, ignoring hub [ 476.461396][ T5306] hub: probe of 5-1:0.0 failed with error -5 [ 476.595949][ T5310] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 476.605294][T13437] ntfs: volume version 3.1. [ 476.636107][ T4304] usb 2-1: string descriptor 0 read error: -22 [ 476.642420][ T4304] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 476.678219][ T5306] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 476.696556][ T4304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.722705][ T5306] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 476.750367][ T5306] dib0700: firmware download failed at 7 with -22 [ 476.800126][ T5306] usb 5-1: USB disconnect, device number 106 [ 476.843401][T13446] loop3: detected capacity change from 0 to 8192 [ 476.856990][ T5310] usb 3-1: Using ep0 maxpacket: 16 [ 476.920085][T13446] loop3: p1 < > p3[EZD] [ 476.928159][T13446] loop3: p3 start 3238002688 is beyond EOD, truncated [ 476.985216][ T5310] usb 3-1: config 182 has an invalid interface number: 81 but max is 0 [ 476.994566][ T5310] usb 3-1: config 182 has no interface number 0 [ 477.006118][ T4228] usb 2-1: USB disconnect, device number 114 [ 477.024704][ T5310] usb 3-1: config 182 interface 81 has no altsetting 0 [ 477.209233][ T5310] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 477.250377][ T5310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.292098][ T5310] usb 3-1: Product: syz [ 477.303594][ T6638] udevd[6638]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 477.313646][ T5310] usb 3-1: Manufacturer: syz [ 477.313675][ T5310] usb 3-1: SerialNumber: syz [ 477.563136][T13469] EXT4-fs (loop3): inline encryption not supported [ 477.592983][T13469] EXT4-fs (loop3): Test dummy encryption mode enabled [ 477.602908][T13469] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 477.691387][ T5310] usb 3-1: USB disconnect, device number 113 [ 477.935295][T13482] ntfs: (device loop0): parse_options(): The dmask option requires an argument. [ 478.581697][T13508] unable to read id index table [ 478.800877][ T4505] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by udevd (4505) [ 478.808340][ T5310] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 479.032060][ T5306] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 479.103022][ T6638] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (6638) [ 479.115107][ T5310] usb 1-1: Using ep0 maxpacket: 8 [ 479.256009][T13494] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 479.267646][T13494] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 479.419486][ T5310] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 479.441923][ T5310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.469450][ T5306] usb 5-1: unable to get BOS descriptor or descriptor too short [ 479.479629][ T5310] usb 1-1: Product: syz [ 479.499348][ T5310] usb 1-1: Manufacturer: syz [ 479.505914][ T5310] usb 1-1: SerialNumber: syz [ 479.534543][ T5306] usb 5-1: not running at top speed; connect to a high speed hub [ 479.618756][ T5306] usb 5-1: config index 0 descriptor too short (expected 18, got 10) [ 479.649888][ T5306] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 479.682438][ T5306] usb 5-1: config 0 has no interfaces? [ 479.704018][ T5303] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 479.853236][ T5306] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 479.880373][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.893600][T13540] set_capacity_and_notify: 8 callbacks suppressed [ 479.893618][T13540] loop1: detected capacity change from 0 to 64 [ 479.931176][ T5310] usb 1-1: USB disconnect, device number 104 [ 479.937928][ T5306] usb 5-1: Product: syz [ 479.940693][T13540] hfs: can't find a HFS filesystem on dev loop1 [ 479.943375][ T5306] usb 5-1: Manufacturer: syz [ 479.959726][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 480.008216][ T5306] usb 5-1: SerialNumber: syz [ 480.115930][ T5306] usb 5-1: config 0 descriptor?? [ 480.130818][ T5303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.228289][ T5303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 480.266975][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.327406][T13536] loop3: detected capacity change from 0 to 40427 [ 480.392485][T13536] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 480.407663][ T5303] usb 3-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice= 0.40 [ 480.412532][T13536] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 480.427913][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.450118][ T5306] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 480.472223][ T5303] usb 3-1: Product: syz [ 480.476455][ T5303] usb 3-1: Manufacturer: syz [ 480.482367][ T5303] usb 3-1: SerialNumber: syz [ 480.491025][T13536] F2FS-fs (loop3): invalid crc value [ 480.498007][ T5308] usb 5-1: USB disconnect, device number 107 [ 480.506118][T13536] F2FS-fs (loop3): invalid crc value [ 480.511479][T13536] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 480.584854][ T26] audit: type=1326 audit(1775649280.399:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13545 comm="syz.0.4213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251e06c819 code=0x0 [ 480.706014][ T5306] usb 2-1: Using ep0 maxpacket: 16 [ 480.834267][ T5306] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 480.851718][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 480.878272][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 480.919377][ T5303] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 480.950206][ T5303] usb 3-1: USB disconnect, device number 114 [ 480.973150][ T5310] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 481.100735][ T5306] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 481.120870][ T5306] usb 2-1: New USB device strings: Mfr=11, Product=2, SerialNumber=3 [ 481.146062][ T5306] usb 2-1: Product: syz [ 481.150355][ T5306] usb 2-1: Manufacturer: syz [ 481.177025][ T5306] usb 2-1: SerialNumber: syz [ 481.186898][ T5306] usb 2-1: config 0 descriptor?? [ 481.197369][ T6638] udevd[6638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.239509][ T5310] usb 1-1: Using ep0 maxpacket: 8 [ 481.372630][T13560] loop3: detected capacity change from 0 to 32768 [ 481.409909][ T5310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.495215][ T5310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.528548][ T5310] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 481.552995][ T5306] usb 2-1: USB disconnect, device number 115 [ 481.607344][T13562] loop4: detected capacity change from 0 to 40427 [ 481.640438][T13564] loop2: detected capacity change from 0 to 8192 [ 481.669979][T13562] F2FS-fs (loop4): old and new quota format mixing [ 481.719271][ T5310] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=65.ac [ 481.753723][ T5310] usb 1-1: New USB device strings: Mfr=55, Product=80, SerialNumber=3 [ 481.771794][T13564] REISERFS warning (device loop2): sh-2012 read_super_block: found unknown format "65535" of reiserfs with non-standard magic [ 481.794299][T13564] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 481.841585][ T5310] usb 1-1: Product: syz [ 481.845827][ T5310] usb 1-1: Manufacturer: syz [ 481.893986][ T5310] usb 1-1: SerialNumber: syz [ 481.920623][ T5310] usb 1-1: config 0 descriptor?? [ 482.108719][T13581] loop2: detected capacity change from 0 to 2048 [ 482.118012][ T5310] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 482.149452][T13585] loop1: detected capacity change from 0 to 512 [ 482.190649][T13581] UDF-fs: error (device loop2): udf_load_logicalvol: error loading logical volume descriptor: Partition table too long (2048 > 72) [ 482.218258][ T5310] usb 1-1: USB disconnect, device number 105 [ 482.228658][T13585] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 482.236328][ T4304] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 482.247943][T13581] UDF-fs: Scanning with blocksize 512 failed [ 482.268595][T13585] EXT4-fs (loop1): Ignoring removed nobh option [ 482.284445][T13581] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 482.292310][T13581] UDF-fs: Scanning with blocksize 1024 failed [ 482.314583][T13581] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 482.335083][T13585] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 482.380125][ T4228] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 482.405367][T13581] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 482.416524][T13585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9802e02c, mo2=0002] [ 482.417708][T13581] UDF-fs: Scanning with blocksize 2048 failed [ 482.438499][T13585] EXT4-fs (loop1): orphan cleanup on readonly fs [ 482.447590][T13581] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 482.459813][T13585] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #11: comm syz.1.4232: corrupted in-inode xattr [ 482.472842][T13581] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 482.472917][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.500192][T13585] EXT4-fs (loop1): Remounting filesystem read-only [ 482.514401][T13585] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4232: couldn't read orphan inode 11 (err -117) [ 482.526409][T13581] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 482.526451][T13581] UDF-fs: Scanning with blocksize 4096 failed [ 482.526465][T13581] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 482.557008][T13585] EXT4-fs (loop1): Remounting filesystem read-only [ 482.565305][T13585] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,noblock_validity,nobh,errors=remount-ro,data_err=abort. Quota mode: none. [ 482.809045][ T4228] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 482.828253][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.850337][ T4228] usb 5-1: config 0 has no interface number 0 [ 482.856515][ T4228] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 482.913996][ T4304] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 482.923876][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.932014][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.956835][ T4228] usb 5-1: config 0 descriptor?? [ 482.964361][ T4304] usb 4-1: Product: syz [ 482.971642][ T4304] usb 4-1: Manufacturer: syz [ 482.977257][ T4304] usb 4-1: SerialNumber: syz [ 483.006184][ T4304] usb 4-1: config 0 descriptor?? [ 483.013553][ T4228] usb 5-1: Found UVC 0.00 device (0bd3:0555) [ 483.034506][ T4228] usb 5-1: No valid video chain found. [ 483.084603][ T4304] hub 4-1:0.0: bad descriptor, ignoring hub [ 483.101499][ T4304] hub: probe of 4-1:0.0 failed with error -5 [ 483.256498][ T4228] usb 5-1: USB disconnect, device number 108 [ 483.307811][ T4304] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 483.321984][T13588] loop1: detected capacity change from 0 to 32768 [ 483.330293][ T4304] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 483.338351][ T4304] dib0700: firmware download failed at 7 with -22 [ 483.378930][T13588] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 483.408730][T13588] JBD2: Ignoring recovery information on journal [ 483.436714][ T4304] usb 4-1: USB disconnect, device number 106 [ 483.518570][T13596] loop0: detected capacity change from 0 to 32768 [ 483.550691][T13596] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 483.587773][T13596] jbd2_journal_init_inode: Cannot locate journal superblock [ 483.606140][T13596] (syz.0.4237,13596,0):ocfs2_journal_init:912 ERROR: Linux journal layer error [ 483.615169][T13596] (syz.0.4237,13596,0):ocfs2_check_volume:2408 ERROR: Could not initialize journal! [ 483.629029][T13596] (syz.0.4237,13596,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 483.637015][T13596] (syz.0.4237,13596,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 483.684325][T13588] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 483.714487][T13600] loop2: detected capacity change from 0 to 32768 [ 483.721747][T13596] (syz.0.4237,13596,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 483.808892][T13600] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 483.820989][T13600] (syz.2.4239,13600,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=160, inode=18446744073709486152, rec_len=32767, name_len=15 [ 483.840468][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 483.878396][T13600] (syz.2.4239,13600,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=7, slot=0 [ 483.938491][T13600] (syz.2.4239,13600,0):ocfs2_init_local_system_inodes:502 ERROR: status = -22 [ 483.947517][T13600] (syz.2.4239,13600,0):ocfs2_mount_volume:1818 ERROR: status = -22 [ 484.001087][T13600] (syz.2.4239,13600,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 484.106640][T13611] hfs: unable to read volume bitmap [ 484.137896][T13611] hfs: can't find a HFS filesystem on dev loop0 [ 484.256662][ T4304] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 484.392884][T13628] dccp_invalid_packet: P.Data Offset(4) too small [ 484.544480][ T4304] usb 5-1: Using ep0 maxpacket: 16 [ 484.571796][T13633] dccp_v6_rcv: dropped packet with invalid checksum [ 484.594643][T13634] squashfs: Bad value for 'errors' [ 484.691397][ T4304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 484.742866][ T4304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42662, setting to 1024 [ 485.017981][ T4304] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 485.050097][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.077201][T13654] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 485.121825][ T4304] usb 5-1: Product: syz [ 485.126058][ T4304] usb 5-1: Manufacturer: syz [ 485.130703][ T4304] usb 5-1: SerialNumber: syz [ 485.141567][T13654] hpfs: filesystem error: improperly stopped [ 485.158543][T13654] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 485.168485][ T4304] usb 5-1: config 0 descriptor?? [ 485.182496][T13654] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 485.237895][ T4304] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 485.280385][T13658] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 485.462202][ T5310] usb 5-1: USB disconnect, device number 109 [ 485.472353][ T9] usb 5-1: Failed to submit usb control message: -71 [ 485.479708][ T4228] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 485.494852][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 485.512917][ T9] usb 5-1: unable to get target info from device [ 485.523698][ T9] usb 5-1: could not get target info (-71) [ 485.585908][ T9] usb 5-1: could not probe fw (-71) [ 485.662231][T13681] set_capacity_and_notify: 4 callbacks suppressed [ 485.662251][T13681] loop2: detected capacity change from 0 to 2048 [ 485.746110][T13681] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 485.778976][T13681] NILFS (loop2): too large filesystem blocksize: 2 ^ 347668480 KiB [ 485.807005][T13683] loop3: detected capacity change from 0 to 4096 [ 485.845462][ T5306] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 485.930859][ T4228] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 485.950109][ T4228] usb 1-1: config 0 has no interface number 0 [ 485.971978][ T4228] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 486.003861][ T4228] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.027727][ T4228] usb 1-1: config 0 interface 12 has no altsetting 0 [ 486.042244][T13683] ntfs: volume version 3.1. [ 486.101559][ T5306] usb 2-1: Using ep0 maxpacket: 16 [ 486.229589][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.262701][T13693] futex_wake_op: syz.3.4282 tries to shift op by 35; fix this program [ 486.272308][ T4228] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 486.281411][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.305135][ T4228] usb 1-1: Product: syz [ 486.309691][ T4228] usb 1-1: Manufacturer: syz [ 486.336318][ T4228] usb 1-1: SerialNumber: syz [ 486.348196][ T4228] usb 1-1: config 0 descriptor?? [ 486.356408][T13695] gfs2: not a GFS2 filesystem [ 486.363427][T13691] loop4: detected capacity change from 0 to 4096 [ 486.400256][T13660] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 486.421488][ T5306] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 486.424173][ T4228] f81534 1-1:0.12: unsupported endpoint max packet size [ 486.441588][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.452369][ T5306] usb 2-1: Product: syz [ 486.474873][T13691] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 486.498357][ T5306] usb 2-1: Manufacturer: syz [ 486.503055][ T5306] usb 2-1: SerialNumber: syz [ 486.525142][T13691] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 486.535829][ T5306] usb 2-1: config 0 descriptor?? [ 486.542552][T13691] ntfs3: loop4: Failed to load $LogFile. [ 486.549260][ T4304] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 486.603918][ T5306] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 486.666126][ T21] usb 1-1: USB disconnect, device number 106 [ 486.784201][T13708] loop4: detected capacity change from 0 to 4096 [ 486.793677][T13708] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 486.817043][ T4228] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 486.830228][ T5306] usb 2-1: USB disconnect, device number 116 [ 486.839364][T13708] ntfs: (device loop4): parse_options(): The show_sys_files option requires a boolean argument. [ 486.850784][ T144] usb 2-1: Failed to submit usb control message: -71 [ 486.860777][ T144] usb 2-1: unable to send the bmi data to the device: -71 [ 486.868192][ T144] usb 2-1: unable to get target info from device [ 486.876198][ T144] usb 2-1: could not get target info (-71) [ 486.882998][ T144] usb 2-1: could not probe fw (-71) [ 487.071941][ T4304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.114486][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 487.252947][ T5308] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 487.339046][ T4228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 487.413081][ T4304] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 487.422242][ T4304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.430616][ T4304] usb 3-1: Product: syz [ 487.435241][ T4304] usb 3-1: Manufacturer: syz [ 487.439878][ T4304] usb 3-1: SerialNumber: syz [ 487.455582][ T4228] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 487.463776][ T4228] usb 4-1: config 0 has no interface number 0 [ 487.488404][ T4228] usb 4-1: config 0 interface 18 has no altsetting 0 [ 487.530102][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 487.541069][ T21] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 487.663879][ T4228] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=45.5b [ 487.678160][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.690392][ T5308] usb 5-1: config 164 has an invalid interface number: 195 but max is 0 [ 487.698428][ T4228] usb 4-1: Product: syz [ 487.698807][ T5308] usb 5-1: config 164 has no interface number 0 [ 487.709706][ T4228] usb 4-1: Manufacturer: syz [ 487.719368][ T4228] usb 4-1: SerialNumber: syz [ 487.723789][ T5308] usb 5-1: config 164 interface 195 has no altsetting 0 [ 487.749585][ T4228] usb 4-1: config 0 descriptor?? [ 487.882880][ T4304] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 487.914046][ T5308] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 487.915992][ T4304] usb 3-1: unit 2 not found! [ 487.923142][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.940294][ T4304] usb 3-1: unit 8 not found! [ 487.954047][ T5308] usb 5-1: Product: syz [ 487.962482][ T5308] usb 5-1: Manufacturer: syz [ 487.977858][ T5308] usb 5-1: SerialNumber: syz [ 487.978960][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 488.008611][ T4304] usb 3-1: USB disconnect, device number 115 [ 488.036173][T13730] loop1: detected capacity change from 0 to 32768 [ 488.062698][T13730] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #71: signature = INODE [ 488.085817][ T21] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 488.095974][ T4228] ums-freecom 4-1:0.18: USB Mass Storage device detected [ 488.100286][T13730] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 488.118124][ T21] usb 1-1: config 0 has no interface number 0 [ 488.126244][T13730] OCFS2: File system is now read-only. [ 488.136539][T13730] (syz.1.4299,13730,0):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 488.150009][T13730] (syz.1.4299,13730,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 488.150856][ T21] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 488.169247][T13730] (syz.1.4299,13730,0):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 488.192862][ T4228] usb 4-1: USB disconnect, device number 107 [ 488.207149][ T21] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 488.214167][T13730] (syz.1.4299,13730,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 488.217038][T13730] (syz.1.4299,13730,0):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 488.239475][ T21] usb 1-1: config 0 interface 86 has no altsetting 0 [ 488.277068][T13730] (syz.1.4299,13730,0):ocfs2_initialize_super:2281 ERROR: status = -30 [ 488.285503][T13730] (syz.1.4299,13730,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 488.362368][ T5308] usb 5-1: USB disconnect, device number 110 [ 488.421171][ T21] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 488.447091][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.472799][ T21] usb 1-1: Product: syz [ 488.488439][ T21] usb 1-1: Manufacturer: syz [ 488.506814][ T21] usb 1-1: SerialNumber: syz [ 488.517491][ T21] usb 1-1: config 0 descriptor?? [ 488.543309][T13714] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 488.550817][T13714] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 488.746815][T13738] loop3: detected capacity change from 0 to 4096 [ 488.768706][T13738] ntfs: (device loop3): parse_options(): Unrecognized mount option 184467440737095516150x0000000000000000. [ 488.804679][T13738] ntfs: (device loop3): parse_options(): Unrecognized mount option gid?0x000000000000ee01. [ 488.890014][ T21] omninet 1-1:0.86: ZyXEL - omni.net usb converter detected [ 488.922824][ T21] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 488.956504][T13749] loop1: detected capacity change from 0 to 128 [ 488.974796][ T21] usb 1-1: USB disconnect, device number 107 [ 489.007512][ T21] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 489.043694][T13749] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 489.075680][ T21] omninet 1-1:0.86: device disconnected [ 489.297448][T13749] hpfs: hpfs_map_sector(): read error [ 489.513342][ T4228] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 489.578243][T13752] loop2: detected capacity change from 0 to 32768 [ 489.602861][T13752] XFS: noattr2 mount option is deprecated. [ 489.710699][T13752] XFS (loop2): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 489.772181][T13754] loop3: detected capacity change from 0 to 32768 [ 489.806616][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 489.864435][T13754] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 489.891105][T13754] JBD2: Ignoring recovery information on journal [ 489.997896][ T21] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 490.015680][T13760] loop0: detected capacity change from 0 to 40427 [ 490.045404][T13754] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 490.088613][T13760] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 490.114236][T13760] F2FS-fs (loop0): invalid crc value [ 490.121711][ T4228] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 490.133070][T13760] F2FS-fs (loop0): invalid crc value [ 490.138438][T13760] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 490.152773][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.178475][ T4228] usb 5-1: Product: syz [ 490.182714][ T4228] usb 5-1: Manufacturer: syz [ 490.198718][ T4228] usb 5-1: SerialNumber: syz [ 490.211687][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 490.420366][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.441271][ T21] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 490.473026][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 490.594781][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.612462][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 490.635168][ T21] usb 2-1: SerialNumber: syz [ 490.641899][ T4228] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 490.665064][ T4228] usb 5-1: USB disconnect, device number 111 [ 490.830477][ T26] audit: type=1326 audit(1775649290.003:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.2.4325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3347519819 code=0x0 [ 490.847133][ T5579] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 490.860050][ T5581] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 490.885437][ T26] audit: type=1326 audit(1775649290.059:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.2.4325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f3347519819 code=0x0 [ 490.903570][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.974477][ T21] usb 2-1: USB disconnect, device number 117 [ 491.134226][ T5579] usb 4-1: Using ep0 maxpacket: 8 [ 491.304971][ T5579] usb 4-1: unable to get BOS descriptor or descriptor too short [ 491.312999][ T5581] usb 1-1: unable to get BOS descriptor or descriptor too short [ 491.390358][ T5579] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.401691][ T5581] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.421989][ T5581] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.431000][ T5579] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.454086][ T5579] usb 4-1: config 1 interface 0 has no altsetting 0 [ 491.502344][T13793] loop4: detected capacity change from 0 to 32768 [ 491.525848][T13795] loop1: detected capacity change from 0 to 164 [ 491.562111][T13793] (syz.4.4326,13793,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 491.603502][T13793] (syz.4.4326,13793,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 491.624838][ T5581] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 491.633954][ T5581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.642258][ T5579] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.40 [ 491.659230][ T5579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.680460][ T5581] usb 1-1: Product: syz [ 491.684703][ T5581] usb 1-1: Manufacturer: syz [ 491.689715][ T5579] usb 4-1: Product: syz [ 491.699362][ T5579] usb 4-1: Manufacturer: syz [ 491.704071][ T5579] usb 4-1: SerialNumber: syz [ 491.712670][ T5581] usb 1-1: SerialNumber: syz [ 491.978330][T13799] loop1: detected capacity change from 0 to 8192 [ 492.089352][ T5581] usb 1-1: 0:1 : does not exist [ 492.121464][ T5581] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 492.139869][ T5581] usb 1-1: unit 13 not found! [ 492.168668][ T4304] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 492.186406][ T5581] usb 1-1: USB disconnect, device number 108 [ 492.193006][ T5579] usbhid 4-1:1.0: can't add hid device: -71 [ 492.199812][ T5579] usbhid: probe of 4-1:1.0 failed with error -71 [ 492.278456][ T5579] usb 4-1: USB disconnect, device number 108 [ 492.595225][ T4304] usb 5-1: unable to get BOS descriptor or descriptor too short [ 492.648375][ T4304] usb 5-1: not running at top speed; connect to a high speed hub [ 492.904307][ T4304] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 492.924395][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.957282][ T4304] usb 5-1: Product: syz [ 492.962611][ T4304] usb 5-1: Manufacturer: syz [ 492.967272][ T4304] usb 5-1: SerialNumber: syz [ 492.982169][T13805] loop1: detected capacity change from 0 to 40427 [ 493.036755][T13805] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 493.053646][T13805] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 493.093879][T13805] F2FS-fs (loop1): build fault injection attr: rate: 15, type: 0x1ffff [ 493.123768][T13805] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe [ 493.155415][T13805] F2FS-fs (loop1): invalid crc value [ 493.168895][T13813] loop0: detected capacity change from 0 to 4096 [ 493.199894][T13813] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 493.234574][T13805] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 493.275197][T13805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 493.316094][T13805] F2FS-fs (loop1) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x44b2/0x6de0 [ 493.348281][T13805] F2FS-fs (loop1): Failed to initialize F2FS node manager (-12) [ 493.384273][ T4304] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 493.405506][ T4304] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 493.427024][ T4304] usb 5-1: unit 3 not found! [ 493.435611][T13807] loop3: detected capacity change from 0 to 32768 [ 493.503422][ T4304] usb 5-1: USB disconnect, device number 112 [ 493.552839][T13807] (syz.3.4333,13807,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=9, slot=0 [ 493.564988][T13815] delete_channel: no stack [ 493.605196][T13807] (syz.3.4333,13807,0):ocfs2_init_local_system_inodes:502 ERROR: status = -22 [ 493.653359][T13807] (syz.3.4333,13807,0):ocfs2_mount_volume:1818 ERROR: status = -22 [ 493.737275][T13807] (syz.3.4333,13807,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 493.790691][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.170463][T13827] loop4: detected capacity change from 0 to 4096 [ 494.196355][T13826] loop1: detected capacity change from 0 to 4096 [ 494.235752][T13827] ntfs3: Invalid value for fmask. [ 494.330964][T13826] ntfs: volume version 3.1. [ 494.514425][ T5306] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 494.939537][T13855] loop0: detected capacity change from 0 to 1024 [ 494.957342][ T5306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.976603][ T5306] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 495.002944][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.031935][ T5306] usb 4-1: config 0 descriptor?? [ 495.095587][T13855] hfsplus: invalid btree flag [ 495.102141][ T5306] usb 4-1: bad CDC descriptors [ 495.105563][T13855] hfsplus: failed to load catalog file [ 495.216128][T13839] loop2: detected capacity change from 0 to 32768 [ 495.298586][T13839] XFS: noattr2 mount option is deprecated. [ 495.332485][T13839] XFS: noattr2 mount option is deprecated. [ 495.338880][ T5581] usb 4-1: USB disconnect, device number 109 [ 495.373844][T13839] XFS: attr2 mount option is deprecated. [ 495.385364][T13839] XFS (loop2): attr2 and noattr2 cannot both be specified. [ 495.769551][T13874] EXT4-fs (loop0): Ignoring removed oldalloc option [ 495.788348][T13874] EXT4-fs (loop0): journaled quota format not specified [ 495.794357][T13853] F2FS-fs (loop1): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 495.822463][T13853] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 495.839410][T13853] F2FS-fs (loop1): Encrypt feature is off [ 495.847226][ T5579] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 496.133659][T13880] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 496.153964][T13880] overlayfs: bad mount option "redirect_dir=on\" [ 496.188696][ T5579] usb 3-1: not running at top speed; connect to a high speed hub [ 496.276272][ T5579] usb 3-1: config 3 has an invalid interface number: 52 but max is 1 [ 496.295120][ T5579] usb 3-1: config 3 has an invalid interface number: 51 but max is 1 [ 496.334428][ T5579] usb 3-1: config 3 has no interface number 0 [ 496.345181][ T5579] usb 3-1: config 3 has no interface number 1 [ 496.393096][ T5579] usb 3-1: config 3 interface 52 has no altsetting 0 [ 496.399889][ T5579] usb 3-1: config 3 interface 51 has no altsetting 0 [ 496.441355][T13872] (syz.4.4362,13872,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 496.700519][ T5579] usb 3-1: string descriptor 0 read error: -22 [ 496.706841][ T5579] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 496.764280][ T5579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.821133][ T5579] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 496.861384][ T5579] usb 3-1: selecting invalid altsetting 0 [ 496.878468][T13888] set_capacity_and_notify: 3 callbacks suppressed [ 496.878485][T13888] loop1: detected capacity change from 0 to 8192 [ 496.886905][ T5579] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 496.957359][ T5579] usb 3-1: selecting invalid altsetting 0 [ 497.093601][ T5579] usb 3-1: USB disconnect, device number 116 [ 497.096239][T13878] loop0: detected capacity change from 0 to 32768 [ 497.108679][ T2429] pvrusb2: control-write URB failure, status=-71 [ 497.116003][ T2429] pvrusb2: Device being rendered inoperable [ 497.154905][ T2429] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 497.196895][ T2429] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 497.238877][ T5579] pvrusb2: Device being rendered inoperable [ 497.297643][ T5306] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 497.532054][ T4228] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 497.585570][ T5306] usb 5-1: Using ep0 maxpacket: 8 [ 497.735038][ T5306] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 497.743104][ T5306] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 497.792758][ T26] audit: type=1326 audit(1775649296.539:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz.2.4381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3347519819 code=0x0 [ 497.798025][ T5306] usb 5-1: config 0 has no interface number 1 [ 497.815289][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 497.851942][T13894] loop3: detected capacity change from 0 to 32768 [ 497.890470][ T5306] usb 5-1: config 0 has no interface number 2 [ 497.937886][ T5306] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 497.959034][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.962485][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.992237][ T5306] usb 5-1: config 0 descriptor?? [ 498.008110][T13894] XFS (loop3): Mounting V5 Filesystem [ 498.020962][T13913] loop2: detected capacity change from 0 to 2048 [ 498.150771][ T4228] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 498.160243][ T5308] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 [ 498.160323][T13923] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.160366][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.210713][ T5308] XFS (loop3): Unmount and run xfs_repair [ 498.219382][ T4228] usb 2-1: Product: syz [ 498.234797][ T4228] usb 2-1: Manufacturer: syz [ 498.241668][ T5308] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 498.248814][ T4228] usb 2-1: SerialNumber: syz [ 498.270444][ T4228] usb 2-1: config 0 descriptor?? [ 498.276666][ T5308] 00000000: 49 41 42 33 00 03 00 00 00 00 00 00 00 ff ff ff IAB3............ [ 498.286004][ T5306] usb 5-1: Could not set interface, error -71 [ 498.313152][ T4228] usb 2-1: selecting invalid altsetting 1 [ 498.324948][ T4228] usb 2-1: Can not set alternate setting to 1, error: -22 [ 498.333432][ T5308] 00000010: 00 00 00 00 00 00 00 18 00 00 00 01 00 00 00 10 ................ [ 498.343124][ T5306] usb 5-1: USB disconnect, device number 113 [ 498.353147][ T5308] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 498.362055][ T5308] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37 ...........@..@7 [ 498.370452][ T4228] synaptics_usb: probe of 2-1:0.0 failed with error -22 [ 498.470715][ T5308] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 498.479640][ T5308] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 498.504448][ T5308] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 498.514121][ T5308] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 498.523211][T13894] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x18 len 8 error 74 [ 498.566800][T13894] XFS (loop3): Failed to read root inode 0x1140, error 117 [ 498.581716][ T4228] usb 2-1: USB disconnect, device number 118 [ 499.138572][T13940] loop2: detected capacity change from 0 to 8192 [ 499.203470][T13944] loop4: detected capacity change from 0 to 128 [ 499.240574][ T5306] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 499.318644][T13944] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 499.339754][T13944] EXT4-fs error (device loop4): ext4_fill_super:4866: inode #2: comm syz.4.4394: iget: bad extended attribute block 1 [ 499.370875][T13944] EXT4-fs (loop4): get root inode failed [ 499.376604][T13944] EXT4-fs (loop4): mount failed [ 499.530808][ T5306] usb 1-1: Using ep0 maxpacket: 16 [ 499.654680][ T5306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.682898][ T5306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.759367][ T5306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.823892][ T5306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 499.985589][ T5306] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 500.005051][ T5306] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.024942][ T5306] usb 1-1: Manufacturer: syz [ 500.057878][ T5306] usb 1-1: config 0 descriptor?? [ 500.166073][ T21] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 500.227551][T13981] loop3: detected capacity change from 0 to 1024 [ 500.393399][ T4228] usb 1-1: USB disconnect, device number 109 [ 500.432249][ T9058] hfsplus: b-tree write err: -5, ino 25 [ 500.442714][ T9058] hfsplus: b-tree write err: -5, ino 4 [ 500.471442][ T9058] hfsplus: b-tree write err: -5, ino 2 [ 500.556037][T13983] loop3: detected capacity change from 0 to 128 [ 500.602117][T13983] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 500.604024][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 500.641727][T13983] hpfs: filesystem error: improperly stopped [ 500.643905][T13971] loop4: detected capacity change from 0 to 32768 [ 500.661218][T13983] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 500.712681][T13983] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 500.751316][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.758555][T13983] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 500.770683][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 500.803742][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 500.987195][ T21] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 501.011003][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.051099][ T21] usb 3-1: Product: syz [ 501.061907][ T21] usb 3-1: Manufacturer: syz [ 501.077467][ T21] usb 3-1: SerialNumber: syz [ 501.100596][ T21] usb 3-1: config 0 descriptor?? [ 501.136809][T13970] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 501.158810][ T21] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 501.414589][ T5581] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 501.434039][ T21] usb 3-1: USB disconnect, device number 117 [ 501.498970][T14001] loop0: detected capacity change from 0 to 8192 [ 501.534648][T14001] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 501.554565][T14001] REISERFS (device loop0): using ordered data mode [ 501.566868][T14001] reiserfs: using flush barriers [ 501.578628][T14001] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 501.597391][ T4304] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 501.664794][T14001] REISERFS (device loop0): checking transaction log (loop0) [ 501.675230][T14001] REISERFS (device loop0): Using rupasov hash to sort names [ 501.689351][T13985] F2FS-fs (loop4): build fault injection attr: rate: 4, type: 0x1ffff [ 501.732747][T13985] F2FS-fs (loop4) : inject slab alloc in f2fs_kmem_cache_alloc of iget_locked+0x191/0x820 [ 501.760206][T13985] F2FS-fs (loop4): Failed to read F2FS meta data inode [ 501.813337][ T5581] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 501.836466][ T5581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.868712][ T5581] usb 2-1: config 0 has no interface number 0 [ 501.874898][ T5581] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.912796][ T5581] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 501.927971][ T5581] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 501.937393][ T5581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.970715][ T5581] usb 2-1: config 0 descriptor?? [ 501.996638][ T4304] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 502.086706][ T5581] HFC-S_USB: probe of 2-1:0.168 failed with error -5 [ 502.193146][ T4304] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 502.221528][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.240560][T14008] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 502.263762][ T4304] usb 4-1: Product: syz [ 502.273352][ T4304] usb 4-1: Manufacturer: syz [ 502.283490][T14008] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 502.327195][ T4304] usb 4-1: SerialNumber: syz [ 502.366257][T14008] ntfs: volume version 3.1. [ 502.374241][T13997] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 502.386035][T14008] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 502.393308][ T5581] usb 2-1: USB disconnect, device number 119 [ 502.418247][T14008] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 502.464862][T14008] ntfs: (device loop0): load_system_files(): Failed to load root directory. [ 502.498412][T14008] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 502.514136][ T5579] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 502.753693][ T4304] usb 4-1: USB disconnect, device number 110 [ 502.772963][ T5579] usb 5-1: Using ep0 maxpacket: 32 [ 502.902580][ T5579] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 502.923041][ T5579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.955607][T14010] set_capacity_and_notify: 2 callbacks suppressed [ 502.955625][T14010] loop2: detected capacity change from 0 to 32768 [ 502.991026][ T5579] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 503.094675][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.226562][ T5579] gspca_nw80x: reg_w err -71 [ 503.231346][ T5579] nw80x: probe of 5-1:3.0 failed with error -71 [ 503.266552][ T5579] usb 5-1: USB disconnect, device number 114 [ 503.606177][ T4304] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 503.722038][ T5581] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 503.897956][T14023] loop2: detected capacity change from 0 to 32768 [ 503.946832][T14023] ERROR: (device loop2): diRead: i_ino != di_number [ 503.946832][T14023] [ 504.002536][ T4304] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 504.021679][ T4304] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.056525][ T4304] usb 2-1: config 0 has no interface number 0 [ 504.164823][ T5581] usb 4-1: unable to get BOS descriptor or descriptor too short [ 504.239876][ T4304] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 504.250754][ T5581] usb 4-1: config 250 has an invalid interface number: 5 but max is 0 [ 504.258986][ T5581] usb 4-1: config 250 has no interface number 0 [ 504.276455][ T4304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.314266][ T4304] usb 2-1: Product: syz [ 504.329791][ T4304] usb 2-1: Manufacturer: syz [ 504.345435][ T4304] usb 2-1: SerialNumber: syz [ 504.371279][ T4304] usb 2-1: config 0 descriptor?? [ 504.477151][ T5581] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=9c.5f [ 504.499887][ T5581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.538946][ T5581] usb 4-1: Product: syz [ 504.550025][ T5581] usb 4-1: Manufacturer: syz [ 504.560977][ T5581] usb 4-1: SerialNumber: syz [ 504.614833][T14042] loop4: detected capacity change from 0 to 8192 [ 504.677813][ T4304] usb 2-1: USB disconnect, device number 120 [ 504.685599][T14042] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 504.718634][T14042] REISERFS (device loop4): using ordered data mode [ 504.727309][T14042] reiserfs: using flush barriers [ 504.751745][T14042] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 504.832981][T14042] REISERFS (device loop4): checking transaction log (loop4) [ 504.852538][T14042] REISERFS (device loop4): Using r5 hash to sort names [ 504.876227][T14042] REISERFS warning (device loop4): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 504.919180][ T5581] int51x1: probe of 4-1:250.5 failed with error -71 [ 504.919189][T14042] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 504.951567][ T5581] usb 4-1: USB disconnect, device number 111 [ 505.122296][T14045] loop0: detected capacity change from 0 to 32768 [ 505.177881][ T21] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 505.447407][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 505.471034][T14057] loop1: detected capacity change from 0 to 64 [ 505.539601][T14055] loop0: detected capacity change from 0 to 4096 [ 505.549102][T14057] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 505.570172][T14057] MINIX-fs: bad superblock [ 505.593515][T14055] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 505.614046][T14055] ntfs: (device loop0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 505.630758][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 505.657313][T14055] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 505.717178][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.733835][ T21] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 505.943617][ T21] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=40.40 [ 505.952766][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.986323][ T21] usb 3-1: Product: syz [ 506.001606][ T21] usb 3-1: Manufacturer: syz [ 506.017302][ T21] usb 3-1: SerialNumber: syz [ 506.041782][T14078] loop3: detected capacity change from 0 to 1024 [ 506.090619][T14078] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 506.212410][T14088] loop0: detected capacity change from 0 to 512 [ 506.238791][T14078] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,resuid=0x000000000000000. Quota mode: none. [ 506.288514][ T5306] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 506.296375][ T5303] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 506.428591][ T21] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 506.458477][ T21] usb 3-1: 1:1 : format type 239 is not supported yet [ 506.514670][ T21] usb 3-1: 0:2 : does not exist [ 506.566963][ T21] usb 3-1: USB disconnect, device number 118 [ 506.601202][ T5303] usb 5-1: Using ep0 maxpacket: 16 [ 506.763132][ T5306] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 506.774244][T14103] loop3: detected capacity change from 0 to 512 [ 506.793509][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.804169][ T5306] usb 2-1: config 0 descriptor?? [ 506.827633][ T5303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.862209][ T5306] usb_ehset_test: probe of 2-1:0.0 failed with error -32 [ 506.882387][T14103] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 506.889625][T14103] EXT4-fs (loop3): Value of option "test_dummy_encryption=v1.." is unrecognized [ 506.935304][ T5303] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.973456][ T5303] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.088095][ T5308] usb 2-1: USB disconnect, device number 121 [ 507.217784][ T5303] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.252262][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.275213][ T5303] usb 5-1: Product: syz [ 507.279602][ T5303] usb 5-1: Manufacturer: syz [ 507.307897][ T5303] usb 5-1: SerialNumber: syz [ 507.377077][ T5579] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 507.557698][T14112] loop3: detected capacity change from 0 to 32768 [ 507.585622][T14112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4470 (14112) [ 507.615628][T14112] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 507.635563][T14112] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 507.645781][T14112] BTRFS info (device loop3): force zstd compression, level 3 [ 507.647112][ T5579] usb 3-1: Using ep0 maxpacket: 16 [ 507.660245][T14112] BTRFS info (device loop3): setting nodatasum [ 507.668718][T14112] BTRFS info (device loop3): turning off barriers [ 507.676048][T14112] BTRFS info (device loop3): use zstd compression, level 3 [ 507.707090][T14112] BTRFS info (device loop3): using free space tree [ 507.715773][ T5308] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 507.744825][T14112] BTRFS info (device loop3): has skinny extents [ 507.765450][ T5303] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 507.786956][ T5303] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 507.851473][ T5579] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.865271][ T5303] usb 5-1: USB disconnect, device number 115 [ 507.948462][ T5579] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 507.956983][ T5579] usb 3-1: config 0 has no interface number 0 [ 507.989409][ T5579] usb 3-1: config 0 interface 5 has no altsetting 0 [ 508.153268][ T5308] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 508.172819][ T5308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.178963][ T5579] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=eb.e1 [ 508.200180][ T6638] udevd[6638]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.207245][ T5579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.238571][ T5308] usb 1-1: config 0 has no interface number 0 [ 508.251586][ T5308] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=fc.6a [ 508.259605][ T5579] usb 3-1: Product: syz [ 508.265263][ T5579] usb 3-1: Manufacturer: syz [ 508.269887][ T5579] usb 3-1: SerialNumber: syz [ 508.282455][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.295179][ T4505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4505) [ 508.323849][ T5308] usb 1-1: config 0 descriptor?? [ 508.350863][ T5579] usb 3-1: config 0 descriptor?? [ 508.382706][ T5308] ldusb 1-1:0.55: Interrupt in endpoint not found [ 508.616093][ T4227] usb 1-1: USB disconnect, device number 110 [ 508.714900][ T5579] cytherm 3-1:0.5: Cypress thermometer device now attached [ 508.746084][ T5579] usb 3-1: USB disconnect, device number 119 [ 508.768122][ T4265] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 508.777346][ T5579] cytherm 3-1:0.5: Cypress thermometer now disconnected [ 508.858833][T14148] loop3: detected capacity change from 0 to 128 [ 508.891066][T14148] hpfs: bad mount options. [ 508.957378][T14150] ISOFS: Unable to identify CD-ROM format. [ 508.988469][ T5585] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 509.210019][ T4265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 509.263510][ T4265] usb 2-1: not running at top speed; connect to a high speed hub [ 509.274194][ T5585] usb 5-1: Using ep0 maxpacket: 8 [ 509.355106][ T4265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.381027][T14166] loop3: detected capacity change from 0 to 128 [ 509.392550][ T4265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.433618][T14166] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 509.453537][T14168] loop0: detected capacity change from 0 to 2048 [ 509.576049][ T5585] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 509.588175][ T4265] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.606958][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.615756][ T5585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 509.637538][ T4265] usb 2-1: Product: syz [ 509.642132][ T5585] usb 5-1: Product: syz [ 509.646327][ T5585] usb 5-1: Manufacturer: syz [ 509.651370][ T5303] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 509.660425][ T4265] usb 2-1: Manufacturer: syz [ 509.667495][ T4265] usb 2-1: SerialNumber: syz [ 509.672393][ T5585] usb 5-1: SerialNumber: syz [ 509.682050][ T5585] usb 5-1: config 0 descriptor?? [ 509.729664][ T5585] gspca_main: sq905-2.14.0 probing 2770:9120 [ 509.845309][ T5579] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 509.942290][ T5303] usb 3-1: Using ep0 maxpacket: 32 [ 509.953475][ T5585] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 509.960829][ T5585] sq905: probe of 5-1:0.0 failed with error -71 [ 509.978131][ T5585] usb 5-1: USB disconnect, device number 116 [ 509.985669][ T7017] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 510.060856][ T4265] usb 2-1: 0:2 : does not exist [ 510.093138][ T5303] usb 3-1: config 3 has an invalid interface number: 166 but max is 0 [ 510.102756][ T4265] usb 2-1: USB disconnect, device number 122 [ 510.108973][ T5579] usb 4-1: Using ep0 maxpacket: 32 [ 510.119857][ T5303] usb 3-1: config 3 has no interface number 0 [ 510.126416][ T5303] usb 3-1: config 3 interface 166 has no altsetting 0 [ 510.136256][ T6638] udevd[6638]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.244224][ T5579] usb 4-1: config 4 has an invalid interface number: 96 but max is 2 [ 510.252397][ T5579] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 510.262812][ T7017] usb 1-1: Using ep0 maxpacket: 16 [ 510.268577][ T5579] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 510.277980][ T5579] usb 4-1: config 4 has no interface number 0 [ 510.330317][ T5303] usb 3-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 510.340020][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.348671][ T5303] usb 3-1: Product: syz [ 510.353311][ T5303] usb 3-1: Manufacturer: syz [ 510.358031][ T5303] usb 3-1: SerialNumber: syz [ 510.394895][ T7017] usb 1-1: config 82 has an invalid interface number: 243 but max is 0 [ 510.403348][ T7017] usb 1-1: config 82 has no interface number 0 [ 510.410113][ T7017] usb 1-1: config 82 interface 243 has no altsetting 0 [ 510.448794][ T5579] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 510.458001][ T5579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.466612][ T5579] usb 4-1: Product: syz [ 510.470957][ T5579] usb 4-1: Manufacturer: syz [ 510.475673][ T5579] usb 4-1: SerialNumber: syz [ 510.588980][ T7017] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=f3.37 [ 510.608037][T14176] loop4: detected capacity change from 0 to 8 [ 510.615681][ T7017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.642966][ T7017] usb 1-1: Product: syz [ 510.647756][ T7017] usb 1-1: Manufacturer: syz [ 510.652391][ T7017] usb 1-1: SerialNumber: syz [ 510.755947][ T5303] go7007: probe of 3-1:3.166 failed with error -12 [ 510.798344][ T5303] usb 3-1: USB disconnect, device number 120 [ 510.821672][ T5579] usb 4-1: USB disconnect, device number 112 [ 510.987512][ T7017] usbtest 1-1:82.243: couldn't get endpoints, -71 [ 510.994207][ T7017] usbtest: probe of 1-1:82.243 failed with error -71 [ 511.041782][T14174] loop1: detected capacity change from 0 to 32768 [ 511.054366][ T7017] usb 1-1: USB disconnect, device number 111 [ 511.106770][T14174] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 511.193414][T14174] JBD2: Ignoring recovery information on journal [ 511.388576][T14174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 511.532408][ T5303] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 511.585156][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 511.796589][ T5303] usb 5-1: Using ep0 maxpacket: 8 [ 511.899906][T14206] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 511.916364][T14206] PKCS7: Only support pkcs7_signedData type [ 511.972680][T14208] loop1: detected capacity change from 0 to 512 [ 511.989567][ T5303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 512.065067][ T1108] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 512.072876][ T5310] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 512.082235][T14208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 512.097629][ T5303] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 512.108105][ T5303] usb 5-1: config 0 has no interface number 0 [ 512.114264][ T5303] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 512.152505][T14208] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.4501: corrupted xattr entries [ 512.183645][T14208] EXT4-fs (loop1): 1 truncate cleaned up [ 512.186066][ T5303] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 512.197875][T14208] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,nodiscard,,errors=continue. Quota mode: none. [ 512.281182][ T5303] usb 5-1: config 0 interface 88 has no altsetting 0 [ 512.388057][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 512.452118][T14214] loop1: detected capacity change from 0 to 1024 [ 512.485267][ T5310] usb 1-1: not running at top speed; connect to a high speed hub [ 512.514057][T14214] hfsplus: invalid file type 0113366 for inode 2 [ 512.532405][T14214] hfsplus: failed to load root directory [ 512.534208][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.548490][ T5303] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 512.571108][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 512.580547][ T5303] usb 5-1: Product: syz [ 512.590936][ T5310] usb 1-1: config 3 has an invalid interface number: 52 but max is 1 [ 512.600432][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 512.622622][ T5310] usb 1-1: config 3 has an invalid interface number: 51 but max is 1 [ 512.637021][ T5303] usb 5-1: Manufacturer: syz [ 512.641686][ T5303] usb 5-1: SerialNumber: syz [ 512.660679][ T5310] usb 1-1: config 3 has no interface number 0 [ 512.666847][ T5310] usb 1-1: config 3 has no interface number 1 [ 512.673293][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.696160][ T5303] usb 5-1: config 0 descriptor?? [ 512.701564][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.711508][ T5310] usb 1-1: config 3 interface 52 has no altsetting 0 [ 512.718237][ T5310] usb 1-1: config 3 interface 51 has no altsetting 0 [ 512.732935][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.765477][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 512.774587][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.813442][ T1108] usb 4-1: config 0 descriptor?? [ 512.878350][ T26] audit: type=1326 audit(1775649539.563:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14217 comm="syz.1.4511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd23de1c819 code=0x0 [ 513.045931][ T5310] usb 1-1: string descriptor 0 read error: -22 [ 513.052306][ T5310] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 513.101771][ T5303] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input34 [ 513.117099][T14224] loop2: detected capacity change from 0 to 4096 [ 513.128229][ T5310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.142435][ T5579] usb 4-1: USB disconnect, device number 113 [ 513.161011][ T5303] usb 5-1: USB disconnect, device number 117 [ 513.202088][T14224] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 513.214556][ T5310] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 513.232670][ T5310] usb 1-1: selecting invalid altsetting 0 [ 513.270961][ T5310] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 513.283556][T14224] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 513.321771][ T5310] usb 1-1: selecting invalid altsetting 0 [ 513.328644][T14224] ntfs3: loop2: Failed to load $MFT. [ 513.496644][T14228] loop1: detected capacity change from 0 to 4096 [ 513.511744][ T1108] usb 1-1: USB disconnect, device number 112 [ 513.524963][ T2429] pvrusb2: control-write URB failure, status=-71 [ 513.540829][ T2429] pvrusb2: Device being rendered inoperable [ 513.552434][T14228] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 513.556025][ T2429] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.605059][ T2429] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.668787][ T2429] pvrusb2: Failed to submit write-control URB status=-19 [ 513.721824][ T2429] pvrusb2: Device being rendered inoperable [ 513.766962][ T2429] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.777202][ T2429] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.921310][T14240] loop3: detected capacity change from 0 to 64 [ 514.009239][T14234] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 514.054501][T14240] hfs: unable to parse mount options [ 514.472895][ T5306] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 514.583248][T14272] futex_wake_op: syz.4.4537 tries to shift op by -65; fix this program [ 514.596398][ T1108] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 514.639505][ T5585] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 514.887279][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 514.892721][ T5310] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 514.900073][ T5585] usb 4-1: Using ep0 maxpacket: 8 [ 514.924851][ T5306] usb 1-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 514.936627][ T5306] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 56, changing to 9 [ 514.948943][ T5306] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 8703, setting to 1024 [ 515.027241][ T5585] usb 4-1: config 6 has an invalid interface number: 246 but max is 0 [ 515.035680][ T5585] usb 4-1: config 6 has no interface number 0 [ 515.041924][ T5585] usb 4-1: config 6 interface 246 has no altsetting 0 [ 515.113600][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 515.156711][ T5306] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 515.169487][ T5306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.177569][ T5306] usb 1-1: Product: syz [ 515.181868][ T5306] usb 1-1: Manufacturer: syz [ 515.186506][ T5306] usb 1-1: SerialNumber: syz [ 515.210429][ T1108] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 515.253486][ T5585] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=c9.0b [ 515.262786][ T5585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.271044][ T5585] usb 4-1: Product: syz [ 515.275370][ T5310] usb 2-1: not running at top speed; connect to a high speed hub [ 515.275429][ T5585] usb 4-1: Manufacturer: syz [ 515.288868][ T5585] usb 4-1: SerialNumber: syz [ 515.372196][ T5310] usb 2-1: config 3 has an invalid interface number: 52 but max is 1 [ 515.380399][ T5310] usb 2-1: config 3 has an invalid interface number: 51 but max is 1 [ 515.389639][ T5310] usb 2-1: config 3 has no interface number 0 [ 515.396133][ T1108] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 515.405262][ T5310] usb 2-1: config 3 has no interface number 1 [ 515.411412][ T5310] usb 2-1: config 3 interface 52 has no altsetting 0 [ 515.418239][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.426335][ T1108] usb 3-1: Product: syz [ 515.430536][ T1108] usb 3-1: Manufacturer: syz [ 515.435133][ T1108] usb 3-1: SerialNumber: syz [ 515.439856][ T5310] usb 2-1: config 3 interface 51 has no altsetting 0 [ 515.567329][ T5306] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 515.576421][ T5306] usb 1-1: USB disconnect, device number 113 [ 515.686834][ T5585] as10x_usb: device has been detected [ 515.692872][ T5585] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 515.695850][ T5310] usb 2-1: string descriptor 0 read error: -22 [ 515.720217][ T5310] usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 515.730263][ T5585] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 515.738692][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.762526][ T5585] as10x_usb: error during firmware upload part1 [ 515.769153][ T5585] Registered device Abilis Systems DVB-Titan [ 515.771312][ T5585] usb 4-1: USB disconnect, device number 114 [ 515.795505][ T5310] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 515.803190][ T1108] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 515.816337][ T5585] Unregistered device Abilis Systems DVB-Titan [ 515.816829][ T5310] usb 2-1: selecting invalid altsetting 0 [ 515.830289][ T5585] as10x_usb: device has been disconnected [ 515.849888][ T5310] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 515.866921][ T5310] usb 2-1: selecting invalid altsetting 0 [ 515.942915][ T1108] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x300, type = 4 [ 515.952788][ T1108] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 515.972385][ T1108] usb 3-1: USB disconnect, device number 121 [ 516.024586][ T7017] usb 2-1: USB disconnect, device number 123 [ 516.031045][ T2429] pvrusb2: control-write URB failure, status=-71 [ 516.043356][ T2429] pvrusb2: Device being rendered inoperable [ 516.051755][ T2429] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 516.077629][ T2429] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 516.090611][ T2429] pvrusb2: Failed to submit write-control URB status=-19 [ 516.102023][ T2429] pvrusb2: Device being rendered inoperable [ 516.108895][ T2429] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 516.119798][ T2429] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 516.218408][ T6638] udevd[6638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.610296][ T1108] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 516.720869][ T7017] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 516.815042][ T5306] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 517.030291][ T7017] usb 4-1: Using ep0 maxpacket: 16 [ 517.046383][T14316] set_capacity_and_notify: 1 callbacks suppressed [ 517.046526][T14316] loop4: detected capacity change from 0 to 1024 [ 517.047051][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 517.073335][ T5306] usb 3-1: Using ep0 maxpacket: 16 [ 517.086791][T14316] EXT4-fs (loop4): filesystem is read-only [ 517.111357][T14316] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 517.170500][ T7017] usb 4-1: config index 0 descriptor too short (expected 49615, got 36) [ 517.170517][ T1108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 517.188908][ T7017] usb 4-1: config 163 has too many interfaces: 90, using maximum allowed: 32 [ 517.202797][ T5306] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 517.219142][ T5306] usb 3-1: config 3 has no interface number 0 [ 517.232519][ T7017] usb 4-1: config 163 contains an unexpected descriptor of type 0x2, skipping [ 517.235952][ T5306] usb 3-1: config 3 interface 20 has no altsetting 0 [ 517.266288][ T7017] usb 4-1: config 163 has an invalid descriptor of length 0, skipping remainder of the config [ 517.289354][ T7017] usb 4-1: config 163 has 0 interfaces, different from the descriptor's value: 90 [ 517.342980][ T1108] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 517.352193][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.393800][ T1108] usb 1-1: Product: syz [ 517.398797][ T1108] usb 1-1: Manufacturer: syz [ 517.403469][ T1108] usb 1-1: SerialNumber: syz [ 517.439879][T14294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 517.447160][ T5306] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 517.461692][ T5306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.480720][ T5306] usb 3-1: Product: syz [ 517.491555][ T5306] usb 3-1: Manufacturer: syz [ 517.502187][T14318] loop4: detected capacity change from 0 to 8192 [ 517.502606][ T5306] usb 3-1: SerialNumber: syz [ 517.509508][ T7017] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 517.538644][ T7017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.557671][ T7017] usb 4-1: Product: syz [ 517.579570][ T7017] usb 4-1: Manufacturer: syz [ 517.589297][ T7017] usb 4-1: SerialNumber: syz [ 517.788744][ T1108] usblp0: Disabling reads from problematic bidirectional printer [ 517.848402][ T1108] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 517.894613][ T5306] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.20/input/input35 [ 517.916823][ T1108] usb 1-1: USB disconnect, device number 114 [ 517.967335][ T3549] bcm5974 3-1:3.20: could not read from device [ 517.973993][ T1108] usblp0: removed [ 518.004575][ T5303] usb 4-1: USB disconnect, device number 115 [ 518.023513][ T3549] bcm5974 3-1:3.20: could not read from device [ 518.029968][ T5306] usb 3-1: USB disconnect, device number 122 [ 518.055013][ T3549] bcm5974 3-1:3.20: could not read from device [ 518.349986][T14330] loop4: detected capacity change from 0 to 8192 [ 518.485447][T14330] loop4: AHDI p1 p2 p4 [ 518.517552][T14330] loop4: p4 start 117378816 is beyond EOD, truncated [ 518.880009][T14353] loop3: detected capacity change from 0 to 64 [ 518.911972][T14351] loop2: detected capacity change from 0 to 512 [ 518.954474][ T6638] udevd[6638]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 519.028449][T14353] hfs: get root inode failed [ 519.043933][ T1108] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 519.078404][T14351] EXT4-fs (loop2): Ignoring removed orlov option [ 519.084859][T14351] EXT4-fs (loop2): Test dummy encryption mode enabled [ 519.123256][T14351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 519.205826][T14351] ================================================================== [ 519.214512][T14351] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e50 [ 519.221591][T14351] Read of size 8 at addr ffff8880600719c0 by task syz.2.4576/14351 [ 519.229530][T14351] [ 519.231898][T14351] CPU: 1 PID: 14351 Comm: syz.2.4576 Not tainted syzkaller #0 [ 519.239400][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.249508][T14351] Call Trace: [ 519.252919][T14351] [ 519.255879][T14351] dump_stack_lvl+0x188/0x250 [ 519.260607][T14351] ? show_regs_print_info+0x20/0x20 [ 519.265962][T14351] ? load_image+0x400/0x400 [ 519.270514][T14351] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 519.276108][T14351] ? __rwlock_init+0x140/0x140 [ 519.280915][T14351] print_address_description+0x60/0x2d0 [ 519.286514][T14351] ? __ext4_iget+0x2bb/0x3e50 [ 519.291245][T14351] kasan_report+0xdf/0x130 [ 519.295711][T14351] ? __ext4_iget+0x2bb/0x3e50 [ 519.300446][T14351] __ext4_iget+0x2bb/0x3e50 [ 519.302408][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 519.305010][T14351] ? __free_pages+0x95/0x1a0 [ 519.314654][T14351] ? apply_workqueue_attrs+0x170/0x170 [ 519.320165][T14351] ? ext4_get_projid+0x140/0x140 [ 519.325151][T14351] ? mb_cache_create+0x428/0x530 [ 519.330137][T14351] ext4_fill_super+0x73d4/0x95a0 [ 519.335156][T14351] ? ext4_mount+0x40/0x40 [ 519.339530][T14351] ? set_blocksize+0x1f3/0x370 [ 519.344336][T14351] ? sb_set_blocksize+0xa5/0xe0 [ 519.349233][T14351] mount_bdev+0x287/0x3c0 [ 519.353601][T14351] ? ext4_mount+0x40/0x40 [ 519.357980][T14351] legacy_get_tree+0xe6/0x180 [ 519.362694][T14351] ? ext4_errno_to_code+0x160/0x160 [ 519.367951][T14351] vfs_get_tree+0x88/0x270 [ 519.372411][T14351] do_new_mount+0x24a/0xa40 [ 519.376962][T14351] __se_sys_mount+0x2e3/0x3d0 [ 519.381690][T14351] ? __x64_sys_mount+0xc0/0xc0 [ 519.386494][T14351] ? lockdep_hardirqs_on+0x94/0x140 [ 519.391748][T14351] ? __x64_sys_mount+0x1c/0xc0 [ 519.396559][T14351] do_syscall_64+0x4c/0xa0 [ 519.401024][T14351] ? clear_bhb_loop+0x30/0x80 [ 519.405736][T14351] ? clear_bhb_loop+0x30/0x80 [ 519.410462][T14351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.416426][T14351] RIP: 0033:0x7f334751aa8a [ 519.420884][T14351] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.440534][T14351] RSP: 002b:00007f3345772e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 519.449003][T14351] RAX: ffffffffffffffda RBX: 00007f3345772ee0 RCX: 00007f334751aa8a [ 519.457021][T14351] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f3345772ea0 [ 519.465032][T14351] RBP: 0000200000000040 R08: 00007f3345772ee0 R09: 000000000000000e [ 519.473041][T14351] R10: 000000000000000e R11: 0000000000000246 R12: 0000200000000000 [ 519.481159][T14351] R13: 00007f3345772ea0 R14: 0000000000000448 R15: 0000200000000080 [ 519.489196][T14351] [ 519.492255][T14351] [ 519.494621][T14351] Allocated by task 11606: [ 519.496868][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 519.499063][T14351] __kasan_slab_alloc+0x9c/0xd0 [ 519.511586][T14351] slab_post_alloc_hook+0x4c/0x380 [ 519.516754][T14351] kmem_cache_alloc+0x100/0x290 [ 519.521651][T14351] reiserfs_alloc_inode+0x19/0xb0 [ 519.526724][T14351] iget5_locked+0x9e/0x250 [ 519.531190][T14351] reiserfs_fill_super+0x122d/0x2440 [ 519.536516][T14351] mount_bdev+0x287/0x3c0 [ 519.540881][T14351] legacy_get_tree+0xe6/0x180 [ 519.545599][T14351] vfs_get_tree+0x88/0x270 [ 519.550059][T14351] do_new_mount+0x24a/0xa40 [ 519.554598][T14351] __se_sys_mount+0x2e3/0x3d0 [ 519.559341][T14351] do_syscall_64+0x4c/0xa0 [ 519.563938][T14351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.569873][T14351] [ 519.572223][T14351] Last potentially related work creation: [ 519.578050][T14351] kasan_save_stack+0x35/0x60 [ 519.582778][T14351] kasan_record_aux_stack+0xb8/0x100 [ 519.588102][T14351] call_rcu+0x189/0x950 [ 519.592297][T14351] evict+0x834/0x8d0 [ 519.596233][T14351] reiserfs_fill_super+0x14c4/0x2440 [ 519.601552][T14351] mount_bdev+0x287/0x3c0 [ 519.605938][T14351] legacy_get_tree+0xe6/0x180 [ 519.610657][T14351] vfs_get_tree+0x88/0x270 [ 519.615114][T14351] do_new_mount+0x24a/0xa40 [ 519.619655][T14351] __se_sys_mount+0x2e3/0x3d0 [ 519.624369][T14351] do_syscall_64+0x4c/0xa0 [ 519.628821][T14351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.634750][T14351] [ 519.637101][T14351] The buggy address belongs to the object at ffff8880600713e0 [ 519.637101][T14351] which belongs to the cache reiser_inode_cache of size 1568 [ 519.651878][T14351] The buggy address is located 1504 bytes inside of [ 519.651878][T14351] 1568-byte region [ffff8880600713e0, ffff888060071a00) [ 519.665369][T14351] The buggy address belongs to the page: [ 519.671051][T14351] page:ffffea0001801c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888060072120 pfn:0x60070 [ 519.682544][T14351] head:ffffea0001801c00 order:3 compound_mapcount:0 compound_pincount:0 [ 519.690909][T14351] memcg:ffff888021077c01 [ 519.695176][T14351] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 519.703218][T14351] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888146681000 [ 519.711842][T14351] raw: ffff888060072120 000000008013000e 00000001ffffffff ffff888021077c01 [ 519.720455][T14351] page dumped because: kasan: bad access detected [ 519.726909][T14351] page_owner tracks the page as allocated [ 519.732649][T14351] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6873, ts 191724458930, free_ts 76835648099 [ 519.755004][T14351] get_page_from_freelist+0x1bbd/0x1ca0 [ 519.760602][T14351] __alloc_pages+0x1ee/0x480 [ 519.765228][T14351] new_slab+0xc0/0x4b0 [ 519.769323][T14351] ___slab_alloc+0x80a/0xdd0 [ 519.773943][T14351] kmem_cache_alloc+0x195/0x290 [ 519.777036][ T1108] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 519.778817][T14351] reiserfs_alloc_inode+0x19/0xb0 [ 519.792888][T14351] iget5_locked+0x9e/0x250 [ 519.797338][T14351] reiserfs_fill_super+0x122d/0x2440 [ 519.802658][T14351] mount_bdev+0x287/0x3c0 [ 519.807121][T14351] legacy_get_tree+0xe6/0x180 [ 519.811830][T14351] vfs_get_tree+0x88/0x270 [ 519.811984][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.816275][T14351] do_new_mount+0x24a/0xa40 [ 519.828805][T14351] __se_sys_mount+0x2e3/0x3d0 [ 519.833517][T14351] do_syscall_64+0x4c/0xa0 [ 519.837971][T14351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.843905][T14351] page last free stack trace: [ 519.848601][T14351] free_unref_page_prepare+0x637/0x6c0 [ 519.854099][T14351] free_unref_page+0x8f/0x2a0 [ 519.858804][T14351] __unfreeze_partials+0x1a5/0x200 [ 519.863943][T14351] put_cpu_partial+0x12d/0x190 [ 519.868735][T14351] qlist_free_all+0x35/0x90 [ 519.873267][T14351] kasan_quarantine_reduce+0x150/0x160 [ 519.878759][T14351] __kasan_slab_alloc+0x2f/0xd0 [ 519.882374][ T1108] usb 5-1: Product: syz [ 519.883640][T14351] slab_post_alloc_hook+0x4c/0x380 [ 519.883664][T14351] kmem_cache_alloc+0x100/0x290 [ 519.883683][T14351] getname_flags+0xb5/0x500 [ 519.883703][T14351] user_path_at_empty+0x2a/0x190 [ 519.891627][ T1108] usb 5-1: Manufacturer: syz [ 519.892996][T14351] do_readlinkat+0xd9/0x490 [ 519.893018][T14351] __x64_sys_readlink+0x7b/0x90 [ 519.893042][T14351] do_syscall_64+0x4c/0xa0 [ 519.921615][ T1108] usb 5-1: SerialNumber: syz [ 519.925929][T14351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.936459][T14351] [ 519.938811][T14351] Memory state around the buggy address: [ 519.941145][T14308] loop1: detected capacity change from 0 to 131072 [ 519.944464][T14351] ffff888060071880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.944480][T14351] ffff888060071900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.944495][T14351] >ffff888060071980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.944507][T14351] ^ [ 519.944520][T14351] ffff888060071a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 519.944535][T14351] ffff888060071a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.997614][T14351] ================================================================== [ 520.005705][T14351] Disabling lock debugging due to kernel taint [ 520.024618][T14351] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 520.031874][T14351] CPU: 1 PID: 14351 Comm: syz.2.4576 Tainted: G B syzkaller #0 [ 520.040756][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.050847][T14351] Call Trace: [ 520.054154][T14351] [ 520.057110][T14351] dump_stack_lvl+0x188/0x250 [ 520.061827][T14351] ? show_regs_print_info+0x20/0x20 [ 520.067062][T14351] ? load_image+0x400/0x400 [ 520.071607][T14351] panic+0x2e5/0x810 [ 520.075549][T14351] ? bpf_jit_dump+0xd0/0xd0 [ 520.080095][T14351] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 520.086113][T14351] ? _raw_spin_unlock+0x40/0x40 [ 520.090999][T14351] ? __ext4_iget+0x2bb/0x3e50 [ 520.095714][T14351] check_panic_on_warn+0x80/0xa0 [ 520.100688][T14351] ? __ext4_iget+0x2bb/0x3e50 [ 520.105402][T14351] end_report+0x6d/0xf0 [ 520.109590][T14351] kasan_report+0x102/0x130 [ 520.114126][T14351] ? __ext4_iget+0x2bb/0x3e50 [ 520.118839][T14351] __ext4_iget+0x2bb/0x3e50 [ 520.123384][T14351] ? __free_pages+0x95/0x1a0 [ 520.128016][T14351] ? apply_workqueue_attrs+0x170/0x170 [ 520.133509][T14351] ? ext4_get_projid+0x140/0x140 [ 520.138492][T14351] ? mb_cache_create+0x428/0x530 [ 520.143474][T14351] ext4_fill_super+0x73d4/0x95a0 [ 520.148471][T14351] ? ext4_mount+0x40/0x40 [ 520.152841][T14351] ? set_blocksize+0x1f3/0x370 [ 520.157788][T14351] ? sb_set_blocksize+0xa5/0xe0 [ 520.162675][T14351] mount_bdev+0x287/0x3c0 [ 520.167052][T14351] ? ext4_mount+0x40/0x40 [ 520.171424][T14351] legacy_get_tree+0xe6/0x180 [ 520.176143][T14351] ? ext4_errno_to_code+0x160/0x160 [ 520.181384][T14351] vfs_get_tree+0x88/0x270 [ 520.185835][T14351] do_new_mount+0x24a/0xa40 [ 520.190376][T14351] __se_sys_mount+0x2e3/0x3d0 [ 520.195088][T14351] ? __x64_sys_mount+0xc0/0xc0 [ 520.199889][T14351] ? lockdep_hardirqs_on+0x94/0x140 [ 520.205119][T14351] ? __x64_sys_mount+0x1c/0xc0 [ 520.209920][T14351] do_syscall_64+0x4c/0xa0 [ 520.214371][T14351] ? clear_bhb_loop+0x30/0x80 [ 520.219089][T14351] ? clear_bhb_loop+0x30/0x80 [ 520.223798][T14351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 520.229729][T14351] RIP: 0033:0x7f334751aa8a [ 520.234190][T14351] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.253835][T14351] RSP: 002b:00007f3345772e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 520.262311][T14351] RAX: ffffffffffffffda RBX: 00007f3345772ee0 RCX: 00007f334751aa8a [ 520.270333][T14351] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f3345772ea0 [ 520.278342][T14351] RBP: 0000200000000040 R08: 00007f3345772ee0 R09: 000000000000000e [ 520.286364][T14351] R10: 000000000000000e R11: 0000000000000246 R12: 0000200000000000 [ 520.294377][T14351] R13: 00007f3345772ea0 R14: 0000000000000448 R15: 0000200000000080 [ 520.302394][T14351] [ 520.305783][T14351] Kernel Offset: disabled [ 520.310183][T14351] Rebooting in 86400 seconds..