last executing test programs: 1m48.090605664s ago: executing program 0 (id=445): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x7) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x30, 0x2) 1m46.261159243s ago: executing program 0 (id=460): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104"], 0x3c}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1m44.137314778s ago: executing program 0 (id=484): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x551f, &(0x7f000000cf00)="$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") r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000b80)='./file0\x00', 0x101142, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0}) 1m42.505734724s ago: executing program 0 (id=501): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x2200800, &(0x7f0000000080), 0x4, 0x96bd, &(0x7f0000012d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 1m40.403429327s ago: executing program 0 (id=515): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1m38.823876593s ago: executing program 0 (id=530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000210001002dbd7000fbdbdf250a10800802000006010000001400010000000000000000000000ffffac14143d14000200fc02000008000000000000000000000108001700"], 0x4c}}, 0x0) 1m38.612128026s ago: executing program 32 (id=530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000210001002dbd7000fbdbdf250a10800802000006010000001400010000000000000000000000ffffac14143d14000200fc02000008000000000000000000000108001700"], 0x4c}}, 0x0) 1m22.080962952s ago: executing program 5 (id=645): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb4}, &(0x7f0000000500)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m22.009346313s ago: executing program 5 (id=646): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) 1m21.718643788s ago: executing program 5 (id=648): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000380), &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200c00, &(0x7f0000000180)={[{@nolargeio}, {@prjquota}, {}, {@prjquota}, {@grpquota}, {@gquota}, {@nogrpid}]}, 0xb, 0x96e3, &(0x7f0000009640)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsoWYGMxSSJdqELClLSUUrlZQ2Itqzb9nKErK2kuwtlBAqWSIttmH+r2POMMZF9f1+/z/luq7X65znee7nvu/zeT7vezmH2XTShhMHgzkG0xo3mLlzrp48ZcyV6912+JbzH7XMSXft+8gVFx0/8jhh5HHiYDAYNfL20LRlYwcnnzJqMOuDyx9u7jnnGpp3MFh25OXIfgYrTnuY97Lp602dqZkHOvTwt72nfT3YfMM/YvjJIfvueehgMBgzw/ZDg8HQ7o/6oNI2nTB50sNWD7kNW40eeT7j12zTvua9cDCY97QBHx8zrjv0BHyk4Z+5+4vOHr3eE/Cz/+vadMLktWfyHz4XZxlZtuLwOT7zOWhs5uP8lsU2X3lkCh883gaD4UvcI86V/4o2nTBpncFjX+cHh69y/t5Tp103Zx9Mu1HMORgM5hq5vs7zRLvU/64JE5d78J49/fUI+/RjeXc6Lo7d7IQHhm/Sg8FggcFg7FrT7wVVVVX139GEicutDvf/OR7v/n/iiQuf1v2/qqrqv7e1J0xcbvheP9P9f57Hu//vvPAFH5323/7Hrzhtqwee2A9RVVVV/1aT1sb7/5jHu/+vuPol63T/r6qq+u9tg3UfvP/PM9P9f8HHu/+/8YRVFhlZb/rvDffPsMuhGf5/wn0zLJ9lhuX3zrB89Az7mXH92WZYfvcMy2cffg/WHzcYjJ3+7wWnPLx47Ljh90aW3zPD8vEP/zudRdeYYfmEGZZPmmH5xJGxDi+fPMPyyTOsv9bjTHVVVdV/TBssN2n1wQz/zn5k8ULT36f7/3mnX7PkEzXeqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq+u/sgdvOOHswGAwNBoNRg8GUwcjzGR8HU6dOnTr8+sRzL730CRvof0ZD51w9ecqYK9e77fAt5z9qmZPu2vfhWfqv7b//E9T/pmH/OY4ZNxjsuPETPZR6Aur8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ398/99/h/Mo56Yur8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xT1w2xlnjxwDowaDKYOR57tPfzx9nze8aWTVlTc56Y4DHt5y0fHbjTw75+rJU7Z7Asb+BDQ0/FnHXLnebYdvOf9Ry5x0175PgrPnv/8T1P+mB/23GxoMRs7vMcPn8noTNthoicFgcMAdJ22ywuCh91Yafm+VsbMMZnlw0yUe/L7morzj3dea9jh++NuCD+3jxAf3v/bUg2cZmmkQM7TaOdcf/rZN71p+5sfFH/tzjJr+5NBrT71z6tSpUx+xcKQ5HmPj6fuf/llmPs9Hxr7E8NiX2mWHdy717t3ev+R2O2yx7dbbbr3jMsuttPwKyy6zwsovW2qb7bbfeulp3x9jzsY9+H31f2XO5pl5zm6bMOOczfzZHmvOxj3+nD24xynvH9po+pzN+m/O2eqPP2fjthv5QYuOHz3Y/MGpGRoMFl1j9GDX4RfLzD4YLLrmyLoLDa+76thRg8E+D3/Q4WezP3QMDu0+vM6mkzac+PDIHv0JH3WdfsSKi44feZww8jhx2hDHDR4+FMcOTj5l1PBcPGKa555zrqF5B4NlR16O7Gew8si7B01fb+pMzTzQoYe/7T3t68HmG97J8JO3L33GVcPn4kzb///R/+j6/yivlYYemqihka+RdaZ5TZi89sM/68FpGJ67WUaWrThsMvOc/V/2qPGOm3Uw5nHGO2nticsNL55p/qdvgsfX7Yud/4Fpx9b4Fadt9cD/GIXGO8/jjHftCTjeeR5vvMd88OJTpu3q/2y8M13r1nnw+/h/5Vo3ePxr3Sy0g60vWmTma92rH3uIjziPp8/R7DOt9FjXul0PXHb34f2Pf/xr3TrDYx/9iGvdqMFg0dWnX+uGL3yTRg/2GX6x7PCLyaMHRw2/WO7BF3MOzh1+8dK37rT9VsML1po+J0sP73f82KEH3c9f8ebFp+43deoaI2MZP/aRYx05PsbNeD+fMHbaZE7fdvp+h1edvt+bnj7tvUkj+53wb+x3+rY03jvmm/be5JH9Tpxpv6MfZ7/Tt33U+bDE0EMXrse43kya6Xoz8jfO9B/3iK/Zpn3Ne+FgMO9p5DvTuv/0mknn7xyPM94JE5dbfXh8M52/Dx2OdP5ePPnK4XvFvIPBYIHBYOxa08f+bzb0WOOd9fHHOxHGO+vjjffyo3dY9/9gvIMZxvuI42zTDaYdK2uNHGeT/43jd/q2M1/HRj/47rTL/lr/ynVs3KOuY3vMMmqmyZ6hx/qdbStYf9rzhR7+Pffq44+cPvejZ9rvP/udbYbPMgTXsTEz/T0/aq3rBkM057sfs+olQ/s//pyPHjzyb4vpcz5928eb88n/ypw/6/Hn/F/9PXmJ5097f/RM459xztf/zDM/PX3OZ5tpv/9szic//r3j0XM+fjCa5nzpe6fN2+NdTx9rzqdvO33Ohz/iKmNnHaw5fM8amfNJ/8qcL/R/c5zPBetPe771Q4vOOvyk102f85nn+J/N+aR/d87HPXScL/rge88bNZhttsGuW+yyy87LTPs+/eWy077ztejuq6fN8+PdSx/LaPq2j3derPGvGI35l4yG/pnRwrM+ltHDp9ZhO+38tP/ptWiNf9dowNeiK4+cNm+P93vRY8359G3pPrjgDNvP/HfoBus++Hv3PDPdB6dvgvfBs05fZ6/puxzZ7P6Zhjn9vnrfDMtnmWH5vTMsHz3DfmZcf7YZlt89w/LhjzDbDOtPZx03/DfvyPIpD68+dviXp3Ejy++ZYfn4h7dddI0Zlk+YYfmkGZZPfPjQWHTyDMsnz7D+WoN/s+n/TXq7mS/y9a/Wf/91l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7oHbzjh75BgYNRhMGUx7PjTyONh9aP1bXzn8OBgMRq943NT1n+jxPsENnXP15CljrlzvtsO3nP+oZU66a98nwdnz3/8J6n/Tg/7bDQ0GI+f3mO0Gg8F6EzbYaInBYLD+1ONWHDV46L2Fht9bdeyowWCfoUfsYPaH1hnafXidTSdtOHEwmGNkjXGP+qGPOo8eseKi40ceJ4w8Tpx2fRo3ePh4HTs4+ZRRg1kfXP5wc88519C8g8GyIy9H9jNYcdrDvJdNX2/qTM080KGHv+097evB5hv+EcNPdt128rOH52qm7f9jmn6t3m7UP121899d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXv7t/z72h5spWou/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wDt51x9sgxMGowmDKY9nxo95HHwdAJJ79w5BAZvdsVRxz8RI/3CW7onKsnTxlz5Xq3Hb7l/Ectc9Jd+z4Jzp7//k9Q/5se9N9uaDAYOb/HbDcYDNabsMFGSwwGg4OPuGK3UYOH3lto+L1Vx44aDPYZesQOZn9onaHdh9fZdNKGEweDOUbWGPeoH/qo8+gRKy46fuRxwsjjxGnXp3GDh4/XsYOTTxk1mPXB5Q8395xzDc07GCw78nJkP4MVpz3Me9n09abO1MwDHXr4297Tvh5svuEfMfxkz3muPmF4rmba/j+m6dfq7Ub901U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cA7edcfbIMTBqMJgymPZ81Mjj0O433vDhjYYfh1/Pv9ZeVz/R432CGzrn6slTxly53m2Hbzn/UcucdNe+T4Kz57//E9T/pmH/OY4ZNxjsuPETPZR6Aur8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7+5/6n/+3P/HA6knpM5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/ugdvOOHvk6aiHl47aveMCGzrn6slTxly53m2Hbzn/UcucdNe+T/SA/rc9hv8e+WMW/4/mj1n8P5Y/ZvH/eP6YxX/P/DGL/yfyxyz+e+WPWfw/mT9m8f9U/pjFf+/8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP775I9Z/PfNH7P4fyF/zOK/X/6YxX///DGL/xfzxyz+B+SPWfwPzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP7fzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/1v5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4v/t/DGL/3fyxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOL/3fyxYf9ZBk9+/9Pyxyzn/+n5Yxb/M/LHLP7fyx+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif37+mMX/gvwxi/9P88cs/hfmj1n8f5Y/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfmT9m8b8qf8zi/+v8MYv/b/LHLP5X549Z/H+bP2bxvyZ/zOJ/bf6Yxf+6/DGL/+/yxyz+1+ePWfxvyB+z+N+YP2bx/33+mMX/D/ljFv8/5o9Z/G/KH7P4/yl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP5/zh+z+N+eP2bxvyN/zOL/l/wxi/+d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOI/JX/M4n9//pjF/4H8MYv/1Pwxif8sg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5I9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf+p+WMW/6flj1n8n54/ZvFfKH/M4v+M/DGL/8L5Yxb/Z+aPWfyflT9m8V8kf8zi/+z8MYv/c/LHLP7j8scs/s/NH7P4Py//RzXryKPB//n5Y5bzf9H8MYv/YvljFv8X5I9Z/BfPH7P4L5E/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfMn/M4v/S/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+y/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzx/zOK/Sv6YxX/V/DGL/2r5Yxb/V+SPWfxfmT9m8R+fP2bxn5A/ZvGfmD9m8V89f8ziv0b+mMV/zfwxi/+k/DGL/2SV/yz/8poW/7VU/v96Fv+188cs/q/KH7P4vzp/zOK/Tv6YxX/d/DGL/3r5Yxb/1+SPWfzXzx+z+L82f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+r8sfs/hvkj9m8d80f8zi//r8MYv/G/LHLP5vzB+z+L8pf8zi/+b8MYv/ZvljFv+35I9Z/DfPH7P4b5E/ZvHfMn/M4v/W/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4vy1/zOK/Xf6Yxf/t+WMW/3fkj1n8t88fs/jvkD9m8d8xf8ziv1P+mMX/nfljFv935Y9Z/HfOH7P4vzt/zOK/S/6Yxf89+WMW//fmj1n835c/ZvHfNX/M4r9b/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfx3zx+z+O+RP2bx/2j+mMX/Y/ljFv+P549Z/PfMH7P4fyJ/zOK/V/6Yxf+T+WMW/0/lj1n8984fs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4r9P/pjFf9/8MYv/F/LHLP775Y9Z/PfPH7P4fzF/zOJ/QP6Yxf/A/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4v/N/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8v5U/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/t/OH7P4fyd/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fzR+z+J+WP2bxPz1/zOJ/Rv6Yxf97+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z88fs/hfkD9m8f9p/pjF/8L8MYv/z/LHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8r88cs/lflj1n8f50/ZvH/Tf6Yxf/q/DGL/2/zxyz+1+SPWfyvzR+z+F+XP2bx/13+mMX/+vwxi/8N+WMW/xvzxyz+v88fs/j/IX/M4v/H/DGL/035Yxb/P+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/P+WMW/9vzxyz+d+SPWfz/kj9m8b8zf8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfyn5I9Z/O/PH7P4P5A/ZvGfmj8m8Z91kD9m8R/KH7P4j8ofs/jPkj9m8Z81f8ziPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v+U/DGL/3z5Yxb/MfljFv/588cs/mPzxyz+C+SPWfwXzB+z+D81f8zi/7T8MYv/0/PHLP4L5Y9Z/J+RP2bxXzh/zOL/zPwxi/+z8scs/ovkj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V80f8ziv1j+mMX/BfljFv/F88cs/kvkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8l8wfs/i/NH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/PH7P4r5I/ZvFfNX/M4r9a/pjF/xX5Yxb/V+aPWfzH549Z/Cfkj1n8J+aPWfxXzx+z+K+RP2bxXzN/zOI/KX/M4j85f8ziv1b+mMV/7fwxi/+r8scs/q/OH7P4r5M/ZvFfN3/M4r9e/pjF/zX5Yxb/9fPHLP6vHVyaP2Tx36DzH7P4b5g/ZvHfKH/M4r9x/pjF/3X5Yxb/TfLHLP6b5o9Z/F+fP2bxf0P+mMX/jfljFv835Y9Z/N+cP2bx3yx/zOL/lvwxi//m+WMW/y3yxyz+W+aPWfzfmj9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/7flj1n8t8sfs/i/PX/M4v+O/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P4vzN/zOL/rvwxi//O+WMW/3fnj1n8d8kfs/i/J3/M4v/e/DGL//vyxyz+u+aPWfx3yx+z+L8/f8zi/4H8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/7vljFv898scs/h/NH7P4fyx/zOL/8fwxi/+e+WMW/0/kj1n898ofs/h/Mn/M4v+p/DGL/975Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfz3yR+z+O+bP2bx/0L+mMV/v/wxi//++WMW/y/mj1n8D8gfs/gfmD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfy/mT9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7fyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf/b+WMW/+/kj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/u/ljFv/T8scs/qfnj1n8z8gfs/h/L3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljEv/Zr8sfk/jP+rv8MYv/9fljFv8b8scs/jfmj1n8f58/ZvH/Q/6Yxf+P+WMW/5vyxyz+f8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi/+f88cs/rfnj1n878gfs/j/JX/M4n9n/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/hPyR+z+N+fP2bxfyB/zOI/NX9M4j96kD9m8R/KH7P4j8ofs/jPkj9m8Z81f8ziPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v+U/DGL/3z5Yxb/MfljFv/588cs/mPzxyz+C+SPWfwXzB+z+D81f8zi/7T8MYv/0/PHLP4L5Y9Z/J+RP2bxXzh/zOL/zPwxi/+z8scs/ovkj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V80f8ziv1j+mMX/BfljFv/F88cs/kvkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8l8wfs/i/NH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/PH7P4r5I/ZvFfNX/M4r9a/pjF/xX5Yxb/V+aPWfzH549Z/Cfkj1n8J+aPWfxXzx+z+K+RP2bxXzN/zOI/KX/M4j85f8ziv1b+mMV/7fwxi/+r8scs/q/OH7P4r5M/ZvFfN3/M4r9e/pjF/zX5Yxb/9fPHLP6vzR+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/+vyxyz+m+SPWfw3zR+z+L8+f8zi/4b8MYv/G/PHLP5vyh+z+L85f8ziv1n+mMX/LfljFv/N88cs/lvkj1n8t8wfs/i/NX/M4r9V/pjFf+v8MYv/NvljFv9t88cs/m/LH7P4b5c/ZvF/e/6Yxf8d+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bxf2f+mMX/XfljFv+d88cs/u/OH7P475I/ZvF/T/6Yxf+9+WMW//flj1n8d80fs/jvlj9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/3fPHLP575I9Z/D+aP2bx/1j+mMX/4/ljFv8988cs/p/IH7P475U/ZvH/ZP6Yxf9T+WMW/73zxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+n88fs/jvkz9m8d83f8zi/4X8MYv/fvljFv/988cs/l/MH7P4H5A/ZvE/MH/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/h/M3/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2/lj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/+388cs/t/JH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW//Pzxyz+F+SPWfx/mj9m8b8wf8zi/7P8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/yvwxi/9V+WMW/1/nj1n8f5M/ZvG/On/M4v/b/DGL/zX5Yxb/a/PHLP7X5Y9Z/H+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/+/zxyz+f8gfs/j/MX/M4n9T/pjF/0/5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvH/c/6Yxf/2/DGL/x35Yxb/v+SPWfzvzB+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/KfljFv/788cs/g/kj1n8p+aPSfxnG+SPWfyH8scs/qPyxyz+s+SPWfxnzR+z+I/OH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/g/JX/M4j9f/pjFf0z+mMV//vwxi//Y/DGL/wL5Yxb/BfPHLP5PzR+z+D8tf8zi//T8MYv/QvljFv9n5I9Z/BfOH7P4PzN/zOL/rPwxi/8i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzR+z+C+WP2bxf0H+mMV/8fwxi/8S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/yXzxyz+L80fs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+L8sfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi//L88cs/qvkj1n8V80fs/ivlj9m8X9F/pjF/5X5Yxb/8fljFv8J+WMW/4n5Yxb/1fPHLP5r5I9Z/NfMH7P4T8ofs/hPzh+z+K+VP2bxXzt/zOL/qvwxi/+r88cs/uvkj1n8180fs/ivlz9m8X9N/pjFf/38MYv/a/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+6/DGL/yb5Yxb/TfPHLP6vzx+z+L8hf8zi/8b8MYv/m/LHLP5vzh+z+G+WP2bxf0v+mMV/8/wxi/8W+WMW/y3zxyz+b80fs/hvlT9m8d86f8ziv03+mMV/2/wxi//b8scs/tvlj1n8354/ZvF/R/6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/N+ZP2bxf1f+mMV/5/wxi/+788cs/rvkj1n835M/ZvF/b/6Yxf99+WMW/13zxyz+u+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjFf/f8MYv/HvljFv+P5o9Z/D+WP2bx/3j+mMV/z/wxi/8n8scs/nvlj1n8P5k/ZvH/VP6YxX/v/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+++SPWfz3zR+z+H8hf8ziv1/+mMV///wxi/8X88cs/gfkj1n8D8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+38wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf9b+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOL/7fwxi/938scs/iflj1n8T84fs/ifkj9m8T81f8zi/938MYv/afljFv/T88cs/mfkj1n8v5c/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf/8/DGL/wX5Yxb/n+aPWfwvzB+z+P8sf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxvzJ/zOJ/Vf6Yxf/X+WMW/9/kj1n8r84fs/j/Nn/M4n9N/pjF/9r8MYv/dfljFv/f5Y9Z/K/PH7P435A/ZvG/MX/M4v/7/DGL/x/yxyz+f8wfs/jflD9m8f9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8/5w/ZvG/PX/M4n9H/pjF/y/5Yxb/O/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjFf0r+mMX//vwxi/8D+WMW/6n5YxL/2Qf5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8kfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/U/PHLP5Pyx+z+D89f8ziv1D+mMX/GfljFv+F88cs/s/MH7P4Pyt/zOK/SP6Yxf/Z+WMW/+fkj1n8x+WPWfyfmz9m8X9e/pjF//n5Yxb/RfPHLP6L5Y9Z/F+QP2bxXzx/zOK/RP6Yxf+F+WMW/xflj1n8X5w/ZvF/Sf6YxX/J/DGL/0vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/8vyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/8vwxi/8q+WMW/1Xzxyz+q+WPWfxfkT9m8X9l/pjFf3z+mMV/Qv6YxX9i/pjFf/X8MYv/GvljFv8188cs/pPyxyz+k/PHLP5r5Y9Z/NfOH7P4vyp/zOL/6vwxi/86+WMW/3Xzxyz+6+WPWfxfkz9m8V8/f8zi/9r8MYv/BvljFv8N88cs/hvlj1n8N84fs/i/Ln/M4r9J/pjFf9P8MYv/6/PHLP5vyB+z+L8xf8zi/6b8MYv/m/PHLP6b5Y9Z/N+SP2bx3zx/zOK/Rf6YxX/L/DGL/1vzxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/tvwxi/92+WMW/7fnj1n835E/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv935o9Z/N+VP2bx3zl/zOL/7vwxi/8u+WMW//fkj1n835s/ZvF/X/6YxX/X/DGL/275Yxb/9+ePWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8d89f8ziv0f+mMX/o/ljFv+P5Y9Z/D+eP2bx3zN/zOL/ifwxi/9e+WMW/0/mj1n8P5U/ZvHfO3/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/z75Yxb/ffPHLP5fyB+z+O+XP2bx3z9/zOL/xfwxi/8B+WMW/wPzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/zfzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvH/Vv6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4fzt/zOL/nfwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+H83f8zif1r+mMX/9Pwxi/8Z+WMW/+/lj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvE/P3/M4n9B/pjF/6f5Yxb/C/PHLP4/yx+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/MH7P4X5U/ZvH/df6Yxf83+WMW/6vzxyz+v80fs/hfkz9m8b82f8zif13+mMX/d/ljFv/r88cs/jfkj1n8b8wfs/j/Pn/M4v+H/DGL/x/zxyz+N+WPWfz/lD9m8b85f+xh/zOf1P635I9Zzv9b88cs/rflj1n8/5w/ZvG/PX/M4n9H/pjF/y/5Yxb/O/PHLP5/zR+z+P8tf8zi//f8MYv/P/LHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjFf0r+mMX//vwxi/8D+WMW/6n5YxL/OQb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fe7L6zzKT/xz5Y09W/8FM/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMX/KfljFv/58scs/mPyxyz+8+ePWfzH5o9Z/BfIH7P4L5g/ZvF/av6Yxf9p+WMW/6fnj1n8F8ofs/g/I3/M4r9w/pjF/5n5Yxb/Z+WPWfwXyR+z+D87f8zi/5z8MYv/uPwxi/9z88cs/s/LH7P4Pz9/zOK/aP6YxX+x/DGL/wvyxyz+i+ePWfyXyB+z+L8wf8zi/6L8MYv/i/PHLP4vyR+z+C+ZP2bxf2n+mMV/qfwxi//S+WMW/2Xyxyz+y07332ylJ2hg/5lZ/Jfr/Mcs/svnj1n8X5Y/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv+X549Z/FfJH7P4r5o/ZvFfLX/M4v+K/DGL/yvzxyz+4/PHLP4T8scs/hPzxyz+q+ePWfzXyB+z+K+ZP2bxn5Q/ZvGfnD9m8V8rf8ziv3b+mMX/VfljFv9X549Z/NfJH7P4r5s/ZvFfL3/M4v+a/DGL//r5Yxb/1+aPWfw3yB+z+G+YP2bx3yh/zOK/cf6Yxf91+WMW/03yxyz+m+aPWfxfnz9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8d8sf8zi/5b8MYv/5vljFv8t8scs/lvmj1n835o/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv+35Y9Z/LfLH7P4vz1/zOL/jvwxi//2+WMW/x3yxyz+O+aPWfx3yh+z+L8zf8zi/678MYv/zvljFv93549Z/HfJH7P4vyd/zOL/3vwxi//78scs/rvmj1n8d8sfs/i/P3/M4v+B/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/+75Yxb/PfLHLP4fzR+z+H8sf8zi//H8MYv/nvljFv9P5I9Z/PfKH7P4fzJ/zOL/qfwxi//e+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/8/nj1n898kfs/jvmz9m8f9C/pjFf7/8MYv//vljFv8v5o9Z/A/IH7P4H5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+38scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/2/ljFv/v5I9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7v5Yxb/0/LHLP6n549Z/M/IH7P4fy9/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi//5+WMW/wvyxyz+P80fs/hfmD9m8f9Z/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif2X+mMX/qvwxi/+v88cs/r/JH7P4X50/ZvH/bf6Yxf+a/DGL/7X5Yxb/6/LHLP6/yx+z+F+fP2bxvyF/zOJ/Y/6Yxf/3+WMW/z/kj1n8/5g/ZvG/KX/M4v+n/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4/zl/zOJ/e/6Yxf+O/DGL/1/yxyz+d+aPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL/5T8MYv//fljFv8H8scs/lPzxyT+cw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5I/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+aPWfyflj9m8X96/pjFf6H8MYv/M/LHLP4L549Z/J+ZP2bxf1b+mMV/kfwxi/+z88cs/s/JH7P4j8sfs/g/N3/M4v+8/DGL//Pzxyz+i+aPWfwXyx+z+L8gf8ziv3j+mMV/ifwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi/+S+WMW/5fmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/5flj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/5fljFv9V8scs/qvmj1n8V8sfs/i/In/M4v/K/DGL//j8MYv/hPwxi//E/DGL/+r5Yxb/NfLHLP5r5o9Z/Cflj1n8J+ePWfzXyh+z+K+dP2bxf1X+mMX/1fljFv918scs/uvmj1n818sfs/i/Jn/M4r9+/pjF/7X5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvF/Xf6YxX+T/DGL/6b5Yxb/1+ePWfzfkD9m8X9j/pjF/035Yxb/N+ePWfw3yx+z+L8lf8ziv3n+mMV/i/wxi/+W+WMW/7fmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/bfljFv/t8scs/m/PH7P4vyN/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP7vzB+z+L8rf8ziv3P+mMX/3fljFv9d8scs/u/JH7P4vzd/zOL/vvwxi/+u+WMW/93yxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r97/pjFf4/8MYv/R/PHLP4fyx+z+H88f8ziv2f+mMX/E/ljFv+98scs/p/MH7P4fyp/zOK/d/6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/33yxyz+++aPWfy/kD9m8d8vf8ziv3/+mMX/i/ljFv8D8scs/gfmj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/rfwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bx/3b+mMX/O/ljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9u/pjF/7T8MYv/6fljFv8z8scs/t/LH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/fv6Yxf+C/DGL/0/zxyz+F+aPWfx/lj9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+ZP2bxvyp/zOL/6/wxi/9v8scs/lfnj1n8f5s/9kj/0U/0cP73PYb/NfljlvP/2vwxi/91+WMW/9/lj1n8r88fs/jfkD9m8b8xf8zi//v8MYv/H/LHLP5/zB+z+N+UP2bx/1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfz/nD9m8b89f8zif0f+mMX/L/ljFv8788cs/n/NH7P4/y1/zOL/9/wxi/8/8scs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMV/Sv6Yxf/+/DGL/wP5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/LPljFv9Z88cs/qPzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/7Yk99/jofeyv/RPfn9H2yuefLHLP7z5o9Z/J+SP2bxny9/zOI/Jn/M4j9//pjFf2z+mMV/gfwxi/+C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+h/DGL/zPyxyz+C+ePWfyfmT9m8X9W/pjFf5H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovmj1n8F8sfs/i/IH/M4r94/pjFf4n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/kvljFv+X5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv+X5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/+X5Yxb/VfLHLP6r5o9Z/FfLH7P4vyJ/zOL/yvwxi//4/DGL/4T8MYv/xPwxi//q+WMW/zXyxyz+a+aPWfwn5Y9Z/Cfnj1n818ofs/ivnT9m8X9V/pjF/9X5Yxb/dfLHLP7r5o9Z/NfLH7P4vyZ/zOK/fv6Yxf+1+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bxf13+mMV/k/wxi/+m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n8N8sfm+Y/fWaevP5vyR+znP+b549Z/LfIH7P4b5k/ZvF/a/6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/N+WP2bx3y5/zOL/9vwxi/878scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/878MYv/u/LHLP47549Z/N+dP2bx3yV/zOL/nvwxi/9788cs/u/LH7P475o/ZvHfLX/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+u+ePWfz3yB+z+H80f8zi/7H8MYv/x/PHLP575o9Z/D+RP2bx3yt/zOL/yfwxi/+n8scs/nvnj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8P58/ZvHfJ3/M4r9v/pjF/wv5Yxb//fLHLP77549Z/L+YP2bxPyB/zOJ/YP6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8v5E/ZvH/Zv6Yxf+g/DGL/8H5Yxb/Q/J/dGuuOxhI/A/NH7Oc/4flj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2/lj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/+388cs/t/JH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW//Pzxyz+F+SPWfx/mj9m8b8wf8zi/7P8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/yvwxi/9V+WMW/1/nj1n8f5M/ZvG/On/M4v/b/DGL/zX5Yxb/a/PHLP7X5Y9Z/H+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/+/zxyz+f8gfs/j/MX/M4n9T/pjF/0/5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvH/c/6Yxf/2/DGL/x35Yxb/v+SPWfzvzB+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/KfljFv/788cs/g/kj1n8p+aPSfznHuSPWfyH8scs/qPyxyz+s+SPWfxnzR+z+I/OH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/g/JX/M4j9f/pjFf0z+mMV//vwxi//Yf+rvPDos/gtohR8/i/+C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+h/DGL/zPyxyz+C+ePWfyfmT9m8X9W/pjFf5H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovmj1n8F8sfs/i/IH/M4r94/pjFf4n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/kvljFv+X5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv+X5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/+X5Yxb/VfLHLP6r5o9Z/FfLH7P4vyJ/zOL/yvwxi//4/DGL/4T8MYv/xPwxi//q+WMW/zXyxyz+a+aPWfwn5Y9Z/Cfnj1n818ofs/ivnT9m8X9V/pjF/9X5Yxb/dfLHLP7r5o9Z/NfLH7P4vyZ/zOK/fv6Yxf+1+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bxf13+mMV/k/wxi/+m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n8N8sfs/i/JX/M4r95/pjFf4v8MYv/lvljFv+35o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjF/235Yxb/7fLHLP5vzx+z+L8jf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+78wfs/i/K3/M4r9z/pjF/935Yxb/XfLHLP7vyR+z+L83f8zi/778MYv/rvljFv/d8scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/e/6YxX+P/DGL/0fzxyz+H8sfs/h/PH/M4r9n/pjF/xP5Yxb/vfLHLP6fzB+z+H8qf8ziv3f+mMX/0/ljFv/P5I9Z/D+bP2bx/1z+mMX/8/ljFv998scs/vvmj1n8v5A/ZvHfL3/M4r9//pjF/4v5Yxb/A/LHLP4H5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zi/638MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8f92/pjF/zv5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvH/bv6Yxf+0/DGL/+n5Yxb/M/LHLP7fyx+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif37+mMX/gvwxi/9P88cs/hfmj1n8f5Y/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfmT9m8b8qf8zi/+v8MYv/b/LHLP5X549Z/H+bP2bxvyZ/zOJ/bf6Yxf+6/DGL/+/yxyz+1+ePWfxvyB+z+N+YP2bx/33+mMX/D/ljFv8/5o9Z/G/KH7P4/yl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP5/zh+z+N+eP2bxvwP85/h/Oa7/0Cz+f+n8xyz+d+aPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL/5T8MYv//fljFv8H8scs/lPzxyT+8wzyxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5I/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+aPWfyflj9m8X96/pjFf6H8MYv/M/LHLP4L549Z/J+ZP2bxf1b+mMV/kfwxi/+z88cs/s/JH7P4j8sfs/g/N3/M4v+8/DGL//Pzxyz+i+aPWfwXyx+z+L8gf8ziv3j+mMV/ifwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi/+S+WMW/5fmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/5flj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/5fljFv9V8scs/qvmj1n8V8sfs/i/In/M4v/K/DGL//j8MYv/hPwxi//E/DGL/+r5Yxb/NfLHLP5r5o9Z/Cflj1n8J+ePWfzXyh+z+K+dP2bxf1X+mMX/1fljFv918scs/uvmj1n818sfs/i/Jn/M4r9+/pjF/7X5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvF/Xf6YxX+T/DGL/6b5Yxb/1+ePWfzfkD9m8X9j/pjF/035Yxb/N+ePWfw3yx+z+L8lf8ziv3n+mMV/i/wxi/+W+WMW/7fmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/bfljFv/t8scs/m/PH7P4vyN/zOK/ff6YxX+H/DGL/475Yxb/nfLHHvLf5oQntf8788cs5/+78scs/jvnj1n8350/ZvHfJX/M4v+e/DGL/3vzxyz+78sfs/jvmj9m8d8tf8zi//78MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP67549Z/PfIH7P4fzR/zOL/sfwxi//H88cs/nvmj1n8P5E/ZvHfK3/M4v/J/DGL/6fyxyz+e+ePWfw/nT9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8d8nf8ziv2/+mMX/C/ljFv/98scs/vvnj1n8v5g/ZvE/IH/M4n9g/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/IfX/yD953+L/Tan/P8vif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/b+WPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/7fzxyz+38kfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9388cs/qflj1n8T88fs/ifkT9m8f9e/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f9+/pjF/wf5Yxb/H/5L/nv8/zeu/9As/j/q/Mcs/j/OH7P4/yR/zOJ/fv6Yxf+C/DGL/0/zxyz+F+aPWfx/lj9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+ZP2bxvyp/zOL/6/wxi/9v8scs/lfnj1n8f5s/ZvG/Jn/M4n9t/pjF/7r8MYv/7/LHLP7X549Z/G/IH7P435g/ZvH/ff6Yxf8P+WMW/z/mj1n8bxr1RA3oPzuL/586/zGL/835Yxb/W/LHLP635o9Z/G/LH7P4/zl/zOJ/e/6Yxf+O/DGL/1/yxyz+d+aPWfz/mj9m8f9b/pjF/+/5Yxb/f0j9P/JP3rf43yX1/2dZ/O/OH7P435M/ZvG/N3/M4n9f/pjFf0r+mMX//vwxi/8D+WMW/6n5YxL/eQf5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8kfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/U/PHLP5Pyx+z+D89f8ziv1D+mMX/GfljFv+F88cs/s/MH7P4Pyt/zOK/SP6Yxf/Z+WMW/+fkj1n8x+WPWfyfmz9m8X9e/tiT0P8h5hn9n58/9iT0x/N/0fwxi/9i+WMW/xfkj1n8F88fs/gvkT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V8yf8zi/9L8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7L8MYv/CvljFv8V88cs/ivlj1n8V84fs/i/PH/M4r9K/pjFf9X8MYv/avljFv9X5I9Z/F+ZP2bxH58/ZvGfkD9m8Z+YP2bxXz1/zOK/Rv6YxX/N/DGL/6T8MYv/5Pwxi/9a+WMW/7Xzxyz+r8ofs/i/On/M4r9O/pjFf938MYv/evljFv/X5I9Z/NfPH7P4vzZ/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6vyx+z+G+SP2bx3zR/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vyxJ53/arc+9HRG/83yx550/o9x/r8lf8ziv3n+mMV/i/wxi/+W+WMW/7fmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/bfljFv/t8scs/m/PH7P4vyN/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP7vzB+z+L8rf8ziv3P+mMX/3fljFv9d8scs/u/JH7P4vzd/zOL/vvwxi/+u+WMW/93yxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r97/pjFf4/8MYv/R/PHLP4fyx+z+H88f8ziv2f+mMX/E/ljFv+98scs/p/MH7P4fyp/zOK/d/6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/33yxyz+++aPWfy/kD9m8d8vf8ziv3/+mMX/i/ljFv8D8scs/gfmj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/rfwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bx/3b+mMX/O/ljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9u/pjF/7T8MYv/6fljFv8z8scs/t/LH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/fv6Yxf+C/DGL/0/zxyz+F+aPWfx/lj9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+ZP2bxvyp/zOL/6/wxi/9v8scs/lfnj1n8f5s/ZvG/Jn/M4n9t/pjF/7r8MYv/7/LHLP7X549Z/G/IH7P435g/ZvH/ff6Yxf8P+WMW/z/mj1n8b8ofs/j/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/n/OH7P4354/ZvG/I3/M4v+X/DGL/535Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4j8lf8zif3/+mMX/gfwxi//U/DGJ/1MG+WMW/6H8MYv/qPwxi/8s+WMW/1nzxyz+o/PHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/k/JH7P4z5c/ZvEfkz9m8Z8/f8ziPzZ/zOK/QP6YxX/B/DGL/1Pzxyz+T8sfs/g/PX/M4r9Q/pjF/xn5Yxb/hfPHLP7PzB+z+D8rf8ziv0j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/0Xzxyz+i+WPWfxfkD9m8V88f8ziv0T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/yfwxi/9L88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//L8scs/ivkj1n8V8wfs/ivlD9m8V85f8zi//L8MYv/KvljFv9V88cs/qvlj1n8X5E/ZvF/Zf6YxX98/pjFf0L+mMV/Yv6YxX/1/DGL/xoi/zn+jXUt/muK/P+dLP6T8scs/pPzxyz+a+WPWfzXzh+z+L8qf8zi/+r8MYv/OvljFv9188cs/uvlj1n8X5M/ZvFfP3/M4v/a/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4vy5/zOK/Sf6YxX/T/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+m+WPWfzfkj9m8d88f8ziv0X+mMV/y/wxi/9b88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/7b8MYv/dvljFv+3549Z/N+RP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/d+aPWfzflT9m8d85f8zi/+78MYv/LvljFv/35I9Z/N+bP2bxf1/+mMV/1/wxi/9u+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfPX/M4r9H/pjF/6P5Yxb/j+WPWfw/nj9m8d8zf8zi/4n8MYv/XvljFv9P5o9Z/D+VP2bx3zt/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8++WMW/33zxyz+X8gfs/jvlz9m8d8/f8zi/8X8MYv/AfljFv8D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/1b+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+H87f8zi/538MYv/SfljFv+T88cs/qfkj1n8T80fs/h/N3/M4n9a/pjF//T8MYv/GfljFv/v5Y9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bxPz9/zOJ/Qf6Yxf+n+WMW/wvzxyz+P8sfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfyvzB+z+F+VP2bx/3X+mMX/N/ljFv+r88cs/r/NH7P4X5M/ZvG/Nn/M4n9d/pjF/3f5Yxb/6/PHLP435I9Z/G/MH7P4/z5/zOL/h/wxi/8f88cs/jflj1n8/5Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv8/549Z/G/PH7P435E/ZvH/S/6Yxf/O/DGL/1/zxyz+f8sfs/j/PX/M4v+P/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvGfkj9m8b8/f8zi/0D+mMV/av6YxH++Qf6YxX8of8ziPyp/zOI/S/6YxX/W/B/RLCOPFv/R+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/p+SPWfznyx+z+I/JH7P4z58/ZvEfmz9m8V8gf8ziv2D+mMX/qfljFv+n5Y9Z/J+eP2bxXyh/zOL/jPwxi//C+WMW/2fmj1n8n5U/ZvFfJH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/ovljFv/F8scs/i/IH7P4L54/ZvFfIn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r9k/pjF/6X5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4r98/pjF/2X5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvF/ef6YxX+V/DGL/6r5Yxb/1fLHLP6vyB+z+L8yf8ziPz5/zOI/IX/M4j8xf8ziv3r+mMV/jfwxi/+a+WMW/0n5Yxb/yfljFv+18scs/mvnj1n8X5U/ZvF/df6YxX+d/DGL/7r5Yxb/9fLHLP6vyR+z+K+fP2bxf23+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfxflz9m8d8kf8ziv2n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv/N8scs/m/JH7P4b54/ZvHfIn/M4r9l/pjF/635Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvF/W/6YxX+7/DGL/9vzxyz+78gfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/8788cs/u/KH7P475w/ZvF/d/6YxX+X/DGL/3vyxyz+780fs/i/L3/M4r9r/v8f+/QUA4iBRWF4MYtZztr21rZt27Y5rm3btm3btm27TfrSpjl9a9Jkzvc93qeb/DlRS//B+kct/YfoH7X0H6p/1NJ/mP5RS//h+kct/UfoH7X0H6l/1NJ/E/2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf330D9q6b+n/lFL/730j1r6761/1NJ/H/2jlv776h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+h+oftfQ/TP+opf/h+kct/Y/QP2rpf6T+UUv/o/SPWvofrX/U0v8Y/aOW/sfqH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+p+tf9TS/xz9o5b+5+oftfQ/T/+opf/5+kct/S/QP2rpf6H+UUv/i/SPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv7X6h+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5b+z+oftfR/Tv+opf/z+kct/V/QP2rp/6L+UUv/l/SPWvq/rH/U0v8V/aOW/q/qH7X0f03/qKX/6/pHLf3f0D9q6f+m/lFL/7f0j1r6v61/1NL/Hf2jlv7v6h+19H9P/6il//v6Ry39P9A/aun/of5RS/+P9I9a+n+sf1TSf9A39I9a+n9T/6il/7f0j1r6f1v/qKX/AP2jlv7f0T9q6f9d/aOW/t/TP2rp/339o5b+A/WPWvr/QP+opf8P9Y9a+v9I/6il/4/1j1r6/0T/qKX/T/WPWvoP0j9q6f8z/aOW/j/XP2rp/wv9o5b+v9Q/aun/K/2jlv6/1j9q6f8b/aOW/r/VP2rp/zv9o5b+v9c/aun/B/2jlv5/1D9q6f8n/aOW/n/WP2rp/xf9o5b+f9U/aun/N/2jlv5/1z9q6f8P/aOW/v/UP2rp/y/9o5b+/9Y/aun/H/2jlv7/1T9q6f8//aOW/v/XP2rpP5r+UUv/0fWPWvqPoX/U0n9M/aOW/mPpH7X0H1v/qKX/OPpHLf3H1T9q6T+e/lFL//H1j1r6T6B/1NJ/Qv2jlv4T6R+19J9Y/6il/yT6Ry39J9U/auk/mf5RS//J9Y9a+k+hf/RZ/4Ff9ytfjS/pP6X+Ucv+p9I/auk/tf5RS/9p9I9a+k+rf9TSfzr9o5b+0+sftfSfQf+opf+M+kct/WfSP2rpP7P+UUv/WfSPWvrPqn/U0n82/aOW/rPrH7X0n0P/qKX/nPpHLf3n0j9q6T+3/lFL/3n0j1r6z6t/1NJ/Pv2jlv7z6x+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfRfQv+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvovq3/U0n85/aOW/svrH7X0X0H/qKX/ivpHLf1X0j9q6b+y/lFL/1X0j1r6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aum/tv5RS/919I9a+q+rf9TSfz39o5b+6+sftfTfQP9oFO0/4AvXQRvqH42i/T/1+f1vpH/U0n9j/aOW/oP1j1r6D9E/auk/VP+opf8w/aOW/sP1j1r6j9A/auk/Uv9olOsPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAJ+3YbW2dZ+HH87raOsT//ZMQFl6HJJhcKiTDbPWS8IGwyttVBN57HAEe3dmOj3WbXYVfAPbyYRAgPkkyyRImyZShhJjQSA8EKIhp0URMNPgCiEEXjRAi6JS7WnPa0tMeu8Vz1uhbl83nRc+777Hdva/LdfS8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgv1dD48Ij42uGnRo/9OCDh1v6XuccXXnzgd/2XDjwWv542QiXHDf0oLe3t3fOc7N3lA9PKYqi9LPtLB9PqhyXrr+z/gud/UdhQc9LS45P+XnjkQNrTn+krvvo/bV9Z2uLm9ZtaG352LiiCBfXFp2lg7qaogiLa4v7Sgf1pYMltcUjpYPZfQenFt8uHZy/dnNrc+nE0ujvGfyvaGjcWYwfVmwx7E+Dof3vrP/WnQOvo1xy4GoTinL/V3R9/62KzwacoP+B64eFlf1X/RsETqi6/l9YMPA6yiX/5f4/+alVr4z02Yn7H7h++Lj+IZ0Rnv+HNVr53F/x/D9jhEsO7q+q6Tpe6v/S256dWT414d95/n/3+uHiyv7HDXv+Lz3HLxp4/j+lKMIlY/x2wHtKQ+OuI6Pd/0fvf8L0ik3N0P7PaN+8v9T/40u+90T5VG2V/S8a5f4/bmnFrxWoTkPjl3sr7v9V9F98ZIRLDvb/9hO/frjU/2O/f+DMIZ9V0/8llf3P6mjbMmvr9q7zNrQ1rW9Z37Kpbvb8OfPq6+ZdMHdW3yNB/9cxflfgvWFs9/9icsWmpihaBvfXdB94utT/3AcfnFM+NanK/hePev+f4f4PI/rQuGLixKKzqaOjva7/68Bhff/X/h82Qv9V/P3/rHPKP6y2/FpTFNMG93edefeKUv/vHHp2d/nUxCr7XzJq/wsGf14gwhjv/80Vm2H9Hzz0Ut/z/7J7D55RPlXt3/+Xjtr/q+7/MBYNjRX/w89/WKn/XcVlkZ2GBv/9D9LJ0f9j79zQE7cOn9A/pJOj/9997ui5ceuwTP+QTo7+J2x84Pm4dbhU/5BOjv6XT52/Im4dLtM/pJOj/7WvnvvnuHVo1D+kk6P/c760uzNuHZbrH9LJ0f9D7XO2xa3DCv1DOjn6/+lpD70Wtw6X6x/SydH/sWP33Bi3DlfoH9LJ0X/3nrN/ELcOV+of0snR/+XrFoa4dbhK/5BOjv6nT/vj43HrcLX+IZ0c/c/7099Pi1uHa/QP6eTo/47Pr9gXtw7X6h/SydH/+OtfeTFuHVbqH9LJ0f/Ss7ctjFuH6/QP6eTov/knzb1x67BK/5BOjv5nff1HG+LW4Xr9Qzo5+j+8/NE9cetwg/4hnRz976krpsStw436h3Ry9P+1755+KG4dPql/SCdH/7956sn5ceuwWv+QTo7+n/vA7d+IW4eb9A/p5Oj/3jUvnhW3Dk36h3Ry9P/w3ue/GLcOa/QP6eTo/4032v4vbh3W6h/SydH/5Emnvh63Ds36h3Ry9L/w1q+0x61Di/4hnRz9t+3u/mHcOqzTP6STo/8PH5+2Km4d1usf0snR/8q5e98ftw436x/SydH/+5ZduCtuHTboH9LJ0f9FPR+9KG4dNuof0snRf8czn/1q3Drcon9IJ0f/e2e+tjhuHVr1D+nk6P/l1Ut/HLcObfqHdHL0/9aj122KW4dN+od0cvT/5M/ePha3Dpv1D+nk6P//L1j017h12KJ/SCdH/4uXvLk2bh0+pX9IJ0f/G7v/8XLcOrTrH9LJ0f/Mw1cvi1uHrfqHdHL0/53z6vbHrUOH/iGdHP3feeW++rh12KZ/SCdH//sP3nV33Drcqn9IJ0f/b/5ixvS4dfi0/iGdHP3fP+XQtXHr0Kl/SCdH/7/cVPtM3Dps1z+kk6P/v+2buiNuHbr0D+nk6P/p13v+ELcOt+kf0snR/+oJv5oYtw636x/SydH/1K4t98Wtwx36h3Ry9D//nqbz49bhM/qHdHL0v/UvL3wzbh126B/S2bq965am1taWdm+88cabwTcn+08mILV3oz/ZvxIAAAAAAAAAAAAAAOBEcvxzopP9ewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRO8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwFAAD//z5+2HM=") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x100) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4) 1m19.136490979s ago: executing program 5 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) 1m17.1920357s ago: executing program 5 (id=690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m16.655815349s ago: executing program 5 (id=694): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX, @ANYBLOB="2cf9"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000300000d00000000100000000100100002"], &(0x7f0000001f00)=""/4096, 0x40, 0x1000, 0x3}, 0x28) 1m16.308294404s ago: executing program 33 (id=694): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX, @ANYBLOB="2cf9"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000300000d00000000100000000100100002"], &(0x7f0000001f00)=""/4096, 0x40, 0x1000, 0x3}, 0x28) 4.31165002s ago: executing program 1 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x8, 0x4a, 0x2}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x1, 0x0, {0x3, 0xff, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x8, 0x91}}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x94}}, 0x0) 3.939950937s ago: executing program 1 (id=1293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0) 3.627733181s ago: executing program 1 (id=1297): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 3.437288445s ago: executing program 3 (id=1300): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x2, 0x8c37c2b979564e6e) 3.275899377s ago: executing program 3 (id=1301): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) 3.216235508s ago: executing program 1 (id=1304): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591", 0x2) 2.946713103s ago: executing program 4 (id=1305): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f0000001ac0)=""/4096, 0x1000) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 2.924155803s ago: executing program 1 (id=1307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x543, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000003c0)={0x94}) 2.847358474s ago: executing program 3 (id=1308): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 2.797965934s ago: executing program 6 (id=1309): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e23, 0x6, @mcast2, 0xb9}}, {{0xa, 0x4ea3, 0x5, @mcast1, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') preadv(r1, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) 2.695889417s ago: executing program 2 (id=1310): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) 2.633447627s ago: executing program 3 (id=1311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000005000500010000000800040000000000050006000000000008000300010000"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 2.626088387s ago: executing program 4 (id=1312): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) 2.571933348s ago: executing program 6 (id=1313): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 2.571740619s ago: executing program 2 (id=1314): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 2.221379414s ago: executing program 1 (id=1316): syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffff) 2.182170095s ago: executing program 3 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100dc3ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1059a, &(0x7f0000010640)="$eJzs3M1rI2UcB/Bftu6r61pkX/TkgAgNmNC03aIgUnUXXbBL8eXgSdNkGrKbZEqTvrhnPemf4FUQ8ebf4MV/Y/EgeBK8rSiZmcpW96A226zbzwem32eePPPL84RcnkyZAI6t2eTXXypxIc5GxExEnI/I25XyyK0U8WxEPB8RJ+47KmX/nx2nIuJcRFwYFy9qVsqXln+7e++r5268+vk3d6uNn77+cnqrBqbtxYjobxbt3X6RWafIW2V/c6ebZ39pp8zihf7t8jwrcjddzyvsNvfHNfNc7BTjs83t4Tg3es3WODvdjbx/c1C84XCns18nv+BWcys/b6freXaHWZ6dO8W89sq8MxwVddplvU/y8jEa7WfRn+6lxXo2b+fZGozK/qJu1k73xrlTZvl20cp67Xwe6//5Y37kvdMdbO8lO+nWsJsNkqv1xsv1xnKtsZW101G6VGv228tLyVynNx5WG6XN/konyzq9tN7K+tVkrtNq1RqNZO5aut5tDpJGo75Yn69drZatl5K3bn6Q9NrJ3Djf6A62R93eMNnItpLiimqyUF98pZq80EjeW11L1t69fn117f2Prn148/XVG2+Wg/42rWRuYX5hodaYry00qtZ/GJXDXc5x5wsE8K/Z/wPTYP9v/x/2v8d+/bZvHIovEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXjye/ezhuzxfmTZf9TZdczEXElIi5HxKWI+P0BZuLUgZoXI6JSth80/uRf5vB9JfIK42tOl8e5iFgpj3tPP+xPAQAAAB5f3/7w6WcRM+Nm/ue1aU+Io1T+aHNmUvXyn3yemFS1i3mxvQlVu7RfciIuR8TJ2Z8nVO1KRJw4//GEqv0jMwfizH1RKeLEUc4GAAA4Ggd3AhPbvQEAAPDI+WLaE2A68vu15f/il/eCTxdR3hA8e+AMAAAA+B+qTHsCAAAAwEOX7/89/w8AAAAeb8Xz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZfcNGI4DsB/oFPoS0UVj6uwqrpkwSF6hC57gPY22XGGSIhzkF2OEEHEjIMyhN2YAZHvkwbbI/jJRmJhmzEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc00OxnN+t//1vmrPdNZNnNAAAAMApm2I5LyvDqv0l3f+Wbv2IiGlETCJiHBGn5u69+FjLHEVEJ9VPvb846sN9RJmw/0w/XZ8j4le6nr6f+1sAAACA27VezRYRvX21fPl5qPEOpEWbQa68csnnQ660URn2N1Pa+CUyi0lEFMPHTGnTiOh+/Z1arfz+erVi8KroVEW3jV4AAADtqs8Ess3eAAAAuDp/Lt0BLqPcr03/xU97wf2qSBuCn2otAAAA4HodP21/0Gm3HwAAAMAFlPP/N+f/pVUB5/8BAADAbajO/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCcNsVyvl7NFk1ztrtm8owGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntmfdxQIgTAIg73r+06D9z+WNGhqalIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzP3QmEQBCEwb7zP6fF/MOSBo1BhCpY+JhhHhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GIHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgr7c2+bMBDGcfi1kyhxm4yQ3uJjBhoqBCPwISFZ8gwMwEI0VLQWi8AKIOCgpTMFz9P8fzpdcQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+n09MZHRGSfj8wjH67+DpeDr8jXTTP4vma2Oe7rn1tOtrtRyt8Y/xcRUUTWwm8AANpX3jfFYlnNO2m7aXtp+2nLaV3NXvloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzuzcsWpTURgA4JOkiVYnRyuI4KCLjU2sRsjiUOguCLqFNpZiqpJmaEuXPoHo5Oor2E1fwRcQHLTg4NBBwUUQJclNeoJBUoR7Q/0++O/9c4dzz8kQ+O9/bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWA73wtlBngshzM0c5V3vv+6ujDu/ffZhbhBf7ry5GI/ZHaIYQni43mpeT3Et025ze+dRo9VqtiUSiWSYZP3LBADASVNMolvXfyruL3ev5eoh/Ho1Wv9fifLwl/r/88vzFwbxc+tdJ75XXP8vpLbC6VfubDwtb27vXFvfaKw115qPq9XK4s3FG7dvVcq9ZyVlT0wAAAD4N6Uk4vo/X/+z/38mysOE9f+9pQf343sV1P9jHTX9sp4JAADA/+3cpe/fcmOu50qlsNXodNoL/ePwc6V/zGCqx3Yqibj+L9SznhUAAACQhsO93Ej/fzXKw4T9//nXuwfxmIUQwmzS/59fedJaTW85Uy2N14mzXiMAAADZmk0i7v8Xe/v/88MtD/kQwtXL/Tz5G8CJ6v+PL+6OvLQe7/+vprfEqZSv9b+P3rkWwkwt6xkBAABwkp1OolvsHxT3l9s/ni+V7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf7NgxSgNBFAbgzW5WKzFgpVZeQLSzClgIYuMhREHwBCKIBxBbS+9g6R1SK9hYWKbwBvJmd1TSBCx2lXwfTN4jDJmXSZN/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrun+d1/Fy6jpy/a954+rk6gvMzW8369vxop+0OXQ/9Bgr+8JAAAAWARVzvdFUbzVj4dRy3HK/3XeE5n/YaXpc56fzf25Pt29buT8f328dfl10Kg5Jz707PzidKezb/j3rc7dMUw3n569VOkHKY9u1qZ1us/B7WRysJTa5S6mBQB+YzvXtsn/h6Lu9jkYAAtj2K7iR/6vxv3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCFzwAAAP//OCtiEg==") symlink(&(0x7f0000000100)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') 2.042807727s ago: executing program 6 (id=1318): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x1}) 1.448407296s ago: executing program 2 (id=1319): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.444806347s ago: executing program 6 (id=1320): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e25, 0x8}}}}}, 0x0) 1.400580068s ago: executing program 4 (id=1321): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200e92, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1.267938319s ago: executing program 4 (id=1322): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) rename(&(0x7f0000001980)='./bus\x00', &(0x7f00000001c0)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) 1.168056231s ago: executing program 2 (id=1323): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 1.111133232s ago: executing program 6 (id=1324): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x5, 0x9, 0x1, 0x10, "649f130063a0921768d2836c5bd00eeff8433c7b78ac9fa9c3cea4f17119f71a8a7b052165879db2ab924147b037d58173d7cfad51c2cd6cc3ef605cf0758a59", "7cff0291dee1b69a812ad4a176535a23b30d787735ecf61ff594f4d0c9b39a03", [0x4, 0x1]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 1.036124903s ago: executing program 4 (id=1325): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@errors_remount}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.006646083s ago: executing program 3 (id=1326): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000100), 0xa, 0x700, 0x0) 807.712106ms ago: executing program 2 (id=1327): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000000240)={[{@uid}, {@nostrict}, {@umask={'umask', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@noadinicb}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@gid}]}, 0x1, 0xc32, &(0x7f0000009100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f00000000c0)='./file1\x00', r1, 0x0) 798.934207ms ago: executing program 6 (id=1328): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000001c0), 0x0) 525.147041ms ago: executing program 4 (id=1329): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) 177.001267ms ago: executing program 2 (id=1330): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000040)=[{0x18, 0x1, 0x0, 0x0}, {0x8, 0x1011, 0x0, 0x0}, {0x9, 0xec11, 0x11a, &(0x7f00000003c0)="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"}], 0x3}) 0s ago: executing program 34 (id=1330): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000040)=[{0x18, 0x1, 0x0, 0x0}, {0x8, 0x1011, 0x0, 0x0}, {0x9, 0xec11, 0x11a, &(0x7f00000003c0)="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"}], 0x3}) kernel console output (not intermixed with test programs): [ T5928] team0: Port device team_slave_1 added [ 128.100853][ T4270] syz-executor: attempt to access beyond end of device [ 128.100853][ T4270] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.116967][ T4886] hid-picolcd 0003:04D8:F002.0007: item fetching failed at offset 10/11 [ 128.128652][ T4886] hid-picolcd 0003:04D8:F002.0007: device report parse failed [ 128.165008][ T4886] hid-picolcd: probe of 0003:04D8:F002.0007 failed with error -22 [ 128.309235][ T5846] usb 2-1: USB disconnect, device number 4 [ 128.325408][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.365193][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.391308][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 128.489523][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.501997][ T6032] netlink: 'syz.3.565': attribute type 11 has an invalid length. [ 128.509755][ T6032] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.565'. [ 128.978714][ T6029] loop4: detected capacity change from 0 to 32768 [ 129.142967][ T6044] loop1: detected capacity change from 0 to 8192 [ 129.169618][ T6031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.212082][ T6044] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.257795][ T6044] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 129.259083][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.268997][ T6044] REISERFS (device loop1): using ordered data mode [ 129.282416][ T6044] reiserfs: using flush barriers [ 129.299157][ T6050] loop2: detected capacity change from 0 to 65 [ 129.361076][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.364230][ T6044] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.406991][ T6050] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 129.521492][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.547830][ T6044] REISERFS (device loop1): checking transaction log (loop1) [ 129.556950][ T6044] REISERFS (device loop1): Using r5 hash to sort names [ 129.576773][ T6044] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 129.599202][ T6044] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 129.781367][ T5840] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.794133][ T6044] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 129.821067][ T6057] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 129.848757][ T6044] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 129.888924][ T6059] loop4: detected capacity change from 0 to 4096 [ 129.890108][ T6044] overlayfs: upper fs needs to support d_type. [ 129.964545][ T6044] overlayfs: upper fs does not support tmpfile. [ 129.970271][ T6059] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 129.979269][ T6044] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 130.007707][ T5840] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 130.015531][ T4348] device hsr_slave_0 left promiscuous mode [ 130.027357][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.038989][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.052885][ T6044] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.064061][ T6044] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 130.081566][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.095444][ T4348] device hsr_slave_1 left promiscuous mode [ 130.102003][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.110910][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.136555][ T6044] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 130.153128][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.169359][ T6044] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 130.181392][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.192698][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.200181][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.221499][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.236710][ T6044] overlayfs: failed to set xattr on upper [ 130.241322][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.262259][ T6044] overlayfs: ...falling back to index=off,metacopy=off. [ 130.269512][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.280453][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.281374][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 130.299284][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.306798][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.322160][ T6044] overlayfs: failed to resolve './file0': -2 [ 130.336603][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.352841][ T4348] device bridge_slave_1 left promiscuous mode [ 130.360616][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.381966][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.401590][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.432971][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.454017][ T4348] device bridge_slave_0 left promiscuous mode [ 130.471185][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 130.481797][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.489864][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.499314][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.510701][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.527772][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.538456][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.549657][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.570446][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.592686][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.604619][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.622368][ T4348] device veth1_macvtap left promiscuous mode [ 130.629076][ T4348] device veth0_macvtap left promiscuous mode [ 130.638288][ T5840] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 130.660394][ T4348] device veth1_vlan left promiscuous mode [ 130.661090][ T5840] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 130.675077][ T4348] device veth0_vlan left promiscuous mode [ 130.688345][ T5840] usb 4-1: Product: syz [ 130.704297][ T5840] usb 4-1: Manufacturer: syz [ 130.708941][ T5840] usb 4-1: SerialNumber: syz [ 130.722787][ T5840] usb 4-1: config 0 descriptor?? [ 130.732021][ T5840] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 130.866151][ T5899] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 130.927718][ T5899] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 130.966299][ T5846] usb 4-1: USB disconnect, device number 9 [ 130.978152][ T5846] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 131.421748][ T6079] fido_id[6079]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.628989][ T6085] loop3: detected capacity change from 0 to 4096 [ 131.703697][ T6085] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 131.845219][ T6090] loop2: detected capacity change from 0 to 8192 [ 131.884076][ T6090] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.898443][ T6090] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 131.927583][ T6090] REISERFS (device loop2): using ordered data mode [ 131.934538][ T6090] reiserfs: using flush barriers [ 131.943256][ T6090] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.960112][ T6090] REISERFS (device loop2): checking transaction log (loop2) [ 131.969933][ T6090] REISERFS (device loop2): Using r5 hash to sort names [ 131.990948][ T6090] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 132.056370][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 132.124232][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 132.254174][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.330465][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.551555][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 132.718116][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724777][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.941333][ T4348] bond0 (unregistering): Released all slaves [ 133.016600][ T5928] device hsr_slave_0 entered promiscuous mode [ 133.023587][ T5928] device hsr_slave_1 entered promiscuous mode [ 133.030066][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.040330][ T5928] Cannot create hsr debugfs directory [ 133.060395][ T5840] dummy0 speed is unknown, defaulting to 1000 [ 133.068505][ T6105] netlink: 'syz.2.590': attribute type 4 has an invalid length. [ 133.264320][ T6108] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.359224][ T6111] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 133.411213][ T6111] netlink: 'syz.3.591': attribute type 2 has an invalid length. [ 133.454955][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 133.487472][ T6114] netlink: 'syz.2.594': attribute type 29 has an invalid length. [ 133.527468][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 133.823543][ T5928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.868637][ T5928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.952369][ T5928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.980812][ T5928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.376130][ T6112] loop1: detected capacity change from 0 to 32768 [ 134.389644][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.447340][ T6112] XFS (loop1): Mounting V5 Filesystem [ 134.503719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.518115][ T6112] XFS (loop1): Ending clean mount [ 134.526941][ T6112] XFS (loop1): Quotacheck needed: Please wait. [ 134.549056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.563025][ T6112] XFS (loop1): Quotacheck: Done. [ 134.614945][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.661932][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.683816][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.689591][ T4265] XFS (loop1): Unmounting Filesystem [ 134.707950][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.715106][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.745145][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.781856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.808838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.832025][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.839195][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.866372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.898779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.940511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.000297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.041963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.098241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.139326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.186127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.212175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.258786][ T5928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.280325][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.300532][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.597632][ T5848] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.791275][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 135.804118][ T5848] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.821479][ T5848] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 135.830569][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.860953][ T5848] usb 5-1: config 0 descriptor?? [ 135.892588][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.900889][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.920615][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.931183][ T5846] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.061132][ T4368] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.123407][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.141492][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.174634][ T5846] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.201503][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.209570][ T5846] usb 4-1: SerialNumber: syz [ 136.251184][ T4368] usb 2-1: Using ep0 maxpacket: 32 [ 136.258134][ T4368] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 136.281219][ T4368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.294454][ T5848] hid (null): report_id 0 is invalid [ 136.299841][ T5848] hid (null): invalid report_size 22022 [ 136.320059][ T4368] usb 2-1: config 0 descriptor?? [ 136.326444][ T5848] hid (null): global environment stack underflow [ 136.442981][ T5846] usb 4-1: 0:2 : does not exist [ 136.481324][ T5846] usb 4-1: USB disconnect, device number 10 [ 136.532176][ T5848] usb 5-1: USB disconnect, device number 11 [ 136.559015][ T4368] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 136.586770][ T4368] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.609854][ T4368] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 136.624674][ T4368] usb 2-1: media controller created [ 136.668201][ T4368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.767666][ T6203] loop2: detected capacity change from 0 to 32768 [ 136.810625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.819864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.829664][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.856139][ T5928] device veth0_vlan entered promiscuous mode [ 136.878312][ T5928] device veth1_vlan entered promiscuous mode [ 136.889708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.936238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.950686][ T6203] XFS (loop2): Mounting V5 Filesystem [ 136.967880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.982814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.990772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.050826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.075675][ T6203] XFS (loop2): Ending clean mount [ 137.084836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.094989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.107384][ T5928] device veth0_macvtap entered promiscuous mode [ 137.110016][ T6203] XFS (loop2): Quotacheck needed: Please wait. [ 137.128391][ T5928] device veth1_macvtap entered promiscuous mode [ 137.182563][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.194424][ T4368] az6027: usb out operation failed. (-71) [ 137.200185][ T4368] stb0899_attach: Driver disabled by Kconfig [ 137.240285][ T4368] az6027: no front-end attached [ 137.240285][ T4368] [ 137.250140][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.266035][ T4368] az6027: usb out operation failed. (-71) [ 137.279605][ T4368] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 137.282169][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.288352][ T4368] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 137.318133][ T4368] dvb-usb: schedule remote query interval to 400 msecs. [ 137.325420][ T4368] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 137.336813][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.377392][ T4368] usb 2-1: USB disconnect, device number 5 [ 137.385344][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.395993][ T6203] XFS (loop2): Quotacheck: Done. [ 137.471977][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.515320][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.551604][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.585798][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.587653][ T4270] XFS (loop2): Unmounting Filesystem [ 137.604039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.623293][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.662224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.678603][ T4368] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 137.691839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.717053][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.759203][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.780722][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.808027][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.829229][ T6237] loop3: detected capacity change from 0 to 2048 [ 137.869161][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.947140][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.976444][ T6237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.020166][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.022040][ T6237] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.042819][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.054205][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.066781][ T5928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.076133][ T5928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.100571][ T5928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.109384][ T5928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.153470][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.183094][ T26] audit: type=1800 audit(1753151288.332:10): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.620" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 138.184980][ T6237] fs-verity: sha256 using implementation "sha256-avx2" [ 138.213820][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.318517][ T4336] kernel read not supported for file /dsp (pid: 4336 comm: kworker/1:4) [ 138.477451][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.497131][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.578982][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.628526][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.681729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.708694][ T6255] loop4: detected capacity change from 0 to 2048 [ 138.727374][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.803800][ T6237] fs-verity (loop3, inode 13): Error -4 building Merkle tree [ 138.891803][ T6255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.935994][ T6263] netlink: 36 bytes leftover after parsing attributes in process `syz.5.531'. [ 138.949424][ T6263] device vlan2 entered promiscuous mode [ 138.956416][ T6263] device bridge0 entered promiscuous mode [ 139.021210][ T6255] EXT4-fs (loop4): shut down requested (0) [ 139.146876][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 139.334748][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 139.384224][ T6276] loop2: detected capacity change from 0 to 256 [ 139.479748][ T6276] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.515476][ T6276] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 139.606119][ T6276] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 139.708063][ T6287] bridge: RTM_NEWNEIGH with invalid ether address [ 139.731949][ T6276] exFAT-fs (loop2): hint_cluster is invalid (17) [ 140.204967][ T6302] loop3: detected capacity change from 0 to 1024 [ 140.349212][ T6302] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.398341][ T6302] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.547839][ T6302] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 1: comm syz.3.641: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.722179][ T56] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.839832][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 140.858681][ T6293] loop1: detected capacity change from 0 to 32768 [ 140.882245][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.882245][ T56] [ 140.911506][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 141.010877][ T6293] XFS (loop1): Mounting V5 Filesystem [ 141.168315][ T6305] loop2: detected capacity change from 0 to 32768 [ 141.180470][ T6305] XFS: ikeep mount option is deprecated. [ 141.302373][ T6305] XFS (loop2): Mounting V5 Filesystem [ 141.338291][ T6293] XFS (loop1): Ending clean mount [ 141.371358][ T6293] XFS (loop1): Quotacheck needed: Please wait. [ 141.477378][ T6305] XFS (loop2): Ending clean mount [ 141.530468][ T6305] XFS (loop2): Quotacheck needed: Please wait. [ 141.567053][ T6293] XFS (loop1): Quotacheck: Done. [ 141.632689][ T6305] XFS (loop2): Quotacheck: Done. [ 141.727210][ T4265] XFS (loop1): Unmounting Filesystem [ 141.878199][ T4270] XFS (loop2): Unmounting Filesystem [ 142.058693][ T6362] loop3: detected capacity change from 0 to 64 [ 142.324167][ T6325] loop5: detected capacity change from 0 to 32768 [ 142.405812][ T6354] loop4: detected capacity change from 0 to 32768 [ 142.521213][ T6325] XFS (loop5): Mounting V5 Filesystem [ 142.620056][ T6354] JBD2: Ignoring recovery information on journal [ 142.732614][ T6325] XFS (loop5): Ending clean mount [ 142.760783][ T6325] XFS (loop5): Quotacheck needed: Please wait. [ 142.780269][ T6354] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 142.882838][ T6382] loop3: detected capacity change from 0 to 4096 [ 142.941616][ T6325] XFS (loop5): Quotacheck: Done. [ 142.947415][ T6382] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 143.080570][ T6382] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 143.234276][ T26] audit: type=1800 audit(1753151293.382:11): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.659" name="file1" dev="loop3" ino=24 res=0 errno=0 [ 143.262049][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'. [ 143.345437][ T5928] XFS (loop5): Unmounting Filesystem [ 143.442756][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 143.491534][ T4264] ocfs2: Unmounting device (7,4) on (node local) [ 143.993130][ T6423] loop4: detected capacity change from 0 to 2048 [ 144.060108][ T6423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.948404][ T6457] loop2: detected capacity change from 0 to 256 [ 144.963048][ T6461] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 144.979286][ T6457] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53d99, utbl_chksum : 0xe619d30d) [ 144.992003][ T5897] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.068008][ T26] audit: type=1800 audit(1753151295.212:12): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.686" name="file1" dev="loop2" ino=1048619 res=0 errno=0 [ 145.181159][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 145.192782][ T5897] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 145.255867][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.285547][ T5897] usb 5-1: config 0 has no interface number 0 [ 145.362768][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 145.372111][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.380121][ T5897] usb 5-1: Product: syz [ 145.385432][ T5897] usb 5-1: Manufacturer: syz [ 145.390057][ T5897] usb 5-1: SerialNumber: syz [ 145.397235][ T5897] usb 5-1: config 0 descriptor?? [ 145.425777][ T5897] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 145.451151][ T5897] usb 5-1: No valid video chain found. [ 145.606471][ T6476] loop3: detected capacity change from 0 to 64 [ 145.670003][ T5897] usb 5-1: USB disconnect, device number 12 [ 145.728633][ T6453] loop1: detected capacity change from 0 to 32768 [ 145.741917][ T4886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.869421][ T6453] XFS (loop1): Mounting V5 Filesystem [ 145.889392][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.941275][ T4886] usb 3-1: Using ep0 maxpacket: 16 [ 145.948363][ T4886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.012063][ T4886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.068369][ T4886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.101223][ T4886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 146.110910][ T4886] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.172272][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.192572][ T6453] XFS (loop1): Ending clean mount [ 146.207496][ T4886] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 146.238797][ T4886] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.259021][ T4886] usb 3-1: Manufacturer: syz [ 146.277650][ T6453] XFS (loop1): Quotacheck needed: Please wait. [ 146.277992][ T4886] usb 3-1: config 0 descriptor?? [ 146.371606][ T6453] XFS (loop1): Quotacheck: Done. [ 146.399039][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.615654][ T4265] XFS (loop1): Unmounting Filesystem [ 146.653896][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.721181][ T4886] rc_core: IR keymap rc-hauppauge not found [ 146.736473][ T4886] Registered IR keymap rc-empty [ 146.756355][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.827448][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.882266][ T4886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.911764][ T4886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 146.976282][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.031364][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.071284][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.141188][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.168712][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.180789][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.182479][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.201510][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.211215][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.218914][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.235270][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.271234][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.312987][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.381165][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.421835][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.482200][ T4886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.532203][ T4886] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 147.606722][ T4886] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 147.673049][ T4886] usb 3-1: USB disconnect, device number 7 [ 148.553066][ T6551] loop3: detected capacity change from 0 to 8 [ 148.582902][ T6510] chnl_net:caif_netlink_parms(): no params data found [ 148.838289][ T6560] loop4: detected capacity change from 0 to 256 [ 148.902766][ T6560] FAT-fs (loop4): Directory bread(block 64) failed [ 148.918786][ T6560] FAT-fs (loop4): Directory bread(block 65) failed [ 148.968802][ T6560] FAT-fs (loop4): Directory bread(block 66) failed [ 148.987814][ T6530] loop1: detected capacity change from 0 to 32768 [ 149.030030][ T6560] FAT-fs (loop4): Directory bread(block 67) failed [ 149.094373][ T6560] FAT-fs (loop4): Directory bread(block 68) failed [ 149.100968][ T6560] FAT-fs (loop4): Directory bread(block 69) failed [ 149.125629][ T26] audit: type=1800 audit(1753151299.272:13): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.706" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 149.173413][ T6530] syz.1.706: attempt to access beyond end of device [ 149.173413][ T6530] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 149.176761][ T6560] FAT-fs (loop4): Directory bread(block 70) failed [ 149.206484][ T6560] FAT-fs (loop4): Directory bread(block 71) failed [ 149.206597][ T6530] metapage_write_end_io: I/O error [ 149.220608][ T6530] ERROR: (device loop1): diWrite: ixpxd invalid [ 149.220608][ T6530] [ 149.242338][ T6560] FAT-fs (loop4): Directory bread(block 72) failed [ 149.245317][ T6530] ERROR: (device loop1): remounting filesystem as read-only [ 149.248917][ T6560] FAT-fs (loop4): Directory bread(block 73) failed [ 149.269739][ T6530] ERROR: (device loop1): txCommit: [ 149.269739][ T6530] [ 149.271381][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 149.300894][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.308286][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.319895][ T6510] device bridge_slave_0 entered promiscuous mode [ 149.398508][ T6530] blkno = 8ed2c, nblocks = 1 [ 149.404441][ T6530] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 149.404441][ T6530] [ 149.489910][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.520912][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.543759][ T6530] ERROR: (device loop1): dbAllocBits: leaf page corrupt [ 149.543759][ T6530] [ 149.569303][ T6510] device bridge_slave_1 entered promiscuous mode [ 149.606253][ T6530] syz.1.706: attempt to access beyond end of device [ 149.606253][ T6530] loop1: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 149.674863][ T6530] syz.1.706: attempt to access beyond end of device [ 149.674863][ T6530] loop1: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 149.705900][ T26] audit: type=1800 audit(1753151299.852:14): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.715" name=3830322E31352E34204D4143 dev="loop4" ino=1048620 res=0 errno=0 [ 149.734847][ T6530] syz.1.706: attempt to access beyond end of device [ 149.734847][ T6530] loop1: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 149.806185][ T107] blkno = 8ed2c, nblocks = 4 [ 149.813957][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 149.813957][ T107] [ 149.892269][ T107] blkno = 8ef00, nblocks = 141 [ 149.909198][ T107] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 149.909198][ T107] [ 149.990829][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.103067][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.504506][ T6510] team0: Port device team_slave_0 added [ 150.588526][ T6510] team0: Port device team_slave_1 added [ 150.680120][ T9] device hsr_slave_0 left promiscuous mode [ 150.691604][ T9] device hsr_slave_1 left promiscuous mode [ 150.735588][ T6578] loop3: detected capacity change from 0 to 32768 [ 150.748710][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.760823][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.798997][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.832452][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.929799][ T9] device bridge_slave_1 left promiscuous mode [ 150.942530][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.959395][ T6578] XFS (loop3): Mounting V5 Filesystem [ 150.967368][ T9] device bridge_slave_0 left promiscuous mode [ 150.981274][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.029949][ T9] device veth1_macvtap left promiscuous mode [ 151.036460][ T9] device veth0_macvtap left promiscuous mode [ 151.043264][ T9] device veth1_vlan left promiscuous mode [ 151.049101][ T9] device veth0_vlan left promiscuous mode [ 151.117828][ T6580] loop4: detected capacity change from 0 to 32768 [ 151.134369][ T6580] XFS: attr2 mount option is deprecated. [ 151.170030][ T6578] XFS (loop3): Ending clean mount [ 151.247140][ T6578] XFS (loop3): Unmounting Filesystem [ 151.351216][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 151.375512][ T6580] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 151.401810][ T6580] XFS (loop4): Mounting V5 Filesystem [ 151.579376][ T6612] loop2: detected capacity change from 0 to 32768 [ 151.652743][ T6580] XFS (loop4): Ending clean mount [ 151.686743][ T6580] XFS (loop4): Quotacheck needed: Please wait. [ 151.807730][ T6612] XFS (loop2): Mounting V5 Filesystem [ 151.883462][ T6580] XFS (loop4): Quotacheck: Done. [ 151.976155][ T6612] XFS (loop2): Ending clean mount [ 152.208265][ T4264] XFS (loop4): Unmounting Filesystem [ 152.212562][ T4270] XFS (loop2): Unmounting Filesystem [ 153.278841][ T6660] loop4: detected capacity change from 0 to 16 [ 153.302979][ T6660] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 153.333627][ T9] team0 (unregistering): Port device team_slave_1 removed [ 153.431552][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 153.449631][ T9] team0 (unregistering): Port device team_slave_0 removed [ 153.572103][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.637749][ T6665] netlink: 156 bytes leftover after parsing attributes in process `syz.4.741'. [ 153.654928][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.741'. [ 153.724460][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.097162][ T56] kworker/u4:4: attempt to access beyond end of device [ 154.097162][ T56] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 154.113247][ T56] metapage_write_end_io: I/O error [ 154.119145][ T56] JFS: metapage_get_blocks failed [ 154.144851][ T56] JFS: metapage_get_blocks failed [ 154.438119][ T9] bond0 (unregistering): Released all slaves [ 154.540147][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.547371][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.573298][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.585460][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.617965][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.636736][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.662648][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.790510][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.014947][ T6510] device hsr_slave_0 entered promiscuous mode [ 155.043265][ T6510] device hsr_slave_1 entered promiscuous mode [ 155.063759][ T6510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.086809][ T6510] Cannot create hsr debugfs directory [ 155.109031][ T6696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.754'. [ 155.511317][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 155.702349][ T6510] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.721323][ T5847] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.742967][ T6510] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.794732][ T6510] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.827111][ T6510] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.912904][ T5847] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.924554][ T5847] usb 2-1: config 0 has no interface number 0 [ 155.953353][ T5847] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 156.001367][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.009406][ T5847] usb 2-1: Product: syz [ 156.020041][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.041185][ T5847] usb 2-1: Manufacturer: syz [ 156.045850][ T5847] usb 2-1: SerialNumber: syz [ 156.048989][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.074485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.076897][ T5847] usb 2-1: config 0 descriptor?? [ 156.108983][ T6510] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.139141][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.152701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.192514][ T6730] loop3: detected capacity change from 0 to 8192 [ 156.201917][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.209040][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.230063][ T6730] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 156.241540][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.261403][ T6730] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 156.287860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.298664][ T6730] REISERFS (device loop3): using ordered data mode [ 156.323355][ T5847] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 156.335263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.366687][ T6730] reiserfs: using flush barriers [ 156.372787][ T5847] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.404158][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.411358][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.451249][ T6730] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.467721][ T5847] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 156.481397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.491425][ T5847] usb 2-1: media controller created [ 156.521625][ T6730] REISERFS (device loop3): checking transaction log (loop3) [ 156.542307][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.571481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.597445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.606110][ T6730] REISERFS (device loop3): Using r5 hash to sort names [ 156.625251][ T6730] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 156.682099][ T6730] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 156.686482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.740680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.774372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.802624][ T6730] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 156.813752][ T6510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.858209][ T6510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.895415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.909888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.949984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.975954][ T6730] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 157.007549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.046637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.089962][ T6730] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 157.098600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.629191][ T6767] loop4: detected capacity change from 0 to 64 [ 157.638091][ T5847] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 157.709505][ T6767] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 157.733000][ T5847] usb 2-1: USB disconnect, device number 6 [ 158.018247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.026480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.050814][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.137116][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 158.152613][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 158.177543][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 158.244216][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 158.446488][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 158.518077][ T6791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.777'. [ 158.841527][ T5847] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.041230][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 159.049157][ T5847] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 159.109662][ T5847] usb 3-1: config 0 has no interface number 0 [ 159.165289][ T5847] usb 3-1: config 0 interface 4 has no altsetting 0 [ 159.167435][ T6810] loop3: detected capacity change from 0 to 32768 [ 159.195917][ T6026] JFS: metapage_get_blocks failed [ 159.216385][ T6810] [ 159.216385][ T6810] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.216385][ T6810] [ 159.254155][ T6810] [ 159.254155][ T6810] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.254155][ T6810] [ 159.266343][ T6810] [ 159.266343][ T6810] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.266343][ T6810] [ 159.266546][ T5847] usb 3-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=fb.17 [ 159.277140][ T6810] [ 159.277140][ T6810] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.277140][ T6810] [ 159.296443][ T6810] [ 159.296443][ T6810] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.296443][ T6810] [ 159.319017][ T107] [ 159.319017][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.319017][ T107] [ 159.371305][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.423054][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.442708][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.464407][ T5847] usb 3-1: Product: syz [ 159.492888][ T5847] usb 3-1: Manufacturer: syz [ 159.499981][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.506995][ T6820] loop4: detected capacity change from 0 to 16 [ 159.512303][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.524068][ T5847] usb 3-1: SerialNumber: syz [ 159.548727][ T5847] usb 3-1: config 0 descriptor?? [ 159.554288][ T6510] device veth0_vlan entered promiscuous mode [ 159.562128][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.598387][ T6820] erofs: (device loop4): mounted with root inode @ nid 36. [ 159.611514][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.619499][ T4274] [ 159.619499][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.619499][ T4274] [ 159.622209][ T5847] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 159.664036][ T6510] device veth1_vlan entered promiscuous mode [ 159.676452][ T4274] [ 159.676452][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.676452][ T4274] [ 159.691878][ T6820] syz.4.786: attempt to access beyond end of device [ 159.691878][ T6820] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 159.751587][ T6820] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1440] out[1677] [ 159.783708][ T6820] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 87 of nid 36 [ 159.794437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.817958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.874789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.902302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.924119][ T6510] device veth0_macvtap entered promiscuous mode [ 159.945807][ T6510] device veth1_macvtap entered promiscuous mode [ 160.031445][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.080370][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.129181][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.170391][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.182325][ T6833] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 160.241351][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.252472][ T5847] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 160.267407][ T6833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.267907][ T5847] gspca_pac7302: probe of 3-1:0.4 failed with error -71 [ 160.277806][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.321089][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.334041][ T5847] usb 3-1: USB disconnect, device number 8 [ 160.382305][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.437319][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.468233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.488440][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.510732][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.520922][ T6842] loop4: detected capacity change from 0 to 256 [ 160.535077][ T6842] exfat: Deprecated parameter 'namecase' [ 160.549251][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.582806][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.615501][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.661512][ T6842] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 160.678663][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.696952][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.738339][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.777873][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.814066][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.855257][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.905490][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.918683][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.982030][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.029457][ T6510] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.081984][ T6510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.090725][ T6510] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.151088][ T6510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.202991][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.212853][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.251995][ T6834] loop3: detected capacity change from 0 to 32768 [ 161.378856][ T6834] JBD2: Ignoring recovery information on journal [ 161.556705][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.583782][ T6834] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 161.603471][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.659512][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.718053][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.719004][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.762906][ T6834] (syz.3.791,6834,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 161.792447][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.042162][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 162.377582][ T6890] netlink: 'syz.6.806': attribute type 11 has an invalid length. [ 162.425030][ T6890] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.806'. [ 162.948461][ T6873] loop2: detected capacity change from 0 to 32768 [ 163.027358][ T6873] XFS (loop2): Mounting V5 Filesystem [ 163.219899][ T6873] XFS (loop2): Ending clean mount [ 163.247886][ T6873] XFS (loop2): Quotacheck needed: Please wait. [ 163.365080][ T6873] XFS (loop2): Quotacheck: Done. [ 163.599902][ T4270] XFS (loop2): Unmounting Filesystem [ 163.985744][ T6901] loop6: detected capacity change from 0 to 40427 [ 164.044350][ T6901] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 164.091142][ T6901] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 164.135052][ T6901] F2FS-fs (loop6): invalid crc value [ 164.188534][ T6901] F2FS-fs (loop6): Found nat_bits in checkpoint [ 164.356503][ T6901] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 164.377857][ T6901] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 164.391562][ T4890] JFS: metapage_get_blocks failed [ 164.415982][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 164.777531][ T6925] loop4: detected capacity change from 0 to 32768 [ 164.784859][ T6957] loop2: detected capacity change from 0 to 128 [ 164.872736][ T6957] affs: No valid root block on device loop2 [ 164.898812][ T6925] XFS (loop4): Mounting V5 Filesystem [ 164.987191][ T6925] XFS (loop4): Ending clean mount [ 165.267565][ T6978] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 165.283651][ T6979] loop3: detected capacity change from 0 to 128 [ 165.330580][ T6979] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.350334][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 165.380230][ T6925] syz.4.815 (6925) used greatest stack depth: 20352 bytes left [ 165.396116][ T6979] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.420449][ T4264] XFS (loop4): Unmounting Filesystem [ 165.793173][ T6989] loop2: detected capacity change from 0 to 256 [ 165.904459][ T6989] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 166.546723][ T6996] loop3: detected capacity change from 0 to 32768 [ 166.630605][ T6996] XFS (loop3): Mounting V5 Filesystem [ 166.799181][ T6996] XFS (loop3): Ending clean mount [ 166.835547][ T6996] XFS (loop3): Quotacheck needed: Please wait. [ 166.979097][ T6996] XFS (loop3): Quotacheck: Done. [ 167.333104][ T4274] XFS (loop3): Unmounting Filesystem [ 167.559058][ T7009] loop4: detected capacity change from 0 to 32768 [ 167.587911][ T7009] XFS: attr2 mount option is deprecated. [ 167.639192][ T7052] loop2: detected capacity change from 0 to 1024 [ 167.815530][ T7009] XFS (loop4): Mounting V5 Filesystem [ 168.017213][ T7009] XFS (loop4): Ending clean mount [ 168.062661][ T7009] XFS (loop4): Quotacheck needed: Please wait. [ 168.085045][ T7067] loop3: detected capacity change from 0 to 256 [ 168.202609][ T7009] XFS (loop4): Quotacheck: Done. [ 168.328823][ T4264] XFS (loop4): Unmounting Filesystem [ 168.397783][ T5847] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 168.571226][ T3910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.601156][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 168.620472][ T5847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 168.638818][ T5847] usb 7-1: no configurations [ 168.667026][ T5847] usb 7-1: can't read configurations, error -22 [ 168.791355][ T3910] usb 3-1: Using ep0 maxpacket: 32 [ 168.798249][ T3910] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 168.817681][ T3910] usb 3-1: config 0 has no interface number 0 [ 168.827465][ T3910] usb 3-1: config 0 interface 150 has no altsetting 0 [ 168.843076][ T3910] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 168.859045][ T3910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.867794][ T3910] usb 3-1: Product: syz [ 168.887841][ T3910] usb 3-1: Manufacturer: syz [ 168.908063][ T3910] usb 3-1: SerialNumber: syz [ 168.924693][ T3910] usb 3-1: config 0 descriptor?? [ 168.955389][ T3910] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 169.053745][ T7090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.858'. [ 169.160638][ T3910] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 169.177832][ T3910] pac7311: probe of 3-1:0.150 failed with error -71 [ 169.231357][ T3910] usb 3-1: USB disconnect, device number 9 [ 169.349800][ T26] audit: type=1326 audit(1753151319.492:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.6.861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd8638e9a9 code=0x0 [ 169.461004][ T7102] loop6: detected capacity change from 0 to 164 [ 169.509345][ T7102] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 169.826934][ T7112] loop4: detected capacity change from 0 to 1024 [ 170.028148][ T4890] hfsplus: b-tree write err: -5, ino 4 [ 170.657580][ T7105] loop3: detected capacity change from 0 to 32768 [ 170.784805][ T7105] XFS (loop3): Mounting V5 Filesystem [ 170.818042][ T7151] loop4: detected capacity change from 0 to 1024 [ 170.826652][ T7151] EXT4-fs: Ignoring removed bh option [ 170.902269][ T7151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.911578][ T7105] XFS (loop3): Ending clean mount [ 171.093008][ T7105] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 171.159945][ T7133] loop2: detected capacity change from 0 to 32768 [ 171.253915][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 171.314420][ T4274] XFS (loop3): Unmounting Filesystem [ 171.450836][ T7133] XFS (loop2): Mounting V5 Filesystem [ 171.694395][ T7133] XFS (loop2): Ending clean mount [ 171.938610][ T4270] XFS (loop2): Unmounting Filesystem [ 172.551342][ T5848] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.751122][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 172.759599][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.801330][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.831108][ T5848] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 172.889585][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.900421][ T7195] loop6: detected capacity change from 0 to 128 [ 172.930356][ T5848] usb 5-1: config 0 descriptor?? [ 172.958161][ T7199] tap0: tun_chr_ioctl cmd 21731 [ 173.349368][ T7180] loop3: detected capacity change from 0 to 32768 [ 173.359229][ T5848] hid-picolcd 0003:04D8:F002.000A: item fetching failed at offset 10/11 [ 173.380964][ T5848] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 173.408036][ T5848] hid-picolcd: probe of 0003:04D8:F002.000A failed with error -22 [ 173.569971][ T4886] usb 5-1: USB disconnect, device number 13 [ 173.800463][ T7215] loop6: detected capacity change from 0 to 512 [ 173.853857][ T7215] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.984891][ T7215] EXT4-fs (loop6): 1 truncate cleaned up [ 173.990599][ T7215] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 174.256415][ T6510] EXT4-fs (loop6): unmounting filesystem. [ 174.618190][ T7231] loop2: detected capacity change from 0 to 256 [ 176.194780][ T26] audit: type=1326 audit(1753151326.342:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.6.912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd8638e9a9 code=0x0 [ 176.227068][ T7222] loop4: detected capacity change from 0 to 65536 [ 176.370900][ T7222] XFS (loop4): Mounting V5 Filesystem [ 176.491345][ T7222] XFS (loop4): Ending clean mount [ 176.536881][ T7222] XFS (loop4): Quotacheck needed: Please wait. [ 176.583436][ T56] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x25 dinode [ 176.659138][ T56] XFS (loop4): Unmount and run xfs_repair [ 176.688451][ T56] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 176.713797][ T56] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 176.754731][ T56] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.783636][ T56] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 176.803174][ T56] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 176.848995][ T56] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.876908][ T56] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 176.929023][ T56] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 176.955440][ T56] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 177.017214][ T7222] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 177.265456][ T5840] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 177.446827][ T7313] loop6: detected capacity change from 0 to 2048 [ 177.463381][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.497315][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.527880][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.552136][ T7313] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 177.561398][ T7313] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.587637][ T5840] usb 2-1: New USB device found, idVendor=047f, idProduct=4e72, bcdDevice= 0.00 [ 177.629264][ T7294] loop3: detected capacity change from 0 to 32768 [ 177.637084][ T26] audit: type=1800 audit(1753151327.782:17): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.924" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 177.646158][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.765004][ T7294] XFS (loop3): Mounting V5 Filesystem [ 177.769185][ T5840] usb 2-1: config 0 descriptor?? [ 177.830892][ T7294] XFS (loop3): Ending clean mount [ 177.854127][ T7294] XFS (loop3): Quotacheck needed: Please wait. [ 177.963212][ T7294] XFS (loop3): Quotacheck: Done. [ 178.093705][ T4264] XFS (loop4): Unmounting Filesystem [ 178.207936][ T4274] XFS (loop3): Unmounting Filesystem [ 178.348390][ T7313] fs-verity (loop6, inode 13): Error -4 building Merkle tree [ 178.645061][ T7338] loop2: detected capacity change from 0 to 128 [ 178.705573][ T7338] binder: 7337:7338 ioctl c0306201 200000000380 returned -14 [ 178.729617][ T6510] EXT4-fs (loop6): unmounting filesystem. [ 178.787047][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 178.825603][ T5840] usbhid: probe of 2-1:0.0 failed with error -71 [ 178.843448][ T5840] usb 2-1: USB disconnect, device number 7 [ 179.109256][ T7346] device sit0 entered promiscuous mode [ 179.119619][ T7351] vivid-000: disconnect [ 179.159760][ T7351] vivid-000: reconnect [ 179.166041][ T7346] netlink: 'syz.6.929': attribute type 1 has an invalid length. [ 179.202006][ T7346] netlink: 1 bytes leftover after parsing attributes in process `syz.6.929'. [ 179.530093][ T7362] loop2: detected capacity change from 0 to 1024 [ 179.640631][ T7370] loop3: detected capacity change from 0 to 2048 [ 179.643797][ T7362] hfsplus: bad catalog entry type [ 179.792269][ T7370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.848114][ T7380] loop6: detected capacity change from 0 to 2048 [ 179.861418][ T6026] hfsplus: b-tree write err: -5, ino 4 [ 179.903531][ T7380] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.942711][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 180.001283][ T5848] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.003213][ T26] audit: type=1800 audit(1753151330.152:18): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.944" name="file1" dev="loop6" ino=1367 res=0 errno=0 [ 180.067304][ T3637] udevd[3637]: worker [4395] terminated by signal 33 (Unknown signal 33) [ 180.091883][ T3637] udevd[3637]: worker [4395] failed while handling '/devices/virtual/block/loop6' [ 180.127105][ T3637] udevd[3637]: worker [4373] terminated by signal 33 (Unknown signal 33) [ 180.137435][ T3637] udevd[3637]: worker [4373] failed while handling '/devices/virtual/block/loop1' [ 180.161298][ T3637] udevd[3637]: worker [4488] terminated by signal 33 (Unknown signal 33) [ 180.170053][ T3637] udevd[3637]: worker [4488] failed while handling '/devices/virtual/block/loop3' [ 180.211847][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 180.220328][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.259742][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 180.336220][ T5848] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.350903][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.396660][ T5848] usb 5-1: config 0 descriptor?? [ 180.413023][ T5848] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 180.515618][ T7398] loop2: detected capacity change from 0 to 256 [ 180.561325][ T7398] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.597042][ T7398] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 180.613386][ T7398] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x96da35da, utbl_chksum : 0xe619d30d) [ 180.649144][ T4386] usb 5-1: USB disconnect, device number 14 [ 180.871524][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 180.877593][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 180.891201][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 180.891493][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 181.071297][ T5847] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.166384][ T7411] loop6: detected capacity change from 0 to 1024 [ 181.184575][ T7413] loop2: detected capacity change from 0 to 512 [ 181.259828][ T7413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.265653][ T5847] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 181.288488][ T7411] hfsplus: bad catalog entry type [ 181.308565][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.350056][ T5847] usb 4-1: Product: syz [ 181.356678][ T7413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.359152][ T5847] usb 4-1: Manufacturer: syz [ 181.370421][ T5847] usb 4-1: SerialNumber: syz [ 181.376960][ T5847] usb 4-1: config 0 descriptor?? [ 181.386740][ T7413] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.477705][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 181.523316][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 181.606593][ T5847] usb 4-1: ignoring: probably an ADSL modem [ 181.876620][ T7431] loop2: detected capacity change from 0 to 512 [ 181.992240][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.962: corrupted inode contents [ 182.014948][ T5847] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 182.031157][ T7431] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #16: comm syz.2.962: mark_inode_dirty error [ 182.051498][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.962: corrupted inode contents [ 182.082885][ T7431] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.962: mark_inode_dirty error [ 182.107475][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.962: corrupted inode contents [ 182.128571][ T7431] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 182.139588][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.962: corrupted inode contents [ 182.161315][ T7431] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.962: mark_inode_dirty error [ 182.182729][ T7431] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 182.201375][ T4386] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 182.230312][ T7431] EXT4-fs (loop2): 1 truncate cleaned up [ 182.246511][ T7431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.251203][ T4365] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 182.275024][ T5847] usb 4-1: USB disconnect, device number 11 [ 182.281459][ T7431] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.286778][ T4365] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 1 [ 182.406631][ T4386] usb 7-1: Using ep0 maxpacket: 32 [ 182.414000][ T4386] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 182.448452][ T4386] usb 7-1: config 0 has no interface number 0 [ 182.456876][ T4386] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 182.475407][ T4386] usb 7-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.487834][ T4386] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 182.502429][ T4386] usb 7-1: config 0 interface 126 has no altsetting 0 [ 182.516843][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 182.548072][ T4386] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 182.561645][ T4386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.569855][ T4386] usb 7-1: Product: syz [ 182.600220][ T4386] usb 7-1: Manufacturer: syz [ 182.613001][ T4386] usb 7-1: SerialNumber: syz [ 182.625679][ T4386] usb 7-1: config 0 descriptor?? [ 182.641116][ T7435] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 182.871646][ T5847] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.949089][ T7452] sctp: [Deprecated]: syz.1.969 (pid 7452) Use of int in maxseg socket option. [ 182.949089][ T7452] Use struct sctp_assoc_value instead [ 183.063418][ T4386] ir_usb 7-1:0.126: IR Dongle converter detected [ 183.063761][ T5847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.119304][ T5847] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 183.132002][ T5847] usb 5-1: config 6 has no interface number 0 [ 183.138202][ T5847] usb 5-1: config 6 interface 200 has no altsetting 0 [ 183.159760][ T5847] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 183.186731][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.204845][ T5847] usb 5-1: Product: syz [ 183.214784][ T5847] usb 5-1: Manufacturer: syz [ 183.227211][ T5847] usb 5-1: SerialNumber: syz [ 183.265406][ T4386] usb 7-1: IR Dongle converter now attached to ttyUSB0 [ 183.495550][ T5848] usb 7-1: USB disconnect, device number 4 [ 183.523992][ T5848] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 183.557604][ T5848] ir_usb 7-1:0.126: device disconnected [ 183.611145][ T5840] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.660067][ T7461] loop2: detected capacity change from 0 to 32768 [ 183.716561][ T7461] JBD2: Ignoring recovery information on journal [ 183.770287][ T7461] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 183.808097][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 183.821930][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.832212][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 183.850772][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 183.862482][ T5847] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 183.872449][ T7461] (syz.2.973,7461,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 183.889472][ T5847] dvb-usb: bulk message failed: -71 (3/0) [ 183.899175][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.919853][ T5840] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 183.929198][ T5847] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 183.937342][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.951713][ T5847] usb 5-1: media controller created [ 183.957074][ T5840] usb 2-1: Product: syz [ 183.961490][ T5840] usb 2-1: Manufacturer: syz [ 183.966111][ T5840] usb 2-1: SerialNumber: syz [ 183.985641][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 184.005701][ T5840] usb 2-1: config 0 descriptor?? [ 184.012061][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.070788][ T5847] dvb-usb: bulk message failed: -71 (6/0) [ 184.138327][ T5847] dvb-usb: bulk message failed: -71 (6/0) [ 184.153753][ T5847] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 184.173419][ T5847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 184.221984][ T5840] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 184.234652][ T5847] dvb-usb: schedule remote query interval to 150 msecs. [ 184.246210][ T5847] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 184.309242][ T5847] usb 5-1: USB disconnect, device number 15 [ 184.413004][ T5847] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 184.426952][ T7464] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 184.513551][ T7] usb 2-1: USB disconnect, device number 8 [ 184.593354][ T7488] tap0: tun_chr_ioctl cmd 1074025677 [ 184.598851][ T7488] tap0: linktype set to 805 [ 185.311400][ T5897] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.447673][ T7520] loop4: detected capacity change from 0 to 256 [ 185.528611][ T5897] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.550029][ T5897] usb 3-1: config 0 has no interface number 0 [ 185.571096][ T5897] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.615339][ T5897] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.646484][ T5897] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 185.668604][ T7504] loop6: detected capacity change from 0 to 32768 [ 185.676962][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.711697][ T7504] XFS: ikeep mount option is deprecated. [ 185.726593][ T5897] usb 3-1: config 0 descriptor?? [ 185.734279][ T7507] loop3: detected capacity change from 0 to 32768 [ 185.779571][ T7504] XFS (loop6): Mounting V5 Filesystem [ 185.866456][ T7507] JBD2: Ignoring recovery information on journal [ 185.972058][ T7504] XFS (loop6): Ending clean mount [ 185.982746][ T7507] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 186.033471][ T7504] XFS (loop6): Quotacheck needed: Please wait. [ 186.166563][ T5897] uclogic 0003:256C:006D.000B: unknown main item tag 0x0 [ 186.187062][ T5897] uclogic 0003:256C:006D.000B: unknown main item tag 0x0 [ 186.193012][ T7504] XFS (loop6): Quotacheck: Done. [ 186.245484][ T5897] uclogic 0003:256C:006D.000B: unknown main item tag 0x0 [ 186.265710][ T5897] uclogic 0003:256C:006D.000B: unknown main item tag 0x0 [ 186.284648][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 186.305965][ T5897] uclogic 0003:256C:006D.000B: unknown main item tag 0x0 [ 186.329182][ T5897] uclogic 0003:256C:006D.000B: No inputs registered, leaving [ 186.379046][ T5897] uclogic 0003:256C:006D.000B: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1 [ 186.418991][ T5897] usb 3-1: USB disconnect, device number 10 [ 186.527423][ T6510] XFS (loop6): Unmounting Filesystem [ 186.710600][ T7543] fido_id[7543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 186.729463][ T7546] loop3: detected capacity change from 0 to 256 [ 186.791659][ T7551] process 'syz.4.997' launched './file0' with NULL argv: empty string added [ 186.837781][ T7546] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53d99, utbl_chksum : 0xe619d30d) [ 186.949660][ T26] audit: type=1800 audit(1753151337.092:19): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.995" name="file1" dev="loop3" ino=1048631 res=0 errno=0 [ 186.970376][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.360137][ T7564] loop4: detected capacity change from 0 to 2048 [ 187.403233][ T7564] UDF-fs: bad mount option "mode=000<000000000?000000007" or missing value [ 187.463486][ T7571] vxcan1: tx address claim with dest, not broadcast [ 187.993005][ T5840] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 188.191357][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 188.198815][ T5840] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 188.207790][ T7567] loop2: detected capacity change from 0 to 32768 [ 188.211478][ T7561] loop3: detected capacity change from 0 to 32768 [ 188.228470][ T7564] loop4: detected capacity change from 0 to 32768 [ 188.252766][ T7567] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1002 (7567) [ 188.262540][ T5840] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 188.294958][ T7564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1001 (7564) [ 188.359074][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 188.419058][ T5840] usb 7-1: Product: syz [ 188.476313][ T5840] usb 7-1: Manufacturer: syz [ 188.482595][ T5840] usb 7-1: SerialNumber: syz [ 188.490985][ T7567] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.507921][ T7564] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.536117][ T7567] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 188.547759][ T5840] usb 7-1: config 0 descriptor?? [ 188.560885][ T7564] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 188.570389][ T7561] XFS (loop3): Mounting V5 Filesystem [ 188.576499][ T7578] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 188.591384][ T7567] BTRFS info (device loop2): using free space tree [ 188.591592][ T7564] BTRFS info (device loop4): force clearing of disk cache [ 188.686922][ T7561] XFS (loop3): Ending clean mount [ 188.692660][ T7564] BTRFS info (device loop4): metadata ratio 0 [ 188.701601][ T7561] XFS (loop3): Quotacheck needed: Please wait. [ 188.721757][ T7564] BTRFS info (device loop4): enabling ssd optimizations [ 188.741955][ T7564] BTRFS info (device loop4): using spread ssd allocation scheme [ 188.763319][ T7564] BTRFS info (device loop4): using free space tree [ 188.790652][ T7561] XFS (loop3): Quotacheck: Done. [ 188.878691][ T5847] usb 7-1: USB disconnect, device number 5 [ 188.923267][ T7567] BTRFS info (device loop2): enabling ssd optimizations [ 189.030726][ T4274] XFS (loop3): Unmounting Filesystem [ 189.077059][ T7564] BTRFS info (device loop4): rebuilding free space tree [ 189.332453][ T4270] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.741405][ T4264] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.997913][ T7654] loop2: detected capacity change from 0 to 64 [ 190.441249][ T7670] loop6: detected capacity change from 0 to 512 [ 190.539747][ T7670] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 190.575668][ T7670] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.935606][ T6510] EXT4-fs (loop6): unmounting filesystem. [ 191.086679][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1026'. [ 191.350241][ T7707] loop6: detected capacity change from 0 to 512 [ 191.470292][ T7707] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 191.547000][ T7677] loop2: detected capacity change from 0 to 40427 [ 191.551384][ T7707] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.572685][ T7677] F2FS-fs (loop2): invalid crc value [ 191.606186][ T7677] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.810352][ T7677] F2FS-fs (loop2): Start checkpoint disabled! [ 191.879169][ T7677] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 191.960675][ T6510] EXT4-fs (loop6): unmounting filesystem. [ 192.153829][ T7732] loop6: detected capacity change from 0 to 128 [ 192.208079][ T26] audit: type=1800 audit(1753151342.397:20): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1035" name="file2" dev="loop6" ino=1048632 res=0 errno=0 [ 192.256062][ T7732] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 192.289027][ T7735] loop4: detected capacity change from 0 to 64 [ 192.291141][ T7732] FAT-fs (loop6): Filesystem has been set read-only [ 192.341778][ T7732] syz.6.1035: attempt to access beyond end of device [ 192.341778][ T7732] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 192.406512][ T7732] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 192.460363][ T7732] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 192.511631][ T7732] syz.6.1035: attempt to access beyond end of device [ 192.511631][ T7732] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 192.575840][ T7732] syz.6.1035: attempt to access beyond end of device [ 192.575840][ T7732] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 192.630339][ T7741] input: syz0 as /devices/virtual/input/input34 [ 192.637051][ T7732] syz.6.1035: attempt to access beyond end of device [ 192.637051][ T7732] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 192.835365][ T7744] loop3: detected capacity change from 0 to 512 [ 192.922141][ T7744] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 192.956756][ T7744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.998821][ T7744] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.173718][ T7755] loop6: detected capacity change from 0 to 256 [ 193.244506][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 193.621927][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1045'. [ 193.646386][ T7768] Can't find ip_set type [ 193.681147][ T4887] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 193.799795][ T7775] loop4: detected capacity change from 0 to 4096 [ 193.823699][ T7778] rtc_cmos 00:00: Alarms can be up to one day in the future [ 193.871308][ T4887] usb 4-1: Using ep0 maxpacket: 8 [ 193.878452][ T4887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.906187][ T7775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.925875][ T4887] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 194.013575][ T4887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.096033][ T4887] usb 4-1: config 0 descriptor?? [ 194.134070][ T4887] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 194.155442][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161826][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.208460][ T7799] device macsec0 entered promiscuous mode [ 194.255601][ T7799] device macsec0 left promiscuous mode [ 194.317387][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 194.522753][ T7737] loop2: detected capacity change from 0 to 65536 [ 194.609461][ T7737] XFS (loop2): Mounting V5 Filesystem [ 194.683383][ T7737] XFS (loop2): Ending clean mount [ 194.694557][ T7737] XFS (loop2): Quotacheck needed: Please wait. [ 194.730615][ T4365] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x25 dinode [ 194.777477][ T4365] XFS (loop2): Unmount and run xfs_repair [ 194.789855][ T7663] rtc_cmos 00:00: Alarms can be up to one day in the future [ 194.802084][ T4365] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 194.820040][ T7663] rtc_cmos 00:00: Alarms can be up to one day in the future [ 194.837980][ T4365] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 194.851483][ T7663] rtc_cmos 00:00: Alarms can be up to one day in the future [ 194.871498][ T7663] rtc_cmos 00:00: Alarms can be up to one day in the future [ 194.878819][ T7663] rtc rtc0: __rtc_set_alarm: err=-22 [ 194.886016][ T4365] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 194.914128][ T4365] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 194.933985][ T4365] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 194.937714][ T4887] gspca_vc032x: reg_w err -71 [ 194.952111][ T4365] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 194.967818][ T4887] vc032x: probe of 4-1:0.0 failed with error -71 [ 194.971637][ T4365] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 195.011332][ T4887] usb 4-1: USB disconnect, device number 12 [ 195.019411][ T4365] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 195.051114][ T4365] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 195.060162][ T7824] loop4: detected capacity change from 0 to 512 [ 195.106702][ T7824] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.107250][ T7737] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 195.153702][ T7824] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1059: invalid block [ 195.219864][ T7824] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1059: invalid indirect mapped block 10 (level 1) [ 195.234450][ T7824] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1059: invalid indirect mapped block 8 (level 1) [ 195.299164][ T7824] EXT4-fs (loop4): 1 truncate cleaned up [ 195.347354][ T7824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.430654][ T7824] EXT4-fs (loop4): shut down requested (2) [ 195.472184][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 195.700852][ T7835] loop3: detected capacity change from 0 to 256 [ 195.721360][ T7829] loop6: detected capacity change from 0 to 4096 [ 195.754507][ T7829] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 195.808870][ T4270] XFS (loop2): Unmounting Filesystem [ 195.853883][ T4485] blk_print_req_error: 26 callbacks suppressed [ 195.853905][ T4485] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.367674][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 196.909110][ T7867] loop2: detected capacity change from 0 to 64 [ 196.948425][ T7867] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 197.224098][ T7874] loop3: detected capacity change from 0 to 1024 [ 197.252087][ T7874] EXT4-fs: Ignoring removed oldalloc option [ 197.327952][ T7880] loop6: detected capacity change from 0 to 16 [ 197.350749][ T7874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 197.370667][ T7880] erofs: (device loop6): mounted with root inode @ nid 36. [ 197.530612][ T7880] overlayfs: failed to get metacopy (-117) [ 197.705858][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 197.948426][ T7897] loop2: detected capacity change from 0 to 4096 [ 197.990214][ T7897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.124322][ T7897] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1088: bg 0: block 66: padding at end of block bitmap is not set [ 198.208828][ T7897] fs-verity (loop2, inode 15): ext4_end_enable_verity() failed with err -117 [ 198.416391][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 198.817179][ T7938] loop6: detected capacity change from 0 to 512 [ 198.871313][ T4889] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 198.889329][ T7938] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 198.908619][ T7938] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.923050][ T126] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 199.029200][ T6510] EXT4-fs (loop6): unmounting filesystem. [ 199.091460][ T4889] usb 5-1: Using ep0 maxpacket: 32 [ 199.108906][ T4889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 199.111340][ T7660] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.130899][ T4889] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 199.143412][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 199.148944][ T4889] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 199.160494][ T4889] usb 5-1: Product: syz [ 199.169258][ T4889] usb 5-1: Manufacturer: syz [ 199.175682][ T126] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 199.188029][ T4889] usb 5-1: SerialNumber: syz [ 199.194311][ T126] usb 4-1: config 0 has no interface number 0 [ 199.209826][ T4889] usb 5-1: config 0 descriptor?? [ 199.216127][ T126] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 199.230910][ T126] usb 4-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.241519][ T7926] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.246078][ T126] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 199.269983][ T126] usb 4-1: config 0 interface 126 has no altsetting 0 [ 199.303228][ T7660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.304835][ T126] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 199.329225][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.329238][ T7660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.329273][ T7660] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 199.338056][ T126] usb 4-1: Product: syz [ 199.367332][ T126] usb 4-1: Manufacturer: syz [ 199.367804][ T7660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.372673][ T126] usb 4-1: SerialNumber: syz [ 199.387886][ T126] usb 4-1: config 0 descriptor?? [ 199.401382][ T7930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.415629][ T7660] usb 2-1: config 0 descriptor?? [ 199.492163][ T7659] usb 5-1: USB disconnect, device number 16 [ 199.613797][ T7947] loop6: detected capacity change from 0 to 32768 [ 199.682636][ T7660] usbhid 2-1:0.0: can't add hid device: -71 [ 199.689265][ T7660] usbhid: probe of 2-1:0.0 failed with error -71 [ 199.731470][ T7660] usb 2-1: USB disconnect, device number 9 [ 199.831963][ T126] ir_usb 4-1:0.126: IR Dongle converter detected [ 200.042833][ T126] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 200.205969][ T7949] loop2: detected capacity change from 0 to 32768 [ 200.237005][ T7949] XFS (loop2): Mounting V5 Filesystem [ 200.287859][ T7660] usb 4-1: USB disconnect, device number 13 [ 200.315109][ T7660] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 200.407340][ T7660] ir_usb 4-1:0.126: device disconnected [ 200.420631][ T7949] XFS (loop2): Ending clean mount [ 200.438608][ T7949] XFS (loop2): Quotacheck needed: Please wait. [ 200.509091][ T7949] XFS (loop2): Quotacheck: Done. [ 200.627735][ T4270] XFS (loop2): Unmounting Filesystem [ 200.650108][ T7967] program syz.1.1114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.684641][ T7965] loop6: detected capacity change from 0 to 4096 [ 200.778199][ T7965] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 201.048149][ T6510] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 201.062841][ T4887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.272498][ T4887] usb 2-1: Using ep0 maxpacket: 16 [ 201.298328][ T4887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.321151][ T4887] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 201.336531][ T4887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.352686][ T4887] usb 2-1: config 0 descriptor?? [ 201.383909][ T7985] netem: change failed [ 201.491234][ T7659] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 201.707877][ T7659] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.721321][ T7659] usb 7-1: config 0 has no interface number 0 [ 201.743127][ T7659] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 201.770586][ T4887] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 201.786838][ T7659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.806191][ T7659] usb 7-1: Product: syz [ 201.810530][ T7659] usb 7-1: Manufacturer: syz [ 201.816413][ T7659] usb 7-1: SerialNumber: syz [ 201.851852][ T7659] usb 7-1: config 0 descriptor?? [ 202.080094][ T7659] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 202.101610][ T7659] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.131315][ T7659] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 202.149712][ T7659] usb 7-1: media controller created [ 202.177315][ T7659] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.180140][ T4887] usb 2-1: USB disconnect, device number 10 [ 202.282968][ T7659] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 202.347630][ T7659] usb 7-1: USB disconnect, device number 6 [ 202.383970][ T7999] loop2: detected capacity change from 0 to 32768 [ 202.433137][ T7999] XFS (loop2): Mounting V5 Filesystem [ 202.554570][ T7999] XFS (loop2): Ending clean mount [ 202.562855][ T7999] XFS (loop2): Quotacheck needed: Please wait. [ 202.624533][ T7999] XFS (loop2): Quotacheck: Done. [ 202.686379][ T7999] XFS (loop2): User initiated shutdown received. [ 202.706657][ T7999] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 202.754333][ T7999] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 202.834396][ T4270] XFS (loop2): Unmounting Filesystem [ 203.306482][ T8012] loop3: detected capacity change from 0 to 32768 [ 203.338294][ T8012] XFS (loop3): Mounting V5 Filesystem [ 203.431729][ T8012] XFS (loop3): Ending clean mount [ 203.548284][ T4274] XFS (loop3): Unmounting Filesystem [ 203.561192][ T4887] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.667355][ T8029] loop6: detected capacity change from 0 to 32768 [ 203.751241][ T4887] usb 3-1: Using ep0 maxpacket: 16 [ 203.758078][ T4887] usb 3-1: config 0 has no interfaces? [ 203.763736][ T4887] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 203.773045][ T4887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.783229][ T4887] usb 3-1: config 0 descriptor?? [ 203.823525][ T8029] XFS (loop6): Mounting V5 Filesystem [ 203.831318][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.831740][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 203.997527][ T4887] usb 3-1: USB disconnect, device number 11 [ 204.031585][ T8029] XFS (loop6): Ending clean mount [ 204.052916][ T8029] XFS (loop6): Quotacheck needed: Please wait. [ 204.164642][ T8029] XFS (loop6): Quotacheck: Done. [ 204.279659][ T8056] input: syz1 as /devices/virtual/input/input35 [ 204.364171][ T6510] XFS (loop6): Unmounting Filesystem [ 204.424037][ T8062] input: syz1 as /devices/virtual/input/input36 [ 204.705731][ T8073] loop4: detected capacity change from 0 to 128 [ 204.732708][ T8073] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.882486][ T8073] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.930176][ T8080] loop2: detected capacity change from 0 to 1024 [ 205.095492][ T8080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.283423][ T8089] loop4: detected capacity change from 0 to 1024 [ 205.363847][ T8089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.385886][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 205.567204][ T8089] EXT4-fs (loop4): unmounting filesystem. [ 205.698034][ T8078] loop3: detected capacity change from 0 to 32768 [ 205.718194][ T8078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1154 (8078) [ 205.770113][ T8078] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.808052][ T8078] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 205.836783][ T8078] BTRFS info (device loop3): turning off barriers [ 205.865821][ T8078] BTRFS info (device loop3): setting nodatasum [ 205.886945][ T8078] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 205.919463][ T8078] BTRFS info (device loop3): use zstd compression, level 3 [ 205.945654][ T8078] BTRFS info (device loop3): using free space tree [ 206.083304][ T8127] udevd[8127]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 206.165432][ T8078] BTRFS info (device loop3: state M): enabling all of the rescue options [ 206.174177][ T8078] BTRFS info (device loop3: state M): ignoring data csums [ 206.181853][ T8078] BTRFS info (device loop3: state M): ignoring bad roots [ 206.188984][ T8078] BTRFS info (device loop3: state M): disabling log replay at mount time [ 206.196445][ T8132] loop4: detected capacity change from 0 to 1024 [ 206.198087][ T8078] BTRFS info (device loop3: state M): force clearing of disk cache [ 206.221078][ T8078] BTRFS info (device loop3: state M): enabling disk space caching [ 206.229017][ T8078] BTRFS info (device loop3: state M): resize thread pool 4 -> 2097158 [ 206.238585][ T8078] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 206.250264][ T8078] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 206.256888][ T8134] loop6: detected capacity change from 0 to 64 [ 206.263258][ T8078] BTRFS warning (device loop3: state M): remount supports changing free space tree only from ro to rw [ 206.289025][ T8132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 206.419187][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 206.463649][ T4274] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.906323][ T8150] capability: warning: `syz.2.1173' uses 32-bit capabilities (legacy support in use) [ 206.920657][ T8150] program syz.2.1173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.215516][ T8159] loop3: detected capacity change from 0 to 1024 [ 207.223015][ T8159] EXT4-fs: Ignoring removed nobh option [ 207.234686][ T8159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.303472][ T8159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.402156][ T8166] bridge0: port 3(vlan2) entered blocking state [ 207.408685][ T8166] bridge0: port 3(vlan2) entered disabled state [ 207.416703][ T8166] device vlan2 entered promiscuous mode [ 207.826788][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 207.846402][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 208.188736][ T8164] loop6: detected capacity change from 0 to 131072 [ 208.205215][ T8164] F2FS-fs (loop6): Test dummy encryption mode enabled [ 208.214099][ T8164] F2FS-fs (loop6): invalid crc value [ 208.269994][ T8173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.290833][ T8173] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 208.292157][ T8164] F2FS-fs (loop6): Found nat_bits in checkpoint [ 208.333580][ T8173] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 208.361329][ T8173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.373314][ T8164] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 208.387306][ T8173] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 208.402076][ T8173] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 208.413768][ T8183] loop4: detected capacity change from 0 to 7 [ 208.419694][ T8173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.445832][ T4485] Dev loop4: unable to read RDB block 7 [ 208.456792][ T8173] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 208.457843][ T4485] loop4: unable to read partition table [ 208.481147][ T8173] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 208.483350][ T4485] loop4: partition table beyond EOD, [ 208.500704][ T8173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.506482][ T4485] truncated [ 208.516550][ T8173] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 208.543951][ T8173] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 208.545178][ T8183] Dev loop4: unable to read RDB block 7 [ 208.573446][ T8173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.591619][ T8173] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 208.594126][ T8183] loop4: unable to read partition table [ 208.597678][ T8173] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 208.615472][ T8183] loop4: partition table beyond EOD, truncated [ 208.661393][ T8183] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.691550][ T8185] Dev loop4: unable to read RDB block 7 [ 208.697231][ T8185] loop4: unable to read partition table [ 208.717817][ T8185] loop4: partition table beyond EOD, truncated [ 208.752491][ T3637] Dev loop4: unable to read RDB block 7 [ 208.758113][ T3637] loop4: unable to read partition table [ 208.787579][ T3637] loop4: partition table beyond EOD, truncated [ 209.200136][ T8205] syz.2.1194 uses obsolete (PF_INET,SOCK_PACKET) [ 209.768533][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 210.311385][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.391243][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.471232][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.551465][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.604792][ T8264] loop6: detected capacity change from 0 to 1024 [ 210.631200][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.722606][ T8267] loop3: detected capacity change from 0 to 1024 [ 210.814660][ T8267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 210.911301][ T4887] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 210.933556][ T6026] hfsplus: b-tree write err: -5, ino 3 [ 210.961895][ T8267] overlayfs: failed to resolve './file0': -2 [ 210.993180][ T6510] hfsplus: node 4:3 still has 1 user(s)! [ 211.098018][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 211.132619][ T4887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.140700][ T4887] usb 3-1: config 0 has no interface number 0 [ 211.151174][ T4887] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 211.171777][ T4887] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 211.195297][ T4887] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.198337][ T8281] kernel read not supported for file / (pid: 8281 comm: syz.4.1225) [ 211.214910][ T4887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.223674][ T26] audit: type=1800 audit(1753151617.409:21): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1225" name=18 dev="mqueue" ino=46330 res=0 errno=0 [ 211.245139][ T4887] usb 3-1: config 0 descriptor?? [ 211.250803][ T8260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.277909][ T4887] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 211.509744][ T4887] usb 3-1: USB disconnect, device number 12 [ 211.515874][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 211.733309][ T26] audit: type=1326 audit(1753151617.929:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 211.811948][ T26] audit: type=1326 audit(1753151617.929:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 211.897436][ T26] audit: type=1326 audit(1753151617.929:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 211.971312][ T26] audit: type=1326 audit(1753151617.929:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 211.991836][ T8305] device syzkaller1 entered promiscuous mode [ 211.993497][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.041223][ T26] audit: type=1326 audit(1753151617.929:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 212.063398][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.085605][ T26] audit: type=1326 audit(1753151617.929:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 212.113607][ T26] audit: type=1326 audit(1753151617.929:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 212.136863][ T26] audit: type=1326 audit(1753151617.929:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 212.159067][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.176443][ T26] audit: type=1326 audit(1753151617.929:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f199ff8e9a9 code=0x7ffc0000 [ 212.322044][ T7659] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 212.391333][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 212.471554][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 212.526098][ T7659] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 212.528060][ T8303] loop3: detected capacity change from 0 to 40427 [ 212.551373][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 212.574175][ T7659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.595224][ T8303] F2FS-fs (loop3): invalid crc value [ 212.628187][ T8303] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.629118][ T7659] usb 7-1: config 0 descriptor?? [ 212.634909][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 212.719118][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 212.855584][ T8303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.926679][ T7659] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 212.969316][ T8303] syz.3.1234: attempt to access beyond end of device [ 212.969316][ T8303] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.019504][ T8303] syz.3.1234: attempt to access beyond end of device [ 213.019504][ T8303] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.153496][ T4274] syz-executor: attempt to access beyond end of device [ 213.153496][ T4274] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 213.743161][ T7659] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 213.771264][ T7659] asix: probe of 7-1:0.0 failed with error -71 [ 213.783495][ T8346] loop2: detected capacity change from 0 to 40427 [ 213.815199][ T7659] usb 7-1: USB disconnect, device number 7 [ 213.853799][ T8346] F2FS-fs (loop2): invalid crc value [ 213.886216][ T8346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.037981][ T8346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 214.090488][ T8350] loop4: detected capacity change from 0 to 32768 [ 214.157589][ T8356] f2fs_ckpt-7:2: attempt to access beyond end of device [ 214.157589][ T8356] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.230774][ T8350] XFS (loop4): Mounting V5 Filesystem [ 214.480756][ T8350] XFS (loop4): Ending clean mount [ 214.650531][ T8363] loop3: detected capacity change from 0 to 32768 [ 214.686283][ T4264] XFS (loop4): Unmounting Filesystem [ 214.703057][ T8363] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1257 (8363) [ 214.781106][ T8363] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 214.822070][ T8363] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 214.862203][ T8363] BTRFS info (device loop3): using free space tree [ 215.141984][ T8399] loop2: detected capacity change from 0 to 164 [ 215.148428][ T8363] BTRFS info (device loop3): enabling ssd optimizations [ 215.187568][ T8396] loop6: detected capacity change from 0 to 1024 [ 215.252719][ T8396] EXT4-fs: Ignoring removed nobh option [ 215.303249][ T8396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.337495][ T8401] udevd[8401]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 215.385641][ T4274] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 215.437343][ T8396] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 215.701916][ T4887] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.752109][ T4486] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (4486) [ 215.773095][ T6510] EXT4-fs (loop6): unmounting filesystem. [ 215.848386][ T8417] udevd[8417]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 215.904462][ T4887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.956006][ T4887] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 215.971804][ T8416] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.977937][ T8416] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 215.998220][ T4887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.007576][ T8416] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 216.027746][ T4887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.036096][ T8416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.068460][ T8416] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 216.075098][ T4887] usb 3-1: Product: syz [ 216.082999][ T4887] usb 3-1: Manufacturer: syz [ 216.087700][ T4887] usb 3-1: SerialNumber: syz [ 216.097801][ T4887] cdc_mbim 3-1:1.0: skipping garbage [ 216.108934][ T8416] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 216.116755][ T8416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.123000][ T8416] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 216.129207][ T8416] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 216.136974][ T8416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.143747][ T8416] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 216.151434][ T8416] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 216.158974][ T8416] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.165312][ T8416] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 216.181395][ T8416] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 216.303566][ T8406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.383286][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 216.457615][ T4368] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 216.663133][ T4368] usb 2-1: Using ep0 maxpacket: 16 [ 216.670291][ T4368] usb 2-1: config 0 has an invalid interface number: 198 but max is 0 [ 216.694395][ T4368] usb 2-1: config 0 has no interface number 0 [ 216.716627][ T4368] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 216.755178][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.778606][ T4368] usb 2-1: Product: syz [ 216.796651][ T4368] usb 2-1: Manufacturer: syz [ 216.805787][ T4368] usb 2-1: SerialNumber: syz [ 216.822221][ T4368] usb 2-1: config 0 descriptor?? [ 216.847822][ T4368] usb_ehset_test: probe of 2-1:0.198 failed with error -32 [ 216.957300][ T8406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.976003][ T4887] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 217.011584][ T4887] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 217.064568][ T4887] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, be:9a:11:92:a4:3b [ 217.066541][ T4368] usb 2-1: USB disconnect, device number 11 [ 217.237642][ T7659] usb 3-1: USB disconnect, device number 13 [ 217.252957][ T3933] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 217.254710][ T7659] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 217.402960][ T8434] loop3: detected capacity change from 0 to 40427 [ 217.430376][ T8434] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 217.440609][ T8434] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 217.456254][ T8434] F2FS-fs (loop3): invalid crc value [ 217.480705][ T8434] F2FS-fs (loop3): Found nat_bits in checkpoint [ 217.576121][ T8434] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 217.586668][ T8434] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.688806][ T34] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 217.719063][ T34] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 217.991501][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.998723][ T8461] loop6: detected capacity change from 0 to 2048 [ 218.050084][ T8461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.081332][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.151452][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.157549][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.231233][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 218.626186][ T8484] can0: slcan on ttyS3. [ 218.646136][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 218.762265][ T8484] can0 (unregistered): slcan off ttyS3. [ 218.779669][ T8494] loop4: detected capacity change from 0 to 1024 [ 218.812747][ T8494] EXT4-fs: Ignoring removed nobh option [ 218.828604][ T8494] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.940625][ T8494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.075803][ T8505] loop2: detected capacity change from 0 to 2048 [ 219.176556][ T8509] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.244993][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 219.695059][ T8531] overlayfs: upper fs does not support file handles, falling back to index=off. [ 219.719484][ T8531] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 219.940659][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 219.951025][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:8 Not tainted 6.1.146-syzkaller #0 [ 219.959298][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.969354][ T4282] Workqueue: hci0 hci_rx_work [ 219.974056][ T4282] Call Trace: [ 219.977330][ T4282] [ 219.980255][ T4282] dump_stack_lvl+0x168/0x22e [ 219.984940][ T4282] ? show_regs_print_info+0x12/0x12 [ 219.990133][ T4282] ? load_image+0x3b0/0x3b0 [ 219.994641][ T4282] sysfs_create_dir_ns+0x252/0x280 [ 219.999745][ T4282] ? hci_rx_work+0x3eb/0xd40 [ 220.004329][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 220.009000][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 220.014218][ T4282] kobject_add_internal+0x6b8/0xc80 [ 220.019417][ T4282] kobject_add+0x152/0x210 [ 220.023835][ T4282] ? kobject_init+0x1d0/0x1d0 [ 220.028515][ T4282] ? klist_children_get+0x50/0x50 [ 220.033533][ T4282] ? get_device_parent+0x121/0x3f0 [ 220.038640][ T4282] device_add+0x483/0xfb0 [ 220.042964][ T4282] ? kmem_cache_free+0xf7/0x290 [ 220.047812][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 220.052743][ T4282] le_conn_complete_evt+0xd1d/0x1320 [ 220.058111][ T4282] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 220.064412][ T4282] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 220.070056][ T4282] ? skb_pull_data+0xf7/0x200 [ 220.074737][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 220.080292][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 220.086356][ T4282] hci_event_packet+0x791/0x1210 [ 220.091299][ T4282] ? bis_list+0x280/0x280 [ 220.095619][ T4282] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 220.101512][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 220.106615][ T4282] ? mce_start+0x60/0x140 [ 220.110940][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 220.116141][ T4282] hci_rx_work+0x3eb/0xd40 [ 220.120557][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 220.125413][ T4282] ? process_one_work+0x7a1/0x1160 [ 220.130517][ T4282] process_one_work+0x898/0x1160 [ 220.135458][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 220.141087][ T4282] ? _raw_spin_lock_irq+0xab/0xe0 [ 220.146109][ T4282] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 220.151473][ T4282] ? kthread_data+0x4b/0xc0 [ 220.155981][ T4282] worker_thread+0xaa2/0x1250 [ 220.160664][ T4282] ? __kthread_parkme+0x162/0x1c0 [ 220.165687][ T4282] kthread+0x29d/0x330 [ 220.169753][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 220.174771][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 220.179357][ T4282] ret_from_fork+0x1f/0x30 [ 220.183781][ T4282] [ 220.188630][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 220.195022][ T4282] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.208422][ T4282] Bluetooth: hci0: failed to register connection device [ 220.219431][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 220.231327][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 220.237407][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 220.311347][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 220.761504][ T8544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.778571][ T8544] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.788747][ T8544] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 220.802530][ T8544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.810290][ T8544] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.822444][ T8544] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 220.830020][ T8544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.840866][ T8544] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.856579][ T8544] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 220.865336][ T8544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.877591][ T8544] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.886314][ T8544] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 220.900943][ T8544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.910435][ T8544] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 220.921272][ T8544] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 221.075535][ T8552] loop3: detected capacity change from 0 to 131072 [ 221.083831][ T8552] F2FS-fs (loop3): Test dummy encryption mode enabled [ 221.126001][ T8552] F2FS-fs (loop3): invalid crc value [ 221.160947][ T8552] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.221181][ T8552] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.256590][ T8569] loop4: detected capacity change from 0 to 64 [ 221.410059][ T8572] loop2: detected capacity change from 0 to 16 [ 221.472453][ T8572] erofs: (device loop2): mounted with root inode @ nid 36. [ 221.538272][ T8576] loop4: detected capacity change from 0 to 512 [ 221.566328][ T8576] EXT4-fs: Ignoring removed orlov option [ 221.591002][ T8576] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 221.612702][ T8574] loop2: detected capacity change from 16 to 15 [ 221.654526][ T4270] erofs: (device loop2): erofs_read_inode: unsupported i_format 385 of nid 41 [ 221.714984][ T8576] EXT4-fs (loop4): 1 orphan inode deleted [ 221.720784][ T8576] EXT4-fs (loop4): 1 truncate cleaned up [ 221.762708][ T4270] erofs: (device loop2): erofs_read_inode: unsupported i_format 385 of nid 41 [ 221.779617][ T8576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.850336][ T8576] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 221.879085][ T8576] EXT4-fs (loop4): Remounting filesystem read-only [ 221.959337][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 222.077816][ T8583] loop4: detected capacity change from 0 to 512 [ 222.111486][ T5847] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 222.121360][ T8583] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.150777][ T8583] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.314857][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.334742][ T5847] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.358078][ T5847] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.381929][ T5847] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 222.417463][ T5847] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 222.434600][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 222.519119][ T8581] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 222.539678][ T5847] hub 7-1:1.0: bad descriptor, ignoring hub [ 222.587683][ T5847] hub: probe of 7-1:1.0 failed with error -5 [ 222.612096][ T5847] cdc_wdm 7-1:1.0: skipping garbage [ 222.626122][ T5847] cdc_wdm 7-1:1.0: skipping garbage [ 222.643243][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 222.662029][ T5847] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 222.667984][ T5847] cdc_wdm 7-1:1.0: Unknown control protocol [ 222.759618][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.881205][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.953349][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.218757][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.410151][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.510398][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.656475][ T7659] usb 7-1: USB disconnect, device number 8 [ 224.688671][ T46] device hsr_slave_0 left promiscuous mode [ 224.697687][ T46] device hsr_slave_1 left promiscuous mode [ 224.705165][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.714582][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.727562][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.735298][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.743252][ T46] device vlan2 left promiscuous mode [ 224.748879][ T46] bridge0: port 3(vlan2) entered disabled state [ 224.757820][ T46] device bridge_slave_1 left promiscuous mode [ 224.764223][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.772639][ T46] device bridge_slave_0 left promiscuous mode [ 224.778793][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.805392][ T46] device veth1_macvtap left promiscuous mode [ 224.811678][ T46] device veth0_macvtap left promiscuous mode [ 224.817813][ T46] device veth1_vlan left promiscuous mode [ 224.824611][ T46] device veth0_vlan left promiscuous mode [ 225.350974][ T46] team0 (unregistering): Port device team_slave_1 removed [ 225.401704][ T46] team0 (unregistering): Port device team_slave_0 removed [ 225.449042][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.498589][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.015602][ T46] bond0 (unregistering): Released all slaves [ 226.539086][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.642731][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.698646][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.768082][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.891409][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.965824][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.040334][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.127317][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.268193][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.343982][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.414344][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.480104][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.675320][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.745429][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.828160][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.900632][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.345320][ T46] device hsr_slave_0 left promiscuous mode [ 230.352171][ T46] device hsr_slave_1 left promiscuous mode [ 230.358569][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.366367][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.374061][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.381544][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.389655][ T46] device bridge_slave_1 left promiscuous mode [ 230.400579][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.409150][ T46] device bridge_slave_0 left promiscuous mode [ 230.415774][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.427879][ T46] device hsr_slave_0 left promiscuous mode [ 230.436794][ T46] device hsr_slave_1 left promiscuous mode [ 230.443884][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.451382][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.458915][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.466623][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.474513][ T46] device bridge_slave_1 left promiscuous mode [ 230.480807][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.490985][ T46] device bridge_slave_0 left promiscuous mode [ 230.497361][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.509733][ T46] device hsr_slave_0 left promiscuous mode [ 230.516694][ T46] device hsr_slave_1 left promiscuous mode [ 230.523280][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.530719][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.538944][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.546463][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.554359][ T46] device bridge_slave_1 left promiscuous mode [ 230.560581][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.570366][ T46] device bridge_slave_0 left promiscuous mode [ 230.576787][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.588273][ T46] device hsr_slave_0 left promiscuous mode [ 230.594907][ T46] device hsr_slave_1 left promiscuous mode [ 230.605668][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.613300][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.621456][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.628878][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.637236][ T46] device bridge_slave_1 left promiscuous mode [ 230.643754][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.652777][ T46] device bridge_slave_0 left promiscuous mode [ 230.658940][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.728717][ T46] device veth1_macvtap left promiscuous mode [ 230.734842][ T46] device veth0_macvtap left promiscuous mode [ 230.740951][ T46] device veth1_vlan left promiscuous mode [ 230.746861][ T46] device veth0_vlan left promiscuous mode [ 230.754612][ T46] device veth1_macvtap left promiscuous mode [ 230.760669][ T46] device veth0_macvtap left promiscuous mode [ 230.766809][ T46] device veth1_vlan left promiscuous mode [ 230.772675][ T46] device veth0_vlan left promiscuous mode [ 230.779295][ T46] device veth1_macvtap left promiscuous mode [ 230.785748][ T46] device veth0_macvtap left promiscuous mode [ 230.792008][ T46] device veth1_vlan left promiscuous mode [ 230.799469][ T46] device veth0_vlan left promiscuous mode [ 230.807753][ T46] device veth1_macvtap left promiscuous mode [ 230.815533][ T46] device veth0_macvtap left promiscuous mode [ 230.821659][ T46] device veth1_vlan left promiscuous mode [ 230.827434][ T46] device veth0_vlan left promiscuous mode [ 231.540574][ T46] team0 (unregistering): Port device team_slave_1 removed [ 231.591666][ T46] team0 (unregistering): Port device team_slave_0 removed [ 231.636763][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.687135][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.056988][ T46] bond0 (unregistering): Released all slaves