last executing test programs: 4m5.983691712s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000000040000000']) 4m5.8384366s ago: executing program 2 (id=16): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xf0bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x400d4) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) 4m5.689484868s ago: executing program 2 (id=20): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0xfa, 0xa296}}]}, 0x38}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840) 4m5.513395907s ago: executing program 2 (id=24): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 4m5.375091995s ago: executing program 2 (id=25): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000280)={[{0x40, 0x4e00, "c4375a05a0d1f488a8f68cf89d1d73f8bae4949aee15ca6bc355fc079c33f906134897c186316699e7efc56abe3214a89b553e54671f4a47207c120de4a86edc"}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m4.733005218s ago: executing program 2 (id=36): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000001c0), 0x4) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="a9df76e66f17", 0x6}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4060019}, 0x34004840) 4m4.545648498s ago: executing program 32 (id=36): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000001c0), 0x4) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="a9df76e66f17", 0x6}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4060019}, 0x34004840) 1m41.377718715s ago: executing program 4 (id=1818): unshare(0x2a020400) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000025, {0x2, 0xf0}, 0xfe}, 0x18) 1m41.198856255s ago: executing program 4 (id=1821): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000180)=""/131, 0x83, 0x9) 1m41.09071021s ago: executing program 4 (id=1823): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8"], 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a00000000000500030005000000050008000100000004000600050009"], 0x6c}}, 0x0) 1m40.954418777s ago: executing program 4 (id=1825): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="a5e6efc35603e7564b7345d63ddd28921043052db1e8293a3cccdcbbfe66420d245c069405350a418630348ac28237dffd6396393abb1c54e8b62fa09afa9dd6143056389d59d83d642d9c199a7ee26b39bb83b6c59ab057c4cdda6edf7b8eac48ee1f2a5e0c4e0ccc25cf9b5449", @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x5de, &(0x7f0000000a00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m40.584825327s ago: executing program 4 (id=1828): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000004a00010200000000000000000a", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x10) 1m39.808693859s ago: executing program 4 (id=1833): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f00000001c0)={[{@rodir}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}]}, 0x3, 0x357, &(0x7f0000000c80)="$eJzs3U9oHFUYAPBvO5vdtFCTg1AUhNGboKGteNBTQkmhuBeVxT8HcbGpSjYWsriYHrKNF/EoeNSTNw968NCzCIp48+DVClIVD9pbweLI7sxmZ7ObNBWSGvz9DsuX975v3nvZITuZZN++uhirF2fi0s2bN2J2thLVxXOLcasS85HE0NWYVJvSBgAcDbeyLP7MchOdM1NLKocwLQDgAA1e/18/WWp59+u98jOv/gBw5BW//x/fK2d2t47LBzIlAOCATdz/f2Ssuzb+p/5q6b8CAICj6vmXXn5mqRHxXJrORqy91212m/H0qH/pUrwZ7ViJ0zEXtyPyC4X+Q2XweP5CY/l0mqa9+GU+mv2KbjNirddt5lcKS8mgvh5nYi7mi/riaiPLsuT8F43lM+lARFztDcaPtUq3ORMnivF/PBErcTbSuH+iPuJCY/lsWhyguTas70Vsje5b9Oe/EHPx/WtxOdpxMfq1w8uaxvLmmTQ9lzXG6rvN+iAvt+sdEAAAAAAAAAAAAAAAAAAAAAAA+FcW0m3z2/vfZKP9exYWpvQP9sfJ64v9gbby/YGyehZZ9sc7jzffT2Jsf6Cd+/N0m9U4dm+XDgAAAAAAAAAAAAAAAAAAAP8ZnY1atNrtlfXOxpXVctBb72wci4h+y1vffvbV8ZjMuUNQLcYodaVF05XVVpYMk7NkLKcIkv7gw5ZPr23PuJxT317F1GnUd+9qt08+/PNHo5aHkuGR/x7lJDF9gcmOaZSDtfvyKd3NN2o7OHuHnOtZlu1WvvnKZFVUIqp3/8TtHWT94JsbbzzwROfUk4OWL7Pco4/NvXD9w09+W221+yPH4BmsrXduZ6ut4uvpJ9u0YHGQnJTOn0rkQaV8JlT3Os7WeEsr+eH3Fx/84Lv9rTQrt7w9JSfJl/P5zq5aHvSnuaPr+LSxZqac/AcQnPp4sXVt86df91tV+iFhow4AAAAAAAAAAAAAAAAAADgUpfeKF4o3+87sVfXUswc/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PKPP/y8FWxMt+wn+6sVkV31lvRNRu9fLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+6fAAAA//9RJ2zt") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m39.566702001s ago: executing program 33 (id=1833): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f00000001c0)={[{@rodir}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}]}, 0x3, 0x357, &(0x7f0000000c80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.871353649s ago: executing program 0 (id=2938): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b80)=ANY=[], 0x41, 0x5e97, &(0x7f0000005e00)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPzQDT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvPP2M//n3k/4/9868/OP37v/3u3sk/nnq73f6n9X/c+8nddFsAAADAnlRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/Id7yn8gfwAAAAAAmGH57//LU/v+t7fjerP5l7M7Ez3t+9+VKfUBAAAAAAAAAF62Fx3/7zHj/wEAAMDMqj+r1/589Mmy3T5j18uv9CJeaa0PFCadLLPUdT8AAAAAAAAAAAAAoCTD7WN4r/Qi5iLilaWlqqrqS1O73qsX3f6gK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+9AxviIejqr6yhcZ2TZM+L09qb19ffVujavAMHZuODgMHgIjYfjV66BXpkKmqY9H1uxwOBo//w8fjn2fR9f0UAAAA2H9VVVW99HPex9N3/v2uOwUATEV+/W9/L6BWq9Vqtfrw1U3VeHebRURsNLep3zPcHXdlAMDs2ogvuu4CHZJ/0YYR8XrXnQBmWq/rDrAvHj66s9ZL+faarwdpfPd8LMiO/Dd6W9vl7cdNJ2kfYzKt+9dmDOLVXfrz2pT6MEty/v12/le320dpvf3Of1p2y7/ez+UO+tO1nP+gnX/L4cm/Pzb/UuX8h3vKfyB/AAAAAACYYfnv/8u+/827DAAAAAAAAAAHzsNHd9byea/5+/8vjVnP+Z+HU86/J/8i5fz7rfy/1lpv0Jh/8P6T/P/16M7aj/7w+fE8fdb85/NML92zeuke0Uu31Bum6XPv2vy4hZtzg1F9S3O9/mCYjvmp5j6M63Ej1mN1x7r99P/xpP3cjva6p3Pprrzdfn5H+3C7vbH9hR3tc+l3B6rF3H4m1uLncSM+2Gqv2+Yn7P/ChPZqQnvOf+DxX6Sc/7BxqfNfSu291rT24LP+/zzum9Nxt/Peb+/dX93/3ZloMwaP962p3r8THfRn6//kyCh+eWv95plfX7t9++a5SJMdS89HmrxkOf+5dHn8/P/mdnt+3m8+Xh98Ntpz/rNiM4a75v9mY77e35NT7lsXcv6jdMn5f5Daxz/+D3L+uz/+T3XQHwAAAAAAAAAAAAAAAHiaqqq2ThF9LyIupfN/ujo3EwCYrvz6XyV5uVqtVqvV6sNXN1XjvdssIuLvzW3q9wy/GXdlAMAs+09EfN51J+iM/AuWf++vnr7VdWeAqbr1yac/vXbjxvrNW133BAAAAAAAAAB4Xnn8z5XG+M9vRcRya70d47++HysvOv7nMM88HmD0+Qf63ovN/mjQbww3/kY8ffzvE/H08b+HE25vbkL7aEL72EHMGxYmtI890aMh5/9GY7zzOv/jreHXSxj/tT3mfQly/ica9+c6/6+21mvmX/3lIOff35H/2dsf/+LsrU8+PX3942sfrX+0/rOLq6uXLlx+Z/Xy6tkPr99YT/922OP9lfPPY187DrQsOf+cufzLkvP/cqrlX5ac/1dSLf+y5Pzz+z35lyXnnz/7yL8sOf+TqZZ/WXL+X0+1/MuS8z+VavmXJef/dqrlX5ac/+lUy78sOf8zqZZ/WXL+Z1Mt/7Lk/PM3XPIvS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl5/9OquVflpz/pVTLvyw5/8upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1fIvS87/3VTLvyxPfv/fjBkzZvJM189MAAAAAAAAAAAAAEDbNA4n7nofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIdZZ3AD97c9YOly2E4IYAG8cEkyzZ9T2mNZhbSRPSUiC0pRfj2mtj8K1em1sjxSi0RGrURiof4EO5Fal8qYgAVVSlyJVagQQS+UQrtQ2pAlVEoTW0H6AibDUz7/PuzHivZzb2zDm/nxQ/9uyZmXfOvDO7/3X+awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN1Nr5398FBRFI3/mr9MFMUzGr/fODnR+OPWV1ztFQIAAAC9eqr566Vn5wsOrOJKbcd89UXf/OL8/Px88dh3X/b8j8zP5w9MFsXENUXR/Fh48p6/3dp+TPJAMT403Pbn4RXufmSFj4+u8PGxFT6+YYWPX7PCx8dX+PhlJ+AyG1vfj2ne2Nbmbydap7S4rhhrfmzrItd6YOia4eH4Xk7TUPM682NHi+PFiWK2mOk4vnXsUPP4L9/UuK87i7iv4bb7urGxQ3543+FYw1A6x1s77mvhNsMPXl1M/uiH9x1+08cev2GxueJp6Li91jq3bWms80PpktZah4pr8jmJdQ63rfPGRZ6TkY51DjWv1/h99zovrXKdIwvLvKK6n/PxYrj5+0eb52m0/dt6+TzdmC778c1FUVxYWHb3MZfdVzFcbOq4ZHjh+Rlv7cjGbTS20nOK0TXt05tWsU8b88jWzn3a/ZqI5/+mdL3RJdbQ/jT94IMbLnve17pPQ+NRL/Va6d6D6/1a6Zc9GPvi0eaDfnDRPbg1Pf77bll6Dy66dxbZg/lxt+3BLSvtweENI8015ydhqHmdhT24veP4keY9DTXnk7csvwenz508Mz33/g+8/PjJQ8dmj82e2jUzs2fn3t0ze2emjx4/MZt+LXm2+9+mYji/BrakcxevgZd2Hdu+Vec/tX6vw/FlXocTXceu9+twtPvBDV2ZF+Tle7r12nhr46SPPzRcLPEaaz4/t/b+OsyPu+11ONr2Olz0c8oir8PRVbwOG8ecuXV1X7OMtv232Bqers8FE217sPvrke49uN5fj/TLHhxP++Jfb136c8GNab0PTq3165GRy/ZgfrjpvadxSf56f/yO5lhsX97Q+MC1G4rzc7Nnb3/foXPnzm4v0rgintu2V7r366a2x1Rctl+H17xfD3z469+4YZHLJ9K5Gn9545fxJZ+rxjG7bl/+uWp+dlv8fHZcuqNIY51d6fO52GfzxvnMWXKZ89k45kPTvX8tnnNp2/vv2BLvv5H7f9a8n635ph4YGRttvX5H8tkZ63g/7nyqRpvvXUPN+740vbr347H035V+P75umffjzV3Hrvf78Vj3g4v346GVvtvRm+7nczztkxMzy78fN47ZvGOte3J02ffjm9McSuf/ZSkp5FzUtneW2rf5vkZHx9LjGo176NynOzuOH0vZrHFfn91Rbp9uu7l1WyP50S24Uvt0suvY9d6n+f1qqX06tNJ338rpfj7H0764bufy+7RxzMVdvb93bozftr13blhpD46NbGiseSxvwtb7/fzG2IO3F4eL08WJ4kjzoxua+2moeV9Tu1e3Bzek/670e+XmZfbgtq5j13sP5s9jS+29odHLH/w66H4+x9O++Oju5fdg45jX7V3fr123pUvyMW1fu3Z/f22p73nd0HWans7veTXW+Q97l//ebOOYE3esNWcuf55uS5dcu8h56n79LvWaOlJcmfO0Oa3z+3csfZ4a62kc85F9q9xPB4qi+MLdB5rf701/v/L589/6YsffuxxofexL+xZu67KvOhb7e58v3H3g4j/f9ZO1PEYA+tvPmr9u3dT6XNf2N1Or+ft/AAAAYCBE7h9OM5P/AQAAoDIi98f/FZ7J/wAAAFAZkftH08xqkv8f/Lfnvfun9xe5mT+fxMfjNJx5onVcdFw/mf48Ob+gcflrPvOPX3/7/au77+GiKH56178sevyDT8S6Wh5O65z8dufll9n87VXd/zvuXTiuvQM4kW4/Hk/3Nvjyfz/RvN7kvta8eNfF5nzzhQcfaHz80r7Wn6M7+eT/tI7781TmPXD07zuuv+2x1v1tfWz5xxXX+9wbN979grct3F9cb2jLs5oP46OvbN1u/Nybh1/bOv5SOm6p9f/dH3/2c43j3/eSxdd///Di638y3e530vzJU63L289p489xvT9M64/7i+vd/umvLLr+R97QOv6R9Lx8Ms3u9b/6T1/4VPv5ivXH/Rx4vHW9uP+Zv/6P5vXi9uL2u9c//qonOs5H9+1f/Hzrdva/539H2o+Py+N+8r57vPN5btxO+34Ln/2jix3nufj31vX+pmv9cXtnHl98/bd1rfPM9k3N6y9VGf/47HcWfbyxngN/9WjH43nke+n8veae5u2O/zjtx/Tx/3u4dXvdPy3h0e91vp/E8Z+caL0u4/amu9b/cNf6L7y4ce5WXv+dP2qt/5FXfbXz+fjP1joO/KA1V1r/sU98s+P6n/pW6/k4+96pU6fnzh+PDvVE+tk/Z77bur1rxjduuvYZz3zWs9N7ZfefD54+987Zs5MzkzNFMTmAPxLv6V7/p9P8r9a4sN63f19RFO9t+7x26+tb+6940aU/efGdn3lnHPdPr2td/tDdrc9bL03HPZwuv5Ce77idj3+s9fmw1/XH/Sw183pX6fzXPrxnVQemx//Rm65vvsqGLrYu7n6/Kite548/r/N1/9hbW/NL6bzOp5/MvOX6rzWP677/+NkID72l9fqOr+Ti+r2u/y/T833Pd1q3H7eb15u+jvnK5s73x3h+vnR/108amGj9FI8L6f2juND6eBwVX1M9dOn6tSxzSXPvn5s+cfzU+fdNn5udOzc99/4PHDx5+vypcwebP5vz4LtWuv7C63tT8/V9ZHbPrqL5aj/dGk+zq73+M/cePrJ35pYjs0cPnT967t4zs2ePHZ6bOzx7ZO6WQ0ePzr53pesfP7J/+459O/fumDp2/Mj+O/bt27lv6vip041ltBa1gj0z7546dfZg8ypz+3ft2757966ZqZOnj8zu3zszM3V+pes3PzdNNa79nqmzsycOnTt+cnZq7vgHZvdv37dnz44Vf7rfyTNH5yanz54/NX1+bvbsdOuxTJ5rXtz43LfS9aFh7hMbF/08NZS+et9+257881kbPvPBJW+qdUjXDxD9fvpZNN/4iz/bvZo/R+4fSzOrSf4HAACAOojcvyHNTP4HAACAyojcf02amfwPAAAAlRG5fzzNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv/Goqhl/gcAAIA6iNy/Kc1M/gcAAIDKiNx/bZqZ/A8AAACVEbn/GWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+5+ZZlaT/A8AAAB1ELn/WWlm8j8AAABURuT+Z6eZyf8AAABQGZH7J9LMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j9/9cmllN8j8AAADUQeT+56SZyf8AAABQGZH7n5tmJv8DAABAZUTuvy7NrCb5X/9f/79/+v8LtVj9f/1//f/Bof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/89LMapL/AQAAoA4i91+fZib/AwAAQGVE7n9+mpn8DwAAAJURuX9zmllN8r/+v/5///T//fv/Qf9f/3+Q6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/82lmNcn/AAAAUAeR+29IM5P/AQAAoDIi978gzUz+BwAAgMqI3H9jmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+F6aZ1ST/AwAAQB1E7n9Rmpn8DwAAAJURuf/FaWbyPwAAAFRG5P7JNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9N6WZ1ST/AwAAQB1E7t+SZib/AwAAQGVE7r85zUz+BwAAgMqI3L81zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/S9LMapL/AQAAoA4i99+SZib/AwAAQGVE7n9pmpn8DwAAAJURuX9bmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+l6WZ1ST/AwAAQB1E7r81zUz+BwAAgMqI3H9bmpn8DwAAAJURuX8qzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/y9PMapL/AQAAoA4i99+eZib/AwAAQGVE7p9OM5P/AQAAoDIi98+kmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7fnmZWk/wPAAAAdRC5f0eamfwPAAAAlRG5f2eamfwPAAAAlRG5f1eaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P7daWY1yf8AAABQB5H796SZyf8AAABQGZH796aZyf8AAABQGZH770gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COu/Iv3/B5b+MQD6/1RBv/X/I/fvSzOrSf4HAACAOojc/4o0M/kfAAAAKiNy/y+kmcn/AAAAUBmR+38xzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCs37//r/9P7/qt/x+5f3+aWU3yPwAAANRB5P5XppnJ/wAAAFAZkftflWYm/wMAAEBlRO4/kGZWk/yv/6//r/+v/x/0/wek//8HqzjmCtL/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/9VpZjXJ/wAAAFAHkftfk2Ym/wMAAEBlRO5/bZqZ/A8AAACVEbn/dWlmNcn/+v/6//r/+v9B/39A+v99Rv9f/78M/X/9/0FYv/6//j+967f+f+T+16eZ1ST/AwAAQB1E7v+lNDP5HwAAACojcv8b0szkfwAAAKiMyP13ppnVJP/r/+v/P139/w3pNvT/2/ad/n+T/r/+/1ro/+v/F2vp/w+lV7D+f9PV7s8P+vr1//X/6V2/9f8j9/9ymllN8j8AAADUQeT+u9LM5H8AAACojMj9d6eZyf8AAABQGZH735hmVpP83/f9/3SH+v9L9v+f2Zj92P8P+v9t+07/v0n/X/9/LfT/9f8L//5/aVe7Pz/o69f/1/+nd/3W/4/cf0+aWU3yPwAAANRB5P5fSTNrz/9L/WUZAAAAMBAi9/9qmpm//wcAAIDKiNz/pjSzmuT/vu//J/r/g/fv/wf9/7Z9p//fpP+v/78W+v/6/4X+f2lXuz8/6OvX/9f/p3f91v+P3P9raWY1yf8AAABQB5H735xmJv8DAABAZUTuf0uamfwPAAAAlRG5/61pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfvvTTOrSf4HAACAOojc/7Y0M/kfAAAAKiNy/6+nmcn/AAAAUBmR+38jzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/b6aZ1ST/AwAAQB1E7n97mpn8DwAAAJURuf+30szkfwAAAKiMyP2/nWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/3fSzGqS/wEAAKAOIvf/bpqZ/A8AAACVEbn/YJqZ/A8AAACVEbn/HWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+w+lmdUk/wMAAEAdRO7/vTQz+R8AAAAqI3L/4TQz+R8AAAAqI3L/kTSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v9huSfkaq9/vfr/I4X+P/XVb/3/yP2zaWY1yf8AAABQB5H7j6aZyf8AAABQGZH7j6WZyf8AAABQGZH735lmVpP8r/+v/6//r/8f9P/1/8vQ/9f/L0P/X/9/ENbv3//X/6d3/db/j9x/PM2sJvkfAAAA6iBy/7vSzOR/AAAAqIzI/e9OM5P/AQAAoDIi959IM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9x/Ms2sJvkfAAAA6iBy/6k0M/kfAAAAKiNy/+k0M/kfAAAAKiNy/5k0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP2/n2ZWk/wPAAAAdRC5/2yamfwPAAAAlRG5fy7NTP4HAACAyojcfy7NrCb5X/9f/1//X/8/6P/r/5eh////7N3Vi2DZEcfxJiTQT/lv4+7u7u6+cXd3d3d3z0NIuqpCspuEPXdm99yqz+eloBeWw9AP82P4cvX/K/T/+v8zvF//r//nuN36/9z9d4hbhux/AAAAmCB3/x3jFvsfAAAA2sjdf6e4xf4HAACANnL33zluGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v67xC1D9j8AAABMkLv/rnGL/Q8AAABt5O6/W9xi/wMAAEAbufvvHrcM2f/6f/2//l//n/T/+v8V+n/9/wr9v/7/DO/X/+v/OW63/j93/z3iliH7HwAAACbI3X/PuMX+BwAAgDZy998rbrH/AQAAoI3c/feOW4bsf/2//l//r/9P+n/9/wr9v/5/hf5f/3+G9+v/9f8ct1v/n7v/PnHLkP0PAAAAE+Tuv2/cYv8DAABAG7n77xe32P8AAADQRu7++8ctQ/a//l//r//X/yf9v/5/hf5f/79C/6//P8P79f/6f47brf/P3f+AuGXI/gcAAIAJcvc/MG6x/wEAAKCN3P0PilvsfwAAAGgjd/+D45Yh+1//r//X/+v/k/5f/79C/6//X6H/1/+f4f36f/0/x+3W/+fuf0jcMmT/AwAAwAS5+x8at9j/AAAA0Ebu/ofFLfY/AAAAtJG7/+Fxy5D9r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Im4Zsv8BAABggtz9j4xb7H8AAABoI3f/o+KW/9z/l7fkqwAAAIBrKXf/o+OWIf/+r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Jm4Zsv8BAABggtz9j41b7H8AAABoI3f/4+IW+x8AAADayN3/+LhlyP7X/+v/9f/6/6T/1/+v0P/r/1fo//X/Z3i//l//z3G79f+5+58QtwzZ/wAAADBB7v4nxi32PwAAALSRu/9JcYv9DwAAAG3k7n9y3DJk/+v/9f/6f/1/0v/r/1fo//X/K/T/+v8zvF//r//nuN36/9z9T4lbhux/AAAAmCB3/1PjFvsfAAAA2sjd/7S4xf4HAACANnL3Pz1uGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v5nxC1D9j8AAABMkLv/mXGL/Q8AAABt5O5/Vtxi/wMAAEAbufufHbcM2f/6f/2//l//n/T/+v8VDfv/q18B/b/+X/+v/9f/6/85bLf+P3f/c+KWIfsfAAAAJsjd/9y4xf4HAACANnL3Py9usf8BAACgjdz9z49bhux//b/+X/+v/0/6f/3/iob9v+//X1zr/v/yRj/R/+v/z/B+/b/+n+N26/9z978gbhmy/wEAAGCC3P0vjFvsfwAAAGgjd/+L4hb7HwAAANrI3f/iuGXI/tf/6//1//r/pP/X/6/Q/zft/29z4fv/+n/9v/5f/89hu/X/uftfErcM2f8AAAAwQe7+l8Yt9j8AAAC0kbv/ZXGL/Q8AAABt5O5/edwyZP/r//X/+n/9f9L/6/9X6P+b9v/X9Pv/N6b/1/+f4f36f/0/x+3W/+fuf0XcMmT/AwAAwGndjO2eu/+VcVf+HwAAAMDecve/Km6x/wEAAKCN3P2vjluG7H/9v/5/j/7/houber/+X/9/of/fnv5f/79C/6//P8P7r1P/n7+m+n9G2K3/z93/mrhlyP4HAACACXL33xC32P8AAADQRu7+18Yt9j8AAAC0kbv/dXHLkP2v/9f/79H/z/z+/6X+/9/+PPX/+v+bov/X/1/o/5fd2v382d/v+//6f47brf/P3f/6uGXI/gcAAIAJcve/IW6x/wEAAKCN3P1vjFvsfwAAAGgjd/+b4pYh+1//r//X//v+f9L/6/9X6P/1/yv0//r/M7xf/6//57jd+v/c/W+OW4bsfwAAAJggd/9b4hb7HwAAANrI3f/WuMX+BwAAgDZy978tbhmy//X/+n/9v/4/6f/1/yv0//r/Ffp//f8Z3q//1/9z3G79f+7+t8ctQ/Y/AAAATJC7/x1xi/0PAAAAbeTuf2fcYv8DAABAG7n73xW3DNn/+n/9v/5f/5/0//r/Ffp//f8K/b/+/wzv1//r/zlut/4/d/+745Yh+x8AAAAmyN3/nrjF/gcAAIA2cve/N26x/wEAAKCN3P3vi1uG7H/9v/5f/6//T/p//f8K/b/+f4X+X/9/hvfr//X/HLdb/5+7//1xy5D9DwAAABPk7v9A3GL/AwAAQBu5+z8Yt9j/AAAA0Ebu/g/FLUP2v/5f/6//1/8n/b/+f4X+X/+/Qv+v/z/D+/X/+n+O263/z93/4bhlyP4HAACACXL3fyRusf8BAACgjdz9H41b7H8AAABoI3f/x+KWIftf/6//1//r/5P+X/+/Qv+v/1+h/9f/n+H9+n/9P8ft1v/n7v943DJk/wMAAMAEufs/EbfY/wAAANBG7v5Pxi32PwAAALSRu/9T/7y3/dd/GLL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv3/1e6/vPh03DJk/wMAAMAEufs/E7fY/wAAANBG7v7Pxi32PwAAALSRu/9zccuQ/a//1//r//X/Sf+v/1+h/9f/r9D/6//P8H79v/6f43br/3P3fz5uGbL/AQAAYILc/V+IW+x/AAAAaCN3/xfjFvsfAAAA2sjd/6W4Zcj+1//r/3v1/1cpnv7/iv7/iv7/+tL/6/9X6P/1/2d4v/5f/89xu/X/ufu/HLcM2f8AAAAwQe7+r8Qt9j8AAAC0kbv/q3GL/Q8AAABt5O7/WtwyZP/r//X/vfr/K/r/K/r/K/r/60v/r/9fof/X/5/h/fp//T/H7db/5+7/etwyZP8DAADABLn7vxG32P8AAADQRu7+b8Yt9j8AAAC0kbv/W3HLkP2v/9f/6//1/0n/r/9fof/X/6/Q/+v//5vbb/R+/b/+n+N26/9z9387bhmy/wEAAGCC3P3fiVvsfwAAAGgjd/934xb7HwAAANrI3f+9uGXI/tf/6//1//r/pP/X/6/Q/+v/V+j/9f9neL/+X//Pcbv1/7n7vx+3DNn/AAAAMEHu/h/ELfY/AAAAtJG7/4dxi/0PAAAAbeTu/1HcMmT/6//1//p//X/S/+v/V+j/9f8r9P/6/zO8X/+v/+e43fr/3P0/jluG7H8AAACYIHf/T+IW+x8AAADayN3/07jF/gcAAIA2cvf/LG4Zsv/1//p//b/+P+n/9f8r9P/6/xX6f/3/Gd6v/9f/c9z/6v/j7/y3aP+fu//nccuQ/Q8AAAAT5O7/Rdxi/wMAAEAbuft/GbfY/wAAANBG7v5fxS1D9r/+X/+v/9f/J/2//n+F/l//v0L/r/8/w/v1//p/jtvt+/+5+38dtwzZ/wAAADBB7v7fxC32PwAAALSRu/+3cYv9DwAAAG3k7v9d3DJk//+//v92cW/F/j+foP/X/+v/9f/6/w3p//X/K/T/+v8zvF//r//nuN36/9z9v49bhux/AAAAmCB3/x/iFvsfAAAA2sjd/8e4xf4HAACANnL3/yluGbL/ff9f/6//1/8n/b/+f4X+X/+/Ynz//48f6/+3f7/+X//Pcbv1/7n7/xy3DNn/AAAAMEHu/r/ELfY/AAAAtJG7/69xi/0PAAAAbeTu/1vcMmT/6//1//p//X/S/+v/V+j/9f8rxvf/vv9/ivfr//X/HLdb/5+7/+8BAAD//xKBZe0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x0) 2.117141618s ago: executing program 5 (id=2941): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7fffffff, 0x5, 0x0, 0x6, 0x1, 0x311}}]}}}]}, 0x80}}, 0x0) 1.973801966s ago: executing program 1 (id=2944): unshare(0x20000400) r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000480)) 1.88913321s ago: executing program 5 (id=2945): quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.881749461s ago: executing program 0 (id=2946): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.875495201s ago: executing program 1 (id=2948): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x460b, 0x0, 0x8004, 0x101, 0x5d, 0xff, 0xd2f, 0x8, r1}, &(0x7f00000000c0)=0x20) 1.788401626s ago: executing program 6 (id=2950): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001040)=0xfffffff8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0xfa, @private0, 0x2}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000000)="e2", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e23, 0x400, @private0, 0x5}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000b80)="f6", 0x1}], 0x1}}], 0x2, 0x4045) 1.783787226s ago: executing program 5 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x34, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) 1.765591647s ago: executing program 1 (id=2952): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) 1.755979688s ago: executing program 3 (id=2953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.635590124s ago: executing program 5 (id=2954): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1d1, &(0x7f0000000580)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 1.610926865s ago: executing program 1 (id=2955): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)) 1.587892177s ago: executing program 6 (id=2956): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0x80000000) close(r0) 1.544405869s ago: executing program 6 (id=2957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) 1.484311582s ago: executing program 6 (id=2958): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(r0, 0x0, &(0x7f0000000200)) 1.348530429s ago: executing program 6 (id=2959): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000380)={[{@grpquota}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}]}, 0x29, 0x6239, &(0x7f0000004180)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxITib7PolfqF1MeG14a0EQqEv2K53bRb8htcugUayaaBEwqioom24aAsItbmp8AUXtAKUC9QKqRK0F/QGUaFyEVUBBaRKtIJsNec8z7Mzs7Mzu/Z6feacz0eKf96ZM3POnDkzu991vnMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHXn62c/3ciyrPlf/sfmLHtB8+8bJzbnl73mRm8hAAAAcK1+lf/53C3pgkMruFHLMv/88u9+bWFhYSF73/Cfj35+YSFdMZFloxuyLL8uuvKj9zdalwkez8YbQy1fD/VZ/XCf60f6XD/a5/qxPtdv6HP9eJ/rl+yAJTYWv4/J72x7/tfNxS7Nbs1G8+u2d7nV440NQ0Pxdzm5Rn6bhdHj2Vx2MpvNptuWL5Zt5Mt/487mut6SxXUNtaxra/MI+dljx+I2NMI+3t62rsX7jH7yumzi5z977Njfnn/29m6z725ou79iO+/Z1tzOT4ZLim1tZBvSPonbOdSynVu7PCfDbdvZyG/X/Hvndj63wu0cXtzMddX5nI9nQ/nfv5fvp5HWX+ul/bQ1XPaLu7Isu7S42Z3LLFlXNpRtartkaPH5GS+OyOZ9NA+lF2cjqzpO71zBcdqcM9vbj9PO10R8/u8MtxtZZhtan6affGKs5Xn/5cLVHKdR81Ev91rpPAbX+rVSlmMwHhffyx/0E12Pwe3h8T929/LHYNdjp8sxmB53yzG4rd8xODQ2nG9zehIa+W0Wj8GdbcsP52tq5POZu3sfg1PnT52dmv/Yx++bO3X0xOyJ2dO7d+6c3r137/79+6eOz52cnS7+vMq9XX6bsqH0GtgW9l18DbyqY9nWQ3XhS2NL3n+v9nU43uN1uLlj2bV+HY50PrjG+rwglx7TxWvjPc2dPn55KFvmNZY/Pzuu/XWYHnfL63Ck5XXY9XtKl9fhyApeh81lzu5Y2c8sIy3/dduG5b8XXNsxuLnlGOz8eaTzGFzrn0fKcgyOh+PiBzuW/16wNWzvE5Or/XlkeMkxmB5ueO9pXpJ+3h/fn49ux+UdzStuGssuzM+eu//Ro+fPn9uZhbEuXtJyrHQer5taHlO25HgdWvXxemju5U/c0eXyzWFfjd/X/GN82eequcye+3s/V/l3t+77s+3SXVkYa2y992e37+bN/TmWZV/49ice/uZjX3j9svuzmTc/OXXtP4unXNry/ju6zPtvzP3PF+tLd/X48OhI8fodTntntO39uP2pGsnfuxr5up+bWtn78Wj4b73fj2/t8X68pWPZtX4/Hu18cPH9uNHvtx3XpvP5HA/Hycnp3u/HzWW27FrtMTnS8/34rjAbYf+/OiSFlItajp3ljtu0rpGR0fC4RuIa2o/T3W3Lj4Zs1lzXU7vCD4VpK1d2nN5zV7H8cMvtovU6Tic6ll3r4zT97mu547TR77dvV6fz+RwPx8Wtu3sfp81lnt5z7e+dG+NfW947x/odg6PDY81tHk0HYf5+ny1sjMfg/dmx7Ex2MpvJrx3Lj6dGvq7JB1b2XjkW/lvv98otPY7BezqWXetjMH0fW+7Ya4wsffBroPP5HA/HxZMP9D4Gm8u8Yd/a/ux6T7gkLdPys2vn79eW+53XHR276XodKyNhO7+9r/fvZpvLnNy/2pzZez/dGy65qct+6nz9LveamsnWZz9tCdv57P7l91Nze5rLfP7ACo+nQ1mWXfzIg/nve8O/r1y88P2vtf27S7d/07n4kQd/+sLj/7Sa7Qdg8D1fjE3F97qWf5layb//AwAAAAMh5v6hMBP5HwAAACoj5v74f4Un8j8AAABURsz9I2EmVcj/f9x/kS1veHbu+YtZauYvBPH6tBseKpaLHdfp8PXEwqLm5Q9+Zfa///HiyjZvKMuyXz70R12X3/JQ3K7CRNjOK29sv3yJr923onUfeeRiWm9rf/2L4f7j41npYdCtgjudZdk3bvlsvp6J91/O59MPHcnnw5eeeLy5zHMHiq/j7Z95SbH8X4Xy76HjR9tu/0zYDz8Oc/qt3fdHvN1XL7966773Lq4v3q6x7eb8YT/5geJ+4+fkfO7xYvm4n5fb/m9+5qmvNpd/9JXdt//iUPftfyrc71fC/J+XFcu3PgfNr+PtPhW2P64v3u7+L3+r6/Zf+XSx/Nk3FcsdCTOu/57w9fY3PTvXur8ebRxte1zZm4vl4vqnv/+n+fXx/uL9d27/+OHLbfuj8/h4+t+K+5nqWD5eHtcT/UPH+pv303p8xvU/9SdH2vZzv/VfefiZlzXvt3P993Ysd/YjO/L1L95f+yc2/fWnPtt1fXF7Dv392bbHc+hd4XUc1v/kB8LxGK7/3yvF/XV+usKRd7W//8Tlv7j5Ytvjid7y82L9V157Ip8bxjduuukFL7z50iua+y7LvrehuL9+6z/xN2fatv9LtxX7I14fO/qd619OXP+5j06ePjN/YW4m7dXHbsk/O+dtxfbE7b0lvLd2fn34zPkPzp6bmJ6YzrKJ6n6E3lX7cpg/Lcal3ksvLHkH3fFIeD7v+MtvbLr7Xz8TL//39xSXX35r8X3rVWG5z4XLN4fnb3XrX+rJO2/LX9+Np8MWLiz9vOBrsXX7f+1f0YLh8Xf+XBCP97Mv/WC+H5rX5d834uv6Grf/hzPF/Xw97NeF8MnM225bXF/r8vGzES6/u3i9X/P+C29z8Xn9u/B8v/3Hxf3H7YqP94fh55hvbWl/v4vHx9cvDnXef/4pHpfC+0l2qbg+LhX39+Xnbuu6efFzSLJLt+df/1m6n9tX9TCXM/+x+amTc6cvPDp1fnb+/NT8xz5++NSZC6fPH84/y/Pwh/rdfvH9aVP+/jQzu3dPlr9bnSnGdXajt//sI8dm9k3fPTN7/OiF4+cfOTt77sSx+fljszPzdx89fnz2o/1uPzdzcOeuA7v37Zo8MTdzcP+BA7sPTM6dPtPcjGKj+tg7/eHJ0+cO5zeZP7jnwM4HHtgzPXnqzMzswX3T05MX+t0+/9402bz1H06emz159PzcqdnJ+bmPzx7ceWDv3l19Pw3w1Nnj8xNT5y6cnrowP3tuqngsE+fzi5vf+/rdnmqa/4/i59lOjeKD+LJ33rs3fT5r01c+sexdFYt0fIDos+GzaL7zorP7V/J1zP2jYSZVyP8AAABALub+sTAT+R8AAAAqI+b+DWEm8j8AAABURsz942Gm/yWgJvm/cv3/LRf7rD82S/T/M/3/RP+/Zv3/d5et/1+8X+j/r41r7d/r/wf6//r/+v/6//r/rIGy9f9j7t+YZf79HwAAACoq5v5NYSbyPwAAAFRGzP03hZnI/wAAAFAZMfe/IMykJvm/fv3/gvP/6/+37i/9f/3/buvX/x9M+v+96f/3of8/ldWr/3+p5c9B7P9vbP1C/58yKlv/P+b+F4aZ1CT/AwAAQB3E3H9zmIn8DwAAAJURc/8tYSbyPwAAAFRGzP2bw0xqkv/1/6+p/586V/r/7duv/99O/z8cD/r/+v/rQP+/N/3/PvT/nf9/sPr/bfT/KaOy9f9j7n9RmElN8j8AAADUQcz9Lw4zkf8BAACgfEau7mYx978kzGRJ/r/KFQAAAAA3XMz9t2YdRfCa/Pu//r/z/+v/6//r/3df/8r7/8OZ/n956P/3pv/fh/6//r/+v/4/a6ps/f8892fj2UvDTGqS/wEAAKAOYu6/LcxE/gcAAIDKiLn//4WZyP8AAABQGTH3bwkzqUn+1/+vTP//F61Pnf6//n+v9ev/O/9/len/96b/34f+v/6//r/+P2uqbP3/mPtvDzOpSf4HAACAOoi5/44wE/kfAAAAKiPm/v8fZiL/AwAAQGXE3L81zKQm+V//v+T9/9gcdf5//X/9/1L2/8f1/0tH/783/f8+9P/1//X/9f9ZU2Xr/8fc/7Iwk5rkfwAAAKiDmPtfHmYi/wMAAEBlxNz/ijAT+R8AAAAqI+b+iTCTmuT/1fT/G5f0/5dznc//P7aC8/+30f/X/++1fv1/5/+vMv3/3vT/+9D/1//X/9f/Z02Vrf8fc/+dYSY1yf8AAABQBzH3bwszkf8BAACgMmLuvyvMRP4HAACAyoi5f3uYSU3yv/P/D0T/P9P/1//X/9f/1/9fGf3/3vT/+9D/1//X/9f/Z02Vrf8fc/8rw0xqkv8BAACgDmLuvzvMRP4HAACAyoi5/1VhJvI/AAAAVEbM/feEmdQk/+v/6//r/+v/6/93X7/+/2DS/+9N/78P/X/9f/1//X/WVNn6/zH3vzrMpCb5HwAAAOog5v4dYSbyPwAAAFRGzP33hpnI/wAAAFAZMfdPhpnUJP/r/+v/6//r/+v/d1+//v9g0v/vTf+/D/1//X/9f/1/1lTZ+v8x998XZlKT/A8AAAB1EHP//WEm8j8AAABURsz9U2Em8j8AAABURsz902EmNcn/+v/6//r/+v+r6v+/YvF+9f8L+v/lov/fm/5/H/r/+v83vP8/qv9PpZSt/x9z/84wk5rkfwAAAKiDmPt3hZnI/wAAAFAZMffvDjOR/wEAAKAyYu7fE2ZSk/w/AP3/WO3W/9f/1/8vQ/+/hf5/Qf+/XPT/e1v7/n98iPr/+v/6/87/r//PUmXr/8fc/0CYSU3yPwAAANRBzP17w0zkfwAAAKiMmPv3hZnI/wAAAFAZMffvDzOpSf4fgP5/zvn/+/b/x1rXrf+v/99r/fr/+v9Vpv/fm/P/96H/r/8/wP3/5rGl/0/ZlK3/H3P/gTCTmuR/AAAAqIOY+18TZiL/AwAAQGXE3P9rYSbyPwAAAFRGzP2/HmZSk/yv/1+Z/n8b/X/9/17rH7T+/5j+v/7/Kuj/96b/34f+v/7/APf/nf+fMipb/z/m/oNhJjXJ/wAAAFAHMff/RpiJ/A8AAACVEXP/a8NM5H8AAACojJj7D4WZ1CT/6/+vU/8/Xqj/r/+v/+/8//r/15X+f2/6/33o/+v/6//r/7Omytb/j7n/dWEmNcn/AAAAUAcx9z8YZiL/AwAAQGXE3P/6MBP5HwAAACoj5v43hJnUJP/r/zv//43v/4+2bbv+/+Lt9P8L+v/6/6uh/9+b/n8f+v/6//r/+v+sqbL1/2Puf2OYSU3yPwAAANRBzP1vCjOR/wEAAKAyYu5/c5iJ/A8AAACVEXP/W8JMapL/9f/1/298/7/7+f+bx5r+v/5/pv+v/79K+v+96f/3of+v/6//r//Pmipb/z/m/t8MM6lJ/gcAAIA6iLn/oTAT+R8AAAAqI+b+t4aZyP8AAABQGTH3vy3MpCb5X/9f/7+s/X/n/9f/j/T/9f9XQ/+/twHr///q5nC5/n9B/7/c27/a/v9Ix9fXpf//o+X6/wsbOm+v/8/1ULb+f8z9bw8zqUn+BwAAgDqIuf8dYSbyPwAAAFRGzP3vDDOR/wEAAKAyYu7/rTCTmuR//f/mdiy2l/X/9f/zC/T/9f/1/weW/n9vA9b/d/7/Dvr/5d5+5//X/2epsvX/Y+5/V5hJTfI/AAAA1EHM/Q+Hmcj/AAAAUBkx9787zET+BwAAgMqIuf89YSY1yf/6/87/r/+v/6//3339+v+DSf+/N/3/PvT/9f/L1v//T/1/BlvZ+v8x9z8SZlKT/A8AAAB1EHP/e8NM5H8AAACojJj7fzvMRP4HAACAyoi5/31hJjXJ//r/g9L/n9D/X2X/fyxcpv+v/6//Xy/6/73p//eh/6//X7b+v/P/M+DK1v+Puf/9YSYrz//jK14SAAAAuCFi7v+dMJOa/Ps/AAAA1EHM/b8bZiL/AwAAQGXE3P97YSY1yf/6/4PS/3f+/8z5//X/Ox6P/r/+fzfr1/+P7zz6//r/+v+R/r/+v/4/ncrW/4+5//fDTGqS/wEAAKAOYu7/QJiJ/A8AAAADodv/k90p5v7DYSbyPwAAAFRGzP1Hwkxqkv/1//X/9f9L2v//i23/8oPvvuPITv1//X/9/1VZ1/P/N1/8zv+v/6//n+j/6//r/9OpbP3/mPuPhpksBr+3OcE/AAAADLaY+/8gzKQm//4PAAAAdRBz/7EwE/kfAAAAKiPm/pkwk5rkf/1//X/9/5L2/wf4/P9xfwxS/39ywwD1/+Obrv5/V+va/3/vYk9c/3+1/f+xrpd29v8b+v9t9P9Xvf3fybJM/1//nxuobP3/mPtnw0xqkv8BAACgDkLuHzpezMUr5H8AAACojJj7T4SZyP8AAABQGTH3fzDMpCb5X/9f/1//X//f+f+7r7+0/X/n/+9J/7+38vT/u3P+f/3/Qd5+/X/9f5YqW/8/5v65MJOa5H8AAACog5j7PxRmIv8DAABAZcTc/+EwE/kfAAAAKiPm/pNhJjXJ//r/+v/6//r/+v/d16//P5j0/3vT/+9D/1//X/9f/581Vbb+f8z9p8JMapL/gf9j7z6aLK3LPo6fnqcpZh42z+5ZuNAql74EFrLWF+CCDQutslyAijnNYI6Yc8AsBgygiAlzAhOKWVTMCQNm1BqLmeu6psPd9+lwus99/v/PZ+E1NNOcMzoF/qbnyw0AAPQgd/+lcYv9DwAAAM3I3X9Z3GL/AwAAQDNy9z80bulk/+v/9f/N9v/31f/v9Pr6f/1/y/T/4/T/c+j/9f/6f/0/CzW1/j93/8Pilk72PwAAAPQgd//D4xb7HwAAAJqRu//yuMX+BwAAgGbk7n9E3NLJ/t/S/6/N+uz/M+PV/7fU/3v+/46vr//X/7fsaPv/K+7+O5/+X/+v/w/6f/2//p+tptb/5+5/ZNzSyf4HAACAHuTuf1TcYv8DAABAM3L3Pzpusf8BAACgGbn7HxO3dLL/Pf/f8//1//p//f/w6+v/V5Pn/4/rqf+//NYLLr3z+nvcsJfX1//r//X/+n8Wa2r9f+7+x8Ytnex/AAAA6EHu/sfFLfY/AAAANCN3/+PjFvsfAAAAVtCJwY/m7n9C3NLJ/tf/6//1/9H/H9f/6//1/y3Q/4/rqf/fz+vr//X/+n/9P4s1tf4/d/8T45ZO9j8AAAD0IHf/k+IW+x8AAACma+g3Yo/I3X8ybrH/AQAAYCXsJkPP3X8qbulk/+v/D7///4/+fzX6f8//1//r/5ug/x+n/59D/6//1//r/1moqfX/ufuviFs62f8AAADQg9z9T45b7H8AAABoRu7+p8Qt9j8AAAA0I3f/U+OWTva//t/z//X/+v8F9v9nvqn/H6b/Pxr6/3H6/zn0/wft58/T/+v/9f9stMf+/66Rv20vpP/P3f+0uKWT/Q8AAAA9yN3/9LjF/gcAAIBm5O5/Rtxi/wMAAEAzcvc/M27pZP/r//X/+v+j7/9nW77/yvb/23/qnaH/H6b/Pxr6/3GT6f/X1gc/rP9f+f7f8//1//p/Npna8/9z9z8rbulk/wMAAEAPcvc/O24Z2f97/sV8AAAAYKly9z8nbvH1fwAAAFh5WZ3l7n9u3NLJ/tf/6//1/57/v8Dn/5/RQ/9/w4b3p/+fFv3/uMn0/zvQ/+v/V/n96//1/2w3tf4/d//z4pZO9j8AAAD0IHf/lXGL/Q8AAADNyN3//LjF/gcAAIBm5O5/QdzSyf4f7v/P/Xn9/+7o/ze/f/3/8M+PRfX/+VfU/4/2/xd5/n+fdurvL9nl5+v/g/5f/6//1/9v7v9PzPt8/T9Dptb/5+5/YdzSyf4HAACAHuTuf1HcYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/Pf9f/6//X73+3/P/z1rm8/9nR97/r+v/d6nL5//f+45d//X1/3Po//X/+v/x5/+P/FsA9P8MmVr/n7v/pXFLJ/sfAAAAepC7/2Vxi/0PAAAAq2Hj7x3Y+htKQ+7+l8ct9j8AAAA0I3f/K+KWdvb/6LM69f/6f/2//l//P/z60+r/Pf9/t1rr/+c+cHuzm+d9B/3/HPr/w+jn1xvr/6/a6fOn0P+fPOz+f4T+nyGb+v8bz318Wf1/7v5Xxi3t7H8AAADoXu7+V8Ut9j8AAAA0I3f/q+MW+x8AAACakbv/NXFLJ/v/0Pv/kXBR/6//1//r//X/+v9Fa63/33O/Pof+fw79v+f/e/6//p+F2tT/b7Cs/j93/2vjlk72PwAAAPQgd//r4hb7HwAAAJqRu/+quMX+BwAAgGbk7n993NLJ/vf8f/2//n+p/f+xmf5f/6//X6gD9ffH9P9F/6//1//r//X/LMDU+v/c/W+IWzrZ/wAAANCD3P1vjFvsfwAAAGhG7v43xS32PwAAADQjd/+b45ZO9r/+/3D7//z4Dv3//279fP1/d/2/5//r//X/C9bt8//Xhv5JtN0O/f/NDz51/80f0f/r//X/+n/9P7v0fyN/bhL9/+lz/+8yd/9b4pZO9j8AAAD0IHf/W+MW+x8AAACakbv/bXGL/Q8AAADNyN1/ddyyx/0/1jxMmf7f8//1//p//f/w6+v/V1O3/f8uef7/HPp//b/+X//PQk2i/9/wx7n73x63+Po/AAAANCN3/zviFvsfAAAAmpG7/51xi/0PAAAAzcjd/664pZP9r//X/+v/9f/6/+HX1/+vJv3/OP3/HKvU/199gP5/ffjDy+7nD2rZ71//r/9nu6n1/7n7r4lbOtn/AAAA0IPc/e+OW+x/AAAAaEbu/vfELfY/AAAANCN3/3vjlk72v/5f/6//1//r/4dfX/+/mvT/4/T/s9ns2pE3MNT/nz5/mv2/5/9P7v3r//X/bDe1/j93//vilk72PwAAAPQgd/+1cYv9DwAAAM3I3X9d3GL/AwAAQDNy978/bulk/+v/9f/6/732/3f/j6P/n+n/9f8Tpf8fp/+fY5We/6//39f7P36I71//r/9nu6n1/7n7PxC3dLL/AQAAoAe5+6+PW+x/AAAAaEbu/g/GLfY/AAAANCN3/w1xSyf7X/+v/9f/e/6//n/49fX/q+nw+v+Z/l//r/+fYxX6/8N8//p//T/bTa3/z93/obilk/0PAAAAPcjd/+G4xf4HAACAZuTu/0jcYv8DAABAM3L3fzRu6WT/6//1//p//b/+f/j19f+ryfP/x+n/59D/6//1//p/Fmq4/z+5tP4/d//H4pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3/8bjF/gcAAIBm5O7/RNzSyf7X/+v/N/f/s5n+X/+v/z/rCPr/4zP9/8Lp/8fp/+fQ/7fZ/x+bNdT/n9jx8/X/TNHUnv+fu/+TcUsn+x8AAAB6kLv/U3GL/Q8AAADNyN3/6bjF/gcAAIBm5O7/TNzSyf7X/+v/Pf9f/6//H359z/9fTfr/cfr/OfT/bfb/nv+v/2dpptb/5+7/bNzSyf4HAACAHuTu/1zcYv8DAABAM3L3fz5usf8BAACgGbn7vxC3dLL/9f/6f/2//l//P/z6+v/VpP8fp/+fQ/+v/9f/6/9ZqKn1/7n7vxi3dLL/AQAAoAe5+2+KW+x/AAAAaEbu/pvjFvsfAAAAmpG7/0txSyf7X/+v/9f/r2b/f1z/r//X/w+aSv9/4YX3u0X/r//X/+v/9f/6/95Nrf/P3f/luKWT/Q8AAAA9yN3/lbjF/gcAAIBm5O7/atxi/wMAAEAzcvd/LW7pZP9v7//Pm50tVM8a6v+jUdP/b6D/3/z+9f/DPz8G+/98857/r//X/y/EVPp/z//f3/vX/+v/V/n976n/v9f2z9f/06Kp9f+5+2+JWzrZ/wAAANCD3P1fj1vsfwAAAGhG7v5vxC32PwAAADQjd/+tcUsn+9/z//X/E+v/T3bX/+/z+f8z/b/+X/8/SP8/Tv8/h/5f/+/5/5c98H/0/yzO1Pr/3P3fjFs62f8AAADQg9z934pb7H8AAABoRu7+b8ct9j8AAAA0I3f/d+KWTva//l//P7H+v7/n/+v/9f/6/4XS/4/T/5etP7Sz+un/jw99cNn9/EEt+/030/97/j8LNLX+P3f/d+OWTvY/AAAA9CB3//fiFvsfAAAAmpG7//txi/0PAAAAzcjd/4O4pZP9r//X/7ff/1+i/9/y+vp//X/L9P/5T/Rh+v85+un/By27n1/196//1/+z3dT6/9z9t8Utnex/AAAA6EHu/h/GLfY/AAAANCN3/4/iFvsfAAAAmpG7/8dxSyf7X//fV/+/Nuux//f8f/2//r8n+v9x+v859P/6f/2//p+Fmlr/n7v/9rX1Lvc/AAAArKoH3Ocht+32+95+5j+Pz34St1w0O73LL2MDAAAAE3f37l9bn81+euaPfP0fAAAAWpS7/2dxSyf7X//fV//f5/P/9f/6f/1/T/T/4/T/c+j/9f/6f/0/CzW1/j93/8/jlg3Db33PP0oAAABgSnL3/yJu6eTr/wAAANCD3P2/jFu27X//OkAAAABYVbn7fxW3dPL1f/3/xPv/2SH1//H99P9n6f/1/0Ovr/9fTfr/cQfs/0+v6f/1/yP0//p//T9bTa3/z93/67ilk/0PAAAAjdr0Kwq5+38Tt9j/AAAA0Izc/b+NW+x/AAAAaEbu/t/FLZ3sf/3/kff/maof4vP/T9S3PP+/8/7/yuODr6//1/+3TP8/zvP/59D/t9L/n6//1/8zDVPr/3P33xG3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xJ//v6/+fxfP/9f/99H/7/D67fT//3/BqZsuftB11+j/Oeco+//8uaD/1//r/8+aUP/v+f/6fyZi8f3/+qYP7rX/z93/p7ilk/0PAAAAPcjdf2fcYv8DAABAM3L3/zlusf8BAACgGbn7/xK3dLL/9f879P/Z3+/uh6L/3/L+99P/53/XS+j/T+27/z8xm82W0v9nU9x7/+/5//r/7Tz/f5z+fw79v/5f/6//Z6EW3/9v/uBe+//c/X+NWzrZ/wAAANCD3P1/i1ty/6/t+ZfuAQAAgInJ3f/3uMXX/wEAAKAZufv/Ebd0sv/1/57/P5X+P3n+/7nPa+v5/xdXnNpn/3/P+pb+/3Dp/8fp/+fQ/+v/9f/6fxZqav1/7v5/xi2d7H8AAADoQe7+u+IW+x8AAACakbv/X3GL/Q8AAADNyN3/77ilk/2v/2+1/88iXv+v/59K/+/5/57/fzT0/+P0/3O02P8f2/0Pf9n9/EEt+/3r//X/bDe1/j93/38DAAD//2TvY9A=") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.315709541s ago: executing program 5 (id=2960): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000240)={[{@resuid}, {@jqfmt_vfsv1}, {@dax_inode}, {@dax_never}, {@minixdf}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x80000) 1.233260445s ago: executing program 0 (id=2961): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/24, &(0x7f0000000200)=0xb) 1.000105368s ago: executing program 0 (id=2962): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettaction={0x18, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 833.759097ms ago: executing program 5 (id=2963): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 819.705897ms ago: executing program 3 (id=2964): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000)="e33d8b5d8f47b1ac82565461fc27e076785aa9654aa504e1b7ac6f55e7955f26d1140b35b532845396372146f2109a5cf9fe5c7ed87d60365ffbda3ae48204b7c00a2c84a4bd9dd3113c642fbb32aab308fcf4a9235bd4ad40f27200", 0x0}, 0x20) 724.736132ms ago: executing program 0 (id=2965): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0xfd80, 0x118, 0xfa00, {{0xd, 0x10001, "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", 0x3, 0x6, 0x5, 0x0, 0xc, 0x7, 0x3, 0x1}}}, 0x120) 674.060615ms ago: executing program 1 (id=2966): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) splice(r1, &(0x7f0000000180)=0xfffffffffffffff4, r0, 0x0, 0x800008, 0xf) 639.920747ms ago: executing program 3 (id=2967): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 572.522561ms ago: executing program 1 (id=2968): r0 = semget$private(0x0, 0x207, 0x70d) semop(r0, &(0x7f0000000000)=[{0x3, 0x9, 0x1000}, {0x3, 0x0, 0x1000}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x3}, 0x84a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}) 492.645084ms ago: executing program 0 (id=2969): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b6, &(0x7f0000000840)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 424.798568ms ago: executing program 3 (id=2970): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) 354.469512ms ago: executing program 3 (id=2971): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200010a"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 136.711484ms ago: executing program 3 (id=2972): syz_usb_connect(0x0, 0x5f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000055395c20009050000000000000007058433c4"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 6 (id=2973): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x0) kernel console output (not intermixed with test programs): te err: -5, ino 25 [ 237.570919][ T9086] hfsplus: b-tree write err: -5, ino 4 [ 237.642467][ T9086] hfsplus: b-tree write err: -5, ino 2 [ 237.856064][ T9613] FAT-fs (loop3): Directory bread(block 524322) failed [ 237.898470][ T9613] FAT-fs (loop3): Directory bread(block 524323) failed [ 237.968336][ T5916] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.970183][ T9613] FAT-fs (loop3): Directory bread(block 524324) failed [ 238.058189][ T9613] FAT-fs (loop3): Directory bread(block 524325) failed [ 238.104795][ T9613] FAT-fs (loop3): Directory bread(block 524326) failed [ 238.123071][ T9613] FAT-fs (loop3): Directory bread(block 524327) failed [ 238.130019][ T9613] FAT-fs (loop3): Directory bread(block 524328) failed [ 238.139144][ T9613] FAT-fs (loop3): Directory bread(block 524329) failed [ 238.155685][ T9613] FAT-fs (loop3): Directory bread(block 524322) failed [ 238.187724][ T9625] erofs: (device loop0): mounted with root inode @ nid 36. [ 238.217732][ T9625] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 238.223431][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/805.tmp-b7:0' failed: Read-only file system [ 238.227745][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 238.242640][ T9613] FAT-fs (loop3): Directory bread(block 524323) failed [ 238.267923][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/801.tmp-b7:3' failed: Read-only file system [ 238.285587][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/804.tmp-b7:1' failed: Read-only file system [ 238.294559][ T9625] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 238.338895][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:0' failed: Read-only file system [ 238.348653][ T9625] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 238.364760][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system [ 238.393642][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:1' failed: Read-only file system [ 238.409222][ T9631] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1992'. [ 238.423630][ T9625] attempt to access beyond end of device [ 238.423630][ T9625] loop0: rw=524288, want=24, limit=16 [ 238.435890][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.468086][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.482523][ T9625] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 238.497041][ T5916] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 238.516828][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 238.516844][ T26] audit: type=1800 audit(1777034098.184:18): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1990" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 238.552713][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.566724][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/804.tmp-b7:1' failed: Read-only file system [ 238.583383][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/801.tmp-b7:3' failed: Read-only file system [ 238.598494][ T5916] usb 7-1: config 0 descriptor?? [ 238.656303][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/804.tmp-b7:1' failed: Read-only file system [ 238.678689][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/806.tmp-b7:3' failed: Read-only file system [ 238.883178][ T9596] XFS (loop5): Mounting V5 Filesystem [ 238.980881][ T9654] set_capacity_and_notify: 5 callbacks suppressed [ 238.980898][ T9654] loop3: detected capacity change from 0 to 1024 [ 239.101503][ T9596] XFS (loop5): Ending clean mount [ 239.117046][ T5916] hid-generic 0003:057E:200E.000F: hidraw0: USB HID v0.00 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0 [ 239.185865][ T9654] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 239.209160][ T9654] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.234340][ T9654] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.1999: lblock 0 mapped to illegal pblock 0 (length 5) [ 239.342528][ T5344] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 239.359675][ T5916] usb 7-1: USB disconnect, device number 2 [ 239.464384][ T4359] XFS (loop5): Unmounting Filesystem [ 239.592399][ T5344] usb 2-1: Using ep0 maxpacket: 16 [ 239.604300][ T9672] fido_id[9672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 239.712838][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.747747][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.769410][ T5344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.806910][ T9685] loop0: detected capacity change from 0 to 512 [ 239.819321][ T5344] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.829297][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.840331][ T5344] usb 2-1: config 0 descriptor?? [ 239.891969][ T9685] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 240.210990][ T9699] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2018'. [ 240.309565][ T9704] loop0: detected capacity change from 0 to 1024 [ 240.331571][ T5344] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0010/input/input14 [ 240.404657][ T9704] hfsplus: bad catalog entry type [ 240.413604][ T9708] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 240.440327][ T5344] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 240.489209][ T5916] kernel write not supported for file /adsp1 (pid: 5916 comm: kworker/1:16) [ 240.510116][ T9708] CIFS mount error: No usable UNC path provided in device string! [ 240.510116][ T9708] [ 240.511317][ T4247] hfsplus: b-tree write err: -5, ino 25 [ 240.535393][ T9708] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 240.546237][ T5344] usb 2-1: USB disconnect, device number 11 [ 240.560581][ T4247] hfsplus: b-tree write err: -5, ino 4 [ 240.587337][ T4247] hfsplus: b-tree write err: -5, ino 2 [ 240.701768][ T9711] fido_id[9711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 241.022416][ T5908] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 241.320819][ T9741] loop6: detected capacity change from 0 to 4096 [ 241.336224][ T9746] loop1: detected capacity change from 0 to 8 [ 241.353978][ T9747] loop0: detected capacity change from 0 to 64 [ 241.472670][ T5908] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 241.481014][ T5908] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 241.531533][ T9746] SQUASHFS error: Failed to read block 0x2d7: -5 [ 241.543709][ T9746] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 241.554901][ T5908] usb 6-1: config 220 has no interface number 2 [ 241.561255][ T5908] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 241.603229][ T9741] ntfs: volume version 3.1. [ 241.658384][ T5908] usb 6-1: config 220 interface 0 has no altsetting 0 [ 241.692356][ T5908] usb 6-1: config 220 interface 76 has no altsetting 0 [ 241.699377][ T5908] usb 6-1: config 220 interface 1 has no altsetting 0 [ 241.942726][ T5908] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 241.962066][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.012590][ T5908] usb 6-1: Product: syz [ 242.021375][ T5908] usb 6-1: Manufacturer: syz [ 242.037232][ T5908] usb 6-1: SerialNumber: syz [ 242.114429][ T9739] loop3: detected capacity change from 0 to 32768 [ 242.266191][ T9739] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 242.340819][ T9782] bridge_slave_1: default FDB implementation only supports local addresses [ 242.423016][ T9739] xfs: Unexpected value for 'quota' [ 242.437996][ T5908] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 242.446068][ T5908] usb 6-1: No valid video chain found. [ 242.451672][ T5908] usb 6-1: selecting invalid altsetting 0 [ 242.570124][ T9794] loop6: detected capacity change from 0 to 256 [ 242.579186][ T4185] XFS (loop3): Unmounting Filesystem [ 242.626468][ T5908] usb 6-1: selecting invalid altsetting 0 [ 242.649146][ T5908] usbtest: probe of 6-1:220.1 failed with error -22 [ 242.659753][ T9797] loop1: detected capacity change from 0 to 512 [ 242.670770][ T5908] usb 6-1: USB disconnect, device number 11 [ 242.737033][ T9794] FAT-fs (loop6): Directory bread(block 64) failed [ 242.751519][ T9794] FAT-fs (loop6): Directory bread(block 65) failed [ 242.769597][ T9794] FAT-fs (loop6): Directory bread(block 66) failed [ 242.799035][ T9797] EXT4-fs (loop1): Ignoring removed oldalloc option [ 242.817836][ T9794] FAT-fs (loop6): Directory bread(block 67) failed [ 242.877908][ T9794] FAT-fs (loop6): Directory bread(block 68) failed [ 242.885884][ T9794] FAT-fs (loop6): Directory bread(block 69) failed [ 242.900639][ T9797] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2057: dx entry: limit 1024 != root limit 124 [ 242.915285][ T9794] FAT-fs (loop6): Directory bread(block 70) failed [ 242.921894][ T9794] FAT-fs (loop6): Directory bread(block 71) failed [ 242.934076][ T9798] loop0: detected capacity change from 0 to 4096 [ 242.970845][ T9797] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2057: Corrupt directory, running e2fsck is recommended [ 243.004183][ T9794] FAT-fs (loop6): Directory bread(block 72) failed [ 243.023160][ T9797] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 243.038867][ T9797] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.2057: corrupted in-inode xattr [ 243.061045][ T9794] FAT-fs (loop6): Directory bread(block 73) failed [ 243.083901][ T9804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.153346][ T9797] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2057: couldn't read orphan inode 15 (err -117) [ 243.175063][ T9798] attempt to access beyond end of device [ 243.175063][ T9798] loop0: rw=0, want=26388279066824, limit=4096 [ 243.241670][ T9798] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 243.268463][ T9797] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 243.292084][ T4272] udevd[4272]: symlink '../../loop0' '/dev/disk/by-diskseq/826.tmp-b7:0' failed: Read-only file system [ 243.350453][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/824.tmp-b7:6' failed: Read-only file system [ 243.355693][ T9794] attempt to access beyond end of device [ 243.355693][ T9794] loop6: rw=524288, want=1164, limit=256 [ 243.376926][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/825.tmp-b7:1' failed: Read-only file system [ 243.406255][ T5560] udevd[5560]: symlink '../../loop5' '/dev/disk/by-diskseq/813.tmp-b7:5' failed: Read-only file system [ 243.429752][ T4272] udevd[4272]: symlink '../../loop0' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:0' failed: Read-only file system [ 243.437972][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 243.472776][ T9794] attempt to access beyond end of device [ 243.472776][ T9794] loop6: rw=0, want=1164, limit=256 [ 243.520707][ T26] audit: type=1800 audit(1777034103.184:19): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2055" name="memory.events" dev="loop6" ino=1048675 res=0 errno=0 [ 243.577805][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/824.tmp-b7:6' failed: Read-only file system [ 243.622451][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/827.tmp-b7:3' failed: Read-only file system [ 243.688431][ T4272] udevd[4272]: symlink '../../loop0' '/dev/disk/by-diskseq/826.tmp-b7:0' failed: Read-only file system [ 243.769670][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/825.tmp-b7:1' failed: Read-only file system [ 243.917213][ T9821] EXT4-fs (loop1): Test dummy encryption mode enabled [ 243.956341][ T9827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 244.000582][ T9840] netlink: 'syz.5.2070': attribute type 10 has an invalid length. [ 244.010193][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2070'. [ 244.020488][ T9821] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 244.029394][ T9840] batman_adv: batadv0: Adding interface: vlan1 [ 244.057653][ T9840] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.060687][ T9827] System zones: [ 244.083256][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.101122][ T9827] 1-3, 19-19, 35-36 [ 244.106409][ T9827] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 244.117715][ T9827] ext4 filesystem being mounted at /424/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.133663][ T9840] batman_adv: batadv0: Interface activated: vlan1 [ 244.364812][ T9854] set_capacity_and_notify: 2 callbacks suppressed [ 244.364829][ T9854] loop3: detected capacity change from 0 to 128 [ 244.413724][ T9846] loop0: detected capacity change from 0 to 4096 [ 244.435695][ T9852] loop5: detected capacity change from 0 to 4096 [ 244.458251][ T9854] EXT4-fs (loop3): Test dummy encryption mode enabled [ 244.499193][ T9846] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 244.579517][ T9854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 244.617274][ T9854] System zones: 1-3, 19-19, 35-36 [ 244.624650][ T9854] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 244.656726][ T9854] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.714450][ T26] audit: type=1800 audit(1777034104.384:20): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2076" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 245.336714][ T9888] loop3: detected capacity change from 0 to 256 [ 245.388327][ T9890] loop1: detected capacity change from 0 to 1024 [ 245.408470][ T9882] loop5: detected capacity change from 0 to 4096 [ 245.427401][ T9882] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 245.439889][ T9882] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 245.469239][ T9882] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 245.499777][ T9890] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 245.559136][ T9888] FAT-fs (loop3): Directory bread(block 64) failed [ 245.567811][ T9882] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 245.592540][ T9888] FAT-fs (loop3): Directory bread(block 65) failed [ 245.599309][ T9888] FAT-fs (loop3): Directory bread(block 66) failed [ 245.614049][ T9892] netlink: 'syz.0.2094': attribute type 29 has an invalid length. [ 245.632413][ T9888] FAT-fs (loop3): Directory bread(block 67) failed [ 245.639379][ T9888] FAT-fs (loop3): Directory bread(block 68) failed [ 245.659181][ T9888] FAT-fs (loop3): Directory bread(block 69) failed [ 245.684812][ T9890] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 245.700715][ T9882] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 245.725047][ T9888] FAT-fs (loop3): Directory bread(block 70) failed [ 245.731678][ T9888] FAT-fs (loop3): Directory bread(block 71) failed [ 245.802655][ T9888] FAT-fs (loop3): Directory bread(block 72) failed [ 245.809263][ T9888] FAT-fs (loop3): Directory bread(block 73) failed [ 245.817694][ T9882] ntfs: volume version 3.1. [ 245.827403][ T9882] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 245.860403][ T9882] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 245.892743][ T9890] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 245.917277][ T9885] loop6: detected capacity change from 0 to 40427 [ 245.927563][ T9882] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 245.970574][ T9882] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 245.998608][ T9885] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 246.038949][ T9885] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 246.093531][ T9885] F2FS-fs (loop6): invalid crc value [ 246.199657][ T9885] F2FS-fs (loop6): Found nat_bits in checkpoint [ 246.301758][ T9908] loop1: detected capacity change from 0 to 128 [ 246.386920][ T9912] loop3: detected capacity change from 0 to 512 [ 246.412719][ T9885] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 246.420818][ T9885] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 246.522506][ T9912] EXT4-fs (loop3): Ignoring removed orlov option [ 246.537018][ T9912] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 246.581213][ T9912] EXT4-fs (loop3): orphan cleanup on readonly fs [ 246.612451][ T9912] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 246.659756][ T9912] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2100: attempt to clear invalid blocks 2 len 1 [ 246.723800][ T1278] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 246.734017][ T9912] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 246.758067][ T9912] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2100: invalid indirect mapped block 1819239214 (level 0) [ 246.772804][ T1278] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 246.782916][ T9912] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2100: invalid indirect mapped block 1819239214 (level 1) [ 246.818881][ T9912] EXT4-fs (loop3): 1 truncate cleaned up [ 246.840631][ T9912] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 247.452009][ T9915] loop5: detected capacity change from 0 to 32768 [ 247.563202][ T1278] read_mapping_page failed! [ 247.586987][ T1278] ERROR: (device loop5): txCommit: [ 247.586987][ T1278] [ 247.657091][ T1278] jfs_write_inode: jfs_commit_inode failed! [ 247.854131][ T9920] XFS (loop1): Mounting V5 Filesystem [ 247.870312][ T9947] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 248.178610][ T9920] XFS (loop1): Ending clean mount [ 248.303135][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.338823][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-diskseq/851.tmp-b7:6' failed: Read-only file system [ 248.357839][ T5560] udevd[5560]: symlink '../../loop3' '/dev/disk/by-diskseq/857.tmp-b7:3' failed: Read-only file system [ 248.370103][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/853.tmp-b7:5' failed: Read-only file system [ 248.376974][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.427143][ T4272] udevd[4272]: symlink '../../loop1' '/dev/disk/by-diskseq/854.tmp-b7:1' failed: Read-only file system [ 248.447888][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/857.tmp-b7:3' failed: Read-only file system [ 248.460363][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.485693][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.497303][ T4272] udevd[4272]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system [ 248.529512][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/859.tmp-b7:3' failed: Read-only file system [ 248.540671][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/853.tmp-b7:5' failed: Read-only file system [ 248.555394][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.576583][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.576898][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/856.tmp-b7:5' failed: Read-only file system [ 248.596276][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.617769][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.631435][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.649023][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.671432][ T4195] XFS (loop1): Unmounting Filesystem [ 248.680390][ T9962] device macsec2 entered promiscuous mode [ 248.699040][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/856.tmp-b7:5' failed: Read-only file system [ 249.390439][ T9987] set_capacity_and_notify: 4 callbacks suppressed [ 249.390457][ T9987] loop6: detected capacity change from 0 to 4096 [ 249.542110][ T9999] 8021q: VLANs not supported on ipvlan0 [ 249.544592][T10000] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.617451][ T9999] futex_wake_op: syz.5.2126 tries to shift op by 36; fix this program [ 249.682235][T10004] netlink: 'syz.3.2127': attribute type 4 has an invalid length. [ 249.860795][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 249.860810][ T26] audit: type=1800 audit(1777034109.524:21): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2131" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 250.246958][T10042] loop3: detected capacity change from 0 to 24 [ 250.612202][T10054] loop3: detected capacity change from 0 to 128 [ 250.668225][T10054] EXT4-fs (loop3): Test dummy encryption mode enabled [ 250.722987][T10054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 250.789560][T10054] System zones: 1-3, 19-19, 35-36 [ 250.855072][T10054] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 250.907798][T10054] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.046529][T10054] EXT4-fs (loop3): user quota file already specified [ 251.054829][T10030] loop6: detected capacity change from 0 to 40427 [ 251.150737][T10038] loop1: detected capacity change from 0 to 32768 [ 251.171859][T10030] F2FS-fs (loop6): invalid crc value [ 251.236695][T10030] F2FS-fs (loop6): Found nat_bits in checkpoint [ 251.297208][T10038] JBD2: Ignoring recovery information on journal [ 251.493712][T10030] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 251.531502][T10030] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 251.532645][T10038] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 251.752820][T10099] loop3: detected capacity change from 0 to 2048 [ 251.767503][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 251.868527][T10104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2157'. [ 251.885444][T10099] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.278766][T10088] loop5: detected capacity change from 0 to 32768 [ 252.370318][T10116] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2160'. [ 252.382416][T10088] (syz.5.2153,10088,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.441040][T10088] (syz.5.2153,10088,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 252.592175][T10126] loop3: detected capacity change from 0 to 1024 [ 252.621789][T10088] JBD2: Ignoring recovery information on journal [ 252.735819][T10088] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 252.793858][T10126] hfsplus: xattr search failed [ 252.949767][T10130] loop6: detected capacity change from 0 to 4096 [ 252.990518][T10130] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.036874][ T4359] ocfs2: Unmounting device (7,5) on (node local) [ 253.073674][T10130] NILFS (loop6): mounting unchecked fs [ 253.195069][T10130] NILFS (loop6): recovery complete [ 253.209614][T10141] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.353174][T10121] loop1: detected capacity change from 0 to 32768 [ 253.419570][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/877.tmp-b7:6' failed: Read-only file system [ 253.467849][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/878.tmp-b7:3' failed: Read-only file system [ 253.496719][T10121] jfs_lookup: iget failed on inum 4 [ 253.540997][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:6' failed: Read-only file system [ 253.604997][ T4272] udevd[4272]: symlink '../../loop0' '/dev/disk/by-diskseq/840.tmp-b7:0' failed: Read-only file system [ 253.606024][ T5560] udevd[5560]: symlink '../../loop5' '/dev/disk/by-diskseq/879.tmp-b7:5' failed: Read-only file system [ 253.654272][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/880.tmp-b7:1' failed: Read-only file system [ 253.714869][ T4272] udevd[4272]: symlink '../../loop0' '/dev/disk/by-diskseq/840.tmp-b7:0' failed: Read-only file system [ 253.749654][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 253.839373][T10151] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 253.857314][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/877.tmp-b7:6' failed: Read-only file system [ 253.927313][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/877.tmp-b7:6' failed: Read-only file system [ 254.288259][T10181] erofs: (device loop0): mounted with root inode @ nid 36. [ 254.354212][T10181] attempt to access beyond end of device [ 254.354212][T10181] loop0: rw=0, want=15300821032, limit=16 [ 254.401432][T10186] set_capacity_and_notify: 2 callbacks suppressed [ 254.401448][T10186] loop3: detected capacity change from 0 to 1024 [ 254.430656][T10181] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 254.487547][T10188] attempt to access beyond end of device [ 254.487547][T10188] loop0: rw=0, want=15300821032, limit=16 [ 254.542815][T10188] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 254.640950][T10195] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 254.694050][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2186'. [ 254.723500][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2186'. [ 254.751165][T10197] IPVS: Unknown mcast interface: pimreg0 [ 254.982744][T10210] loop3: detected capacity change from 0 to 164 [ 255.072949][T10210] rock: directory entry would overflow storage [ 255.079259][T10210] rock: sig=0x5252, size=5, remaining=3 [ 255.235695][T10220] xt_hashlimit: size too large, truncated to 1048576 [ 255.248863][T10176] loop6: detected capacity change from 0 to 32768 [ 255.352496][T10224] tipc: Enabling of bearer rejected, failed to enable media [ 255.384446][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2196'. [ 255.404375][T10226] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 255.482728][T10176] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 255.573992][T10227] loop0: detected capacity change from 0 to 4096 [ 255.624705][T10176] JBD2: Ignoring recovery information on journal [ 255.681671][T10227] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 255.697466][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805202][T10176] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 256.066152][T10251] usb usb8: usbfs: process 10251 (syz.3.2204) did not claim interface 4 before use [ 256.104625][ T9120] ocfs2: Unmounting device (7,6) on (node local) [ 256.491275][T10266] loop3: detected capacity change from 0 to 128 [ 256.984190][T10284] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2215'. [ 257.202135][T10253] loop1: detected capacity change from 0 to 32768 [ 257.324254][T10253] JBD2: Ignoring recovery information on journal [ 257.539184][T10253] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 257.559749][T10294] loop3: detected capacity change from 0 to 4096 [ 257.629105][T10294] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 257.720883][T10265] loop0: detected capacity change from 0 to 32768 [ 257.824857][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 257.825300][T10280] loop6: detected capacity change from 0 to 32768 [ 257.841452][T10265] XFS (loop0): Mounting V5 Filesystem [ 258.044095][T10280] (syz.6.2214,10280,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.077030][T10265] XFS (loop0): Ending clean mount [ 258.086947][T10265] XFS (loop0): Quotacheck needed: Please wait. [ 258.114924][T10280] (syz.6.2214,10280,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.177433][T10265] XFS (loop0): Quotacheck: Done. [ 258.186468][T10280] JBD2: Ignoring recovery information on journal [ 258.393358][ T4193] XFS (loop0): Unmounting Filesystem [ 258.410752][T10280] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 258.443848][ T4272] udevd[4272]: symlink '../../loop1' '/dev/disk/by-diskseq/901.tmp-b7:1' failed: Read-only file system [ 258.494400][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/899.tmp-b7:0' failed: Read-only file system [ 258.523184][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/900.tmp-b7:6' failed: Read-only file system [ 258.543888][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:0' failed: Read-only file system [ 258.563783][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:6' failed: Read-only file system [ 258.601545][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/902.tmp-b7:3' failed: Read-only file system [ 258.662020][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/901.tmp-b7:1' failed: Read-only file system [ 258.745116][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/902.tmp-b7:3' failed: Read-only file system [ 258.797897][ T9120] ocfs2: Unmounting device (7,6) on (node local) [ 258.876187][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/900.tmp-b7:6' failed: Read-only file system [ 258.900780][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/902.tmp-b7:3' failed: Read-only file system [ 258.931814][T10321] loop1: detected capacity change from 0 to 8192 [ 258.991623][T10321] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 259.092481][T10321] REISERFS (device loop1): using ordered data mode [ 259.099046][T10321] reiserfs: using flush barriers [ 259.105894][T10321] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.122938][T10321] REISERFS (device loop1): checking transaction log (loop1) [ 259.391976][T10321] REISERFS (device loop1): Using tea hash to sort names [ 259.402827][T10321] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 259.480385][T10321] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 259.590868][T10337] tipc: Enabling of bearer rejected, failed to enable media [ 259.639530][T10340] loop0: detected capacity change from 0 to 256 [ 259.683649][T10340] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9218ae8, utbl_chksum : 0xe619d30d) [ 259.761533][T10340] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 259.819618][T10340] exFAT-fs (loop0): Filesystem has been set read-only [ 259.832444][T10340] exFAT-fs (loop0): error, failed to bmap (inode : ffff888060fac260 iblock : 8, err : -5) [ 259.855693][T10340] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 260.159749][T10355] loop0: detected capacity change from 0 to 2048 [ 260.177355][T10357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2240'. [ 260.263110][T10359] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.318847][T10362] loop5: detected capacity change from 0 to 256 [ 260.343911][T10355] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 260.379006][T10355] Remounting filesystem read-only [ 260.424798][T10364] loop3: detected capacity change from 0 to 4096 [ 260.433078][T10362] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.460606][T10362] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.492687][ T4193] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 260.558355][T10370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.827183][ T5916] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 261.092651][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 261.181157][T10396] loop5: detected capacity change from 0 to 2048 [ 261.237657][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.255691][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.271504][ T5916] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 261.285947][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.305162][ T5916] usb 7-1: config 0 descriptor?? [ 261.319511][T10400] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.419036][T10396] NILFS error (device loop5): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 261.523065][T10396] Remounting filesystem read-only [ 261.604932][T10382] loop1: detected capacity change from 0 to 32768 [ 261.618078][ T4359] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 261.729008][T10382] XFS (loop1): Mounting V5 Filesystem [ 261.756961][T10415] loop0: detected capacity change from 0 to 4096 [ 261.794630][ T5916] hid-multitouch 0003:1FD2:6007.0011: unknown main item tag 0xe [ 261.812174][T10415] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 261.823982][ T5916] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 261.871932][T10429] tmpfs: Bad value for 'gid' [ 261.957036][T10382] XFS (loop1): Ending clean mount [ 262.007415][ T5916] usb 7-1: USB disconnect, device number 3 [ 262.106401][ T4195] XFS (loop1): Unmounting Filesystem [ 262.137016][T10432] fido_id[10432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 262.529397][T10454] loop0: detected capacity change from 0 to 16 [ 262.551756][T10452] loop3: detected capacity change from 0 to 2048 [ 262.578502][T10454] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 262.665353][T10456] loop6: detected capacity change from 0 to 4096 [ 262.739918][T10459] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.796936][T10452] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 262.848676][T10462] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.867624][T10452] Remounting filesystem read-only [ 262.903464][T10456] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 262.932184][T10461] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 262.980254][T10461] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.041194][ T4185] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 263.469209][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/923.tmp-b7:6' failed: Read-only file system [ 263.491155][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/925.tmp-b7:0' failed: Read-only file system [ 263.515500][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.553274][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/923.tmp-b7:6' failed: Read-only file system [ 263.569570][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/925.tmp-b7:0' failed: Read-only file system [ 263.700996][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-diskseq/930.tmp-b7:6' failed: Read-only file system [ 263.709928][T10487] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.720724][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/929.tmp-b7:0' failed: Read-only file system [ 263.736239][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-label/CDROM.tmp-b7:0' failed: Read-only file system [ 263.750964][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 263.762387][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:0' failed: Read-only file system [ 263.778634][ T5919] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 263.806524][T10487] EXT4-fs (loop6): can't change dax mount option while remounting [ 263.845532][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/929.tmp-b7:0' failed: Read-only file system [ 264.020125][T10466] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 264.047898][T10466] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 264.072704][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 264.085537][T10466] F2FS-fs (loop5): invalid crc value [ 264.148928][T10466] F2FS-fs (loop5): Found nat_bits in checkpoint [ 264.202963][ T5919] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 264.212154][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.238306][ T5919] usb 2-1: config 0 descriptor?? [ 264.271805][T10503] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 264.310720][T10503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 264.327885][ T5919] gspca_main: sunplus-2.14.0 probing 041e:400b [ 264.357049][T10503] EXT4-fs (loop0): orphan cleanup on readonly fs [ 264.374306][T10466] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 264.381611][T10466] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 264.401070][T10503] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 264.440597][T10503] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 264.463268][T10503] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.2296: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 264.485328][ T4359] attempt to access beyond end of device [ 264.485328][ T4359] loop5: rw=2049, want=45104, limit=40427 [ 264.499038][T10503] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2296: couldn't read orphan inode 13 (err -117) [ 264.534737][T10503] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000833,nomblk_io_submit,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 264.624304][T10503] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 264.652996][T10503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 264.703461][T10503] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 264.744022][T10512] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 264.756804][T10512] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 264.776472][T10512] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 264.946427][T10522] set_capacity_and_notify: 5 callbacks suppressed [ 264.946444][T10522] loop6: detected capacity change from 0 to 256 [ 264.962376][ T5919] gspca_sunplus: reg_r err -71 [ 264.967259][ T5919] sunplus: probe of 2-1:0.0 failed with error -71 [ 265.013953][ T5919] usb 2-1: USB disconnect, device number 12 [ 265.078588][T10522] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 265.420368][T10538] loop6: detected capacity change from 0 to 128 [ 265.489976][T10538] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 265.490015][T10538] hpfs: filesystem error: improperly stopped [ 265.490034][T10538] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 265.490052][T10538] hpfs: You really don't want any checks? You are crazy... [ 265.490073][T10538] hpfs: Code page index out of array [ 265.490083][T10538] hpfs: code page support is disabled [ 265.490255][T10538] hpfs: hpfs_map_4sectors(): unaligned read [ 265.490294][T10538] hpfs: hpfs_map_4sectors(): unaligned read [ 265.490305][T10538] hpfs: filesystem error: unable to find root dir [ 265.624429][T10542] loop1: detected capacity change from 0 to 512 [ 265.753867][T10542] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2313: inode has both inline data and extents flags [ 265.754150][T10542] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2313: couldn't read orphan inode 15 (err -117) [ 265.754340][T10542] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.001974][T10528] loop0: detected capacity change from 0 to 40427 [ 266.081321][T10528] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 266.112651][T10528] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 266.128200][T10549] loop6: detected capacity change from 0 to 4096 [ 266.181448][T10528] F2FS-fs (loop0): invalid crc value [ 266.203189][T10552] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.269011][T10528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 266.501682][T10528] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 266.510856][T10528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.615983][T10565] netlink: 'syz.6.2319': attribute type 29 has an invalid length. [ 266.663955][T10565] netlink: 'syz.6.2319': attribute type 29 has an invalid length. [ 266.685987][T10568] netlink: 'syz.6.2319': attribute type 29 has an invalid length. [ 266.833249][T10573] loop6: detected capacity change from 0 to 64 [ 266.868250][T10537] loop3: detected capacity change from 0 to 40427 [ 266.883143][ T155] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 266.899107][ T155] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 266.928884][T10537] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 266.953863][T10537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.015446][T10537] F2FS-fs (loop3): invalid crc value [ 267.068705][T10537] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.126437][T10579] loop5: detected capacity change from 0 to 1024 [ 267.300709][T10537] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 267.319887][T10537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.342107][T10583] loop1: detected capacity change from 0 to 2048 [ 267.491743][T10589] netlink: zone id is out of range [ 267.507198][T10589] netlink: zone id is out of range [ 267.541079][T10589] netlink: zone id is out of range [ 267.562818][T10589] netlink: zone id is out of range [ 267.612474][T10589] netlink: zone id is out of range [ 267.638382][T10589] netlink: zone id is out of range [ 267.672376][T10589] netlink: zone id is out of range [ 267.677595][T10589] netlink: zone id is out of range [ 267.700522][ T4185] attempt to access beyond end of device [ 267.700522][ T4185] loop3: rw=2049, want=45104, limit=40427 [ 267.752967][T10589] netlink: zone id is out of range [ 267.760197][T10593] loop5: detected capacity change from 0 to 1024 [ 267.772035][T10589] netlink: zone id is out of range [ 267.973665][ T1278] hfsplus: b-tree write err: -5, ino 25 [ 268.017710][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 268.032019][ T1278] hfsplus: b-tree write err: -5, ino 2 [ 268.080996][T10600] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 268.140220][T10599] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #17: comm syz.6.2336: corrupted in-inode xattr [ 268.206327][T10599] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.2336: couldn't read orphan inode 17 (err -117) [ 268.289878][T10599] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.586884][T10617] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 268.603787][ T26] audit: type=1800 audit(1777034128.274:22): pid=10615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2341" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 268.666140][T10621] FAT-fs (loop0): Directory bread(block 64) failed [ 268.673029][T10621] FAT-fs (loop0): Directory bread(block 65) failed [ 268.679785][T10621] FAT-fs (loop0): Directory bread(block 66) failed [ 268.690630][T10621] FAT-fs (loop0): Directory bread(block 67) failed [ 268.697449][T10621] FAT-fs (loop0): Directory bread(block 68) failed [ 268.705000][T10621] FAT-fs (loop0): Directory bread(block 69) failed [ 268.715182][T10621] FAT-fs (loop0): Directory bread(block 70) failed [ 268.721935][T10621] FAT-fs (loop0): Directory bread(block 71) failed [ 268.745962][T10621] FAT-fs (loop0): Directory bread(block 72) failed [ 268.753013][T10621] FAT-fs (loop0): Directory bread(block 73) failed [ 268.821877][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/956.tmp-b7:1' failed: Read-only file system [ 268.845961][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/947.tmp-b7:3' failed: Read-only file system [ 268.890602][ T4287] udevd[4287]: symlink '../../loop6' '/dev/disk/by-diskseq/954.tmp-b7:6' failed: Read-only file system [ 268.908114][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 268.940929][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/953.tmp-b7:5' failed: Read-only file system [ 268.969880][ T5560] udevd[5560]: symlink '../../loop0' '/dev/disk/by-diskseq/955.tmp-b7:0' failed: Read-only file system [ 268.990248][ T4287] udevd[4287]: symlink '../../loop6' '/dev/disk/by-diskseq/954.tmp-b7:6' failed: Read-only file system [ 269.001953][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/947.tmp-b7:3' failed: Read-only file system [ 269.029776][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 269.044172][T10632] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2349'. [ 269.082613][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/956.tmp-b7:1' failed: Read-only file system [ 269.892043][T10664] FAT-fs (loop3): Directory bread(block 64) failed [ 269.969488][T10664] FAT-fs (loop3): Directory bread(block 65) failed [ 270.002402][T10664] FAT-fs (loop3): Directory bread(block 66) failed [ 270.010937][T10664] FAT-fs (loop3): Directory bread(block 67) failed [ 270.095911][T10664] FAT-fs (loop3): Directory bread(block 68) failed [ 270.162354][T10664] FAT-fs (loop3): Directory bread(block 69) failed [ 270.189227][T10664] FAT-fs (loop3): Directory bread(block 70) failed [ 270.225923][T10664] FAT-fs (loop3): Directory bread(block 71) failed [ 270.281934][T10664] FAT-fs (loop3): Directory bread(block 72) failed [ 270.293212][T10664] FAT-fs (loop3): Directory bread(block 73) failed [ 270.332233][T10673] set_capacity_and_notify: 8 callbacks suppressed [ 270.359563][T10673] loop6: detected capacity change from 0 to 4096 [ 270.398156][T10649] loop1: detected capacity change from 0 to 32768 [ 270.542616][ T4226] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 270.555912][T10680] loop0: detected capacity change from 0 to 2048 [ 270.652528][T10680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.731925][T10682] loop3: detected capacity change from 0 to 4096 [ 270.792650][ T4226] usb 6-1: Using ep0 maxpacket: 16 [ 270.841206][T10687] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.910430][T10682] attempt to access beyond end of device [ 270.910430][T10682] loop3: rw=0, want=26388279066824, limit=4096 [ 270.931317][ T4226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.966907][ T4226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.977985][T10682] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 270.987009][ T4226] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.000439][ T4226] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.011925][T10689] loop0: detected capacity change from 0 to 2048 [ 271.035401][ T4226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.078128][ T4226] usb 6-1: config 0 descriptor?? [ 271.096016][T10689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.367054][T10703] loop1: detected capacity change from 0 to 512 [ 271.447522][T10703] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.574230][T10703] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 271.594465][ T4226] microsoft 0003:045E:07DA.0012: unbalanced collection at end of report description [ 271.614536][ T4226] microsoft 0003:045E:07DA.0012: parse failed [ 271.620698][ T4226] microsoft: probe of 0003:045E:07DA.0012 failed with error -22 [ 271.620863][T10703] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.678739][T10714] netlink: 'syz.0.2383': attribute type 3 has an invalid length. [ 271.870662][ T5347] usb 6-1: USB disconnect, device number 12 [ 271.956205][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 272.159647][T10734] loop3: detected capacity change from 0 to 1024 [ 272.203767][T10732] loop0: detected capacity change from 0 to 4096 [ 272.250053][T10732] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 272.279607][T10734] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 272.296487][T10732] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 272.334361][T10732] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 272.358460][T10734] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 272.381150][T10732] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 272.440704][T10732] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 272.467336][T10721] loop6: detected capacity change from 0 to 32768 [ 272.490072][T10734] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 272.494179][T10732] ntfs: volume version 3.1. [ 272.571771][T10741] loop5: detected capacity change from 0 to 1024 [ 272.634212][T10721] XFS (loop6): Mounting V5 Filesystem [ 272.652097][T10732] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 272.811610][T10732] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 272.826323][T10732] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 272.837890][T10732] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 272.939482][ T144] hfsplus: b-tree write err: -5, ino 25 [ 272.945844][ T144] hfsplus: b-tree write err: -5, ino 4 [ 272.955454][ T144] hfsplus: b-tree write err: -5, ino 2 [ 272.962015][T10721] XFS (loop6): Ending clean mount [ 273.162674][T10754] net_ratelimit: 20 callbacks suppressed [ 273.162693][T10754] Dead loop on virtual device ip6_vti0, fix it urgently! [ 273.241249][ T9120] XFS (loop6): Unmounting Filesystem [ 273.588276][T10768] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 273.735966][T10776] binder: 10773:10776 unknown command 0 [ 273.744835][T10774] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.745639][T10768] attempt to access beyond end of device [ 273.745639][T10768] loop3: rw=524288, want=33554432, limit=2048 [ 273.791488][T10777] set match dimension is over the limit! [ 273.797817][T10776] binder: 10773:10776 ioctl c0306201 200000000080 returned -22 [ 273.825689][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/992.tmp-b7:1' failed: Read-only file system [ 273.841645][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/994.tmp-b7:0' failed: Read-only file system [ 273.906030][ T5560] udevd[5560]: symlink '../../loop6' '/dev/disk/by-diskseq/987.tmp-b7:6' failed: Read-only file system [ 273.924313][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.946560][ T4287] udevd[4287]: symlink '../../loop5' '/dev/disk/by-diskseq/991.tmp-b7:5' failed: Read-only file system [ 273.983690][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/990.tmp-b7:3' failed: Read-only file system [ 274.000326][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/994.tmp-b7:0' failed: Read-only file system [ 274.025819][ T5560] udevd[5560]: symlink '../../loop6' '/dev/disk/by-diskseq/987.tmp-b7:6' failed: Read-only file system [ 274.042776][T10768] attempt to access beyond end of device [ 274.042776][T10768] loop3: rw=0, want=33554432, limit=2048 [ 274.062148][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/992.tmp-b7:1' failed: Read-only file system [ 274.084335][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-uuid/8d5b9604-d7b7-4ece-ae00-6b765044cdb8.tmp-b7:3' failed: Read-only file system [ 274.112802][T10768] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 274.139902][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/992.tmp-b7:1' failed: Read-only file system [ 274.328933][T10789] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 274.467684][T10796] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.552599][T10803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.657898][ T154] hfsplus: b-tree write err: -5, ino 25 [ 274.673915][ T154] hfsplus: b-tree write err: -5, ino 4 [ 274.679533][ T154] hfsplus: b-tree write err: -5, ino 2 [ 274.722462][ T154] hfsplus: b-tree write err: -5, ino 26 [ 275.367219][T10826] set_capacity_and_notify: 6 callbacks suppressed [ 275.367236][T10826] loop0: detected capacity change from 0 to 4096 [ 275.630481][T10836] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.644615][T10835] loop6: detected capacity change from 0 to 512 [ 275.831333][T10835] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2438: invalid indirect mapped block 256 (level 2) [ 276.006381][T10828] loop1: detected capacity change from 0 to 131072 [ 276.019885][T10835] EXT4-fs (loop6): Remounting filesystem read-only [ 276.045705][T10835] EXT4-fs (loop6): 2 truncates cleaned up [ 276.051514][T10835] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,auto_da_alloc,lazytime,errors=remount-ro,. Quota mode: writeback. [ 276.128195][T10835] EXT4-fs warning (device loop6): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 276.201666][T10828] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:1, blkofs:16 [ 276.216509][T10828] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 276.268544][T10856] program syz.3.2445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.410881][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2449'. [ 276.793540][T10877] loop3: detected capacity change from 0 to 4096 [ 276.944381][T10885] loop1: detected capacity change from 0 to 1024 [ 276.966637][T10886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.024611][T10889] loop6: detected capacity change from 0 to 24 [ 277.127556][T10889] romfs: read error for inode 0x8000 [ 277.242167][ T144] hfsplus: b-tree write err: -5, ino 25 [ 277.250225][ T144] hfsplus: b-tree write err: -5, ino 4 [ 277.272407][ T144] hfsplus: b-tree write err: -5, ino 2 [ 277.403882][T10896] tipc: Started in network mode [ 277.408868][T10896] tipc: Node identity e0000002, cluster identity 4711 [ 277.468181][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2464'. [ 277.482466][T10896] tipc: Enabling of bearer rejected, failed to enable media [ 277.557828][T10902] loop5: detected capacity change from 0 to 2048 [ 277.612624][T10899] loop6: detected capacity change from 0 to 4096 [ 277.723516][T10902] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.750548][T10906] loop1: detected capacity change from 0 to 2048 [ 277.759306][T10907] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.804771][T10899] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 277.903161][T10899] Remounting filesystem read-only [ 277.953537][T10906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.025634][ T9120] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 278.048440][T10913] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2472'. [ 278.082440][T10913] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2472'. [ 278.089931][T10879] loop0: detected capacity change from 0 to 32768 [ 278.114579][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2472'. [ 278.193479][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2472'. [ 278.242448][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2472'. [ 278.441742][T10879] XFS (loop0): Mounting V5 Filesystem [ 278.583968][T10879] XFS (loop0): Ending clean mount [ 278.718743][ T4193] XFS (loop0): Unmounting Filesystem [ 278.733403][ T4226] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 278.851674][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/1016.tmp-b7:3' failed: Read-only file system [ 278.889576][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1012.tmp-b7:1' failed: Read-only file system [ 278.929158][T10926] XFS (loop6): Mounting V5 Filesystem [ 278.972160][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/1016.tmp-b7:3' failed: Read-only file system [ 279.036381][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-diskseq/1024.tmp-b7:6' failed: Read-only file system [ 279.056750][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.070795][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:6' failed: Read-only file system [ 279.091376][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1015.tmp-b7:1' failed: Read-only file system [ 279.108820][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.122868][ T4226] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.156446][ T4226] usb 6-1: config 0 has no interface number 0 [ 279.169953][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1019.tmp-b7:1' failed: Read-only file system [ 279.185258][ T4226] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.201899][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1019.tmp-b7:1' failed: Read-only file system [ 279.232398][ T4226] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.242760][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1019.tmp-b7:1' failed: Read-only file system [ 279.259762][ T4226] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 279.277323][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1019.tmp-b7:1' failed: Read-only file system [ 279.289642][ T4226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.314800][ T4226] usb 6-1: config 0 descriptor?? [ 279.360572][T10926] XFS (loop6): Ending clean mount [ 279.379804][T10926] XFS (loop6): Quotacheck needed: Please wait. [ 279.513868][T10926] XFS (loop6): Quotacheck: Done. [ 279.761636][ T9120] XFS (loop6): Unmounting Filesystem [ 279.769699][T10960] exfat: Deprecated parameter 'namecase' [ 279.805383][ T4226] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 279.818535][ T4226] prodikeys 0003:041E:2801.0013: item fetching failed at offset 6/7 [ 279.828326][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.835348][ T4226] prodikeys 0003:041E:2801.0013: hid parse failed [ 279.888989][ T4226] prodikeys: probe of 0003:041E:2801.0013 failed with error -22 [ 279.897630][T10960] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 280.026904][ T5347] usb 6-1: USB disconnect, device number 13 [ 280.281950][T10978] usb usb8: check_ctrlrecip: process 10978 (syz.0.2497) requesting ep 01 but needs 81 [ 280.412133][T10981] set_capacity_and_notify: 3 callbacks suppressed [ 280.412148][T10981] loop0: detected capacity change from 0 to 256 [ 280.482109][T10981] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x769352d4, utbl_chksum : 0xe619d30d) [ 280.592611][ T5916] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 280.639247][T10985] attempt to access beyond end of device [ 280.639247][T10985] loop0: rw=524288, want=408, limit=256 [ 280.652081][T10984] loop3: detected capacity change from 0 to 1764 [ 280.673779][T10985] attempt to access beyond end of device [ 280.673779][T10985] loop0: rw=524288, want=664, limit=256 [ 280.701559][T10985] attempt to access beyond end of device [ 280.701559][T10985] loop0: rw=0, want=288, limit=256 [ 280.727948][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 280.727964][ T26] audit: type=1800 audit(1777034140.394:24): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2499" name="file1" dev="loop0" ino=1048730 res=0 errno=0 [ 280.793675][T10984] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 280.842542][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 280.861128][T10992] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2502'. [ 280.963337][ T5916] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 280.971755][ T5916] usb 2-1: config 179 has no interface number 0 [ 281.012668][ T5916] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 281.054226][ T5916] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 281.078253][ T5916] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 281.090715][ T5916] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 281.139758][ T5916] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 281.168810][ T5916] usb 2-1: config 179 interface 65 has no altsetting 0 [ 281.178258][ T5916] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 281.188117][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.286673][ T5916] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15 [ 281.482772][ T5916] usb 2-1: USB disconnect, device number 13 [ 281.502424][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 281.547713][ T5916] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 281.577523][T11016] overlayfs: failed to resolve '/7<ˆ_1êhC3–áZQñ`H0ÇÂ@B5ý·6è%£ ÝÿpÜå2ð [ 281.577523][T11016] Iš0ò¸¡©Á¨ÿNíÙtaÑ[ ªöÌ…÷¼E{7¿èqê°éøËvݲŠ6®¹': -2 [ 282.028952][T11035] loop6: detected capacity change from 0 to 64 [ 282.159102][T11020] loop0: detected capacity change from 0 to 32768 [ 282.227613][T11020] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2515 (11020) [ 282.301067][T11020] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 282.340203][T11020] BTRFS info (device loop0): enabling disk space caching [ 282.369936][T11020] BTRFS info (device loop0): force clearing of disk cache [ 282.378125][T11020] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 282.388440][T11020] BTRFS info (device loop0): use lzo compression, level 0 [ 282.395987][T11020] BTRFS info (device loop0): disk space caching is enabled [ 282.404141][T11020] BTRFS info (device loop0): has skinny extents [ 282.524534][T11057] loop3: detected capacity change from 0 to 164 [ 282.630102][T11057] rock: directory entry would overflow storage [ 282.676770][T11020] BTRFS info (device loop0): enabling ssd optimizations [ 282.679069][T11057] rock: sig=0x4f50, size=4, remaining=3 [ 282.694880][T11020] BTRFS info (device loop0): clearing free space tree [ 282.710316][T11020] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.738546][T11020] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.789831][T11057] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 282.808543][T11075] loop1: detected capacity change from 0 to 24 [ 282.834822][T11075] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 282.900453][T11075] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 282.920451][T11020] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 283.052450][ T5347] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 283.129135][T11082] loop1: detected capacity change from 0 to 64 [ 283.292386][ T5347] usb 6-1: Using ep0 maxpacket: 8 [ 283.412623][ T5347] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.446851][ T5347] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.520651][ T5347] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.530802][ T5347] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 283.565294][ T5347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.605022][ T5347] usb 6-1: config 0 descriptor?? [ 283.711538][T11072] loop6: detected capacity change from 0 to 32768 [ 283.745875][T11072] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2530 (11072) [ 283.829654][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 283.846798][T11072] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 283.871448][ T5560] udevd[5560]: symlink '../../loop6' '/dev/disk/by-diskseq/1044.tmp-b7:6' failed: Read-only file system [ 283.890887][ T4272] udevd[4272]: symlink '../../loop1' '/dev/disk/by-diskseq/1045.tmp-b7:1' failed: Read-only file system [ 283.905130][T11072] BTRFS info (device loop6): using free space tree [ 283.911810][T11072] BTRFS info (device loop6): has skinny extents [ 283.926403][ T5560] udevd[5560]: symlink '../../loop6' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:6' failed: Read-only file system [ 283.962640][T11091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 283.989489][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/1036.tmp-b7:0' failed: Read-only file system [ 284.000915][T11091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 284.022781][T11100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 284.049719][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/1036.tmp-b7:0' failed: Read-only file system [ 284.074259][T11100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 284.084176][T11100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 284.088462][ T5347] smartjoyplus 0003:6666:8804.0014: unknown main item tag 0x2 [ 284.128237][ T5347] smartjoyplus 0003:6666:8804.0014: item fetching failed at offset 4/5 [ 284.167220][ T5347] smartjoyplus 0003:6666:8804.0014: parse failed [ 284.215848][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1045.tmp-b7:1' failed: Read-only file system [ 284.228156][T11072] BTRFS info (device loop6): enabling ssd optimizations [ 284.244937][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.245769][ T5347] smartjoyplus: probe of 0003:6666:8804.0014 failed with error -22 [ 284.264384][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.324923][ T5347] usb 6-1: USB disconnect, device number 14 [ 284.382190][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1045.tmp-b7:1' failed: Read-only file system [ 284.400113][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-diskseq/1044.tmp-b7:6' failed: Read-only file system [ 284.417942][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.433616][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.441695][ T23] usb 4-1: SerialNumber: syz [ 284.460001][T11087] loop0: detected capacity change from 0 to 32768 [ 284.468715][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:6' failed: Read-only file system [ 284.640500][ T5560] udevd[5560]: symlink '../../loop1' '/dev/disk/by-diskseq/1045.tmp-b7:1' failed: Read-only file system [ 284.715694][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2545'. [ 284.752518][T11123] bridge_slave_0: default FDB implementation only supports local addresses [ 284.805501][ T23] usb 4-1: 0:2 : does not exist [ 284.879047][T11127] loop1: detected capacity change from 0 to 256 [ 284.893642][ T23] usb 4-1: USB disconnect, device number 8 [ 284.994075][T11127] exfat: Deprecated parameter 'utf8' [ 284.999492][T11127] exfat: Deprecated parameter 'namecase' [ 285.111119][T11127] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 285.257683][T11136] PM: Enabling pm_trace changes system date and time during resume. [ 285.257683][T11136] PM: Correct system time has to be restored manually after resume. [ 285.630015][T11145] loop1: detected capacity change from 0 to 256 [ 285.697208][T11145] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 285.753390][ T26] audit: type=1804 audit(1777034145.414:25): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2553" name="/newroot/529/file0/file1" dev="loop1" ino=1048735 res=1 errno=0 [ 285.779439][T11149] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2556'. [ 285.821287][T11149] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2556'. [ 285.898023][T11137] loop0: detected capacity change from 0 to 32768 [ 285.985281][T11137] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2551 (11137) [ 286.069979][T11137] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 286.102535][T11137] BTRFS info (device loop0): enabling disk space caching [ 286.112506][T11137] BTRFS info (device loop0): force clearing of disk cache [ 286.152600][T11137] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 286.188895][T11137] BTRFS info (device loop0): use zstd compression, level 3 [ 286.208406][T11137] BTRFS info (device loop0): disk space caching is enabled [ 286.232824][T11137] BTRFS info (device loop0): has skinny extents [ 286.345161][T11181] loop3: detected capacity change from 0 to 512 [ 286.369549][T11168] loop1: detected capacity change from 0 to 4096 [ 286.494349][T11181] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 286.524301][T11181] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.542962][T11137] BTRFS info (device loop0): enabling ssd optimizations [ 286.559319][T11137] BTRFS info (device loop0): clearing free space tree [ 286.568683][T11137] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 286.580811][T11137] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.115566][ T4265] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop0 scanned by udevd (4265) [ 287.528515][T11193] loop6: detected capacity change from 0 to 32768 [ 287.740897][T11193] XFS (loop6): Mounting V5 Filesystem [ 287.862191][T11193] XFS (loop6): Ending clean mount [ 287.897977][T11193] XFS (loop6): Quotacheck needed: Please wait. [ 288.004165][T11193] XFS (loop6): Quotacheck: Done. [ 288.041616][T11209] loop5: detected capacity change from 0 to 32768 [ 288.057309][T11207] loop1: detected capacity change from 0 to 32768 [ 288.165705][T11233] netlink: 'syz.3.2583': attribute type 3 has an invalid length. [ 288.225252][T11235] wireguard: wg0: Could not create IPv4 socket [ 288.240922][T11207] ERROR: (device loop1): dbDiscardAG: -EIO [ 288.240922][T11207] [ 288.263022][ T9120] XFS (loop6): Unmounting Filesystem [ 288.389004][T11207] ERROR: (device loop1): remounting filesystem as read-only [ 288.431653][T11245] loop0: detected capacity change from 0 to 512 [ 288.438308][T11209] XFS (loop5): Mounting V5 Filesystem [ 288.565782][T11245] EXT4-fs (loop0): Ignoring removed nobh option [ 288.613964][T11252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2590'. [ 288.681523][T11245] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2587: invalid indirect mapped block 256 (level 2) [ 288.780893][T11209] XFS (loop5): Ending clean mount [ 288.789862][T11245] EXT4-fs (loop0): Remounting filesystem read-only [ 288.858860][T11261] loop3: detected capacity change from 0 to 512 [ 288.873217][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 288.877195][T11245] EXT4-fs (loop0): 2 truncates cleaned up [ 288.894451][T11263] loop6: detected capacity change from 0 to 256 [ 288.926805][T11245] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 288.949857][ T4359] XFS (loop5): Unmounting Filesystem [ 288.959180][T11261] EXT4-fs (loop3): Ignoring removed oldalloc option [ 289.019944][ T4322] udevd[4322]: symlink '../../loop3' '/dev/disk/by-diskseq/1065.tmp-b7:3' failed: Read-only file system [ 289.072522][T11261] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.2593: bad orphan inode 32 [ 289.095575][ T4265] udevd[4265]: symlink '../../loop5' '/dev/disk/by-diskseq/1060.tmp-b7:5' failed: Read-only file system [ 289.145099][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-diskseq/1066.tmp-b7:6' failed: Read-only file system [ 289.172514][ T4287] udevd[4287]: symlink '../../loop1' '/dev/disk/by-diskseq/1063.tmp-b7:1' failed: Read-only file system [ 289.203269][T11261] ext4_test_bit(bit=31, block=4) = 0 [ 289.208874][T11261] EXT4-fs (loop3): 1 truncate cleaned up [ 289.219759][ T4265] udevd[4265]: symlink '../../loop5' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:5' failed: Read-only file system [ 289.237271][T11261] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,oldalloc,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 289.260193][ T4322] udevd[4322]: symlink '../../loop3' '/dev/disk/by-diskseq/1065.tmp-b7:3' failed: Read-only file system [ 289.275348][ T5560] udevd[5560]: symlink '../../loop0' '/dev/disk/by-diskseq/1062.tmp-b7:0' failed: Read-only file system [ 289.337534][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/1062.tmp-b7:0' failed: Read-only file system [ 289.354719][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-diskseq/1066.tmp-b7:6' failed: Read-only file system [ 289.416658][T11271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2595'. [ 289.526047][T11271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2595'. [ 289.696420][T11275] SQUASHFS error: Unable to read directory block [629:46] [ 289.926408][T11282] EXT4-fs (loop3): Ignoring removed bh option [ 289.962829][T11282] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 290.044652][T11282] EXT4-fs (loop3): 1 truncate cleaned up [ 290.116824][T11282] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 290.238235][T11286] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 290.320204][T11286] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.470520][T11269] XFS (loop6): Mounting V5 Filesystem [ 290.616856][T11283] XFS (loop0): Mounting V5 Filesystem [ 290.800504][T11269] XFS (loop6): Ending clean mount [ 290.877370][T11283] XFS (loop0): Ending clean mount [ 290.935273][ T9120] XFS (loop6): Unmounting Filesystem [ 291.056847][ T4193] XFS (loop0): Unmounting Filesystem [ 291.090199][T11318] set_capacity_and_notify: 5 callbacks suppressed [ 291.090217][T11318] loop5: detected capacity change from 0 to 4096 [ 291.393723][T11324] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.405547][T11324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.413974][T11324] IPv6: NLM_F_CREATE should be set when creating new route [ 291.421303][T11324] IPv6: NLM_F_CREATE should be set when creating new route [ 291.428817][T11324] IPv6: NLM_F_CREATE should be set when creating new route [ 291.483609][T11318] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 291.538846][T11318] ntfs3: loop5: failed to convert "0080" to koi8-ru [ 291.637714][T11300] loop1: detected capacity change from 0 to 40427 [ 291.770867][T11300] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 291.800149][T11300] F2FS-fs (loop1): invalid crc value [ 291.870564][T11300] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.115313][T11300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.567674][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2630'. [ 292.731345][T11329] loop3: detected capacity change from 0 to 32768 [ 292.883606][T11329] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2616 (11329) [ 292.940720][T11376] loop0: detected capacity change from 0 to 136 [ 292.951705][T11329] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 292.991882][T11329] BTRFS info (device loop3): using free space tree [ 293.008012][T11329] BTRFS info (device loop3): has skinny extents [ 293.077938][T11376] Attempt to read inode for relocated directory [ 293.185967][T11391] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2639'. [ 293.287154][T11391] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 293.446209][T11329] BTRFS info (device loop3): enabling ssd optimizations [ 293.534832][T11412] loop6: detected capacity change from 0 to 512 [ 293.561641][T11409] loop1: detected capacity change from 0 to 512 [ 293.584849][T11412] EXT4-fs (loop6): Ignoring removed nobh option [ 293.724518][T11412] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2644: invalid indirect mapped block 256 (level 2) [ 293.793392][T11409] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 293.811406][T11421] tipc: Started in network mode [ 293.816951][T11409] ext4 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.867554][T11412] EXT4-fs (loop6): Remounting filesystem read-only [ 293.896568][T11412] EXT4-fs (loop6): 2 truncates cleaned up [ 293.941990][T11421] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 293.952326][T11412] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 294.020154][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/1089.tmp-b7:1' failed: Read-only file system [ 294.055815][T11421] tipc: Enabled bearer , priority 10 [ 294.070203][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 294.119587][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-diskseq/1088.tmp-b7:6' failed: Read-only file system [ 294.152103][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/1083.tmp-b7:5' failed: Read-only file system [ 294.175821][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 294.214734][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/1087.tmp-b7:0' failed: Read-only file system [ 294.283752][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/1083.tmp-b7:5' failed: Read-only file system [ 294.328833][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/1087.tmp-b7:0' failed: Read-only file system [ 294.358761][T11432] tmpfs: Bad value for 'mpol' [ 294.445956][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/1087.tmp-b7:0' failed: Read-only file system [ 294.472002][T11437] overlayfs: bad mount option "redirect_dir=off:/" [ 294.481512][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/1085.tmp-b7:3' failed: Read-only file system [ 295.173236][ T1107] tipc: Node number set to 4269801488 [ 295.198518][T11459] loop6: detected capacity change from 0 to 512 [ 295.237796][T11461] binder: 11460:11461 ioctl 4018620d 0 returned -22 [ 295.289226][T11464] binder: 11460:11464 ioctl c0046209 0 returned -22 [ 295.331669][T11459] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 295.374332][T11459] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.449002][T11448] loop1: detected capacity change from 0 to 32768 [ 295.621064][T11448] XFS (loop1): Mounting V5 Filesystem [ 295.769081][T11448] XFS (loop1): Ending clean mount [ 295.823884][T11492] loop6: detected capacity change from 0 to 256 [ 295.847490][T11492] exfat: Deprecated parameter 'namecase' [ 295.849101][T11490] loop5: detected capacity change from 0 to 512 [ 295.880873][T11492] exfat: Deprecated parameter 'utf8' [ 295.938318][T11490] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.948412][T11492] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 296.035873][T11492] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 296.067184][T11490] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 296.132658][T11490] Quota error (device loop5): write_blk: dquota write failed [ 296.144793][ T4195] XFS (loop1): Unmounting Filesystem [ 296.160553][T11490] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 296.254519][T11490] Quota error (device loop5): write_blk: dquota write failed [ 296.271024][T11490] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 296.305145][T11490] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2672: Failed to acquire dquot type 1 [ 296.318871][T11490] EXT4-fs (loop5): 1 truncate cleaned up [ 296.325004][T11490] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,quota,auto_da_alloc,auto_da_alloc=0x0000000000000001,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 296.440396][T11481] loop3: detected capacity change from 0 to 40427 [ 296.446780][T11490] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option [ 296.446940][T11490] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 296.488254][T11497] loop6: detected capacity change from 0 to 4096 [ 296.622683][T11481] F2FS-fs (loop3): invalid crc value [ 296.662077][T11481] F2FS-fs (loop3): Found nat_bits in checkpoint [ 296.680876][T11498] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.723350][T11497] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 296.808113][T11481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.820270][T11497] NILFS error (device loop6): nilfs_readdir: bad page in #2 [ 296.958726][T11481] F2FS-fs (loop3): switch discard_unit option is not allowed [ 296.994553][T11504] loop1: detected capacity change from 0 to 1024 [ 297.220049][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 297.331957][T11501] loop5: detected capacity change from 0 to 32768 [ 297.420654][T11501] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 297.430644][T11501] BTRFS info (device loop5): using free space tree [ 297.453323][T11501] BTRFS info (device loop5): has skinny extents [ 297.482157][T11511] loop1: detected capacity change from 0 to 1024 [ 297.538295][T11511] EXT4-fs (loop1): Ignoring removed bh option [ 297.724039][T11511] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 297.761403][T11501] BTRFS info (device loop5): enabling ssd optimizations [ 297.825015][T11507] loop6: detected capacity change from 0 to 32768 [ 298.042083][T11544] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 298.058328][T11544] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 298.068471][T11544] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 298.082411][T11544] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 298.088933][T11544] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 298.164813][T11544] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 298.203570][T11544] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 298.212311][T11507] XFS (loop6): Mounting V5 Filesystem [ 298.252581][T11544] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 298.259294][T11544] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 298.290479][T11544] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 298.336174][T11544] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 298.362589][T11544] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 298.369381][T11544] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 298.385708][T11544] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 298.392340][T11544] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 298.398837][T11544] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 298.407251][T11544] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 298.413969][T11544] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 298.420522][T11544] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 298.513430][T11549] loop1: detected capacity change from 0 to 2048 [ 298.646775][T11549] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 298.802988][T11507] XFS (loop6): Ending clean mount [ 298.971930][T11536] loop3: detected capacity change from 0 to 32768 [ 298.987682][ T26] audit: type=1326 audit(1777034158.654:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.0.2688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe47a182dd9 code=0x0 [ 299.023459][ T9120] XFS (loop6): Unmounting Filesystem [ 299.030326][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/1109.tmp-b7:6' failed: Read-only file system [ 299.045315][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:6' failed: Read-only file system [ 299.110141][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/1111.tmp-b7:1' failed: Read-only file system [ 299.167257][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/1114.tmp-b7:3' failed: Read-only file system [ 299.235502][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1113.tmp-b7:1' failed: Read-only file system [ 299.254636][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/1114.tmp-b7:3' failed: Read-only file system [ 299.295811][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 299.332170][ T4322] udevd[4322]: symlink '../../loop3' '/dev/disk/by-diskseq/1114.tmp-b7:3' failed: Read-only file system [ 299.376734][ T4322] udevd[4322]: symlink '../../loop3' '/dev/disk/by-diskseq/1115.tmp-b7:3' failed: Read-only file system [ 299.475634][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1113.tmp-b7:1' failed: Read-only file system [ 299.526672][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-diskseq/1109.tmp-b7:6' failed: Read-only file system [ 299.910654][T11554] loop5: detected capacity change from 0 to 40427 [ 299.930319][T11579] netlink: 'syz.1.2697': attribute type 1 has an invalid length. [ 300.007609][T11554] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 300.038924][T11554] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 300.083702][T11554] F2FS-fs (loop5): invalid crc value [ 300.115388][T11589] smc: net device wlan0 applied user defined pnetid SYZ0 [ 300.149217][T11554] F2FS-fs (loop5): Found nat_bits in checkpoint [ 300.187878][T11587] loop0: detected capacity change from 0 to 4096 [ 300.286511][T11587] ntfs: volume version 3.1. [ 300.301951][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 300.312314][T11601] block nbd0: Unsupported socket: shutdown callout must be supported. [ 300.327469][T11594] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 300.382217][T11594] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.408248][T11554] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 300.473432][T11554] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 300.772378][ T4359] attempt to access beyond end of device [ 300.772378][ T4359] loop5: rw=2049, want=45104, limit=40427 [ 301.477619][T11608] set_capacity_and_notify: 1 callbacks suppressed [ 301.477634][T11608] loop0: detected capacity change from 0 to 40427 [ 301.524371][T11608] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 301.538716][T11624] loop6: detected capacity change from 0 to 4096 [ 301.543625][T11608] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 301.610817][T11608] F2FS-fs (loop0): Found nat_bits in checkpoint [ 301.696222][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2722'. [ 301.721812][T11624] ntfs: (device loop6): parse_options(): NLS character set is not found. Using previous one default. [ 301.742932][T11624] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 301.839338][T11624] ntfs: volume version 3.1. [ 301.903386][T11608] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 301.921966][T11624] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 301.944941][T11608] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 301.955563][ T5902] kernel write not supported for file /snd/seq (pid: 5902 comm: kworker/1:8) [ 302.000466][T11624] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 302.538716][T11637] loop1: detected capacity change from 0 to 32768 [ 302.606945][T11633] loop3: detected capacity change from 0 to 40427 [ 302.615119][T11637] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2721 (11637) [ 302.667514][T11637] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 302.686293][T11637] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 302.751597][T11633] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 302.759380][T11637] BTRFS info (device loop1): use zstd compression, level 3 [ 302.782437][T11637] BTRFS info (device loop1): using free space tree [ 302.789020][T11637] BTRFS info (device loop1): has skinny extents [ 302.795520][T11633] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 302.823832][T11633] F2FS-fs (loop3): invalid crc value [ 302.860432][T11633] F2FS-fs (loop3): Found nat_bits in checkpoint [ 302.907601][T11646] loop5: detected capacity change from 0 to 32768 [ 302.974081][T11633] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 302.998705][T11633] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 303.117277][T11646] XFS (loop5): Mounting V5 Filesystem [ 303.126076][T11637] BTRFS info (device loop1): enabling ssd optimizations [ 303.242534][T11633] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 303.289160][T11646] XFS (loop5): Ending clean mount [ 303.383844][T11693] loop6: detected capacity change from 0 to 512 [ 303.516129][T11693] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.571461][ T4359] XFS (loop5): Unmounting Filesystem [ 303.581405][T11693] EXT4-fs warning (device loop6): __ext4_ioctl:882: Setting inode version is not supported with metadata_csum enabled. [ 303.963118][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 304.061052][ T4322] udevd[4322]: symlink '../../loop3' '/dev/disk/by-diskseq/1132.tmp-b7:3' failed: Read-only file system [ 304.135991][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/1130.tmp-b7:6' failed: Read-only file system [ 304.235375][ T4322] udevd[4322]: symlink '../../loop6' '/dev/disk/by-diskseq/1130.tmp-b7:6' failed: Read-only file system [ 304.326182][ T4322] udevd[4322]: symlink '../../loop3' '/dev/disk/by-diskseq/1132.tmp-b7:3' failed: Read-only file system [ 304.379268][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 304.394544][ T4322] udevd[4322]: symlink '../../loop0' '/dev/disk/by-diskseq/1127.tmp-b7:0' failed: Read-only file system [ 304.451332][ T4265] udevd[4265]: symlink '../../loop6' '/dev/disk/by-diskseq/1133.tmp-b7:6' failed: Read-only file system [ 304.510752][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1131.tmp-b7:1' failed: Read-only file system [ 304.565043][ T4265] udevd[4265]: symlink '../../loop0' '/dev/disk/by-diskseq/1127.tmp-b7:0' failed: Read-only file system [ 304.627258][ T4322] udevd[4322]: symlink '../../loop3' '/dev/disk/by-diskseq/1132.tmp-b7:3' failed: Read-only file system [ 304.675374][ T4265] udevd[4265]: symlink '../../loop5' '/dev/disk/by-diskseq/1129.tmp-b7:5' failed: Read-only file system [ 304.826984][T11730] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 305.218279][T11748] netlink: 'syz.1.2753': attribute type 49 has an invalid length. [ 305.404538][T11760] loop5: detected capacity change from 0 to 64 [ 305.481530][T11762] loop0: detected capacity change from 0 to 512 [ 305.550218][T11762] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 305.588361][T11762] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 305.600229][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2761'. [ 305.676941][T11762] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 305.694572][T11762] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 305.738380][T11770] loop3: detected capacity change from 0 to 4096 [ 305.750227][T11762] EXT4-fs (loop0): 1 truncate cleaned up [ 305.785291][T11762] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 305.812190][T11770] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 305.822021][T11771] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.842726][T11770] NILFS (loop3): mounting fs with errors [ 305.864227][T11773] loop1: detected capacity change from 0 to 512 [ 305.910453][T11762] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 4: comm syz.0.2760: lblock 0 mapped to illegal pblock 4 (length 1) [ 305.931531][T11762] EXT4-fs (loop0): Remounting filesystem read-only [ 305.947943][T11773] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.006046][T11773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 306.021197][T11726] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 306.032385][T11726] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 306.042787][T11773] Quota error (device loop1): write_blk: dquota write failed [ 306.075016][T11773] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 306.085622][T11773] Quota error (device loop1): write_blk: dquota write failed [ 306.093537][T11773] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 306.103833][T11773] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2764: Failed to acquire dquot type 1 [ 306.116818][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.130409][T11773] EXT4-fs (loop1): 1 truncate cleaned up [ 306.143752][T11726] F2FS-fs (loop6): invalid crc value [ 306.144356][T11773] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,quota,auto_da_alloc,auto_da_alloc=0x0000000000000001,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 306.223863][T11726] F2FS-fs (loop6): Found nat_bits in checkpoint [ 306.377456][T11726] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 306.388886][T11726] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 306.484747][T11794] set_capacity_and_notify: 1 callbacks suppressed [ 306.484762][T11794] loop5: detected capacity change from 0 to 512 [ 306.572827][T11773] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 306.584240][T11773] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 306.617539][T11726] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 306.691917][T11794] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.749749][T11794] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.850315][T11808] device ipvlan2 entered promiscuous mode [ 306.863465][T11808] bridge0: port 3(ipvlan2) entered blocking state [ 306.870068][T11808] bridge0: port 3(ipvlan2) entered disabled state [ 307.132027][T11819] netlink: 'syz.1.2782': attribute type 1 has an invalid length. [ 307.515863][T11838] loop6: detected capacity change from 0 to 64 [ 307.666548][T11843] devtmpfs: Bad value for 'gid' [ 308.113695][T11858] loop6: detected capacity change from 0 to 2048 [ 308.212652][T11865] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.304778][T11833] loop0: detected capacity change from 0 to 40427 [ 308.345456][T11833] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 308.380827][T11833] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 308.401529][T11833] F2FS-fs (loop0): invalid crc value [ 308.423196][T11833] F2FS-fs (loop0): Found nat_bits in checkpoint [ 308.476519][T11874] loop6: detected capacity change from 0 to 512 [ 308.566081][T11874] EXT4-fs (loop6): Ignoring removed bh option [ 308.631671][T11874] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.669206][T11833] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 308.687530][T11833] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 308.696117][T11874] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 308.758754][T11853] loop3: detected capacity change from 0 to 32768 [ 308.778417][T11874] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.2804: Invalid block bitmap block 0 in block_group 0 [ 308.795240][T11878] loop5: detected capacity change from 0 to 4096 [ 308.803155][T11833] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 308.817721][T11874] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 308.828834][T11874] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.2804: attempt to clear invalid blocks 983261 len 1 [ 308.847805][T11874] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2804: Invalid inode table block 0 in block_group 0 [ 308.879028][T11874] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 308.903014][T11874] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 308.917620][T11853] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2797 (11853) [ 308.921721][T11874] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2804: Invalid inode table block 0 in block_group 0 [ 308.945888][T11874] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 308.963748][T11878] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 308.978248][T11874] EXT4-fs error (device loop6): ext4_truncate:4286: inode #11: comm syz.6.2804: mark_inode_dirty error [ 308.986670][T11878] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 309.006796][T11853] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 309.021415][T11853] BTRFS info (device loop3): using free space tree [ 309.028650][T11853] BTRFS info (device loop3): has skinny extents [ 309.042119][T11878] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 309.058557][T11878] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 309.077132][T11878] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 309.087095][T11874] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 309.097301][T11878] ntfs: volume version 3.1. [ 309.105834][T11878] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 309.122396][T11878] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 309.139314][T11878] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 309.152618][T11874] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2804: Invalid inode table block 0 in block_group 0 [ 309.171207][ T4272] udevd[4272]: symlink '../../loop0' '/dev/disk/by-diskseq/1150.tmp-b7:0' failed: Read-only file system [ 309.216321][T11878] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 309.228318][T11874] EXT4-fs (loop6): 1 truncate cleaned up [ 309.236070][ T5560] udevd[5560]: symlink '../../loop1' '/dev/disk/by-diskseq/1144.tmp-b7:1' failed: Read-only file system [ 309.237802][T11874] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,grpquota,bh,noblock_validity,,errors=continue. Quota mode: writeback. [ 309.264316][T11878] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 309.308308][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/1154.tmp-b7:5' failed: Read-only file system [ 309.323349][ T4272] udevd[4272]: symlink '../../loop0' '/dev/disk/by-diskseq/1150.tmp-b7:0' failed: Read-only file system [ 309.331230][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 309.348543][ T4287] udevd[4287]: symlink '../../loop6' '/dev/disk/by-diskseq/1152.tmp-b7:6' failed: Read-only file system [ 309.377645][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/1153.tmp-b7:3' failed: Read-only file system [ 309.398908][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:3' failed: Read-only file system [ 309.433431][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:5' failed: Read-only file system [ 309.469328][ T4287] udevd[4287]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 309.511628][T11853] BTRFS info (device loop3): enabling ssd optimizations [ 310.024234][T11916] loop1: detected capacity change from 0 to 8192 [ 310.142517][ T5344] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 310.284948][T11922] loop0: detected capacity change from 0 to 128 [ 310.333036][T11922] EXT4-fs (loop0): Test dummy encryption mode enabled [ 310.391081][T11922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 310.403939][ T5344] usb 6-1: Using ep0 maxpacket: 32 [ 310.454397][T11922] System zones: 1-3, 19-19, 35-36 [ 310.500785][T11931] loop3: detected capacity change from 0 to 64 [ 310.513417][T11922] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 310.523950][ T5344] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 310.540174][T11922] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.609533][ T5344] usb 6-1: config 0 interface 0 has no altsetting 0 [ 310.636786][ T5344] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 310.699626][ T5344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.763522][ T5344] usb 6-1: config 0 descriptor?? [ 310.796782][T11940] tipc: Started in network mode [ 310.821187][T11940] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 310.871372][T11922] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 310.910070][T11940] tipc: Enabled bearer , priority 10 [ 311.121087][T11957] netlink: 'syz.6.2831': attribute type 4 has an invalid length. [ 311.133994][T11957] netlink: 'syz.6.2831': attribute type 2 has an invalid length. [ 311.264336][ T5344] aureal 0003:0755:2626.0015: unknown main item tag 0x4 [ 311.271367][ T5344] aureal 0003:0755:2626.0015: collection stack underflow [ 311.278538][ T4226] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 311.307504][ T5344] aureal 0003:0755:2626.0015: item 0 4 0 12 parsing failed [ 311.325874][ T5344] aureal: probe of 0003:0755:2626.0015 failed with error -22 [ 311.417245][T11967] SQUASHFS error: xz decompression failed, data probably corrupt [ 311.431563][T11967] SQUASHFS error: Failed to read block 0x108: -5 [ 311.438558][T11967] SQUASHFS error: Unable to read metadata cache entry [106] [ 311.446621][T11967] SQUASHFS error: Unable to read inode 0x11f [ 311.472713][T11968] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.496553][ T5344] usb 6-1: USB disconnect, device number 15 [ 311.532721][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 311.550419][T11962] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 311.622874][T11962] Remounting filesystem read-only [ 311.640674][T11971] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 311.660990][ T4226] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.711372][ T4226] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.862555][ T4226] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 311.871678][ T4226] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 311.900941][ T4226] usb 2-1: Product: syz [ 311.909103][ T4226] usb 2-1: Manufacturer: syz [ 311.963590][T11925] tipc: Node number set to 10136234 [ 311.973790][ T4226] hub 2-1:4.0: USB hub found [ 312.164096][T11993] set_capacity_and_notify: 2 callbacks suppressed [ 312.164113][T11993] loop5: detected capacity change from 0 to 1764 [ 312.232463][ T4226] hub 2-1:4.0: 9 ports detected [ 312.252715][ T4226] hub 2-1:4.0: insufficient power available to use all downstream ports [ 312.442687][ T4226] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 312.449097][ T4226] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 312.513828][ T4226] usb 2-1: USB disconnect, device number 14 [ 312.783099][T12024] loop5: detected capacity change from 0 to 64 [ 313.019034][T12035] trusted_key: encrypted_key: keylen parameter is missing [ 313.077356][T12038] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 313.225696][T12046] loop1: detected capacity change from 0 to 256 [ 313.246251][T12046] exfat: Deprecated parameter 'namecase' [ 313.266149][T12046] exfat: Deprecated parameter 'namecase' [ 313.362132][T12046] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9b7485c9, utbl_chksum : 0xe619d30d) [ 313.437779][T12056] loop5: detected capacity change from 0 to 164 [ 313.761254][T12069] loop6: detected capacity change from 0 to 128 [ 313.787466][T12070] loop1: detected capacity change from 0 to 8 [ 313.849122][T12070] SQUASHFS error: xz decompression failed, data probably corrupt [ 313.871947][T12070] SQUASHFS error: Failed to read block 0x108: -5 [ 313.881640][T12070] SQUASHFS error: Unable to read metadata cache entry [106] [ 313.895683][T12069] EXT4-fs (loop6): Ignoring removed bh option [ 313.906953][T12070] SQUASHFS error: Unable to read inode 0x11f [ 313.927900][T12069] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,bh,,errors=continue. Quota mode: none. [ 313.952635][T12069] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.053671][T12069] IPv6: addrconf: prefix option has invalid lifetime [ 314.090522][T12069] IPv6: addrconf: prefix option has invalid lifetime [ 314.176431][T12082] loop1: detected capacity change from 0 to 64 [ 314.254678][T12085] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 314.298197][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1178.tmp-b7:1' failed: Read-only file system [ 314.333125][T12085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 314.341016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 314.355209][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-label/unt.tmp-b7:1' failed: Read-only file system [ 314.384516][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 314.407575][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-diskseq/1177.tmp-b7:6' failed: Read-only file system [ 314.457189][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-diskseq/1177.tmp-b7:6' failed: Read-only file system [ 314.506018][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 314.521855][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1178.tmp-b7:1' failed: Read-only file system [ 314.537289][T12091] loop6: detected capacity change from 0 to 64 [ 314.546596][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 314.585955][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1179.tmp-b7:1' failed: Read-only file system [ 314.591434][ T4265] udevd[4265]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 314.647584][ T4322] udevd[4322]: symlink '../../loop1' '/dev/disk/by-diskseq/1180.tmp-b7:1' failed: Read-only file system [ 314.846800][T12068] loop5: detected capacity change from 0 to 40427 [ 314.919255][T12103] lo speed is unknown, defaulting to 1000 [ 314.959596][T12103] lo speed is unknown, defaulting to 1000 [ 314.981164][T12103] lo speed is unknown, defaulting to 1000 [ 314.995001][T12068] F2FS-fs (loop5): Found nat_bits in checkpoint [ 315.105563][T12103] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 315.255776][T12068] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 315.279080][T12120] loop3: detected capacity change from 0 to 1024 [ 315.291476][T12068] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 315.325177][T12103] lo speed is unknown, defaulting to 1000 [ 315.370920][T12103] lo speed is unknown, defaulting to 1000 [ 315.386636][T12103] lo speed is unknown, defaulting to 1000 [ 315.457202][T12103] lo speed is unknown, defaulting to 1000 [ 315.477730][T12103] lo speed is unknown, defaulting to 1000 [ 315.492130][ T155] hfsplus: b-tree write err: -5, ino 25 [ 315.498176][ T155] hfsplus: b-tree write err: -5, ino 4 [ 315.518294][ T155] hfsplus: b-tree write err: -5, ino 2 [ 315.967678][T12139] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 316.013072][T12139] hpfs: filesystem error: improperly stopped [ 316.020022][T12139] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 316.106747][T12139] hpfs: You really don't want any checks? You are crazy... [ 316.138064][T12139] hpfs: hpfs_map_sector(): read error [ 316.152425][T12139] hpfs: code page support is disabled [ 316.158055][T12139] hpfs: hpfs_map_4sectors(): unaligned read [ 316.166691][T12139] hpfs: hpfs_map_4sectors(): unaligned read [ 316.172735][T12139] hpfs: filesystem error: unable to find root dir [ 316.219927][T12147] hfsplus: bad catalog entry type [ 316.310127][ T4274] hfsplus: b-tree write err: -5, ino 25 [ 316.317174][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 316.319611][T12155] sp0: Synchronizing with TNC [ 316.334523][ T4274] hfsplus: b-tree write err: -5, ino 2 [ 316.382380][ T4264] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 316.702778][ T4264] usb 4-1: Using ep0 maxpacket: 32 [ 316.822849][ T4264] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.834019][ T5920] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 316.847753][ T4264] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.889745][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 316.889761][ T26] audit: type=1326 audit(1777034176.554:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.2934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83d5b34dd9 code=0x0 [ 316.895550][T12176] ntfs3: Unknown parameter '' [ 316.990993][T12172] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 317.013027][ T4264] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 317.025878][ T4264] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 317.054979][T12172] REISERFS (device loop6): using ordered data mode [ 317.082839][ T4264] usb 4-1: Product: syz [ 317.087596][T12172] reiserfs: using flush barriers [ 317.103927][T12172] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 317.112413][ T4264] usb 4-1: Manufacturer: syz [ 317.137286][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.152573][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 317.165900][T12172] REISERFS (device loop6): checking transaction log (loop6) [ 317.234429][ T4264] hub 4-1:4.0: USB hub found [ 317.307652][T12172] REISERFS (device loop6): Using tea hash to sort names [ 317.315006][ T5920] usb 2-1: config 10 has an invalid interface number: 251 but max is 0 [ 317.323893][T12172] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 317.333510][ T5920] usb 2-1: config 10 has no interface number 0 [ 317.339864][ T5920] usb 2-1: config 10 interface 251 has no altsetting 0 [ 317.496904][ T4264] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 317.543490][ T5920] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 317.556713][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.569619][ T5920] usb 2-1: Product: syz [ 317.582621][ T5920] usb 2-1: Manufacturer: syz [ 317.587287][ T5920] usb 2-1: SerialNumber: syz [ 317.687933][T12192] set_capacity_and_notify: 4 callbacks suppressed [ 317.687949][T12192] loop6: detected capacity change from 0 to 128 [ 317.778208][T12192] EXT4-fs (loop6): Test dummy encryption mode enabled [ 317.789528][T12194] loop5: detected capacity change from 0 to 512 [ 317.813350][T12192] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 317.824200][T12194] EXT4-fs (loop5): Ignoring removed orlov option [ 317.830688][T12194] EXT4-fs (loop5): Test dummy encryption mode enabled [ 317.839937][ T4264] usb 4-1: USB disconnect, device number 9 [ 317.861174][T12192] System zones: 1-3, 19-19, 35-36 [ 317.877060][T12192] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 317.892769][T12194] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 317.912969][T12192] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.917117][ T5920] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 317.938781][T12194] EXT4-fs (loop5): 1 truncate cleaned up [ 317.962765][ T5920] gspca_sunplus: reg_r err -71 [ 317.967657][ T5920] sunplus: probe of 2-1:10.251 failed with error -71 [ 317.976873][ T5920] usb 2-1: USB disconnect, device number 15 [ 318.002531][T12194] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 318.206810][T12190] loop0: detected capacity change from 0 to 32768 [ 318.362836][T12203] loop6: detected capacity change from 0 to 4096 [ 318.421811][T12203] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 318.764963][T12228] loop5: detected capacity change from 0 to 8 [ 318.913409][T12228] SQUASHFS error: Failed to read block 0x260685: -5 [ 318.945049][T12228] SQUASHFS error: Unable to read metadata cache entry [260685] [ 318.961832][T12228] SQUASHFS error: Unable to read directory block [260685:0] [ 318.980414][T12228] binfmt_misc: register: failed to install interpreter file ./file2 [ 319.162740][T12243] loop5: detected capacity change from 0 to 128 [ 319.244903][T12243] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,jqfmt=vfsv1,dax=inode,dax=never,minixdf,,errors=continue. Quota mode: none. [ 319.262095][T12243] ext4 filesystem being mounted at /573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 319.350267][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/1191.tmp-b7:1' failed: Read-only file system [ 319.356522][T12248] netlink: 'syz.0.2962': attribute type 1 has an invalid length. [ 319.375804][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-diskseq/1201.tmp-b7:6' failed: Read-only file system [ 319.391333][ T5560] udevd[5560]: symlink '../../loop3' '/dev/disk/by-diskseq/1188.tmp-b7:3' failed: Read-only file system [ 319.409528][ T4287] udevd[4287]: symlink '../../loop0' '/dev/disk/by-diskseq/1200.tmp-b7:0' failed: Read-only file system [ 319.416783][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-diskseq/1202.tmp-b7:5' failed: Read-only file system [ 319.440680][ T4322] udevd[4322]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 319.458729][ T4272] udevd[4272]: symlink '../../loop6' '/dev/disk/by-diskseq/1201.tmp-b7:6' failed: Read-only file system [ 319.476931][ T5560] udevd[5560]: symlink '../../loop3' '/dev/disk/by-diskseq/1188.tmp-b7:3' failed: Read-only file system [ 319.506898][ T4265] udevd[4265]: symlink '../../loop1' '/dev/disk/by-diskseq/1191.tmp-b7:1' failed: Read-only file system [ 319.547330][ T4287] udevd[4287]: symlink '../../loop0' '/dev/disk/by-diskseq/1200.tmp-b7:0' failed: Read-only file system [ 319.941328][T12263] loop0: detected capacity change from 0 to 8 [ 320.027210][T12239] loop6: detected capacity change from 0 to 32768 [ 320.124269][T12263] SQUASHFS error: zstd decompression error: 2 [ 320.170418][T12239] read_mapping_page failed! [ 320.180796][T12263] SQUASHFS error: zstd decompression failed, data probably corrupt [ 320.204947][T12239] ERROR: (device loop6): txCommit: [ 320.204947][T12239] [ 320.239724][T12263] SQUASHFS error: Failed to read block 0x60: -5 [ 320.296413][T12263] SQUASHFS error: zstd decompression error: 2 [ 320.321375][T12263] SQUASHFS error: zstd decompression failed, data probably corrupt [ 320.339959][ T276] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 320.354512][ T276] ------------[ cut here ]------------ [ 320.362455][T12263] SQUASHFS error: Failed to read block 0x60: -5 [ 320.372493][ T276] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 320.378287][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 320.384506][ T276] CPU: 1 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 320.391733][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.401823][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 320.406848][ T276] Code: 5f 02 df 06 0f 0b e8 18 05 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba a4 03 00 00 48 c7 c1 00 79 62 8a e8 39 02 df 06 <0f> 0b e8 f2 04 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba [ 320.426490][ T276] RSP: 0018:ffffc900026dfd28 EFLAGS: 00010246 [ 320.432600][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 0d9204760f0f8d00 [ 320.440606][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 320.448629][ T276] RBP: ffffc900029021b0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 320.456641][ T276] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88801fd948b8 [ 320.464825][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900026e1110 [ 320.472841][ T276] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 320.481893][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.488505][ T276] CR2: 0000555581625a28 CR3: 000000001ebaf000 CR4: 00000000003506e0 [ 320.496536][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.504536][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.512544][ T276] Call Trace: [ 320.515851][ T276] [ 320.518824][ T276] ? lockdep_hardirqs_on+0x94/0x140 [ 320.524237][ T276] jfs_lazycommit+0x581/0xb40 [ 320.528977][ T276] ? txFreelock+0x5a0/0x5a0 [ 320.533959][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 320.539900][ T276] ? sched_dynamic_update+0x210/0x210 [ 320.545356][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.551303][ T276] ? __kthread_parkme+0x157/0x1b0 [ 320.556369][ T276] kthread+0x436/0x520 [ 320.560472][ T276] ? txFreelock+0x5a0/0x5a0 [ 320.565005][ T276] ? kthread_blkcg+0xd0/0xd0 [ 320.569656][ T276] ret_from_fork+0x1f/0x30 [ 320.574116][ T276] [ 320.577170][ T276] Modules linked in: [ 320.581147][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.612027][T12254] loop5: detected capacity change from 0 to 32768 [ 320.619207][ T276] ---[ end trace 0678d513da727529 ]--- [ 320.625499][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 320.630561][ T276] Code: 5f 02 df 06 0f 0b e8 18 05 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba a4 03 00 00 48 c7 c1 00 79 62 8a e8 39 02 df 06 <0f> 0b e8 f2 04 a6 fe 48 c7 c7 40 6e 62 8a 48 c7 c6 39 6a 62 8a ba [ 320.650588][ T276] RSP: 0018:ffffc900026dfd28 EFLAGS: 00010246 [ 320.656841][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 0d9204760f0f8d00 [ 320.665172][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 320.673547][ T276] RBP: ffffc900029021b0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 320.681712][ T276] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88801fd948b8 [ 320.689983][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900026e1110 [ 320.698285][ T276] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 320.707440][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.724749][ T276] CR2: 0000555581625a28 CR3: 000000007df65000 CR4: 00000000003506e0 [ 320.733465][ T4264] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 320.747397][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.756471][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.765041][ T276] Kernel panic - not syncing: Fatal exception [ 320.769360][T12254] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2963 (12254) [ 320.771378][ T276] Kernel Offset: disabled [ 320.787930][ T276] Rebooting in 86400 seconds..