last executing test programs: 1.803991163s ago: executing program 1 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x2, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={r1}, 0xc) close(r0) 1.695219475s ago: executing program 1 (id=581): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 1.546542337s ago: executing program 1 (id=585): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000a40), 0x4) 1.484693188s ago: executing program 0 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x58, r1, 0x405, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x70fc}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.452215568s ago: executing program 3 (id=589): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "5f0000001f00000002005ffc85f4ffff"}}}]}, 0x48}}, 0x0) 1.3432858s ago: executing program 1 (id=590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r0, 0x70800000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x1, 0x52, 0xfffe}) 1.31561644s ago: executing program 3 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x40, {0x0, 0x0, 0x12, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x100, 0x3, 0x6, 0x4}, 0x0, 0x1, 0xa, 0x200, 0x400, 0x1d, 0x20, 0xc, 0x3, 0x5c, {0x5, 0x101, 0x0, 0x0, 0xfff, 0x2000}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x4, 0x3, 0x5, 0x1, 0x1, 0xffffffff}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 1.3127801s ago: executing program 0 (id=594): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='cmdline\x00') 1.252808631s ago: executing program 2 (id=595): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x11, 0x0, r1}) 1.187273972s ago: executing program 1 (id=596): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000740), 0x1, 0x4f8, &(0x7f0000001080)="$eJzs3d9rHHsVAPAzk+y9aW6um6LIteC9F1tJL9rdpLFtEKkVRJ8KagUfY0w2IWSTDdlNbULRFF8FQUQFn3zyRfAPEKR/gggFfRctitRWH3zQjuzubJumu01K0mzv5vOB6Zzv/NhzvtNkdiYzzARwYr0fEdciYigiPoiIYj49zYfZZmOnvdyjh7fnm0MSWXbjQRJJPq3zWc32cES81V4lRiLiG1+N+E7yfN761vbKXLVa2cjb5cbqerm+tX1heXVuqbJUWZuenro8c2Xm0sxkljtUP89ExNUv3//pj371lau/++x3/zz79/Pfa5b1hY+3646I+UMl6OZBJyi0tkVHcxttHHmy/hjK+1PodyEAABxI8xj/bER8qnX8X4yh1tEcAAAAMEiyL47Ff5OIDAAAABhYaUSMRZKW8nsBxiJNS6X2Pbwfi9G0Wqs3PrNY21xbaM6LGI9CurhcrUzm9wqPRyFptqda8dP2xT3t6Yg4HRE/KZ5qtUvztepCv//4AQAAACfEW+89e/7/72LaigEAAIABM96zAQAAAAwKp/wAAAAw+Jz/AwAAwED72vXrzSHrvMd74ebW5krt5oWFSn2ltLo5X5qvbayXlmq1pdYz+1Z7fMwPO0G1Vlv/XKxt3io3KvVGub61Pbta21xrzC4/8wpsAAAA4Bidfu/un5KI2Pn8qdYQ7ecAjva7LuA189d+FwAcpaF+FwD0zXC/CwD6prDvEsMvsSzwYZTsM7/nzTu/P/paAACAV2PiE89f/38jn+d8HwZb2u8CAIBj5/o/nFwFdwDCiXeuPXqz1/zDX//PspcuCgAAOFJjrSFJS/m1wLFI01Ip4u3WawEKyeJytTIZER+JiD8WC28221OtNZN97xkGAAAAAAAAAAAAAAAAAAAAAAAAANqyLIkMAAAAGGgR6d+S1tP8IyaK58b2/n3gjeQ/xbifN35x42e35hqNjanm9H8WW/MjovHzfPrFzCsBAAAA4DXQPk/Px1P9rgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQfPo4e35znCcef/xpYgY75Z/OEZa45EoRMTov5IY3rVeEhFDR5B/505EvLM7f/Ykw+Msy8bzKrrlP/VK8nf6nzQ3S+zJP9JZLz2C3HDS3W3uf651+/1L4/3WuPvv/3A+HFbv/V/6ZP831GP/8/YBc5y595tyz/x3Is4Md9//dPInPfKfPWD+b39ze7vXvOyXERNdv3+SZ3KVG6vr5frW9oXl1bmlylJlbXp66vLMlZlLM5PlxeVqJf+3a44ff/K3j2PXvnNv/0d75B/fp//nDtj//9279fCj7bDQLf/5s92/f9/pkT/Nv/s+ncfN+ROdeKcd7/bur//wbq/amvkXevR/v///8wfs/wdf/8FfDrgoAHAM6lvbK3PVamXjBcHIAZYRCA4TZN9v/zwe7nMOufpzQdbvzfI0+NbpY07a7z0TAABw1J4e9Pe7EgAAAAAAAAAAAAAAAAAAADi5juNxYntz7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL/T/AAAA//+2st9w") ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x222464, 0x0) 1.186950952s ago: executing program 3 (id=598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.133247893s ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="01000000aa0ef90a0d7445f8aa9a66000300", @ANYRES32=r2], 0x98}}, 0x800c090) 1.125615623s ago: executing program 2 (id=600): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00088008"], 0x34}}, 0x0) 1.062846844s ago: executing program 0 (id=601): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000500)=""/81, 0x51}], 0x1) 1.027009934s ago: executing program 2 (id=603): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro']) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, &(0x7f0000000040)) 986.155355ms ago: executing program 4 (id=604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f0000001980)="5fb3450effde69bf04e3e44a973930e0b6f397ee7a964d6dbf627acb2d9426f6a9b00bee1bf4eb68838680", 0x2b}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0x7fffef00}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1b92ec4a5299ce1da382c", 0x2a}], 0x7}}], 0x1, 0x0) 871.190487ms ago: executing program 3 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f0000000200)='./file0\x00', 0x0) 870.964537ms ago: executing program 0 (id=606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0xffffffffffffffa7, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2, 0x4}, 0x20) 870.857297ms ago: executing program 4 (id=607): ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x400, 0xffffffff001, 0x5, 0x100000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/234, 0xea}], 0x1, &(0x7f0000000580)=[{&(0x7f0000000500)=""/13, 0xd}], 0x1, 0x0) 865.556807ms ago: executing program 2 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r0, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x0) 796.011488ms ago: executing program 4 (id=609): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 739.189119ms ago: executing program 0 (id=610): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="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", 0x131}, {&(0x7f0000000380)="c0aa02def6c5dbe7abfea14433bf5783cbb997f7a16d7caad59cad440f32b7f9132f928d1782e80389550a6083adcff9e901b43ef350ab2b1e8530ed8aef81965ccf989d4ca1dcb46c244b5f4a924b38ca1356b2b05f079dde815349824d5cfdbfa82d552246cde4104f2dc151df2a35c9bfbcdfe3a4664f197f290c02cc7f62cb021a1f23898e790cafc141abed04c40290ea9d75418e49f7d3fb9624dcb296eb8026dbe3348250e097642e7dfb6e5e72402063365a73e528ffdd68632bb09a28b90fceb9d3f9e5590038a40b25e0d61acceb2a454429a1b92ce5acbbf208701fee00e18c470b55402b1f90502822fd074936597dba3f3cb8", 0xf9}, {&(0x7f0000000800)="8cb00a8c7c408a1e7131682f9b4a25bb4b62cbd32b8cf2f0e205723bf5a11729cbeb22193bcdaf6a13612b7bed657a0008d9797ce760cfaa3ce237b8d9281719199a96e60f9e2c1a886159019315a74bc5c44cd276be320e12e95b8ae8eef1b899f4b73f3721c8b8eb73438a4a1c30a4cb7b18b00f03fbd346c93cfae759d56513e61137d45c6977d2d844785be4d527896767ace9f604fee757d131fccdb255240373eeda36a6838907f79e299166c6afaf98a53024bbee5994a9812e658e5da4ef", 0xc2}, {&(0x7f0000000540)="33391f900d7b655c0d96e0fb3228068f310988d1378aeffd55352a0b8cda00a47b396ef14471e6adca2f4d8b9c923c251b479ebc56f0ac3a38a2be27634b8a8da7c6e39c0e12d517c357d47d254aa93d0926b88619881bfac2a960c177f6afef3e0e673479e7ea16b09c04c9fd54ddaad2cc632444c19560657c19687f6268d7e69d7e4bab42403e527ec8309ea2b91daa8b04b4049ebe6ff00705d5cce381a648bfbd0d7d789c29d4edd007898a332478f1d29110d43b2bb799db7968295cbf42baf4e776", 0xc5}, {&(0x7f0000000000)="6941d8ee6ac6c7be822b6361d48d826cab8f", 0x12}, {&(0x7f0000000140)="ab28eefbb3a9093e0b95266bcd5ede5679a6f49257e02879d8f104f309e67349ca72239f7e7e6ad80167cf5b26982666d7414032e4e7f783765cdbe430f9ee61f37b6337e851bc8e9cc7272b69aeea49b4b7746bde2fc6c8a32dc686c01f04d7b99b926f98fe155dba7574a9acc7712303077644368f283152e86a580ef81876aab98478a340ed9f7dd811c3c5b73e5426b7a022d8eae6720005b8", 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000ac0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d353aa1286e3af37ba4d1bac9280fe71822e0e5bef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750bb20d68bac0e03f2957d4cebb8fbac2af9aba140100820064122f5bd93ebef6e200989cdb3c821345a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f4729346b5eddd9e213e51a16a4003d4ec20e100dfacd66b50923bfeaa1635a8167a19c155afd3cbbc6f8b83fc8109f05d67de380aca9163f5e2c62400d3bce6a53f518f7436f52fd5f65058aa9caba5693a0a60ed2427ea1055615b3174a6c92ceb441c1fedeb0255207cde2fb23b44355c7cf1af993fe2f07060fae1f6b186e5223752c5dbb101024000000000000", 0x13f}, {&(0x7f0000000a00)="b3fe109a0a0e5fbf3f4e8ce314c9de", 0xf}], 0x2}}], 0x3, 0xc044) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="ee", 0x1}], 0x1}}], 0x1, 0x0) 734.007479ms ago: executing program 2 (id=611): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x0, 0x1}, 0xe) 731.051799ms ago: executing program 3 (id=612): mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$xfs(&(0x7f0000015a80), &(0x7f0000015ac0)='./file0\x00', 0x0, &(0x7f0000015b00), 0x1, 0x15a5b, &(0x7f0000015b40)="$eJzs3XtsnWUdwPG329pd2GDqjNNI2NjYBjh2ZxcR2w46CqzixqUgOKtsgBs42NCNYLhIQCTeQIGQGBgaQDHjphhJkBmIoEgQAk4RjIgxaETkD0Auo+bteU95ezhr7FOfpy77fJL2nPc95/ee9rTf85xuTU9n28rWLBuVVVyY1frpkssX/vqJlhsvfXDNlhPGzGir7G0eX1w8qTidXJzum2XZsGL3iMquPdf/6MfD8o1h5ePuMXpMw7gsG15sNhenCysnZx9dvV53jWJ39fazht6Pu+Erlbcee2VZNjo/M/cHJz9RPk4xsu0dn+huqrNlWVvv3Vj5ujVUvoZZY3G+/NZUedvn4cpb3e+P8nUbhuBTym+zefqfb9s0BLe9y+lsWdZe8/XPWxxe7Mt7nFTb4O6o9vv80NvuvKy4CxuK+2xETSu7hM6Wtp7H2vqP81m25KJtXd2Vx82RWWWhyB9Xx+QP4VmWjR3qrwuD07q8ZV7+/VrdLr7s1e/l5nrfF3ssbp2RZdmCYg2ongIAu4iW1nlL66z/o/pb/9+3/dWzrP8AsOtqb2mt9/P/2P7W/7u6b9pc/GPhwsrUW0P7SQAAA9LWXnf9H9/f+v/KTTf8xPoPALuuFct71v89atb/Cf2t/4+uOfjrxfWqzxt2lA7Z8/tjxf43SvuHl/a/XtrfWDpO+fpNpf3/Lu0fmV9W5/rjSr93M7W0f8/S/mml/XuV9s8o7R9f+p2n10r7Zxcfa276zu9RAPj/t2Je29Ks7+/H5yZWL6+3/o85e/L3h+rjBQAAAAAAAAAAAAAAAIDdwYbN563tWrdu9TnOOOOMM71nhvqRCYjt7eiH+iMBAFJJ8ePEUH+OAEBf7R0tLwzv+2rVw8sbez+yuud0/qudp5//3a/eUD0tLj6qziH7vM5/d3d391Mb5zxYbI4svV52VrzOYB/58dc2X396sTmp9u8P9vwB3kmN2afWnLFu9ez8pqY0ZpvyjTn5cac1Zt/IN+bmG9Mbs1vyjXk9G6OzbfnGQZ/53LpTG2r+5C/snto7LsyG9ym272vXl/tf2/z47OppP4esHm1EVvQ/4YsTVtVcVrWT/nuPP3lnr0sPDN7A+n/m+eppP4d8x/r/5Pjt19S7bOf99x5/X/1DPHWe//dptPZ5f83z/0l1Dtk7/7dld0zM+x/WtmVKsWvEf/P8v3T8KbX99xy89/l/fqip1ef/+c8W+w3qzoDdTHvHRS/0t/733/+ID9TMNJT7f+z2Q2bm/V9xxPqZxa7GAfY/tb/1v+GGvh8rMDDtHVu6a9b/AfRf93Wwevt/ZsPL8/P+R1550jmlywbS/361/c/aeOb6WRs2nzfzjDO7Tlt92uqz5i2YvejgxQsWL5w/q+cpQeX94O4U2E0Mbv3PxtTMNGTZ6t75+146/Ii8/61P7bi22DVqgP1P63f932b9h7r2HZY1NWWbujZuPGdO5X11c27lfeVqdfofwM//U6r/iVZ9XcyGLJvYO3/h7T9rzPs/tGvdicWupgH2P72//pvevl0gwCDX/1NrZvr0v/Tppjfz/s//1pVdxa6B/vw/o9/1/0/WfxiM9o6aX/j5H8v73/jImfsHju/v//8gnhT9dy4+/5rA8QP0D/Gk6P89y7aHPk8/UP8QT4r+X7r5rn8Gjn9I/xBPiv7v+f3ETYHjM/UP8aTo/+qZo38ROH6Q/iGeFP0/s/LGYwLHZ+kf4knR/2fvm3BK4Phs/UM8Kfqf/PP7Hg4cn6N/iCdF/+MWbD03cHyu/iGeFP23HdX4XOD4PP1DPCn6/96tXWMDx+frH+JJ0f+LT/7qusDxBfqHeFL0f//kP0wNHD9Y/xBPiv6/vGr9nYHjC/UP8aTo/5Wr3+oOHF+kf4gnRf/3Pn/cGYHji/UP8aTo/5sfPGx74PgS/UM8Kfp/6tMvtgSOf1j/EE+K/hddfMXWwPFD9A/xpOh/w5uTFgWOf0T/EE+K/leNmnNp4Pih+od4UvQ/4fPXjQ8c/6j+IZ4U/f9l9jHXBo436x/iSdH/bR1v7Bk43qJ/iCdF/1+65++3B4636h/iSdH/Qw+0TAscX6p/iCdF/wdM3e+XgeOH6R/iSdF/10lfWxU4frj+IZ4U/S/fev2zgeNt+od4UvTf9Jv5XwgcX6Z/iCdF/5vef8+SwPEj9A/xpOh/3mnv+mHgeLv+IZ4U/e9zVfbuwPEj9Q/xpOj/2BduvSRw/Cj9Qzwp+r973KNrA8eP1j/Ek6L/HRtO3RE4vlz/EE+K/h+77NylgeMd+od4UvR/3Wt/fDJw/GP6h3hS9D/zvaf/LnD8GP1DPCn6X7P2/o7A8Y/rH+JJ0f+R1z/+r8DxFfqHeFL03/Ds5jWB4yv1D/Gk6P+5hr0vDxw/Vv8QT4r+b7ng7n0Cx4/TP8STov9Lrrh5S+D48fqHeFL0/+jLYxcGjp+gf4gnRf93HHLxeYHjnfqHeFL0/3rr/v8IHD9R/xBPiv5/e/eiFYHjJ+kf4knR/3ceuuqBwPFP6B/iSdH/BTNePTBw/GT9Qzwp+p9//Mn3Bo6fon+IJ0X/E29cHnoTn9Q/xJOi/5VP//XbgeOr9A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8hx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq79s8aNRgGAPzJtb3+sVUHBzc7iYKIcoNgF3OFKwe61MGbFBycK6hzJ0tF8AM4Kbg7uAgK4uIigqhfwtVFLFJJk9SQBjq0EI7+fvDC5XlD8tz7Ju9DLgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHaTS42Y+YKbbW9/S/vbp55fP39OXjT/de3Jo7N8ij104W3YvbNRHRiVjM+ibzXY6vvXnVyTY61eMem51LFiKZaM7q/oN90i7PH8lu3smTvO04ERGz2YeN1ctr+4/C0TVKVwbFMCbFvCX5HMbU//hu6+btzK+8NV4f1X2Ttr7X+o8v/bbOPU5G6cqwNv+ZiXLu6vf3UVW/zjvvl77VhnKydq+MhVE6uJ7l27zOR3y9dPvCdr6uT0deKLJ1dS5bwiNivu154WDSfi9bJ5NyO5/19cly/pvW942LP3sRsVDWAABgvKT93nJD/S9/EGis/88/3Hmo/gPA+Bqm/exZPmr1f77sb6r/y0vPhu1lDAAc1GDYWP9336831f/u3c2N9jIGAA5q9cZO/e/W6v+psr+p/j+aOfu66C7fG/ytHHLn/2NFfKsSn6jE/1TiU5XjVPfvVuK/K/HpSr5bhzwcAHAkrPYGy7H3+f902d9U/5+++3i+vYwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4xw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9+4CWpC4UrX8GGHIWBQmSg0rOUclBgmRQQEByjkoQCRIUFEFBQZEMiqACEgSUIKKIgIKiknPOOcN8a5gZ7jju4Xrvu9/jeffea53T3dXVNf/6/7qrzjmsRVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV/bu04YrrLDswMO7wRwf+0/OXLn74Ijfcssxph1279akbjD/HisOWLj3pkNE0MDAwxsDADENXGmvYuhPveuGZYwx9MMbI251gvPEHTTQwaEwe1W57/ifDnnTEnUHvjnvQEcO+3mmSgYGB8YbemebySyb/12bC2YbLrLTi8Gkc4Tb8/sDg4fdH/hp72NdkBw8MTPbOmwXeHyOvO+j92q95l3/z0Pfr3/53asNlVlplFP+hjTnCbnSfc1ujvs9vPmz2lUeZyrFG+az8W7ThMiuuNtSej/MDA0/e/9brQ4Yd18cZGHaiGHpcHX/oIXxgYGDC99ul/s9aZtkFlh3qP+LxO+iDRpy78fg+xkznnDX0PDvRsOPExAeOOBdUVVXVv0fLLLvAcnD+H/EHATz/f2KF6W7o/F9VVfXv2yrLLLvAwEh/53tn4aCBCUc8T+f/E6Z/acj7OOSqqqr6P2zFVfD8/+5/X6fz/90rvjDf+zjkqqqq+j9s7dXfOf+PM8r5f4oRz9P5/8Qnr1ty+NODhr/srZE2OWik/57wxkjLxxxp+esjLR880nZGXn/skZa/OtLycYY+B+tPOjAw8a7Dl7/5PzU/VVVV/xtbe4EVlxv459//pxrxPJ3/1z3+kpPfxyFXVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX92/X2U5dd8R/X/95/YKRrV797Devh/1/AQeddddNN79tA/99o0D///xD/7S99ONR53LNnGBjYeb33eyj1PvRvc636+v+l/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Giu/7/0iNvplj79gOGrLvbk2RdPOtJLZ9hu+J1LFz98ke3+7w/9/eh/6/X/B7YbNDAw3HfSoZZrLLP2unMMfXDx2U8uPPDuc4sOfW6JycccGPOdl87xzvdZR7PhpUe+neLdbZz3zvZXGXLqmINGGcRInXLk6fttu+ErC456O/vo92OMEXcWfGmPu4YMGTLkHxYOb9zRvHjE9kfsy6jOw8c+x9Cxz7PnTrvOs8c++8613U6bb7PVNlvtvMBC8y668GILLbbIgvNsvd2OW8077Pto5myGd77P/K/M2YSjztlTy4w8Z6Pu2+jmbIb3nrN3tjjV+Ss9NmLOxvovztnM7z1n7xwn3hnrDIMHNntnaob+k7MMHth76IP5xhn6Fhq+7lRD111y8jEGBo7+jx0dem+cd9+Dgw4cus6GK66z7H+M7J8/g//8OX1nVkccv0ZMyYzDb2caNsQZRtr9iXe98KIxhj74h2meYLzxB000MJzyP7gWG3az9b4j1hsySsMXTzryPg0b96Ajhn290yQDAwPjvTOgq8+dbuTtjIbgf6L/1vn/n7wWHfTuRA0a/jV8nWFey6y0yn/8W+/M89C5G3P4skWGLhx1zv4n+6fxzjDWuxg03hVXWXaBoYtH50fvr6XXv+bp4Tu3yLBXvf3fRqHxTvge411lGRzvhO813sGTXD3DiPn/HxrvKMe61d75Prrjz9Kj3L7XsW5M2sBWN0436rFu1dEP8R8+xyPmaJxRVhrdsW7bk5feYeRj6WiOdasNHfvggZGPdUP/2ZlHHOuG7tFsgweOHvpg/qEPZh88cNbQBwu882C8gauGPph7i1123HLQO+fX4dudd+h2l5580DtYj045xvpjHjtkyCzDxzLRKGMd/v6YYeTz+TKTD5vMEa8dsd2hq47Y7q2zPz77kGOGDJlt+HYm/i9sd8RrabynjD/suRHn7nlH2e7g99juiNf+0+dhjkHvHrhGc7xZcZTjzfCfcUf8c//wNfawr+mvH/aFn5eR1/1Pj5n0+R33Pca7zLILLAef33ffjvT5fXSTQ8YfGBhYaPiYR9z+Vxs0uvGO9d7jXRbGO9Z7jffFC+Zb7X9gvAMjjfcf3mfHTz7svTLH8HUmgR0d3ftsxGtHPY6981keftifYzRj+Yfj2Az/dBw7aMwxRpnskRrdz2xbwvrD7k/17tbeHPvO5UbM/eBRtvuf/cw20r4MguPYpKP+Pjfo3oFBNOcD672w19v/yZwPHvjH3y1GzPmI177XnI/u5/1/mPNp33vO/9Wfk+cY/oPs4FHGP/KcD77ivANHzPnYo2z3P5vzEfsymnPHP8352AMDg2nOXx1n2Ly91/F0dHM+4rUj5nzoLi4x+VgDKwz9iXz4nM82mv34hzmf6n/mfT4+rD/s/lbvLlp5heeuHDHno87xfzbnI/blX53zQVe9+z6f5Z3nZhpjYOyxB/befM89d59v2PcRD+cf9p2PRVMtNWye3+tcOjqjEa99r8/FLKPZ738wmvRfMho06pyNejv1WKOs+B/3393aXEued/N/91g0Yl/+ZaNT+Fh07/TD5u29fi4a3ZyPeC2dB6cY6fWj/h669urv/Nw9wSjnwREvwfPgfUfOudiITQ5/2VujDHOM4cvfGGn5mCMtf32k5YNH2s7I64890vJXR1o+dBfGHmn9QSNN14j7I7+9Jh5p+ciHhklGWj7yqXHSkX6Xe22k5fOO9NZ4jz/j/Nca8TfJ7UY9yNe/Wn//d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Gjuf7/gcNvl95+4jf2H345ucGX33vG6C47Z+l/9fX/h/v+w/X/Zznj3svHGHj3ufe8Pvuwdf6fvD77IsNudlttxHqjXh98+OJ/+frsU52+8UkD/3euz/7fasRn9V+4Ll7Hf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+40Vz//6rhtwc+uNQaxw2/EPrgkxa7+633e7zvc/+rr/8/3Pcfrv//1t2LnTTGwLvPvef1/4et47j+/22bHrbmwP/D1/8f8Vn9F67/X+46/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/OL7+/6DhtwNXbXruRkcNvR36eK17V5zu/R7v+9z/1uv/j3v2DAMDO6/3fg+l3oc6/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFDb/+/8Cw6/+PaNDSvS8wuP7/v3ej8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOL/qfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H86f8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf8z+WMW/8/mj1n8N8ofs/hvnD9m8d8kf8zi/7n8MYv/pvljFv/N8scs/pvnj1n8P58/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx3yx+z+O+eP2bx3yN/zOK/Z/6Yxf8L+WMW/y/mj1n898ofs/jvnT9m8d8nf8ziv2/+mMX/S/ljFv/98scs/l/OH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/V/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4v/V/DGL/9fyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv9v5o9Z/I/KH7P4H50/ZvH/Vv6Yxf/b+WMW/2Pyxyz+x+aPWfy/kz9m8f9u/pjF/7j8MYv/8fljFv/v5Y9Z/L+fP2bxPyF/zOL/g/wxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/H+aPWfx/lD9m8T8rf8zi/+P8MYv/2fljFv9z8scs/j/JH7P4/zR/zOL/s/wxi/+5+WMW//Pyxyz+5+ePWfx/nj9m8b8gf8zif2H+mMX/ovwxi//F+WMW/1/kj1n8L8kfs/hfmj9m8b8sf8zi/8v8MYv/r/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4v/r/DGL/9X5Yxb/3+SPWfyvyR+z+P82f8zi/7v8MYv/tfljFv/f549Z/K/LH7P4/yF/zOJ/ff6Yxf+G/DGL/435Yxb/P+aPWfz/lD9m8b8pf8zif3P+mMX/z/ljFv+/5I9Z/G/JH7P4/zV/zOL/t/wxi//f88cs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/IfljEv937ub/z1n8B+WPWfzHyB+z+I+ZP2bxHyt/zOI/OH/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfw/kD9m8Z8if8zi/8H8MYv/h/LHLP5T5o9Z/KfKH7P4fzh/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP4fyR+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4z54/ZvGfI3/M4v/R/DGL/8fyxyz+H88fs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4v+J/DGL/yfzxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4fyp/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP6fzh+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/TP6Yxf+z+WMW/43yxyz+G+ePWfw3yR+z+H8uf8ziv2n+mMV/s/wxi//m+WMW/8/nj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvH/Qv6Yxf+L+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx/1L+mMV/v/wxi/+X88cs/vvnj1n8D8gfs/gfmD9m8T8of8zi/5X8MYv/wfljFv9D8scs/ofmj1n8D8sfs/h/NX/M4v+1/DGL/+H5Yxb/I/LHLP5fzx+z+H8jf8zif2T+mMX/m/ljFv+j8scs/kfnj1n8v5U/ZvH/dv6Yxf+Y/DGL/7H5Yxb/7+SPWfy/mz9m8T8uf8zif3z+mMX/e/ljFv/v549Z/E/IH7P4/yB/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/4f5Yxb/H+WPWfzPyh+z+P84f8zif3b+mMX/nPwxi/9P8scs/j/NH7P4/yx/zOJ/bv6Yxf+8/DGL//n5Yxb/n+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf8X+WMW/0vyxyz+l+aPWfwvyx+z+P8yf8zi/6v8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/On/M4n91/pjF/zf5Yxb/a/LHLP6/zR+z+P8uf8zif23+mMX/9/ljFv/r8scs/n/IH7P4X58/ZvG/IX/M4n9j/pjF/4/5Yxb/P+WPWfxvyh+z+N+cP2bx/3P+mMX/L/ljFv9b8scs/n/NH7P4/y1/zOL/9/wxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjFf0j+mMR/zIH8MYv/oPwxi/8Y+WMW/zHzxyz+Y+WPWfwH549Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi/8H8scs/lPkj1n8P5g/ZvH/UP6YxX/K/DGL/1T5Yxb/D+ePWfynzh+z+E+TP2bxnzZ/zOI/Xf6Yxf8j+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/D+aP2bx/1j+mMX/4/ljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/D+RP2bx/2T+mMV/6fwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/T+WPWfxXzR+z+K+WP2bxXz1/zOK/Rv6Yxf/T+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP6fyR+z+H82f8ziv1H+mMV/4/wxi/8m+WMW/8/lj1n8N80fs/hvlj9m8d88f8zi//n8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP5fyB+z+H8xf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+X8ofs/jvlz9m8f9y/pjFf//8MYv/AfljFv8D88cs/gflj1n8v5I/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv+v5o9Z/L+WP2bxPzx/zOJ/RP6Yxf/r+WMW/2/kj1n8j8wfs/h/M3/M4n9U/pjF/+j8MYv/t/LHLP7fzh+z+B+TP2bxPzZ/zOL/nfwxi/9388cs/sflj1n8j88fs/h/L3/M4v/9/DGL/wn5Yxb/H+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4/zB/zOL/o/wxi/9Z+WMW/x/nj1n8z84fs/ifkz9m8f9J/pjF/6f5Yxb/n+WPWfzPzR+z+J+XP2bxPz9/zOL/8/wxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+P8if8zif0n+mMX/0vwxi/9l+WMW/1/mj1n8f5U/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv9f549Z/K/OH7P4/yZ/zOJ/Tf6Yxf+3+WMW/9/lj1n8r80fs/j/Pn/M4n9d/pjF/w/5Yxb/6/PHLP435I9Z/G/MH7P4/zF/zOL/p/wxi/9N+WMW/5vzxyz+f84fs/j/JX/M4n9L/pjF/6/5Yxb/v+WPWfz/nj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4D8kfk/iPNZA/ZvEflD9m8R8jf8ziP2b+mMV/rPwxi//g/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8f9A/pjFf4r8MYv/B/PHLP4fyh+z+E+ZP2bxnyp/zOL/4fwxi//U+WMW/2nyxyz+0+aPWfynyx+z+H8kf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/0fzxyz+H8sfs/h/PH/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/yfyxyz+n8wfs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOL/qfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H86f8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf8z+WMW/8/mj1n8N8ofs/hvnD9m8d8kf8zi/7n8MYv/pvljFv/N8scs/pvnj1n8P58/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx3yx+z+O+eP2bx3yN/zOK/Z/6Yxf8L+WMW/y/mj1n898ofs/jvnT9m8d8nf8ziv2/+mMX/S/ljFv/98scs/l/OH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/V/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4v/V/DGL/9fyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv9v5o9Z/I/KH7P4H50/ZvH/Vv6Yxf/b+WMW/2Pyxyz+x+aPWfy/kz9m8f9u/pjF/7j8MYv/8fljFv/v5Y9Z/L+fP2bxPyF/zOL/g/wxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/H+aPWfx/lD9m8T8rf8zi/+P8MYv/2fljFv9z8scs/j/JH7P4/zR/zOL/s/wxi/+5+WMW//Pyxyz+5+ePWfx/nj9m8b8gf8zif2H+mMX/ovwxi//F+WMW/1/kj1n8L8kfs/hfmj9m8b8sf8zi/8v8MYv/r/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4v/r/DGL/9X5Yxb/3+SPWfyvyR+z+P82f8zi/7v8MYv/tfljFv/f549Z/K/LH7P4/yF/zOJ/ff6Yxf+G/DGL/435Yxb/P+aPWfz/lD9m8b8pf8zif3P+mMX/z/ljFv+/5I9Z/G/JH7P4/zV/zOL/t/wxi//f88cs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/IfljEv/BA/ljFv9B+WMW/zHyxyz+Y+aPWfzHyh+z+A/OH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/w/kj1n8p8gfs/h/MH/M4v+h/DGL/5T5Yxb/qfLHLP4fzh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL/0fyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4fzR/zOL/sfwxi//H88cs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4fyJ/zOL/yfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6fyh+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/6fzxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/D+TP2bx/2z+mMV/o/wxi//G+WMW/03yxyz+n8sfs/hvmj9m8d8sf8ziv3n+mMX/8/ljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/L+QP2bx/2L+mMV/r/wxi//e+WMW/33yxyz+++aPWfy/lD9m8d8vf8zi/+X8MYv//vljFv8D8scs/gfmj1n8D8ofs/h/JX/M4n9w/pjF/5D8MYv/ofljFv/D8scs/l/NH7P4fy1/zOJ/eP6Yxf+I/DGL/9fzxyz+38gfs/gfmT9m8f9m/pjF/6j8MYv/0fljFv9v5Y9Z/L+dP2bxPyZ/zOJ/bP6Yxf87+WMW/+/mj1n8j8sfs/gfnz9m8f9e/pjF//v5Yxb/E/LHLP4/yB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvH/Yf6Yxf9H+WMW/7Pyxyz+P84fs/ifnT9m8T8nf8zi/5P8MYv/T/PHLP4/yx+z+J+bP2bxPy9/zOJ/fv6Yxf/n+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bx/0X+mMX/kvwxi/+l+WMW/8vyxyz+v8wfs/j/Kn/M4n95/pjF/4r8MYv/lfljFv+r8scs/r/OH7P4X50/ZvH/Tf6Yxf+a/DGL/2/zxyz+v8sfs/hfmz9m8f99/pjF/7r8MYv/H/LHLP7X549Z/G/IH7P435g/ZvH/Y/6Yxf9P+WMW/5vyxyz+N+ePWfz/nD9m8f9L/pjF/5b8MYv/X/PHLP5/yx+z+P89f8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvEfkj8m8R97IH/M4j8of8ziP0b+mMV/zPwxi/9Y+WMW/8H5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8zi/4H8MYv/FPljFv8P5o9Z/D+UP2bxnzJ/zOI/Vf6Yxf/D+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bx/0j+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/j+aPWfw/lj9m8f94/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/T+SPWfw/mT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf9T+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/3T+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/2fyxyz+n80fs/hvlD9m8d84f8ziv0n+mMX/c/ljFv9N88cs/pvlj1n8N88fs/h/Pn/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/xfyxyz+X8wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/+X8scs/vvlj1n8v5w/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+v5I9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF/6v5Yxb/r+WPWfwPzx+z+B+RP2bx/3r+mMX/G/ljFv8j88cs/t/MH7P4H5U/ZvE/On/M4v+t/DGL/7fzxyz+x+SPWfyPzR+z+H8nf8zi/938MYv/cfljFv/j88cs/t/LH7P4fz9/zOJ/Qv6Yxf8H+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP4/zB+z+P8of8zif1b+mMX/x/ljFv+z88cs/ufkj1n8f5I/ZvH/af6Yxf9n+WMW/3Pzxyz+5+WPWfzPzx+z+P88f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+v8gfs/hfkj9m8b80f8zif1n+mMX/l/ljFv9f5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/9f5Yxb/q/PHLP6/yR+z+F+TP2bx/23+mMX/d/ljFv9r88cs/r/PH7P4X5c/ZvH/Q/6Yxf/6/DGL/w35Yxb/G/PHLP5/zB+z+P8pf8zif1P+mMX/5vwxi/+f88cs/n/JH7P435I/ZvH/a/6Yxf9v+WMW/7/nj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP5D8sck/uMM5I9Z/Aflj1n8x8gfs/iPmT9m8R8rf8ziPzh/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/pPnj1n8P5A/ZvGfIn/M4v/B/DGL/4fyxyz+U+aPWfynyh+z+H84f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+H8kfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOL/0fwxi//H8scs/h/PH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOL/ifwxi/8n88cs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+H8qf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+n84fs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx/0z+mMX/s/ljFv+N8scs/hvnj1n8N8kfs/h/Ln/M4r9p/pjFf7P8MYv/5vljFv/P549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx/0L+mMX/i/ljFv+98scs/nvnj1n898kfs/jvmz9m8f9S/pjFf7/8MYv/l/PHLP77549Z/A/IH7P4H5g/ZvE/KH/M4v+V/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4fzV/zOL/tfwxi//h+WMW/yPyxyz+X88fs/h/I3/M4n9k/pjF/5v5Yxb/o/LHLP5H549Z/L+VP2bx/3b+mMX/mPwxi/+x+WMW/+/kj1n8v5s/ZvE/Ln/M4n98/pjF/3v5Yxb/7+ePWfxPyB+z+P8gf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+H+WMW/x/lj1n8z8ofs/j/OH/M4n92/pjF/5z8MYv/T/LHLP4/zR+z+P8sf8zif27+mMX/vPwxi//5+WMW/5/nj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/F/ljFv9L8scs/pfmj1n8L8sfs/j/Mn/M4v+r/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zp/zOJ/df6Yxf83+WMW/2vyxyz+v80fs/j/Ln/M4n9t/pjF//f5Yxb/6/LHLP5/yB+z+F+fP2bxvyF/zOJ/Y/6Yxf+P+WMW/z/lj1n8b8ofs/jfnD9m8f9z/pjF/y/5Yxb/W/LHLP5/zR+z+P8tf8zi//f8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxX9I/pjEf9yB/DGL/6D8MYv/GPljFv8x88cs/mPlj1n8B+ePWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjFf/L8MYv/B/LHLP5T5I9Z/D+YP2bx/1D+mMV/yvwxi/9U+WMW/w/nj1n8p84fs/hPkz9m8Z82f8ziP13+mMX/I/ljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfw/mj9m8f9Y/pjF/+P5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfw/kT9m8f9k/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/0/lj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/0/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+n8kfs/h/Nn/M4r9R/pjFf+P8MYv/JvljFv/P5Y9Z/DfNH7P4b5Y/ZvHfPH/M4v/5/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8e+WMW/z3zxyz+X8gfs/h/MX/M4r9X/pjFf+/8MYv/PvljFv9988cs/l/KH7P475c/ZvH/cv6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/L+SP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/r+aPWfy/lj9m8T88f8zif0T+mMX/6/ljFv9v5I9Z/I/MH7P4fzN/zOJ/VP6Yxf/o/DGL/7fyxyz+384fs/gfkz9m8T82f8zi/538MYv/d/PHLP7H5Y9Z/I/PH7P4fy9/zOL//fwxi/8J+WMW/x/kj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+P8wf8zi/6P8MYv/WfljFv8f549Z/M/OH7P4n5M/ZvH/Sf6Yxf+n+WMW/5/lj1n8z80fs/iflz9m8T8/f8zi//P8MYv/BfljFv8L88cs/hflj1n8L84fs/j/In/M4n9J/pjF/9L8MYv/ZfljFv9f5o9Z/H+VP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/X+ePWfyvzh+z+P8mf8zif03+mMX/t/ljFv/f5Y9Z/K/NH7P4/z5/zOJ/Xf6Yxf8P+WMW/+vzxyz+N+SPWfxvzB+z+P8xf8zi/6f8MYv/TfljFv+b88cs/n/OH7P4/yV/zOJ/S/6Yxf+v+WMW/7/lj1n8/54/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+A/JH5P4jzeQP2bxH5Q/ZvEfI3/M4j9m/pjFf6z8MYv/4Pwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvH/QP6YxX+K/DGL/wfzxyz+H8ofs/hPmT9m8Z8qf8zi/+H8MYv/1PljFv9p8scs/tPmj1n8p8sfs/h/JH/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/9H88cs/h/LH7P4fzx/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi/8n8scs/p/MH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8zi/6n8MYv/qvljFv/V8scs/qvnj1n818gfs/h/On/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMX/M/ljFv/P5o9Z/DfKH7P4b5w/ZvHfJH/M4v+5/DGL/6b5Yxb/zfLHLP6b549Z/D+fP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMX/C/ljFv8v5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjF/0v5Yxb//fLHLP5fzh+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/1fyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOL/1fwxi//X8scs/ofnj1n8j8gfs/h/PX/M4v+N/DGL/5H5Yxb/b+aPWfyPyh+z+B+dP2bx/1b+mMX/2/ljFv9j8scs/sfmj1n8v5M/ZvH/bv6Yxf+4/DGL//H5Yxb/7+WPWfy/nz9m8T8hf8zi/4P8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/x/mj1n8f5Q/ZvE/K3/M4v/j/DGL/9n5Yxb/c/LHLP4/yR+z+P80f8zi/7P8MYv/ufljFv/z8scs/ufnj1n8f54/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9f5I9Z/C/JH7P4X5o/ZvG/LH/M4v/L/DGL/6/yxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOL/6/wxi//V+WMW/9/kj1n8r8kfs/j/Nn/M4v+7/DGL/7X5Yxb/3+ePWfyvyx+z+P8hf8zif33+mMX/hvwxi/+N+WMW/z/mj1n8/5Q/ZvG/KX/M4n9z/pjF/8/5Yxb/v+SPWfxvyR+z+P81f8zi/7f8MYv/3/PHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/yH5YxL/8Qfyxyz+g/LHLP5j5I9Z/MfMH7P4j5U/ZvEfnD9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP4fyB+z+E+RP2bx/2D+mMX/Q/ljFv8p88cs/lPlj1n8P5w/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv+P5I9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8f9o/pjF/2P5Yxb/j+ePWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8f9E/pjF/5P5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8P5U/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv9P549Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/h/Jn/M4v/Z/DGL/0b5Yxb/jfPHLP6b5I9Z/D+XP2bx3zR/zOK/Wf6YxX/z/DGL/+fzxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/nvkj1n898wfs/h/IX/M4v/F/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4fyl/zOK/X/6Yxf/L+WMW//3zxyz+B+SPWfwPzB+z+B+UP2bx/0r+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfy/mj9m8f9a/pjF//D8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOL/zfwxi/9R+WMW/6Pzxyz+38ofs/h/O3/M4n9M/pjF/9j8MYv/d/LHLP7fzR+z+B+XP2bxPz5/zOL/vfwxi//388cs/ifkj1n8f5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zi/8P8MYv/j/LHLP5n5Y9Z/H+cP2bxPzt/zOJ/Tv6Yxf8n+WMW/5/mj1n8f5Y/ZvE/N3/M4n9e/pjF//z8MYv/z/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4v+L/DGL/yX5Yxb/S/PHLP6X5Y9Z/H+ZP2bx/1X+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfx/nT9m8b86f8zi/5v8MYv/NfljFv/f5o9Z/H+XP2bxvzZ/zOL/+/wxi/91+WMW/z/kj1n8r88fs/jfkD9m8b8xf8zi/8f8MYv/n/LHLP435Y9Z/G/OH7P4/zl/zOL/l/wxi/8t+WMW/7/mj1n8/5Y/ZvH/e/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8ziPyR/TOI/wUD+mMV/UP6YxX+M/DGL/5j5Yxb/sfLHLP6D88cs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf8D+WMW/ynyxyz+H8wfs/h/KH/M4j9l/pjFf6r8MYv/h/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4v+R/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/h/NH7P4fyx/zOL/8fwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/p/IH7P4fzJ/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/p/LHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4v/p/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv/P5I9Z/D+bP2bx3yh/zOK/cf6YxX+T/DGL/+fyxyz+m+aPWfw3yx+z+G+eP2bx/3z+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv8v5I9Z/L+YP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb/L+WPWfz3yx+z+H85f8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+X8kfs/gfnD9m8T8kf8zif2j+mMX/sPwxi/9X88cs/l/LH7P4H54/ZvE/In/M4v/1/DGL/zfyxyz+R+aPWfy/mT9m8T8qf8zif3T+mMX/W/ljFv9v549Z/I/JH7P4H5s/ZvH/Tv6Yxf+7+WMW/+Pyxyz+x+ePWfy/lz9m8f9+/pjF/4T8MYv/D/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8f5g/ZvH/Uf6Yxf+s/DGL/4/zxyz+Z+ePWfzPyR+z+P8kf8zi/9P8MYv/z/LHLP7n5o9Z/M/LH7P4n58/ZvH/ef6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/H+RP2bxvyR/zOJ/af6Yxf+y/DGL/y/zxyz+v8ofs/hfnj9m8b8if8zif2X+mMX/qvwxi/+v88cs/lfnj1n8f5M/ZvG/Jn/M4v/b/DGL/+/yxyz+1+aPWfx/nz9m8b8uf8zi/4f8MYv/9fljFv8b8scs/jfmj1n8/5g/ZvH/U/6Yxf+m/DGL/835Yxb/P+ePWfz/kj9m8b8lf8zi/9f8MYv/3/LHLP5/zx+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n8h+SPSfwnHMgfs/gPyh+z+I+RP2bxHzN/zOI/Vv6YxX9w/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+H8gf8ziP0X+mMX/g/ljFv8P5Y9Z/KfMH7P4T5U/ZvH/cP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/D+SP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/6P5Yxb/j+WPWfw/nj9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjF/xP5Yxb/T+aPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvH/VP6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/D+dP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+Z/DGL/2fzxyz+G+WPWfw3zh+z+G+SP2bx/1z+mMV/0/wxi/9m+WMW/83zxyz+n88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4v+F/DGL/xfzxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOL/pfwxi/9++WMW/y/nj1n8988fs/gfkD9m8T8wf8zif1D+mMX/K/ljFv+D88cs/ofkj1n8D80fs/gflj9m8f9q/pjF/2v5Yxb/w/PHLP5H5I9Z/L+eP2bx/0b+mMX/yPwxi/8388cs/kflj1n8j84fs/h/K3/M4v/t/DGL/zH5Yxb/Y/PHLP7fyR+z+H83f8zif1z+mMX/+Pwxi//38scs/t/PH7P4n5A/ZvH/Qf6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/D/PHLP4/yh+z+J+VP2bx/3H+mMX/7Pwxi/85+WMW/5/kj1n8f5o/ZvH/Wf6Yxf/c/DGL/3n5Yxb/8/PHLP4/zx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/y/yxyz+l+SPWfwvzR+z+F+WP2bx/2X+mMX/V/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8f91/pjF/+r8MYv/b/LHLP7X5I9Z/H+bP2bx/13+mMX/2vwxi//v88cs/tflj1n8/5A/ZvG/Pn/M4n9D/pjF/8b8MYv/H/PHLP5/yh+z+N+UP2bxvzl/zOL/5/wxi/9f8scs/rfkj1n8/5o/ZvH/W/6Yxf/v+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/kPwxif9EA/ljFv9B+WMW/zHyxyz+Y+aPWfzHyh+z+A/OH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/w/kj1n8p8gfs/h/MH/M4v+h/DGL/5T5Yxb/qfLHLP4fzh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL/0fyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4fzR/zOL/sfwxi//H88cs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4fyJ/zOL/yfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6fyh+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/6fzxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/D+TP2bx/2z+mMV/o/wxi//G+WMW/03yxyz+n8sfs/hvmj9m8d8sf8ziv3n+mMX/8/ljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/L+QP2bx/2L+mMV/r/wxi//e+WMW/33yxyz+++aPWfy/lD9m8d8vf8zi/+X8MYv//vljFv8D8scs/gfmj1n8D8ofs/h/JX/M4n9w/pjF/5D8MYv/ofljFv/D8scs/l/NH7P4fy1/zOJ/eP6Yxf+I/DGL/9fzxyz+38gfs/gfmT9m8f9m/pjF/6j8MYv/0fljFv9v5Y9Z/L+dP2bxPyZ/zOJ/bP6Yxf87+WMW/+/mj1n8j8sfs/gfnz9m8f9e/pjF//v5Yxb/E/LHLP4/yB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvH/Yf6Yxf9H+WMW/7Pyxyz+P84fs/ifnT9m8T8nf8zi/5P8MYv/T/PHLP4/yx+z+J+bP2bxPy9/zOJ/fv6Yxf/n+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bx/0X+mMX/kvwxi/+l+WMW/8vyxyz+v8wfs/j/Kn/M4n95/pjF/4r8MYv/lfljFv+r8scs/r/OH7P4X50/ZvH/Tf6Yxf+a/DGL/2/zxyz+v8sfs/hfmz9m8f99/pjF/7r8MYv/H/LHLP7X549Z/G/IH7P435g/ZvH/Y/6Yxf9P+WMW/5vyxyz+N+ePWfz/nD9m8f9L/pjF/5b8MYv/X/PHLP5/yx+z+P89f8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvEfkj8m8Z94IH/M4j8of8ziP0b+mMV/zPwxi/9Y+WMW/8H5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8zi/4H8MYv/FPljFv8P5o9Z/D+UP2bxnzJ/zOI/Vf6Yxf/D+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bx/0j+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/j+aPWfw/lj9m8f94/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/T+SPWfw/mT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf9T+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/3T+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/2fyxyz+n80fs/hvlD9m8d84f8ziv0n+mMX/c/ljFv9N88cs/pvlj1n8N88fs/h/Pn/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/xfyxyz+X8wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/+X8scs/vvlj1n8v5w/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+v5I9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF/6v5Yxb/r+WPWfwPzx+z+B+RP2bx/3r+mMX/G/ljFv8j88cs/t/MH7P4H5U/ZvE/On/M4v+t/DGL/7fzxyz+x+SPWfyPzR+z+H8nf8zi/938MYv/cfljFv/j88cs/t/LH7P4fz9/zOJ/Qv6Yxf8H+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP4/zB+z+P8of8zif1b+mMX/x/ljFv+z88cs/ufkj1n8f5I/ZvH/af6Yxf9n+WMW/3Pzxyz+5+WPWfzPzx+z+P88f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+v8gfs/hfkj9m8b80f8zif1n+mMX/l/ljFv9f5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/9f5Yxb/q/PHLP6/yR+z+F+TP2bx/23+mMX/d/ljFv9r88cs/r/PH7P4X5c/ZvH/Q/6Yxf/6/DGL/w35Yxb/G/PHLP5/zB+z+P8pf8zif1P+mMX/5vwxi/+f88cs/n/JH7P435I/ZvH/a/6Yxf9v+WMW/7/nj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP5D8sck/pMM5I9Z/Aflj1n8x8gfs/iPmT9m8R8rf8ziPzh/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/pPnj1n8P5A/ZvGfIn/M4v/B/DGL/4fyxyz+U+aPWfynyh+z+H84f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+H8kfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOL/0fwxi//H8scs/h/PH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vP8fe/RgAAaCAAHwbeRt/5mxk7Nt27Zt27Zt27Zt225gK7idaWH8Ry3/A/1HLf+D/Ect/4P9Ry3/Q/xHLf9D/Uct/8P8Ry3/w/1HLf8j/Ect/yP9Ry3/o/xHLf+j/Uct/2P8Ry3/Y/1HLf/j/Ect/+P9Ry3/0/iPWv6n9R+1/E/nP2r5n95/1PI/g/+o5X9G/1HL/0z+o5b/mf1HLf+z+I9a/mf1H7X8z+Y/avmf3X/U8j+H/6jlf07/Ucv/XP6jlv+5/Uct//P4j1r+5/UftfzP5z9q+Z/ff9Tyv4D/qOV/Qf9Ry/9C/qOW/4X9Ry3/i/iPWv4X9R+1/C/mP2r5X9x/1PK/hP+o5X9J/1HL/1L+o5b/pf1HLf/L+I9a/pf1H7X8L+c/avlf3n/U8r+C/6jlf0X/Ucv/Sv6jlv+V/Uct/6v4j1r+V/Uftfyv5j9q+V/df9Tyv4b/qOV/Tf9Ry/9a/qOW/7X9Ry3/6/iPWv7X9R+1/K/nP2r5X99/1PK/gf+o5X9D/1HL/0b+o5b/jf1HLf+b+I9a/jf1H7X8b+Y/avnf3H/U8r+F/6jlf0v/Ucv/Vv6jlv+t/Uct/9v4j1r+t/Uftfxv5z9q+d/ef9Tyv4P/qOV/R/9Ry/9O/qOW/539Ry3/u/iPWv539R+1/O/mP2r5391/1PK/h/+o5X9P/1HL/17+o5b/vf1HLf/7+I9a/vf1H7X87+c/avnf33/U8n+A/6jl/0D/Ucv/Qf6jlv+D/Uct/4f4j1r+D/Uftfwf5j9q+T/cf9Tyf4T/qOX/SP9Ry/9R/qOW/6P9Ry3/x/iPWv6P9R+1/B/nP2r5P95/1PJ/gv+o5f9E/1HL/0n+o5b/k/1HLf+n+I9a/k/1H7X8n+Y/avk/3X/U8n+G/6jl/0z/Ucv/Wf6jlv+z/Uct/+f4j1r+z/Uftfyf5z9q+T/ff9Tyf4H/qOX/Qv9Ry/9F/qOW/4v9Ry3/l/iPWv4v9R+1/F/mP2r5v9x/1PJ/hf+o5f9K/1HL/1X+o5b/q/1HLf/X+I9a/q/1H7X8X+c/avm/3n/U8n+D/6jl/0b/Ucv/Tf6jlv+b/Uct/7f4j1r+b/Uftfzf5j9q+b/df9Tyf4f/qOX/Tv9Ry/9d/qOW/7v9Ry3/9/iPWv7v9R+1/N/nP2r5v99/1PL/gP+o5f9B/1HL/0P+o5b/h/1HLf+P+I9a/h/1H7X8P+Y/avl/3H/U8v+E/6jl/0n/Ucv/U/6jlv+n/Uct/8/4j1r+n/Uftfw/5z9q+X/ef9Ty/4L/qOX/Rf9Ry/9L/qOW/5f9Ry3/r/iPWv5f9R+1/L/mP2r5f91/1PL/hv+o5f9N/1HL/1v+o5b/t/1HLf/v+I9a/t/1H7X8v+c/avl/33/U8v+B/6jl/0P/Ucv/R/6jlv+P/Uct/5/4j1r+P/Uftfx/5j9q+f/cf9Ty/4X/qOX/S/9Ry/9X/qOW/6/9RyX/A77jP2r5/67/qOX/e/6jlv/v+49a/n/gP2r5/6H/qOX/R/6jlv8f+49a/n/iP2r5/6n/qOX/Z/6jlv+f+49a/n/hP2r5/6X/qOX/V/6jlv9f+49a/gf4j1r+f+M/avn/rf+o5f93/qOW/9/7j1r+/+A/avn/o/+o5f9P/qOW/z/7j1r+/+I/avn/q/+o5f9v/qOW/7/7j1r+/+E/avn/p/+o5f9f/qOW/3/7j1r+/+M/avn/r/+o5f9//qOW///7j1r+J/AftfxP6D9q+Z/If9TyP7H/qOV/Ev9Ry/+k/qOW/8n8Ry3/k/uPWv6n8B+1/E/pP2r5n8p/1PI/tf+o5X+g/6jlf5D/qOV/sP+o5X+I/6jlf6j/qOV/mP+o5X+4/6jlf4T/qOV/pP+o5X+U/6jlf7T/qOV/jP+o5X+s/6jlf5z/qOV/vP/oW/cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPANO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCrv27Rg3FAQB/6fWHra12EHGRdpI6yg2Cg5grpBR0aREPXATBuaK7nSrq4r+g4CyCIE5O2sWpujjqv+BSLFLJJSmPNNDhhHDc5wMPku8Ludf3ffe+NDkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa0c82eyGcKs+2j/V/vPbs6tfv6eud3Qev7sytZEX0xmLZvXxYE0KYCGE575ssLjmz9f7NRH4yEd/39OxcshCSTvOoHj4+YdjV54fkaNzJ86INnA0hzOYHTzeubJ08C+Orn65l5TR2yrwlRQ7DVHkct+miLf0uWuP6iK9N2vq7fu1fetvWZ4+Sfrq2Xst/KI6L3NW/3+Oqvs7vvfx2vTaVk7Xvykjop9nNPN/N+3wIM5v3PxwW+/pMKApFvq/O5Vt4CGG+7bwwnLTX7eXrtTofJD3Znqzy37AuOj92H+W1YaGqAQDAaEl73dWG+l89EGis/58vf1lV/wFgdK2nvW6InvMNgsn2fNXfVP8v7p1/0uKQAYAhZeuN9f/o/XpT/e+/WHzX4pABgCFt3BrU/+la/T9X9TfV/5Wfn3bK7uq9wd/oloPfj5XxgyjeieJ/ovhUdJ/4+ukovh/FZ6LxHvzv+QCAcbDRzVbD8f//L1T9TfV/7/bdpRaHDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8I8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEwUAAD//zgppUc=") 665.05213ms ago: executing program 4 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe94, 0x2f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}}, 0x20048014) 643.166461ms ago: executing program 0 (id=614): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x9}) 575.479441ms ago: executing program 2 (id=615): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 283.167485ms ago: executing program 4 (id=616): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00', &(0x7f0000000500)='//\x00', &(0x7f0000000540)='&\'.\xad,^%,-!:\',!\\\x00']}, 0x0) 282.771455ms ago: executing program 1 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 0s ago: executing program 4 (id=618): syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000200)={[{@codepage={'codepage', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@gid}]}, 0x5, 0x2de, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000000400)=""/4096, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 53.071048][ T4160] cgroup: Unknown subsys name 'net' [ 53.261423][ T4160] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.759963][ T4160] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.250061][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 56.343021][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 56.357476][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 56.371714][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 56.432775][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 56.482860][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.491130][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.499485][ T4179] device bridge_slave_0 entered promiscuous mode [ 56.527655][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.534900][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.542838][ T4179] device bridge_slave_1 entered promiscuous mode [ 56.616241][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.646291][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.653431][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.661595][ T4174] device bridge_slave_0 entered promiscuous mode [ 56.669546][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.676859][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.685025][ T4173] device bridge_slave_0 entered promiscuous mode [ 56.693867][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.716008][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.723209][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.732680][ T4183] device bridge_slave_0 entered promiscuous mode [ 56.741039][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.750635][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.759222][ T4174] device bridge_slave_1 entered promiscuous mode [ 56.766523][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.773615][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.781907][ T4173] device bridge_slave_1 entered promiscuous mode [ 56.803580][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.810716][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.818713][ T4183] device bridge_slave_1 entered promiscuous mode [ 56.852464][ T4179] team0: Port device team_slave_0 added [ 56.892499][ T4179] team0: Port device team_slave_1 added [ 56.898707][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.906007][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.914045][ T4184] device bridge_slave_0 entered promiscuous mode [ 56.924036][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.935232][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.946354][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.967881][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.975371][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.983602][ T4184] device bridge_slave_1 entered promiscuous mode [ 56.992402][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.003029][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.014442][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.062208][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.069263][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.095487][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.140550][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.147928][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.174358][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.188113][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.200963][ T4183] team0: Port device team_slave_0 added [ 57.209685][ T4174] team0: Port device team_slave_0 added [ 57.218520][ T4173] team0: Port device team_slave_0 added [ 57.236792][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.247250][ T4183] team0: Port device team_slave_1 added [ 57.261440][ T4174] team0: Port device team_slave_1 added [ 57.268541][ T4173] team0: Port device team_slave_1 added [ 57.324600][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.331770][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.359499][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.382102][ T4184] team0: Port device team_slave_0 added [ 57.409343][ T4179] device hsr_slave_0 entered promiscuous mode [ 57.416432][ T4179] device hsr_slave_1 entered promiscuous mode [ 57.424826][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.432133][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.458751][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.470661][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.478233][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.505290][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.519144][ T4184] team0: Port device team_slave_1 added [ 57.525603][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.532931][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.559768][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.577809][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.584821][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.612491][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.624585][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.632203][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.659151][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.709079][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.716402][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.743879][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.783582][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.790724][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.817627][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.831332][ T4174] device hsr_slave_0 entered promiscuous mode [ 57.838450][ T4174] device hsr_slave_1 entered promiscuous mode [ 57.845695][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.853525][ T4174] Cannot create hsr debugfs directory [ 57.893920][ T4173] device hsr_slave_0 entered promiscuous mode [ 57.900835][ T4164] Bluetooth: hci1: command 0x0409 tx timeout [ 57.905741][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 57.913571][ T4173] device hsr_slave_1 entered promiscuous mode [ 57.920101][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 57.926693][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.934559][ T4173] Cannot create hsr debugfs directory [ 57.974858][ T4164] Bluetooth: hci3: command 0x0409 tx timeout [ 57.990642][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 58.027886][ T4183] device hsr_slave_0 entered promiscuous mode [ 58.035339][ T4183] device hsr_slave_1 entered promiscuous mode [ 58.041940][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.050375][ T4183] Cannot create hsr debugfs directory [ 58.069438][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.076410][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.082950][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.090809][ T4184] Cannot create hsr debugfs directory [ 58.392741][ T4179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.405847][ T4179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.416276][ T4179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.427650][ T4179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.488026][ T4174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.499013][ T4174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.514529][ T4174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.525788][ T4174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.585670][ T4173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.597450][ T4173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.607504][ T4173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.640989][ T4173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.687996][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.711946][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.721401][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.746366][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.766319][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.797343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.808106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.821033][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.831954][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.845691][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.852573][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.875509][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.895641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.906971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.916913][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.924125][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.933464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.945502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.953469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.967369][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.000220][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.011351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.021335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.032325][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.040066][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.048233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.058292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.067443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.081072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.090135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.100908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.111380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.147540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.158958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.168800][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.176196][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.185528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.195556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.204244][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.211442][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.220232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.229557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.238908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.247599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.263501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.278647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.291026][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.325397][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.340182][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.351899][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.365234][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.392653][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.403300][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.439613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.449616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.481465][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.492196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.501665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.524209][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.545948][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.581337][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.607470][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.623571][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.633215][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.648952][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.672184][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.685534][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.700772][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.710269][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.717685][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.733601][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.743361][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.752894][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.760645][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.769013][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.778711][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.787821][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.820126][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.829862][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.839508][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.849495][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.860989][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.870179][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.879524][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.889145][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.899479][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.909095][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.918236][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.930788][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.943443][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.957338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.966515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.984211][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.991848][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 59.998422][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.004995][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 60.011776][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 60.025348][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.033402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.042152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.051240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.055458][ T4215] Bluetooth: hci4: command 0x041b tx timeout [ 60.063839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.073011][ T4215] Bluetooth: hci3: command 0x041b tx timeout [ 60.075930][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.088133][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.097377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.141823][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.153573][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.170745][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.178194][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.187237][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.196725][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.206867][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.229928][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.243541][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.254037][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.261591][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.278940][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.292215][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.302189][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.309353][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.318865][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.329508][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.360230][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.372111][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.381731][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.391059][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.400266][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.411782][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.420968][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.436758][ T4179] device veth0_vlan entered promiscuous mode [ 60.450901][ T4174] device veth0_vlan entered promiscuous mode [ 60.475737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.484228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.494085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.503378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.512741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.521773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.531286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.539982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.547974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.556573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.567396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.578810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.596889][ T4174] device veth1_vlan entered promiscuous mode [ 60.615811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.624254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.633337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.643886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.652762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.660641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.668404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.677318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.693120][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.705746][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.721340][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.737565][ T4179] device veth1_vlan entered promiscuous mode [ 60.744572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.753698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.762183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.772842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.790989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.800378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.843983][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.867139][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.880664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.889445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.899812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.920379][ T4174] device veth0_macvtap entered promiscuous mode [ 60.978511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.992547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.002238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.011392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.022694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.032267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.044398][ T4174] device veth1_macvtap entered promiscuous mode [ 61.055550][ T4179] device veth0_macvtap entered promiscuous mode [ 61.076976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.085768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.094015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.105774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.114250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.137859][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.148368][ T4179] device veth1_macvtap entered promiscuous mode [ 61.164213][ T4184] device veth0_vlan entered promiscuous mode [ 61.173882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.182488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.193008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.202370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.212970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.226430][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.251197][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.263585][ T4184] device veth1_vlan entered promiscuous mode [ 61.272794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.288585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.302812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.313013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.320899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.328858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.336878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.349322][ T4174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.360335][ T4174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.370373][ T4174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.379825][ T4174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.399845][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.412660][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.426514][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.439198][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.451871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.462008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.474766][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.486284][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.508867][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.552092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.562432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.574089][ T4179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.586213][ T4179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.595710][ T4179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.604433][ T4179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.665200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.674077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.752393][ T4173] device veth0_vlan entered promiscuous mode [ 61.762264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.772735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.782412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.791129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.803327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.815805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.848492][ T4184] device veth0_macvtap entered promiscuous mode [ 61.869352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.879167][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.881387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.896504][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.912316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.921346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.940042][ T4184] device veth1_macvtap entered promiscuous mode [ 61.959177][ T4173] device veth1_vlan entered promiscuous mode [ 61.990602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.000245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.009932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.021546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.030634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.054971][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 62.068782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.078000][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 62.084142][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 62.085967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.111875][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.117784][ T4183] device veth0_vlan entered promiscuous mode [ 62.125579][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.135838][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 62.142756][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 62.142840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.160442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.170234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.183011][ T4173] device veth0_macvtap entered promiscuous mode [ 62.194040][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.205765][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.216968][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.231547][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.244227][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.255973][ T4183] device veth1_vlan entered promiscuous mode [ 62.275533][ T4173] device veth1_macvtap entered promiscuous mode [ 62.288804][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.308796][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.321520][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.331562][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.343997][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.382439][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.395421][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.413925][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.427292][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.439710][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.451420][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.462991][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.473931][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.483842][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.495454][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.504134][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.513238][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.537310][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.575586][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.595905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.603972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.626700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.650259][ T4183] device veth0_macvtap entered promiscuous mode [ 62.661553][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.674235][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.685241][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.699959][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.710776][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.723376][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.736219][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.773531][ T4183] device veth1_macvtap entered promiscuous mode [ 62.787001][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.800541][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.810338][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.822201][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.840522][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.852065][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.862800][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.873684][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.884262][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.896383][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.908663][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.926133][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.939043][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.946485][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.949644][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.969901][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.004168][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.021354][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.041420][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.057309][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.101527][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.113490][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.125693][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.139764][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.150783][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.162830][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.174168][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.185970][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.207230][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.230890][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.242763][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.251592][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.271015][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.283604][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.304402][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.317628][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.329446][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.340921][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.353645][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.367294][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.378621][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.391399][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.405546][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.450961][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.492232][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.515617][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.547626][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.561127][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.570171][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.597433][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.608231][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.682797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.742361][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.818093][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.860200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.875479][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.895997][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.922452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.977465][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.012778][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.031045][ T4266] loop0: detected capacity change from 0 to 4096 [ 64.067256][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.093549][ T4273] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 64.102547][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 64.116526][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.121993][ T4273] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 64.133686][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 64.138056][ T4266] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 64.155340][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 64.170236][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.192963][ T4216] Bluetooth: hci2: command 0x0419 tx timeout [ 64.223104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.250778][ T4216] Bluetooth: hci1: command 0x0419 tx timeout [ 64.275086][ T4266] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 64.279494][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 64.314820][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 64.353032][ T4266] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 64.358315][ T4280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 64.380684][ T4266] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 64.413295][ T4266] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 64.427857][ T4266] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 64.540786][ T4266] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 64.565218][ T4266] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 64.681959][ T4266] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 64.724398][ T4266] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 64.763813][ T4266] ntfs: volume version 3.1. [ 65.274941][ T4164] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.440556][ T4310] overlayfs: conflicting options: nfs_export=on,index=off [ 65.576330][ T4296] loop4: detected capacity change from 0 to 32768 [ 65.610788][ T4314] netlink: 428 bytes leftover after parsing attributes in process `syz.2.30'. [ 65.621247][ T4314] netlink: 104 bytes leftover after parsing attributes in process `syz.2.30'. [ 65.656137][ T4164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.656881][ T4296] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.23 (4296) [ 65.678173][ T4164] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 65.702966][ T4164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.755355][ T4164] usb 4-1: config 0 descriptor?? [ 65.806916][ T4296] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 65.828754][ T4296] BTRFS info (device loop4): using free space tree [ 65.836012][ T4296] BTRFS info (device loop4): has skinny extents [ 66.094874][ T4296] BTRFS info (device loop4): enabling ssd optimizations [ 66.118779][ T4312] loop0: detected capacity change from 0 to 32768 [ 66.185879][ T4312] ======================================================= [ 66.185879][ T4312] WARNING: The mand mount option has been deprecated and [ 66.185879][ T4312] and is ignored by this kernel. Remove the mand [ 66.185879][ T4312] option from the mount to silence this warning. [ 66.185879][ T4312] ======================================================= [ 66.242993][ T4164] lg-g15 0003:046D:C222.0001: unbalanced collection at end of report description [ 66.311029][ T4312] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 66.349689][ T4164] lg-g15: probe of 0003:046D:C222.0001 failed with error -22 [ 66.376529][ T4312] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 66.480278][ T4164] usb 4-1: USB disconnect, device number 2 [ 66.652519][ T4360] loop2: detected capacity change from 0 to 1024 [ 66.665500][ T4312] syz.0.31 (4312) used greatest stack depth: 19224 bytes left [ 66.707940][ T4360] EXT4-fs (loop2): inline encryption not supported [ 66.725327][ T4360] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 66.725327][ T4360] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 66.725327][ T4360] [ 66.788967][ T4366] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 66.852694][ T4360] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000dbe0,debug_want_extra_isize=0x0000000000000088,inlinecrypt,max_batch_time=0x0000000000000003,lazytime,noauto_da_alloc,nojournal_checksum,nouser_xattr,,errors=continue. Quota mode: writeback. [ 66.938614][ T4377] tap0: tun_chr_ioctl cmd 1074025681 [ 67.028095][ T4179] ocfs2: Unmounting device (7,0) on (node local) [ 67.321297][ T4386] loop4: detected capacity change from 0 to 1024 [ 67.626213][ T154] hfsplus: b-tree write err: -5, ino 4 [ 67.798107][ T4216] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.044794][ T4216] usb 2-1: Using ep0 maxpacket: 32 [ 68.070036][ T4374] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 68.083701][ T4413] loop4: detected capacity change from 0 to 2048 [ 68.164863][ T4216] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 68.173110][ T4216] usb 2-1: config 0 has no interface number 0 [ 68.188262][ T4413] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.205093][ T4216] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 68.236543][ T4216] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 68.267902][ T4414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.371545][ T4412] loop2: detected capacity change from 0 to 32768 [ 68.405055][ T4216] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 68.429626][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.443916][ T4216] usb 2-1: Product: syz [ 68.455015][ T4374] usb 4-1: config 7 has an invalid interface number: 34 but max is 0 [ 68.465914][ T4216] usb 2-1: Manufacturer: syz [ 68.472241][ T4374] usb 4-1: config 7 has no interface number 0 [ 68.479554][ T4216] usb 2-1: SerialNumber: syz [ 68.492811][ T4216] usb 2-1: config 0 descriptor?? [ 68.495859][ T4412] XFS (loop2): Mounting V5 Filesystem [ 68.644951][ T4374] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 68.664697][ T4374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.683931][ T4374] usb 4-1: Product: syz [ 68.688677][ T4374] usb 4-1: Manufacturer: syz [ 68.693410][ T4374] usb 4-1: SerialNumber: syz [ 68.718608][ T4412] XFS (loop2): Ending clean mount [ 68.748806][ T4412] XFS (loop2): Quotacheck needed: Please wait. [ 68.860984][ T4412] XFS (loop2): Quotacheck: Done. [ 68.978690][ T4216] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 69.005184][ T4216] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, [ 69.032843][ T4184] XFS (loop2): Unmounting Filesystem [ 69.044425][ T4216] radio-si470x 2-1:0.35: but the device has firmware version 0. [ 69.087458][ T4445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.195034][ T4216] radio-si470x 2-1:0.35: software version 146, hardware version 66 [ 69.215169][ T4216] radio-si470x 2-1:0.35: If you have some trouble using this driver, [ 69.218055][ T4447] loop4: detected capacity change from 0 to 4096 [ 69.225763][ T4216] radio-si470x 2-1:0.35: please report to V4L ML at linux-media@vger.kernel.org [ 69.338524][ T4450] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.415008][ T4216] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 69.430132][ T4216] radio-si470x 2-1:0.35: submitting int urb failed (-90) [ 69.475164][ T4216] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 69.497605][ T4216] radio-si470x: probe of 2-1:0.35 failed with error -22 [ 69.553059][ T4374] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 69.580952][ T4216] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 69.609075][ T4453] loop2: detected capacity change from 0 to 256 [ 69.623755][ T4374] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 69.645441][ T4216] usb 2-1: USB disconnect, device number 2 [ 69.699138][ T4374] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 69.716479][ T4453] exfat: Deprecated parameter 'utf8' [ 69.739646][ T4374] dvb_usb_cxusb: probe of 4-1:7.34 failed with error -22 [ 69.762022][ T4453] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 69.788434][ T4374] usb 4-1: USB disconnect, device number 3 [ 69.884967][ T4449] loop0: detected capacity change from 0 to 40427 [ 69.961644][ T4449] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 69.988985][ T4449] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 70.019650][ T4449] F2FS-fs (loop0): invalid crc value [ 70.070016][ T4449] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.216431][ T4449] F2FS-fs (loop0): Start checkpoint disabled! [ 70.254313][ T4449] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 70.273825][ T4449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 70.504928][ T13] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 70.683317][ T154] attempt to access beyond end of device [ 70.683317][ T154] loop0: rw=2049, want=40992, limit=40427 [ 70.728980][ T4461] loop4: detected capacity change from 0 to 32768 [ 70.796720][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 70.925089][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.967218][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.992834][ T13] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 71.022053][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.079467][ T13] usb 2-1: config 0 descriptor?? [ 71.271461][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.278250][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.372297][ T4491] loop3: detected capacity change from 0 to 32768 [ 71.455310][ T4374] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.508819][ T4491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 71.541312][ T4491] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 71.557720][ T4491] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 71.567779][ T4491] OCFS2: File system is now read-only. [ 71.573516][ T4491] (syz.3.93,4491,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 71.581842][ T4491] (syz.3.93,4491,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 71.589580][ T4491] (syz.3.93,4491,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 71.597978][ T4491] (syz.3.93,4491,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 71.606462][ T4491] (syz.3.93,4491,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 71.614569][ T4491] (syz.3.93,4491,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 71.623118][ T4491] (syz.3.93,4491,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 71.631827][ T4491] (syz.3.93,4491,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 71.641249][ T4491] (syz.3.93,4491,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 71.650440][ T4491] (syz.3.93,4491,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 71.659745][ T4491] (syz.3.93,4491,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 71.668457][ T4491] (syz.3.93,4491,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 71.674844][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 71.677539][ T4491] (syz.3.93,4491,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 71.692751][ T4491] (syz.3.93,4491,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 71.697533][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 71.702278][ T4491] (syz.3.93,4491,1):ocfs2_symlink:1911 ERROR: status = -30 [ 71.716917][ T4491] (syz.3.93,4491,1):ocfs2_symlink:2065 ERROR: status = -30 [ 71.776854][ T13] usb 2-1: USB disconnect, device number 3 [ 71.841769][ T4173] (syz-executor,4173,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 71.874274][ T4173] ocfs2: Unmounting device (7,3) on (node local) [ 72.045027][ T4374] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.078666][ T4512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 72.125526][ T4512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 72.255219][ T4374] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.264328][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.301128][ T4374] usb 3-1: Product: syz [ 72.310805][ T4374] usb 3-1: Manufacturer: syz [ 72.323633][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 72.333145][ T4374] usb 3-1: SerialNumber: syz [ 72.399849][ T4524] loop3: detected capacity change from 0 to 128 [ 72.822999][ T4536] loop3: detected capacity change from 0 to 256 [ 72.907613][ T4540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 72.974120][ T4520] loop4: detected capacity change from 0 to 32768 [ 73.029471][ T4520] XFS: attr2 mount option is deprecated. [ 73.040162][ T4520] XFS: ikeep mount option is deprecated. [ 73.051301][ T4520] XFS: noikeep mount option is deprecated. [ 73.148209][ T4547] loop3: detected capacity change from 0 to 64 [ 73.173351][ T4520] XFS (loop4): Mounting V5 Filesystem [ 73.286238][ T4374] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 73.300648][ T4558] process 'syz.0.118' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 73.325656][ T4374] cdc_ncm 3-1:1.0: bind() failure [ 73.376544][ T4374] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 73.414600][ T4374] cdc_ncm 3-1:1.1: bind() failure [ 73.427002][ T4520] XFS (loop4): Ending clean mount [ 73.439814][ T4520] XFS (loop4): Quotacheck needed: Please wait. [ 73.468894][ T4374] usb 3-1: USB disconnect, device number 2 [ 73.532160][ T4561] netlink: 260 bytes leftover after parsing attributes in process `syz.0.119'. [ 73.557353][ T4520] XFS (loop4): Quotacheck: Done. [ 73.763025][ T4183] XFS (loop4): Unmounting Filesystem [ 74.034913][ T4374] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.164895][ T4375] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 74.165353][ T4575] autofs4:pid:4575:autofs_fill_super: pipe file descriptor does not contain proper ops [ 74.304780][ T4374] usb 4-1: Using ep0 maxpacket: 8 [ 74.370646][ T4567] loop0: detected capacity change from 0 to 32768 [ 74.425008][ T4374] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 74.464911][ T4567] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.123 (4567) [ 74.485124][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.507706][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.520465][ T4374] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.542057][ T4375] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.553542][ T4375] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 74.564909][ T4374] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.575002][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.610117][ T4567] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 74.631554][ T4567] BTRFS info (device loop0): setting nodatacow, compression disabled [ 74.640688][ T4567] BTRFS info (device loop0): setting datacow [ 74.675358][ T4567] BTRFS info (device loop0): doing ref verification [ 74.692528][ T4567] BTRFS info (device loop0): force clearing of disk cache [ 74.716234][ T4567] BTRFS info (device loop0): turning off barriers [ 74.722710][ T4567] BTRFS info (device loop0): enabling ssd optimizations [ 74.736488][ T4375] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.754011][ T4375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.762927][ T4567] BTRFS info (device loop0): using spread ssd allocation scheme [ 74.770735][ T4375] usb 2-1: Product: syz [ 74.775791][ T4567] BTRFS info (device loop0): using free space tree [ 74.782399][ T4375] usb 2-1: Manufacturer: syz [ 74.788211][ T4567] BTRFS info (device loop0): has skinny extents [ 74.795695][ T4375] usb 2-1: SerialNumber: syz [ 74.864958][ T4374] usb 4-1: GET_CAPABILITIES returned 0 [ 74.870540][ T4374] usbtmc 4-1:16.0: can't read capabilities [ 74.979739][ T4567] BTRFS info (device loop0): clearing free space tree [ 75.024153][ T4567] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.040106][ T4571] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 75.101507][ T4567] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.117849][ T4374] usb 4-1: USB disconnect, device number 4 [ 75.265540][ T4567] BTRFS info (device loop0): creating free space tree [ 75.278864][ T4567] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.291656][ T4567] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.696029][ T4625] loop3: detected capacity change from 0 to 512 [ 75.755614][ T4375] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 75.764009][ T4625] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 75.795002][ T4375] cdc_ncm 2-1:1.0: bind() failure [ 75.824158][ T4375] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 75.835583][ T4625] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 75.849270][ T4375] cdc_ncm 2-1:1.1: bind() failure [ 75.898585][ T4375] usb 2-1: USB disconnect, device number 4 [ 76.121932][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 76.210777][ T4643] loop3: detected capacity change from 0 to 512 [ 76.354855][ T4375] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.386096][ T4643] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.457241][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 76.475409][ T4643] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.598051][ T4375] usb 3-1: Using ep0 maxpacket: 32 [ 76.715111][ T4375] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 76.740294][ T4375] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 76.777331][ T4375] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 76.777639][ T4655] loop4: detected capacity change from 0 to 32768 [ 76.793359][ T4375] usb 3-1: config 1 has no interface number 0 [ 76.802917][ T4375] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.824066][ T4375] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 76.862038][ T4375] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 76.880515][ T4655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.152 (4655) [ 76.911322][ T4375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.938241][ T4666] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.964532][ T4655] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 76.994717][ T4655] BTRFS info (device loop4): setting nodatacow, compression disabled [ 76.998492][ T4375] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 77.019758][ T4655] BTRFS info (device loop4): doing ref verification [ 77.055249][ T4655] BTRFS info (device loop4): turning off barriers [ 77.081638][ T4655] BTRFS info (device loop4): enabling ssd optimizations [ 77.097161][ T4655] BTRFS info (device loop4): using spread ssd allocation scheme [ 77.117488][ T4655] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 77.161947][ T4655] BTRFS info (device loop4): force lzo compression, level 0 [ 77.200928][ T4655] BTRFS info (device loop4): turning on sync discard [ 77.215877][ T4375] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 77.222894][ T4655] BTRFS info (device loop4): using free space tree [ 77.259764][ T4655] BTRFS info (device loop4): has skinny extents [ 77.560261][ T4658] loop1: detected capacity change from 0 to 40427 [ 77.607772][ T4665] loop3: detected capacity change from 0 to 32768 [ 77.622819][ T4658] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 77.638885][ T4695] netlink: 196 bytes leftover after parsing attributes in process `syz.0.159'. [ 77.645167][ T4658] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 77.653481][ T4695] netlink: 196 bytes leftover after parsing attributes in process `syz.0.159'. [ 77.678854][ T4695] netlink: 19 bytes leftover after parsing attributes in process `syz.0.159'. [ 77.786200][ T4665] XFS (loop3): Mounting V5 Filesystem [ 77.792832][ T4658] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.971803][ T4665] XFS (loop3): Ending clean mount [ 77.974278][ T4658] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 77.996171][ T4665] XFS (loop3): Quotacheck needed: Please wait. [ 78.005166][ T4658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.227630][ T4713] loop0: detected capacity change from 0 to 128 [ 78.263661][ T4665] XFS (loop3): Quotacheck: Done. [ 78.299945][ T4216] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 78.351402][ T4713] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 78.366921][ T4264] usb 3-1: USB disconnect, device number 3 [ 78.376445][ T4264] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 78.427960][ T4713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.504435][ T4173] XFS (loop3): Unmounting Filesystem [ 78.540941][ T4713] autofs4:pid:4713:autofs_fill_super: pipe file descriptor does not contain proper ops [ 78.829563][ T4725] loop0: detected capacity change from 0 to 512 [ 78.924794][ T4725] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.983174][ T4725] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.061263][ T4729] loop4: detected capacity change from 0 to 512 [ 79.069640][ T4725] EXT4-fs (loop0): 1 truncate cleaned up [ 79.116371][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.142529][ T4725] fscrypt (loop0, inode 18): Direct key flag not allowed with different contents and filenames modes [ 79.223906][ T4729] EXT4-fs (loop4): Ignoring removed nobh option [ 79.250761][ T4729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.313461][ T4729] EXT4-fs (loop4): 1 truncate cleaned up [ 79.350244][ T4729] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 79.462593][ T4731] loop2: detected capacity change from 0 to 32768 [ 79.512160][ T4731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.171 (4731) [ 79.608077][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 79.641577][ T4731] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 79.658483][ T4750] loop1: detected capacity change from 0 to 2048 [ 79.684290][ T4731] BTRFS info (device loop2): setting nodatasum [ 79.692717][ T4731] BTRFS info (device loop2): enabling auto defrag [ 79.717501][ T4731] BTRFS info (device loop2): disabling tree log [ 79.739999][ T4750] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 79.756724][ T4731] BTRFS info (device loop2): using free space tree [ 79.770323][ T4754] loop3: detected capacity change from 0 to 512 [ 79.777194][ T4731] BTRFS info (device loop2): has skinny extents [ 79.799068][ T4750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.833843][ T4754] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.899544][ T4767] loop0: detected capacity change from 0 to 256 [ 79.920269][ T4761] loop4: detected capacity change from 0 to 4096 [ 79.925088][ T4754] EXT4-fs (loop3): 1 truncate cleaned up [ 79.957467][ T4754] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 79.987515][ T4761] __ntfs_warning: 17 callbacks suppressed [ 79.987533][ T4761] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 80.058282][ T4767] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 80.072268][ T4767] FAT-fs (loop0): Filesystem has been set read-only [ 80.079878][ T4767] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 80.093475][ T4767] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 80.114016][ T4731] BTRFS info (device loop2): enabling ssd optimizations [ 80.309850][ T4761] ntfs: volume version 3.1. [ 80.397472][ T4783] loop3: detected capacity change from 0 to 512 [ 80.467196][ T4761] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 80.611594][ T4761] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 80.771761][ T4783] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 80.789683][ T4783] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.846383][ T144] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 80.890869][ T4375] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.904398][ T4794] hid-generic 0005:0B57:0006.0002: item fetching failed at offset 0/2 [ 80.942048][ T4794] hid-generic: probe of 0005:0B57:0006.0002 failed with error -22 [ 81.275049][ T4375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.299545][ T4375] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.478838][ T4375] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 81.498373][ T1110] cfg80211: failed to load regulatory.db [ 81.516740][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.533706][ T4375] usb 1-1: Product: syz [ 81.538478][ T4375] usb 1-1: Manufacturer: syz [ 81.543098][ T4375] usb 1-1: SerialNumber: syz [ 81.556866][ T4375] usb 1-1: config 0 descriptor?? [ 81.597027][ T4375] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 81.605037][ T4794] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 81.623477][ T4375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.654189][ T4375] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 81.674767][ T4216] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.683249][ T4375] usb 1-1: media controller created [ 81.719431][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.786790][ T4375] DVB: Unable to find symbol tda10046_attach() [ 81.787553][ T4796] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.793345][ T4375] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 81.822574][ T4375] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 81.867645][ T4824] loop2: detected capacity change from 0 to 32768 [ 81.874764][ T4794] usb 4-1: Using ep0 maxpacket: 16 [ 81.934952][ T4216] usb 2-1: Using ep0 maxpacket: 8 [ 81.989221][ T4824] XFS (loop2): Mounting V5 Filesystem [ 82.005428][ T4794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.016745][ T4794] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 82.030086][ T4794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.053679][ T4794] usb 4-1: config 0 descriptor?? [ 82.059338][ T4216] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 82.074515][ T4216] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.087319][ T4216] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.107081][ T4796] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 82.155133][ T4824] XFS (loop2): Ending clean mount [ 82.174868][ T4216] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 82.190073][ T4216] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.205238][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.212290][ T4216] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.214153][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.250282][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.307368][ T4375] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 82.314912][ T4216] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 82.322424][ T4216] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 82.338526][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.343813][ T4375] usb 1-1: USB disconnect, device number 2 [ 82.359799][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.382859][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.384543][ T4216] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.473954][ T4184] XFS (loop2): Unmounting Filesystem [ 82.485731][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.495439][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.507217][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.588226][ T4794] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 82.615500][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.625617][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.653535][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.674919][ T4216] usb 2-1: string descriptor 0 read error: -22 [ 82.682971][ T4216] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.704428][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.744801][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.753820][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.786584][ T4216] adutux 2-1:168.0: interrupt endpoints not found [ 82.793196][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.900911][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.911368][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.927355][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.015536][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.034109][ T4216] usb 2-1: USB disconnect, device number 5 [ 83.034706][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.071631][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.082035][ T4218] usb 4-1: USB disconnect, device number 5 [ 83.154963][ T4794] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.184894][ T4796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.193905][ T4796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.205806][ T4796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.253136][ T4850] loop0: detected capacity change from 0 to 32768 [ 83.323920][ T4850] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.206 (4850) [ 83.353148][ T4850] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 83.377477][ T4850] BTRFS info (device loop0): using free space tree [ 83.384384][ T4850] BTRFS info (device loop0): has skinny extents [ 83.394896][ T4796] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.405218][ T4796] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.413815][ T4796] usb 5-1: Product: syz [ 83.422110][ T4796] usb 5-1: Manufacturer: syz [ 83.427094][ T4794] usb 3-1: Using ep0 maxpacket: 16 [ 83.432661][ T4796] usb 5-1: SerialNumber: syz [ 83.452996][ T4796] usb 5-1: config 0 descriptor?? [ 83.484321][ T4850] BTRFS info (device loop0): enabling ssd optimizations [ 83.513239][ T4796] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 83.565697][ T4794] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.590394][ T4794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.639005][ T4794] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 83.653226][ T4794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.696008][ T4794] usb 3-1: config 0 descriptor?? [ 83.919758][ T4796] usb 5-1: USB disconnect, device number 2 [ 83.925861][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 83.957190][ T4876] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 83.981647][ T4796] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 84.198169][ T4794] cherry 0003:046A:0023.0004: unexpected long global item [ 84.221334][ T4794] cherry: probe of 0003:046A:0023.0004 failed with error -22 [ 84.409252][ T4374] usb 3-1: USB disconnect, device number 4 [ 84.644246][ T4878] loop1: detected capacity change from 0 to 32768 [ 84.727726][ T4878] XFS: attr2 mount option is deprecated. [ 84.738517][ T4878] XFS: ikeep mount option is deprecated. [ 84.746218][ T4878] XFS: noikeep mount option is deprecated. [ 84.761285][ T4890] loop4: detected capacity change from 0 to 1024 [ 84.859674][ T4878] XFS (loop1): Mounting V5 Filesystem [ 84.867452][ T4890] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.898931][ T4882] loop0: detected capacity change from 0 to 32768 [ 84.945515][ T4882] XFS: ikeep mount option is deprecated. [ 85.106911][ T4882] XFS (loop0): Mounting V5 Filesystem [ 85.143359][ T4878] XFS (loop1): Ending clean mount [ 85.154301][ T4888] loop3: detected capacity change from 0 to 32768 [ 85.186407][ T4878] XFS (loop1): Quotacheck needed: Please wait. [ 85.229631][ T4882] XFS (loop0): Ending clean mount [ 85.243510][ T4882] XFS (loop0): Quotacheck needed: Please wait. [ 85.350112][ T4878] XFS (loop1): Quotacheck: Done. [ 85.373785][ T4888] XFS (loop3): Mounting V5 Filesystem [ 85.420456][ T4882] XFS (loop0): Quotacheck: Done. [ 85.449080][ T26] audit: type=1800 audit(1742596500.253:10): pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.211" name="file1" dev="loop1" ino=1062 res=0 errno=0 [ 85.546895][ T4888] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 85.550966][ T4174] XFS (loop1): Unmounting Filesystem [ 85.619126][ T4888] XFS (loop3): Starting recovery (logdev: internal) [ 85.676549][ T4179] XFS (loop0): Unmounting Filesystem [ 85.731565][ T4888] XFS (loop3): Ending recovery (logdev: internal) [ 86.028607][ T4945] loop4: detected capacity change from 0 to 8 [ 86.349010][ T4945] SQUASHFS error: Unable to read inode 0x24 [ 86.433620][ T4173] XFS (loop3): Unmounting Filesystem [ 86.534370][ T4957] sctp: [Deprecated]: syz.2.233 (pid 4957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.534370][ T4957] Use struct sctp_sack_info instead [ 87.472969][ T4988] netlink: 'syz.4.246': attribute type 39 has an invalid length. [ 87.622346][ T4965] loop1: detected capacity change from 0 to 32768 [ 87.623572][ T4968] loop2: detected capacity change from 0 to 32768 [ 87.695612][ T4968] XFS: ikeep mount option is deprecated. [ 87.708223][ T4965] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.236 (4965) [ 87.787489][ T4996] loop4: detected capacity change from 0 to 1024 [ 87.814471][ T4968] XFS (loop2): Mounting V5 Filesystem [ 87.822904][ T4965] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 87.845102][ T4965] BTRFS info (device loop1): force clearing of disk cache [ 87.863006][ T4965] BTRFS info (device loop1): force zlib compression, level 3 [ 87.872165][ T4965] BTRFS info (device loop1): enabling auto defrag [ 87.893331][ T4965] BTRFS info (device loop1): max_inline at 0 [ 87.908718][ T4965] BTRFS info (device loop1): enabling disk space caching [ 87.919223][ T4965] BTRFS info (device loop1): disk space caching is enabled [ 87.948550][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,noblock_validity,noauto_da_alloc,i_version,max_batch_time=0x0000000000000001,resgid=0x0000000000000000,grpquota,sysvgroups,,errors=continue. Quota mode: writeback. [ 88.003221][ T4965] BTRFS info (device loop1): has skinny extents [ 88.156930][ T5011] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz.4.249: attempt to clear invalid blocks 1634560256 len 1 [ 88.223624][ T4968] XFS (loop2): Ending clean mount [ 88.253650][ T4968] XFS (loop2): Quotacheck needed: Please wait. [ 88.322193][ T4977] loop0: detected capacity change from 0 to 32768 [ 88.326413][ T4992] loop3: detected capacity change from 0 to 40427 [ 88.341430][ T4965] BTRFS info (device loop1): enabling ssd optimizations [ 88.395108][ T4965] BTRFS info (device loop1): clearing free space tree [ 88.404276][ T4965] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.419537][ T4968] XFS (loop2): Quotacheck: Done. [ 88.475365][ T4965] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.510309][ T4977] XFS (loop0): Mounting V5 Filesystem [ 88.531490][ T4992] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.658026][ T4184] XFS (loop2): Unmounting Filesystem [ 88.692812][ T5038] capability: warning: `syz.4.250' uses deprecated v2 capabilities in a way that may be insecure [ 88.773145][ T5038] tipc: Started in network mode [ 88.776433][ T4977] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 88.816225][ T5038] tipc: Node identity ac1414aa, cluster identity 4711 [ 88.864498][ T5038] tipc: Enabling of bearer rejected, failed to enable media [ 88.897306][ T4992] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.962678][ T4977] XFS (loop0): Starting recovery (logdev: internal) [ 89.032056][ T4977] XFS (loop0): Ending recovery (logdev: internal) [ 89.301609][ T4173] attempt to access beyond end of device [ 89.301609][ T4173] loop3: rw=2049, want=45104, limit=40427 [ 89.754027][ T4179] XFS (loop0): Unmounting Filesystem [ 90.053588][ T5041] loop4: detected capacity change from 0 to 40427 [ 90.055536][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.086791][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.093998][ T5054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.118520][ T5054] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 90.154705][ T5041] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 90.165647][ T5052] loop3: detected capacity change from 0 to 8192 [ 90.171698][ T5041] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.253191][ T5052] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 90.279970][ T5041] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.324401][ T5052] REISERFS (device loop3): using ordered data mode [ 90.356641][ T5061] loop2: detected capacity change from 0 to 256 [ 90.389936][ T5052] reiserfs: using flush barriers [ 90.434876][ T26] audit: type=1326 audit(1742596505.233:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 90.475039][ T5052] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.548134][ T26] audit: type=1326 audit(1742596505.233:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 90.574092][ T5041] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.585980][ T5052] REISERFS (device loop3): checking transaction log (loop3) [ 90.602062][ T5041] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.619946][ T26] audit: type=1326 audit(1742596505.233:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 90.698554][ T26] audit: type=1326 audit(1742596505.233:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 90.766843][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 90.844858][ T26] audit: type=1326 audit(1742596505.233:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 90.870400][ T4183] attempt to access beyond end of device [ 90.870400][ T4183] loop4: rw=2049, want=45104, limit=40427 [ 90.903160][ T26] audit: type=1326 audit(1742596505.233:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 90.971469][ T5052] REISERFS (device loop3): Using tea hash to sort names [ 90.983197][ T5069] loop2: detected capacity change from 0 to 8 [ 91.001034][ T5052] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 91.023945][ T26] audit: type=1326 audit(1742596505.233:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 91.046315][ T5059] loop0: detected capacity change from 0 to 32768 [ 91.057046][ T5052] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 91.077251][ T26] audit: type=1326 audit(1742596505.233:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 91.323294][ T5059] XFS (loop0): Mounting V5 Filesystem [ 91.354863][ T26] audit: type=1326 audit(1742596505.233:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 91.397250][ T26] audit: type=1326 audit(1742596505.233:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 91.421439][ T26] audit: type=1326 audit(1742596505.233:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f035e169 code=0x7fc00000 [ 91.546164][ T5087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.269'. [ 91.643642][ T5059] XFS (loop0): Ending clean mount [ 91.680207][ T5059] XFS (loop0): Quotacheck needed: Please wait. [ 91.794669][ T5059] XFS (loop0): Quotacheck: Done. [ 91.978254][ T4179] XFS (loop0): Unmounting Filesystem [ 92.077095][ T5084] loop1: detected capacity change from 0 to 32768 [ 92.272922][ T5084] XFS (loop1): Mounting V5 Filesystem [ 92.358756][ T5118] netlink: 60 bytes leftover after parsing attributes in process `syz.4.279'. [ 92.368376][ T5043] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.375606][ T5118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.279'. [ 92.440660][ T5084] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 92.492753][ T5084] XFS (loop1): Starting recovery (logdev: internal) [ 92.524851][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.569398][ T5122] loop0: detected capacity change from 0 to 256 [ 92.573628][ T5084] XFS (loop1): Ending recovery (logdev: internal) [ 92.636685][ T5122] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.686698][ T5126] loop4: detected capacity change from 0 to 128 [ 92.738975][ T5043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.752840][ T5043] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 92.769445][ T5043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.780990][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 92.787320][ T5126] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 92.797126][ T5043] usb 3-1: config 0 descriptor?? [ 92.843439][ T5126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.907446][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.955320][ T21] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.971581][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.984068][ T21] usb 4-1: config 0 descriptor?? [ 93.058376][ T5130] loop0: detected capacity change from 0 to 256 [ 93.257743][ T21] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 93.280689][ T5136] loop4: detected capacity change from 0 to 256 [ 93.297002][ T5043] holtek_mouse 0003:04D9:A070.0005: unbalanced collection at end of report description [ 93.313526][ T5043] holtek_mouse 0003:04D9:A070.0005: hid parse failed: -22 [ 93.342783][ T5043] holtek_mouse: probe of 0003:04D9:A070.0005 failed with error -22 [ 93.362806][ T5136] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 93.405285][ T5136] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 93.410514][ T4174] XFS (loop1): Unmounting Filesystem [ 93.544986][ T5043] usb 3-1: USB disconnect, device number 5 [ 93.561561][ T21] usb 4-1: USB disconnect, device number 6 [ 93.650610][ T5146] loop0: detected capacity change from 0 to 1024 [ 93.728232][ T5146] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.776588][ T5146] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 93.853561][ T5146] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.875019][ T5146] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.875019][ T5146] [ 93.885438][ T5146] EXT4-fs (loop0): Total free blocks count 0 [ 93.891549][ T5146] EXT4-fs (loop0): Free/Dirty block details [ 93.898492][ T5146] EXT4-fs (loop0): free_blocks=68451041280 [ 93.904910][ T5146] EXT4-fs (loop0): dirty_blocks=80 [ 93.910509][ T5146] EXT4-fs (loop0): Block reservation details [ 93.917889][ T5146] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 93.929345][ T5150] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 93.960152][ T5150] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.960152][ T5150] [ 94.939756][ T5178] loop2: detected capacity change from 0 to 1024 [ 95.164638][ C1] sched: RT throttling activated [ 95.559246][ T5168] loop4: detected capacity change from 0 to 32768 [ 96.058191][ T5162] loop3: detected capacity change from 0 to 262144 [ 96.164356][ T5162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.272443][ T5162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.297009][ T5216] PKCS7: Unknown OID: [5] (bad) [ 96.302900][ T5216] PKCS7: Only support pkcs7_signedData type [ 96.303968][ T5168] XFS (loop4): Mounting V5 Filesystem [ 96.373422][ T5214] raw_sendmsg: syz.2.312 forgot to set AF_INET. Fix it! [ 96.528150][ T5168] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 96.613150][ T5168] XFS (loop4): Starting recovery (logdev: internal) [ 96.621809][ T5229] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 96.674929][ T4212] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.676280][ T5168] XFS (loop4): Ending recovery (logdev: internal) [ 96.777623][ T5233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.814012][ T5235] loop1: detected capacity change from 0 to 256 [ 96.840014][ T5235] exfat: Deprecated parameter 'namecase' [ 96.921188][ T5235] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 96.925169][ T4212] usb 1-1: Using ep0 maxpacket: 32 [ 97.105736][ T4212] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.195511][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 97.385031][ T4212] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 97.410754][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.426178][ T5240] loop2: detected capacity change from 0 to 32768 [ 97.454842][ T4212] usb 1-1: Product: syz [ 97.459233][ T4212] usb 1-1: Manufacturer: syz [ 97.464079][ T4212] usb 1-1: SerialNumber: syz [ 97.475955][ T4212] usb 1-1: config 0 descriptor?? [ 97.603426][ T4183] XFS (loop4): Unmounting Filesystem [ 97.622935][ T5240] XFS (loop2): Mounting V5 Filesystem [ 97.746933][ T4212] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 97.753212][ T5240] XFS (loop2): Ending clean mount [ 97.795706][ T5240] XFS (loop2): Quotacheck needed: Please wait. [ 97.854938][ T4212] input: failed to attach handler mousedev to device input5, error: -5 [ 97.935355][ T5240] XFS (loop2): Quotacheck: Done. [ 97.979708][ T4212] usb 1-1: USB disconnect, device number 3 [ 98.093309][ T4184] XFS (loop2): Unmounting Filesystem [ 98.670492][ T5274] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 99.073858][ T5293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 99.117552][ T5293] bridge0: port 3(vlan2) entered blocking state [ 99.155363][ T5293] bridge0: port 3(vlan2) entered disabled state [ 99.503819][ T5265] loop4: detected capacity change from 0 to 40427 [ 99.534878][ T4212] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.713558][ T5265] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.784831][ T4212] usb 4-1: Using ep0 maxpacket: 8 [ 99.874184][ T5320] loop1: detected capacity change from 0 to 8192 [ 99.887457][ T5265] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 99.895449][ T5265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.905076][ T4212] usb 4-1: config 0 has no interfaces? [ 99.965151][ T5327] loop0: detected capacity change from 0 to 2048 [ 100.005003][ T5330] loop2: detected capacity change from 0 to 4096 [ 100.065959][ T5330] NILFS (loop2): invalid segment: Checksum error in segment payload [ 100.074999][ T4212] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.084064][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.093498][ T5331] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.117953][ T5330] NILFS (loop2): trying rollback from an earlier position [ 100.126191][ T4212] usb 4-1: Product: syz [ 100.130452][ T4212] usb 4-1: Manufacturer: syz [ 100.146819][ T4212] usb 4-1: SerialNumber: syz [ 100.163364][ T5330] NILFS (loop2): recovery complete [ 100.170148][ T4212] usb 4-1: config 0 descriptor?? [ 100.203127][ T5332] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.274063][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 100.274080][ T26] audit: type=1800 audit(1742596515.073:57): pid=5330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.364" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 100.457930][ T5043] usb 4-1: USB disconnect, device number 7 [ 100.527935][ T5335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 100.803927][ T5344] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 100.841402][ T5346] mmap: syz.1.368 (5346) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 100.854532][ T5344] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 101.041681][ T5350] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 101.243220][ T5357] loop2: detected capacity change from 0 to 1764 [ 101.729895][ T5342] loop0: detected capacity change from 0 to 32768 [ 101.825397][ T5376] loop3: detected capacity change from 0 to 2048 [ 101.951650][ T5342] XFS (loop0): Mounting V5 Filesystem [ 101.982446][ T5376] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 101.995119][ T5376] UDF-fs: Scanning with blocksize 512 failed [ 102.063066][ T5376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.192579][ T5342] XFS (loop0): Ending clean mount [ 102.320253][ T4212] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.331970][ T4179] XFS (loop0): Unmounting Filesystem [ 102.561496][ T5341] loop4: detected capacity change from 0 to 65536 [ 102.584714][ T4212] usb 2-1: Using ep0 maxpacket: 16 [ 102.603787][ T5412] loop3: detected capacity change from 0 to 2048 [ 102.705085][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.738224][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.812849][ T4212] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 102.836593][ T5419] loop2: detected capacity change from 0 to 1024 [ 102.882107][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.922038][ T5341] XFS (loop4): Mounting V5 Filesystem [ 102.929015][ T4212] usb 2-1: config 0 descriptor?? [ 103.059780][ T5341] XFS (loop4): Ending clean mount [ 103.375042][ T4183] XFS (loop4): Unmounting Filesystem [ 103.426962][ T4212] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 103.444799][ T4212] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 103.464778][ T4212] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 103.472230][ T4212] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 103.514707][ T4212] konepure 0003:1E7D:2DB4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 103.658330][ T4212] usb 2-1: USB disconnect, device number 6 [ 103.775728][ T5445] loop0: detected capacity change from 0 to 32768 [ 104.653486][ T5474] loop3: detected capacity change from 0 to 2048 [ 104.972778][ T5474] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.987942][ T5484] loop1: detected capacity change from 0 to 32768 [ 105.045118][ T5474] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.073851][ T5484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.426 (5484) [ 105.134779][ T5484] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 105.143956][ T5484] BTRFS info (device loop1): force clearing of disk cache [ 105.151876][ T5484] BTRFS info (device loop1): force zlib compression, level 3 [ 105.159865][ T5484] BTRFS info (device loop1): enabling auto defrag [ 105.166788][ T5474] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 105.167931][ T5484] BTRFS info (device loop1): max_inline at 0 [ 105.185794][ T5484] BTRFS info (device loop1): enabling disk space caching [ 105.193110][ T5484] BTRFS info (device loop1): disk space caching is enabled [ 105.200664][ T5484] BTRFS info (device loop1): has skinny extents [ 105.233286][ T5474] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.233286][ T5474] [ 105.370473][ T5474] EXT4-fs (loop3): Total free blocks count 0 [ 105.464811][ T5484] BTRFS info (device loop1): enabling ssd optimizations [ 105.475045][ T5484] BTRFS info (device loop1): clearing free space tree [ 105.482004][ T5484] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.491886][ T5484] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.502266][ T5474] EXT4-fs (loop3): Free/Dirty block details [ 105.575372][ T5474] EXT4-fs (loop3): free_blocks=2415919104 [ 105.581422][ T5474] EXT4-fs (loop3): dirty_blocks=16 [ 105.634755][ T5474] EXT4-fs (loop3): Block reservation details [ 105.647385][ T5474] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 105.774256][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.841899][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.841899][ T9] [ 106.399147][ T5515] loop4: detected capacity change from 0 to 40427 [ 106.501788][ T5515] F2FS-fs (loop4): invalid crc value [ 106.569832][ T5515] F2FS-fs (loop4): Found nat_bits in checkpoint [ 106.596732][ T5532] loop3: detected capacity change from 0 to 4096 [ 106.726521][ T5532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.803615][ T5515] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 106.833928][ T5532] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 106.909517][ T5537] loop1: detected capacity change from 0 to 8192 [ 106.997421][ T5525] loop0: detected capacity change from 0 to 40427 [ 107.075539][ T4270] attempt to access beyond end of device [ 107.075539][ T4270] loop4: rw=2049, want=40984, limit=40427 [ 107.076484][ T5525] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.126779][ T5525] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.128734][ T5536] loop2: detected capacity change from 0 to 32768 [ 107.161342][ T5525] F2FS-fs (loop0): invalid crc value [ 107.265422][ T5525] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.269904][ T5548] loop3: detected capacity change from 0 to 128 [ 107.374523][ T5536] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.410035][ T5536] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 107.521018][ T5536] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.560726][ T5536] OCFS2: File system is now read-only. [ 107.568382][ T5536] (syz.2.439,5536,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 107.583564][ T5525] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.596861][ T5525] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.619356][ T5536] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 107.695477][ T5536] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.787898][ T5565] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.794926][ T5536] (syz.2.439,5536,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 107.797467][ T5565] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.814411][ T5565] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.823200][ T5565] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.939293][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 108.010742][ T5565] Zero length message leads to an empty skb [ 108.839776][ T5573] loop1: detected capacity change from 0 to 32768 [ 108.871032][ T5043] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.902736][ T5573] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.452 (5573) [ 108.991981][ T5573] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 109.054939][ T5573] BTRFS info (device loop1): enabling ssd optimizations [ 109.066196][ T5573] BTRFS info (device loop1): turning off barriers [ 109.082958][ T5573] BTRFS info (device loop1): use no compression [ 109.102940][ T5573] BTRFS info (device loop1): using free space tree [ 109.124980][ T5043] usb 5-1: Using ep0 maxpacket: 8 [ 109.130094][ T5573] BTRFS info (device loop1): has skinny extents [ 109.169540][ T5609] loop3: detected capacity change from 0 to 764 [ 109.244861][ T5043] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.252811][ T5043] usb 5-1: no configurations [ 109.265130][ T5043] usb 5-1: can't read configurations, error -22 [ 109.303334][ T5609] rock: directory entry would overflow storage [ 109.310230][ T5609] rock: sig=0x4654, size=5, remaining=4 [ 109.468093][ T5637] netlink: 2 bytes leftover after parsing attributes in process `syz.2.470'. [ 109.730761][ T5645] tun0: tun_chr_ioctl cmd 1074025681 [ 109.912649][ T5653] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 110.226398][ T4715] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.301814][ T5673] input: syz0 as /devices/virtual/input/input6 [ 110.305766][ T5674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.410412][ T5677] loop2: detected capacity change from 0 to 512 [ 110.495200][ T4715] usb 1-1: Using ep0 maxpacket: 32 [ 110.509645][ T5677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.572030][ T5677] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.636037][ T4715] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 110.655344][ T5677] EXT4-fs (loop2): 1 truncate cleaned up [ 110.662190][ T5677] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 110.673591][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 110.692517][ T4715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.707316][ T4715] usb 1-1: config 0 descriptor?? [ 110.724048][ T5693] binder: 5688:5693 ioctl c0306201 2000000001c0 returned -11 [ 110.740499][ T5692] device macsec0 entered promiscuous mode [ 110.767891][ T4715] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 110.826534][ T4715] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.863413][ T4715] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 110.888110][ T4715] usb 1-1: media controller created [ 110.902424][ T5700] loop4: detected capacity change from 0 to 256 [ 110.929385][ T4715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.001484][ T4715] usb 1-1: selecting invalid altsetting 1 [ 111.019708][ T4715] set interface failed [ 111.020433][ T4715] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 111.042880][ T4715] error writing reg: 0xff, val: 0x00 [ 111.084509][ T5700] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.103219][ T4715] dvb_usb_mxl111sf: probe of 1-1:0.0 failed with error -22 [ 111.136133][ T4715] usb 1-1: USB disconnect, device number 4 [ 111.210237][ T5700] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 111.459637][ T5718] loop4: detected capacity change from 0 to 16 [ 111.503229][ T5720] loop3: detected capacity change from 0 to 512 [ 111.567826][ T5718] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.639127][ T5720] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.507: corrupted inode contents [ 111.657263][ T5727] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 111.705232][ T5720] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #3: comm syz.3.507: mark_inode_dirty error [ 111.773516][ T5720] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.507: corrupted inode contents [ 111.832458][ T5720] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.507: mark_inode_dirty error [ 111.949061][ T5720] Quota error (device loop3): write_blk: dquota write failed [ 111.974388][ T5720] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 111.995308][ T5720] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.507: Failed to acquire dquot type 0 [ 112.063877][ T5720] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.507: corrupted inode contents [ 112.135375][ T5720] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.507: mark_inode_dirty error [ 112.192658][ T5720] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.507: corrupted inode contents [ 112.231399][ T5720] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.507: mark_inode_dirty error [ 112.244362][ T5737] loop4: detected capacity change from 0 to 8192 [ 112.272602][ T5720] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.507: corrupted inode contents [ 112.289395][ T5736] loop2: detected capacity change from 0 to 8192 [ 112.316301][ T5720] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 112.331431][ T5737] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 112.342884][ T5720] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.507: corrupted inode contents [ 112.351852][ T5737] REISERFS (device loop4): using ordered data mode [ 112.368231][ T5737] reiserfs: using flush barriers [ 112.377056][ T5722] loop0: detected capacity change from 0 to 32768 [ 112.384121][ T5737] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.404293][ T5737] REISERFS (device loop4): checking transaction log (loop4) [ 112.413903][ T5736] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 112.418958][ T5737] REISERFS (device loop4): Using r5 hash to sort names [ 112.425780][ T5720] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.507: mark_inode_dirty error [ 112.435217][ T5736] REISERFS (device loop2): using ordered data mode [ 112.474869][ T5720] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 112.497477][ T5736] reiserfs: using flush barriers [ 112.512575][ T5737] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 112.526062][ T5736] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.535250][ T5720] EXT4-fs (loop3): 1 truncate cleaned up [ 112.550866][ T5737] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 112.558101][ T5736] REISERFS (device loop2): checking transaction log (loop2) [ 112.566116][ T5720] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x000000000000d353,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 112.588873][ T5736] REISERFS (device loop2): Using r5 hash to sort names [ 112.599594][ T5736] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 112.679486][ T5720] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.051583][ T5745] loop1: detected capacity change from 0 to 2048 [ 113.104461][ T5748] loop3: detected capacity change from 0 to 512 [ 113.169228][ T5745] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 113.208084][ T5748] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.519: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 113.231023][ T5745] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,auto_da_alloc,,errors=continue. Quota mode: none. [ 113.267335][ T5748] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.519: couldn't read orphan inode 15 (err -117) [ 113.302418][ T5745] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 113.354056][ T5748] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.405468][ T5748] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.594050][ T5769] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.519: Directory hole found for htree leaf block 0 [ 113.982140][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 113.984347][ T5778] loop4: detected capacity change from 0 to 4096 [ 114.837730][ T5800] loop4: detected capacity change from 0 to 512 [ 114.962611][ T5800] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.537: bad orphan inode 13 [ 114.985368][ T5800] ext4_test_bit(bit=12, block=4) = 1 [ 114.990703][ T5800] is_bad_inode(inode)=0 [ 115.022527][ T5800] NEXT_ORPHAN(inode)=0 [ 115.054749][ T5800] max_ino=32 [ 115.058756][ T5800] i_nlink=1 [ 115.061976][ T5800] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.115239][ T5780] loop1: detected capacity change from 0 to 32768 [ 115.142868][ T5800] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.537: Unrecognised inode hash code 20 [ 115.162890][ T5775] loop2: detected capacity change from 0 to 40427 [ 115.175702][ T5800] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.537: Corrupt directory, running e2fsck is recommended [ 115.203056][ T5800] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.537: path /112/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 115.249614][ T5775] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 115.298589][ T5775] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.353430][ T5800] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.537: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 115.355569][ T5775] F2FS-fs (loop2): invalid crc value [ 115.390239][ T5798] loop0: detected capacity change from 0 to 32768 [ 115.582844][ T5775] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.593342][ T5798] XFS (loop0): Mounting V5 Filesystem [ 115.691592][ T5816] sctp: [Deprecated]: syz.1.539 (pid 5816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.691592][ T5816] Use struct sctp_sack_info instead [ 115.800658][ T5798] XFS (loop0): Ending clean mount [ 115.850619][ T5798] XFS (loop0): Quotacheck needed: Please wait. [ 115.865104][ T5775] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.879532][ T5791] loop3: detected capacity change from 0 to 40427 [ 115.889681][ T5775] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.939205][ T5791] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 115.945076][ T5798] XFS (loop0): Quotacheck: Done. [ 115.994910][ T5791] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 116.095760][ T4184] attempt to access beyond end of device [ 116.095760][ T4184] loop2: rw=2049, want=45104, limit=40427 [ 116.141562][ T5791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.156254][ T4179] XFS (loop0): Unmounting Filesystem [ 116.435478][ T5791] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.452928][ T5791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.542749][ T5824] attempt to access beyond end of device [ 116.542749][ T5824] loop3: rw=2049, want=45104, limit=40427 [ 116.873362][ T5836] loop4: detected capacity change from 0 to 1024 [ 117.038389][ T5840] loop2: detected capacity change from 0 to 2048 [ 117.059654][ T5836] EXT4-fs (loop4): Ignoring removed orlov option [ 117.079207][ T5836] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 117.111559][ T5830] loop1: detected capacity change from 0 to 32768 [ 117.118295][ T5836] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.147639][ T5842] device team0 entered promiscuous mode [ 117.163728][ T5842] device team_slave_0 entered promiscuous mode [ 117.190636][ T5840] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.207198][ T5842] device team_slave_1 entered promiscuous mode [ 117.216418][ T5841] device team0 left promiscuous mode [ 117.222180][ T5841] device team_slave_0 left promiscuous mode [ 117.238494][ T5836] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 117.255947][ T5841] device team_slave_1 left promiscuous mode [ 117.261118][ T5836] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 117.321347][ T5830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.546 (5830) [ 117.334547][ T5849] tun0: tun_chr_ioctl cmd 2147767520 [ 117.444296][ T5830] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 117.456477][ T26] audit: type=1800 audit(1742596532.263:58): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.549" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 117.492610][ T5830] BTRFS info (device loop1): using free space tree [ 117.544274][ T5830] BTRFS info (device loop1): has skinny extents [ 117.597730][ T5856] hsr0: VLAN not yet supported [ 117.846876][ T4715] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 117.878541][ T5830] BTRFS info (device loop1): enabling ssd optimizations [ 118.255025][ T4715] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.294831][ T4715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.311126][ T4715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.328689][ T4715] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.344939][ T4715] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 118.368229][ T4715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.374961][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.557'. [ 118.411389][ T4715] usb 4-1: config 0 descriptor?? [ 118.503781][ T5898] loop0: detected capacity change from 0 to 256 [ 118.528040][ T5897] tap0: tun_chr_ioctl cmd 1074025680 [ 118.642399][ T5898] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 118.885858][ T5910] loop4: detected capacity change from 0 to 2048 [ 118.923898][ T4715] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x2 [ 118.954690][ T5910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.975053][ T4715] hid-rmi 0003:17EF:6085.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 119.107527][ T4715] usb 4-1: USB disconnect, device number 8 [ 120.001251][ T5977] loop1: detected capacity change from 0 to 512 [ 120.058757][ T5979] netlink: 'syz.3.599': attribute type 3 has an invalid length. [ 120.079960][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 120.128372][ T5977] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.149469][ T5977] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (171798693888 > 6144). [ 120.175282][ T5977] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 120.245844][ T5977] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 120.268163][ T5977] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.596: couldn't read orphan inode 26 (err -116) [ 120.343489][ T5977] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.380083][ T5977] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 120.493211][ T5977] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (171798693888 > 6144). [ 120.559909][ T5977] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 121.308004][ T6020] loop4: detected capacity change from 0 to 64 [ 121.460676][ T6008] loop3: detected capacity change from 0 to 131072 [ 121.470242][ C0] ================================================================== [ 121.478869][ C0] BUG: KASAN: use-after-free in cpu_map_generic_redirect+0x1b9/0x5d0 [ 121.487002][ C0] Read of size 8 at addr ffff88801817fa18 by task kworker/0:9/4637 [ 121.495006][ C0] [ 121.497356][ C0] CPU: 0 PID: 4637 Comm: kworker/0:9 Not tainted 5.15.179-syzkaller #0 [ 121.505707][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.515791][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 121.521928][ C0] Call Trace: [ 121.525318][ C0] [ 121.528201][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 121.532934][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 121.538596][ C0] ? _printk+0xd1/0x120 [ 121.542796][ C0] ? __wake_up_klogd+0xcc/0x100 [ 121.547797][ C0] ? panic+0x860/0x860 [ 121.551903][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 121.557402][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 121.563421][ C0] print_address_description+0x63/0x3b0 [ 121.569002][ C0] ? cpu_map_generic_redirect+0x1b9/0x5d0 [ 121.574756][ C0] kasan_report+0x16b/0x1c0 [ 121.579379][ C0] ? cpu_map_generic_redirect+0x1b9/0x5d0 [ 121.585218][ C0] cpu_map_generic_redirect+0x1b9/0x5d0 [ 121.590801][ C0] ? bpf_prog_run_generic_xdp+0x939/0x1030 [ 121.596648][ C0] ? cpu_map_enqueue+0x370/0x370 [ 121.601645][ C0] xdp_do_generic_redirect+0x406/0x850 [ 121.607151][ C0] do_xdp_generic+0x4f5/0x6c0 [ 121.611861][ C0] ? trace_xdp_exception+0x1f0/0x1f0 [ 121.617170][ C0] ? wg_packet_decrypt_worker+0xd49/0xde0 [ 121.623020][ C0] __netif_receive_skb_core+0x1bf1/0x3df0 [ 121.628867][ C0] ? mark_lock+0x98/0x340 [ 121.633258][ C0] ? set_rps_cpu+0x670/0x670 [ 121.638059][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 121.643252][ C0] __netif_receive_skb+0x11c/0x530 [ 121.648683][ C0] ? read_lock_is_recursive+0x10/0x10 [ 121.655524][ C0] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 121.661728][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 121.662916][ T26] audit: type=1800 audit(1742596536.453:59): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.618" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 121.667744][ C0] ? print_irqtrace_events+0x210/0x210 [ 121.667818][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 121.667853][ C0] process_backlog+0x363/0x7f0 [ 121.703928][ C0] ? rps_trigger_softirq+0x230/0x230 [ 121.709254][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 121.715283][ C0] ? print_irqtrace_events+0x210/0x210 [ 121.720788][ C0] __napi_poll+0xc7/0x440 [ 121.725159][ C0] net_rx_action+0x617/0xda0 [ 121.729796][ C0] ? net_tx_action+0x8e0/0x8e0 [ 121.734598][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 121.740631][ C0] handle_softirqs+0x3a7/0x930 [ 121.745431][ C0] ? do_softirq+0x162/0x240 [ 121.749972][ C0] ? do_softirq+0x240/0x240 [ 121.754525][ C0] do_softirq+0x162/0x240 [ 121.758887][ C0] [ 121.761839][ C0] [ 121.764793][ C0] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 121.770206][ C0] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 121.776310][ C0] ? __local_bh_enable_ip+0x102/0x1f0 [ 121.781716][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 121.787044][ C0] __local_bh_enable_ip+0x1b1/0x1f0 [ 121.792445][ C0] ? wg_socket_send_skb_to_peer+0x172/0x1d0 [ 121.798605][ C0] ? _local_bh_enable+0xa0/0xa0 [ 121.803664][ C0] ? del_timer+0x183/0x310 [ 121.808130][ C0] wg_socket_send_skb_to_peer+0x172/0x1d0 [ 121.813917][ C0] wg_packet_tx_worker+0x1a1/0x7a0 [ 121.819341][ C0] process_one_work+0x8a1/0x10c0 [ 121.825199][ C0] ? worker_detach_from_pool+0x260/0x260 [ 121.830906][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 121.836761][ C0] ? kthread_data+0x4e/0xc0 [ 121.842736][ C0] ? wq_worker_running+0x97/0x170 [ 121.848436][ C0] worker_thread+0xaca/0x1280 [ 121.853295][ C0] kthread+0x3f6/0x4f0 [ 121.857397][ C0] ? rcu_lock_release+0x20/0x20 [ 121.862276][ C0] ? kthread_blkcg+0xd0/0xd0 [ 121.866907][ C0] ret_from_fork+0x1f/0x30 [ 121.871496][ C0] [ 121.874534][ C0] [ 121.876874][ C0] Allocated by task 5929: [ 121.881212][ C0] ____kasan_kmalloc+0xba/0xf0 [ 121.885998][ C0] __kmalloc_node+0x199/0x390 [ 121.890693][ C0] bpf_map_kmalloc_node+0xdb/0x160 [ 121.895833][ C0] cpu_map_update_elem+0x273/0xe50 [ 121.901070][ C0] map_update_elem+0x6a0/0x7c0 [ 121.905856][ C0] __sys_bpf+0x2fd/0x670 [ 121.910125][ C0] __x64_sys_bpf+0x78/0x90 [ 121.914565][ C0] do_syscall_64+0x3b/0xb0 [ 121.919123][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.922163][ T6012] loop0: detected capacity change from 0 to 32768 [ 121.925389][ C0] [ 121.925399][ C0] Freed by task 5930: [ 121.925410][ C0] kasan_set_track+0x4b/0x80 [ 121.925432][ C0] kasan_set_free_info+0x1f/0x40 [ 121.925452][ C0] ____kasan_slab_free+0xd8/0x120 [ 121.925470][ C0] slab_free_freelist_hook+0xdd/0x160 [ 121.925491][ C0] kfree+0xf1/0x270 [ 121.925508][ C0] put_cpu_map_entry+0x6e8/0x760 [ 121.925526][ C0] cpu_map_kthread_run+0x252b/0x25f0 [ 121.925544][ C0] kthread+0x3f6/0x4f0 [ 121.925562][ C0] ret_from_fork+0x1f/0x30 [ 121.925582][ C0] [ 121.925588][ C0] Last potentially related work creation: [ 121.925597][ C0] kasan_save_stack+0x36/0x60 [ 121.993956][ C0] kasan_record_aux_stack+0xba/0x100 [ 121.999380][ C0] insert_work+0x54/0x3e0 [ 122.003990][ C0] __queue_work+0x963/0xd00 [ 122.009056][ C0] queue_work_on+0x14b/0x250 [ 122.014066][ C0] cpu_map_free+0xd7/0x1b0 [ 122.018731][ C0] process_one_work+0x8a1/0x10c0 [ 122.023792][ C0] worker_thread+0xaca/0x1280 [ 122.028722][ C0] kthread+0x3f6/0x4f0 [ 122.033110][ C0] ret_from_fork+0x1f/0x30 [ 122.037545][ C0] [ 122.039887][ C0] Second to last potentially related work creation: [ 122.046564][ C0] kasan_save_stack+0x36/0x60 [ 122.051278][ C0] kasan_record_aux_stack+0xba/0x100 [ 122.056693][ C0] call_rcu+0x1c4/0xa70 [ 122.060883][ C0] __cpu_map_entry_replace+0x74/0x170 [ 122.066297][ C0] cpu_map_free+0xd7/0x1b0 [ 122.071050][ C0] process_one_work+0x8a1/0x10c0 [ 122.076020][ C0] worker_thread+0xaca/0x1280 [ 122.080717][ C0] kthread+0x3f6/0x4f0 [ 122.084787][ C0] ret_from_fork+0x1f/0x30 [ 122.089514][ C0] [ 122.091860][ C0] The buggy address belongs to the object at ffff88801817fa00 [ 122.091860][ C0] which belongs to the cache kmalloc-cg-256 of size 256 [ 122.106445][ C0] The buggy address is located 24 bytes inside of [ 122.106445][ C0] 256-byte region [ffff88801817fa00, ffff88801817fb00) [ 122.119796][ C0] The buggy address belongs to the page: [ 122.125840][ C0] page:ffffea0000605f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1817e [ 122.136274][ C0] head:ffffea0000605f80 order:1 compound_mapcount:0 [ 122.142893][ C0] memcg:ffff88805ee07b01 [ 122.147149][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 122.155155][ C0] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442c80 [ 122.164047][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88805ee07b01 [ 122.172662][ C0] page dumped because: kasan: bad access detected [ 122.179236][ C0] page_owner tracks the page as allocated [ 122.185288][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, ts 2045938752, free_ts 0 [ 122.196605][ C0] register_early_stack+0x86/0xe0 [ 122.201848][ C0] init_page_owner+0x3a/0x730 [ 122.206547][ C0] kernel_init_freeable+0x420/0x5c0 [ 122.212043][ C0] kernel_init+0x19/0x290 [ 122.216787][ C0] page_owner free stack trace missing [ 122.222808][ C0] [ 122.225150][ C0] Memory state around the buggy address: [ 122.230930][ C0] ffff88801817f900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.239217][ C0] ffff88801817f980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.247297][ C0] >ffff88801817fa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.255527][ C0] ^ [ 122.260480][ C0] ffff88801817fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.269741][ C0] ffff88801817fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.277825][ C0] ================================================================== [ 122.285893][ C0] Disabling lock debugging due to kernel taint [ 122.292152][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.299398][ C0] CPU: 0 PID: 4637 Comm: kworker/0:9 Tainted: G B 5.15.179-syzkaller #0 [ 122.309154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.319495][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 122.325790][ C0] Call Trace: [ 122.329095][ C0] [ 122.332045][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 122.336997][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 122.343134][ C0] ? panic+0x860/0x860 [ 122.347271][ C0] panic+0x318/0x860 [ 122.351176][ C0] ? asm_common_interrupt+0x22/0x40 [ 122.356615][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 122.361857][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 122.367182][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 122.373083][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 122.379502][ C0] ? _raw_spin_unlock+0x40/0x40 [ 122.384396][ C0] check_panic_on_warn+0x7e/0xa0 [ 122.389454][ C0] ? cpu_map_generic_redirect+0x1b9/0x5d0 [ 122.395329][ C0] end_report+0x6d/0xf0 [ 122.399510][ C0] kasan_report+0x18e/0x1c0 [ 122.404125][ C0] ? cpu_map_generic_redirect+0x1b9/0x5d0 [ 122.409964][ C0] cpu_map_generic_redirect+0x1b9/0x5d0 [ 122.415716][ C0] ? bpf_prog_run_generic_xdp+0x939/0x1030 [ 122.421537][ C0] ? cpu_map_enqueue+0x370/0x370 [ 122.426488][ C0] xdp_do_generic_redirect+0x406/0x850 [ 122.431980][ C0] do_xdp_generic+0x4f5/0x6c0 [ 122.436779][ C0] ? trace_xdp_exception+0x1f0/0x1f0 [ 122.442299][ C0] ? wg_packet_decrypt_worker+0xd49/0xde0 [ 122.448024][ C0] __netif_receive_skb_core+0x1bf1/0x3df0 [ 122.453864][ C0] ? mark_lock+0x98/0x340 [ 122.458869][ C0] ? set_rps_cpu+0x670/0x670 [ 122.463466][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 122.468671][ C0] __netif_receive_skb+0x11c/0x530 [ 122.473875][ C0] ? read_lock_is_recursive+0x10/0x10 [ 122.479265][ C0] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 122.484818][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 122.490818][ C0] ? print_irqtrace_events+0x210/0x210 [ 122.496279][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 122.501563][ C0] process_backlog+0x363/0x7f0 [ 122.506339][ C0] ? rps_trigger_softirq+0x230/0x230 [ 122.511652][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 122.517633][ C0] ? print_irqtrace_events+0x210/0x210 [ 122.523182][ C0] __napi_poll+0xc7/0x440 [ 122.527534][ C0] net_rx_action+0x617/0xda0 [ 122.532259][ C0] ? net_tx_action+0x8e0/0x8e0 [ 122.537160][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 122.543154][ C0] handle_softirqs+0x3a7/0x930 [ 122.548068][ C0] ? do_softirq+0x162/0x240 [ 122.552583][ C0] ? do_softirq+0x240/0x240 [ 122.557106][ C0] do_softirq+0x162/0x240 [ 122.561432][ C0] [ 122.564673][ C0] [ 122.567624][ C0] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 122.573007][ C0] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 122.578992][ C0] ? __local_bh_enable_ip+0x102/0x1f0 [ 122.584386][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 122.589801][ C0] __local_bh_enable_ip+0x1b1/0x1f0 [ 122.595009][ C0] ? wg_socket_send_skb_to_peer+0x172/0x1d0 [ 122.601041][ C0] ? _local_bh_enable+0xa0/0xa0 [ 122.606003][ C0] ? del_timer+0x183/0x310 [ 122.610467][ C0] wg_socket_send_skb_to_peer+0x172/0x1d0 [ 122.616236][ C0] wg_packet_tx_worker+0x1a1/0x7a0 [ 122.621383][ C0] process_one_work+0x8a1/0x10c0 [ 122.626338][ C0] ? worker_detach_from_pool+0x260/0x260 [ 122.632008][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 122.637559][ C0] ? kthread_data+0x4e/0xc0 [ 122.642066][ C0] ? wq_worker_running+0x97/0x170 [ 122.647179][ C0] worker_thread+0xaca/0x1280 [ 122.651969][ C0] kthread+0x3f6/0x4f0 [ 122.656041][ C0] ? rcu_lock_release+0x20/0x20 [ 122.660927][ C0] ? kthread_blkcg+0xd0/0xd0 [ 122.665529][ C0] ret_from_fork+0x1f/0x30 [ 122.669998][ C0] [ 122.673293][ C0] Kernel Offset: disabled [ 122.677639][ C0] Rebooting in 86400 seconds..