last executing test programs:

10.407963834s ago: executing program 1 (id=1521):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000010280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRES32, @ANYRES16], 0x5, 0x105c9, &(0x7f0000020bc0)="$eJzs3M1uG1UUAODjpClNKCVCLNh1JISUSLUVJ2kFuwCpAIlUET8LVuDYjuXWP1HsJKYIEVgjln0RWLFnz0uwQyyQ2BWBPDOGphQRqHGS5vuk8Zl7PXN8rlWpOnMjB3BuzSe//FyIKzEbEdMRcTkiPS/kR2otCy9ExNWImHrgKOTzf0xcjIi5iLgyTJ7lLORvfXrvcOP+YGMuz3rtZFYMnAYvRUR7Jzs/aGex28ji7Xy+st9MY3t1P4/ZG+07+bibxYP6VprhoDK6rpLGlUZ2fXdnrzeM261KdRgbze10fqeTfWBvvzHKk95wu7Kbjmv1rVG5h+l9d7PBII93e/0sTy3P93GaPvr9Uczm64N6tp6dO2msdvr5fDerr1YfDON+HnvZdFS7rVpax9Z//JLPgLebnb1Bsl/f7TW7neR6qfxyqXyjWN7t1ur9+mqx0q7dWE0WGq3hZcV+vdJea3S7jVa9VO22F5OFRrVaLJeThfX6VrPSScrl0kppqXh9MT+7lrxx6/2kVUsWhvG1Zmev32z1ku3ubpLdsZgsl1ZeWUxeLCfvbmwmm+/cvLmx+d6H6x/cenXjrdfzi/5SVrKwvLS8XCwvFZfLi/9ywb+eyvUP/4uezPofcunxbue8K5x0AQBnT9r/z8Yk+/9Pvr330/oXle/1/3COnaX+v5k35Pr/8Tsl/e/k+v9jrP/zc7R+/T+PRf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBu/TDz9ZvpyXw2fjqffyafei4fFyJiKiJ+e4TpuHgk53SeZ+Zvrp95qIbvCpFmGH7GU/kxFxFr+XH/2UfXfmGs3wQAAAA8mb45vPpV1q1nL/MnXRCTlD20mbr80ZjyFSJiZv7HMWWbGr48P6Zk6b/vCzEYU7b0AdalMSXLH4p9NqZ0xzJ9JFx6IBSyMDXJagAAgMk42gnYUQcAAHhyfXnSBTB+x9m/K8RoK3O0F5z+5f2fG4KzR0YAAADAGVQ46QIAAACA/13a/5/l3/8DAAAA/ln2+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRHMCfDW7pl4qqLiv1Kt3BMXqELrtEHKCX4Aj0CrkAZyC7HCHCER6j4IhIURgbBf1+kj/Ggj/PiM2bQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT7fVev5/8fPfuTm7+jx57gYAAAA4ZVut583JNI0/tde/tJe+teMiIsqIONW7j+JdJ3PU5lTPvL56UsNNRJOw/4z37fYxIn612/3Xvr8FAAAAuF6b5WqWuvW0m166IIaUJm3Kz78z5RURUU3vMqWV+933TGHN73scfzOlNRNYk0xhacptnCvtRUadw+ToUKRDOWg5AADAILqdwLBdCAAAAEP6c3S+uGAdDKyIw1LmYS24+ef944Lgh84IAAAAeIOKSxcAAAAA9K7p/z3/DwAAAK5bev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdpW6/lmuZqdm7OrX+HHJL25rusMtwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MD+vKNACIRBGOxd35nM/Q8rDRobmlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xpJFQcA/M3uzt4PkFujLJyNJ56cKF6y5y8EmyuEYCFYieWS2z1W91TuUnhHCtNYCP4HNtpeIwQEOQv/giusvDI2EWSLCBZWyvyKk2zQiZrZ3dznA2/eN5OXed83gZDvvEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMLkarhQxM3k0MniRn7ux92NtaR/cKBP7PTvnk9aEkf1pr1wWsk96s46CwAAAE66ZlHfhxC2463VpG900vr/mWJMUvNvPJLFRT1/sO4v+qL2T9q97756e2+iTjZPHEL4pjMerNS2wvl2seK4cxXGpM8Ssic0zfTb1nhz87FJnN716PP7999op+Gp/5YxAPB/uFz0eTCMPkl/PxqOxoPeLBMDYHG1/vnTxZCi/m92asgLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMYmm+H5Io5CCE+0/ooTD3Y31g7rd/p3zxft3LuPf1q+ZnKJOIQwHI0Hp2tcyzy7WHHcrdt33u+Px4ObRwqe/FdfJRAIFiU45h9QAACcKHHekrp+O95aTc5FSyH88eX++v9SKQ4V6//vR/culecq1/+92lY436rW/8vrNz5avnX7zgujG/3rg+uDD670Xuq9uvLay71XlpP7uZIdjzlbAAAAFlU7b+X6v7E0vf9/thSHivX/Dz+/80t5rqb6f8rR9/+POSEAAICH2KMXfvs1OuR81G6Hj/vr6zd72XHv4yvZcQap/r0z06dO5a1c/zeXZpAbAAAAULvJZrRv//9aKQ4V9/+/fe73L8rXbOaPIIaj8eDy2ofja/UtZ25N7/93Dh1Xx58T17BcAAAAZuRM3sr7/3H6/n/jqWJMI4Tw7NNZnP8bwEr1/+utz66W5yq///9ifUucS41udj+qvP+fju2G0OrWkBgAAAAn0um8JfX/T/HW6ntfn32r7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5kf+5tEwbCOA6/viRK3CYjpLf4mIGGCsEKgIRkyTMwAAvRUNFaLAIrgATnms5QPE/z/xVX3AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvL3r0xcfEVFE6jJFmm7/zp8R8RVp17aT73sW+8up+Xnk4nCc5fyN+X8ZEWUUfZwDANC7qtsc6029GuQd5h3lHeetyqZevvLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGCgAA//9fbFmx")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00')

8.810252625s ago: executing program 1 (id=1524):
r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x0, 0x1}, 0x20)

6.795938477s ago: executing program 1 (id=1537):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0 ', 0x2)
syz_fuse_handle_req(r0, &(0x7f0000004540)="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", 0x2000, &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.65427763s ago: executing program 1 (id=1539):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x622f, &(0x7f00000010c0)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTd7rGd6eqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bl99uM7f/zbb3/41Pf/+vvh6X//6Wb/jWnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6rJ7vTLiJis71N857B6XgAOGQ245Ouu0CH5F+0QUQ81XUngIVWdd0BDsS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PadJbxa0zm9fzain48O6U/K3PqwyLJ+ffG87+80z5K6x10/vMyLf/Rzq1Pxcn598fzH3N08u9NzL9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LuyLw87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrYw+WTfsutmb5pSri6bH1gcKkm2VWu+4HAAAAAAAAAAAAAJRksHMN76UqYhgRT6+u1nXd/LSN14/qSbc/7ErffyhZ13/kAQBgx8fHxu7lryKWI+JS+q6/4erqal0vr6zWq/XKUn4/O1parldan2vztFm2NNrHG+LBqG5+2XJru7ZZn5dntY//vuaxRnV/Hx2bjw4DB4CI2Hk1uucV6Yip62ei63c5HA6O/6PH8c9+dP08BQAAAA5eXdd1lb7O+0Q659/rulMAwFzk1//x8wJqtVqtVquPXt1WT3anXUTEZnub5j2D4fgB4JDZjE+67gIdkn/RBhHxfNedABZa1XUHOBD37t9er1K+Vfv1II3vnq8F2ZP/ZrW9Xd5+0nSW8WtM5vX82op+PDulP8/NqQ+LJOffG8//8k77KK130PnPy7T8m/083kF/upbz74/nP+bo5N+bmH+pcv6DR8q/L38AAAAAAFhg+d//jy/U+d/R4+7OTA87/7t2YI8KAAAAAAAAAAfr3v3b6/m+13z+/3MT1nP/59GU86/kX6Scf7r/f/fCm5fH1uu35u++/SD/f96/vf67m//4/zzdb/5LeaZKz6wqPSOq9EjVIE0fc8em2Br2R80jDatef5Cu+amH78bVuBYbcWbPur10PDxoP7unvenpcLu97u+0n9vTPthtz9uf39M+TFc61Su5/VSsx0/iWryz3d60Lc3Y/+UZ7fWM9px/3/FfpJz/oPXT5L+a2quxaePuR73/Oe7b00mP89bVz//yzMHvzkxb0d/dt7Zm/17soD/b/0+eGsXPbmxcP3Xrys2b189GmuxZei7S5DOW8x+mn5z/yy/ttOe/++3j9e5Ho0fOf1FsxWBq/i+15pv9fWXOfetCzn+UfnL+76T2ycf/Yc5/+vH/agf9AQAAAAAAAAAAAAAAgIep63r7FtG3IuJCuv+nq3szAYD5yq//dZKXz6vuP+72f9i7H131X62ec10tWH/mWn9aL1Z/1AtZ/2fB+rNwdVs92ZvtIiL+0t6mec/wi0m/DABYZJ9GxN+77gSdkX/B8vf9NdOTXXcGmKsbH3z4oyvXrm1cv9F1TwAAAAAAAACAx5XH/1xrjf98sq7rO2Pr7Rn/9e1Ye9LxPwd5ZneA0SkDVfcffZ8eZqs36vdaw42/ENPG/x7uzj1s/O/BjMcbzmgfzWhfmtG+PKN94o0eLTn/F1rjnZ+MiBNjw6+XMP7r+Jj3Jcj5v9h6Pjf5f2lsvXb+9W8Oc/69Pfmfvvn+T0/f+ODD166+f+W9jfc2fnz+7Nkz5y9cuHjx4ul3r17bOLPz3w57fLBy/nnsa9eBliXnnzOXf1ly/l9ItfzLkvP/YqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP+XUy3/suT8X021/MuS8/9KquVflpz/a6mWf1ly/qdSLf+y5PxPp3qf+a8cdL+Yj5x/PsPl+C9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvN/PdXyL0vO/6upln9Zcv4XUi3/suT8v5Zq+Zcl538x1fIvS87/66mWf1ly/t9ItfzLkvN/I9XyL0vO/5upln9Zcv7fSrX8y5Lz/3aq5V+WnP+bqZZ/WR58/78ZM2bM5Jmu/zIBAAAAAAAAAAAAAOPmcTlx1/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP4mb157UBiIKROasLGMcY4m+z6El9oXUy4NtxKQij0gu1612bBN7x2CTSqHQVKJIyKKtqGh7aAUJuXCqvigVaA8oBaVaoE7QN9QVSoPERVQAGpKq0gW805//9/Z2ZnZ9be8XrmnM9HSn7ZmTNzzpz5z+x+7Xx3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ3vWH2U7Usy2q1WnHBxix7UX2un9iYX/LaG3t8AAAAwOr9Iv/387ekCw6t4EYN2/zTnd/+6sLCwkL2vuE/Hf3cwkK6YiLLRtdlWX5ddOUH7681bhM8kY3Xhhq+Huqy++Eu1490uX60y/VjXa5f1+X68S7XLzkBS6zPaunOtub/ubE4pdmt2Wh+3dY2t3qitm6ofu7SbbNafpuF0ePZXHYym82mm7Yvtq3l23/9rvq+3prFfQ017GtzfYX85LFj8Rhq4RxvbdrX4n1GP3p9NvHTnzx27K/PP3d7u9n1NDTdX3Gc27fUj/MT4ZLiWGvZunRO4nEONRzn5jbPyXDTcdby29X/u/U4n1/hcQ4vHuaaan3Ox7Oh/L+/k5+nkVrW5jxtDpf97O4syy4tHnbrNkv2lQ1lG5ouGVp8fsaLFVm/j/pSemk2clXr9K4VrNP6nNnavE5bXxPx+b8r3G5kmWNofJp+9PhYw/P+84VrWadR/VEv91ppXYO9fq30yxqM6+I7+YN+su0a3Boe/2Pbll+DbddOmzWYHnfDGtzSbQ0OjQ3nx5yehFp+m8U1uLNp++F8T7V8Prut8xqcOn/q7NT8xz5+79ypoydmT8ye3r1z5/TuvXv3798/dXzu5Ox08e9rPNv9b0M2lF4DW8K5i6+BV7ds27hUF744tuT991pfh+MdXocbW7bt9etwpPXB1dbmBbl0TRevjffUT/r45aFsmddY/vzsWP3rMD3uhtfhSMPrsO33lDavw5EVvA7r25zdsbKfWUYa/ml3DMt/L1jdGtzYsAZbfx5pXYO9/nmkX9bgeFgX39ux/PeCzeF4n5y82p9HhpeswfRww3tP/ZL08/74/ny0W5d31K+4aSy7MD977r5Hj54/f25nFsaaeFnDWmldrxsaHlO2ZL0OXfV6PTR355N3tLl8YzhX4/fW/zW+7HNV32bPfZ2fq/y7W/vz2XTpriyMHlvr89nuu3n9fI5l2ee/9fhD33js829Y9nzW8+Ynplb/s3jKpQ3vv6PLvP/G3P9Csb90V08Mj44Ur9/hdHZGm96Pm5+qkfy9q5bv+/mplb0fj4Z/1vr9+NYO78ebWrbt9fvxaOuDi+/HtW5/2rE6rc/neFgnJ6c7vx/Xt9m062rX5EjH9+O7w6yF8/+akBRSLmpYO8ut27SvkZHR8LhG4h6a1+nupu1HQzar7+vpXde2TrffXdzXcHp0i9ZqnU60bNvrdZr+7Gu5dVrr9qdv16b1+RwP6+LW3Z3XaX2bZ/as/r1zffzPhvfOsW5rcHR4rH7Mo2kR5u/32cL6uAbvy45lZ7KT2Ux+7Vi+nmr5vibvX9kaHAv/rPV75aYOa3B7y7a9XoPp+9hya682svTB90Dr8zke1sVT93deg/Vt3rivtz+7bg+XpG0afnZt/fO15f7M646W03S91spIOM5v7ev8Z7P1bU7uv9qc2fk83RMuuanNeWp9/S73mprJ1uY8bQrH+dz+5c9T/Xjq23zuwArX06Esyy5+5IH8z3vD36/83YXvfrXp713a/Z3OxY888OMXH//Hqzl+AAbfC8XYUHyva/ibqZX8/T8AAAAwEGLuHwozkf8BAACgNGLuj/9XeCL/AwAAQGnE3D8SZlKR/L/pjc/NvXAxS838hSBen07Dg8V2seM6Hb6eWFhUv/yBL8/+9z9cXNm+h7Is+/mDf9B2+00PxuMqTITjvPKm5suX+Oq9K9r3kUcupv029te/EO4/Pp6VLoN2FdzpLMu+fstn8v1MvP9yPp958Eg+H7r05BP1bZ4/UHwdb//sy4rt/yKUfw8dP9p0+2fDefhhmNNva38+4u2+cvk1m/e9d3F/8Xa1LTfnD/upDxT3G39PzmefKLaP53m54//Gp5/+Sn37R1/V/vgvDrU//qfD/X45zP99RbF943NQ/zre7pPh+OP+4u3u+9I32x7/lU8V2599c7HdkTDj/reHr7e++bm5xvP1aO1o0+PK3lJsF/c//d0/zq+P9xfvv/X4xw9fbjofrevjmX8r7meqZft4edxP9Pct+6/fT+P6jPt/+o+ONJ3nbvu/8tCzr6jfb+v+72nZ7uxHduT7X7y/5t/Y9Jef/Ezb/cXjOfS3Z5sez6F3h9dx2P9THwjrMVz/f1eK+2v97QpH3t38/hO3/8LGi02PJ3rrT4v9X3ndiXyuG1+/4aYXvfjmS6+sn7ss+8664v667f/EX51pOv4v3lacj3h97Oi37n85cf/nPjp5+sz8hbmZdFYfuyX/3TlvL44nHu8t4b219evDZ85/cPbcxPTEdJZNlPdX6F2zL4X542Jc6rz1wpJ30B2PhOfzjj//+oZt//rpePm/v6e4/PLbiu9brw7bfTZcvjE8f1e3/6Weuuu2/PVdeyYc4cLS3xe8Gpu3/tf+FW0YHn/rzwVxvZ99+Qfz81C/Lv++EV/Xqzz+788U9/O1cF4Xwm9m3nLb4v4at4+/G+Hyw8XrfdXnL7zNxef1b8Lz/Y4fFvcfjys+3u+Hn2O+uan5/S6uj69dHGq9//y3eFwK7yfZpeL6uFU835efv63t4cXfQ5Jduj3/+k/S/dx+VQ9zOfMfm586OXf6wqNT52fnz0/Nf+zjh0+duXD6/OH8d3ke/lC32y++P23I359mZvfuyfJ3qzPFuM5u9PGffeTYzL7pbTOzx49eOH7+kbOz504cm58/Njszv+3o8eOzH+12+7mZgzt3Hdi9b9fkibmZg/sPHNh9YHLu9Jn6YRQH1cXe6Q9Pnj53OL/J/ME9B3bef/+e6clTZ2ZmD+6bnp680O32+femyfqtf3/y3OzJo+fnTs1Ozs99fPbgzgN79+7q+tsAT509Pj8xde7C6akL87PnporHMnE+v7j+va/b7Smn+f8ofp5tVSt+EV/2rnv2pt/PWvflx5e9q2KTll8g+lz4XTT//JKz+1fydcz9o2EmFcn/AAAAUAUx94+Fmcj/AAAAUBox968LM5H/AQAAoDRi7h8PM6lI/i9d/3/TxRXtX/9f/7/xfOn/V6z//3C/9f+L9wv9/95Ybf9e/z/Q/9f/1//X/9f/pwf6rf8fc//6LKtk/gcAAIAqiLl/Q5iJ/A8AAAClEXP/TWEm8j8AAACURsz9LwozqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6/1NZtfr/l3p5/Pr/+v8s1W/9/5j7XxxmUpH8DwAAAFUQc//NYSbyPwAAAJRGzP23hJnI/wAAAFAaMfdvDDOpSP7X/9f/1//X/9f/b79//f/BpP/fmf5/F/r/Pv9f/1//n57qt/5/zP0vCTOpSP4HAACAKoi5/6VhJvI/AAAA9J+Ra7tZzP0vCzNZkv+vcQcAAADADRdz/61ZSxG8In//r/+v/9///f916Tr9f/3/rC/7/8OZ/n//0P/vTP+/C/1//X/9f/1/eqrf+v957s/Gs5eHmVQk/wMAAEAVxNx/W5iJ/A8AAAClEXP/L4WZyP8AAABQGjH3bwozqUj+1//X/+///r/P/9f/7/f+v8//7yf6/53p/3eh/6//r/+v/09P9Vv/P+b+28NMKpL/AQAAoApi7r8jzET+BwAAgNKIuf+Xw0zkfwAAACiNmPs3h5lUJP/r//d5/z82R/X/9f/1//X/9f9XRP+/M/3/LvT/9f/1//X/6al+6//H3P+KMJOK5H8AAACogpj77wwzkf8BAACgNGLuf2WYifwPAAAApRFz/0SYSUXyv/5/n/f/ix78mM//1//X/9f/1/9fGf3/zvT/u9D/1//vSf9/4WKp+v/1Raf/zzXqt/5/zP13hZlUJP8DAABAFcTcvyXMRP4HAACA0oi5/+4wE/kfAAAASiPm/q1hJhXJ//r/A9H/z/T/9f/1//X/9f9XRv+/M/3/LvT/9f99/r/P/6en+q3/H3P/q8JMKpL/AQAAoApi7t8WZiL/AwAAQGnE3P/qMBP5HwAAAEoj5v7tYSYVyf/6//r/+v/6//r/7fev/z+Y9P870//vQv9f/1//X/+fnuq3/n/M/a8JM6lI/gcAAIAqiLl/R5iJ/A8AAAClEXP/PWEm8j8AAACURsz9k2EmFcn/+v/6//r/+v/6/+33r/8/mPT/O9P/70L/X/9f/1//n57qt/5/zP33hplUJP8DAABAFcTcf1+YifwPAAAApRFz/1SYifwPAAAApRFz/3SYSUXyv/6//r/+v/7/VfX/X7l4v/r/Bf3//qL/35n+fxf6//r/N7z/P6r/T6n0W/8/5v6dYSYVyf8AAABQBTH37wozkf8BAACgNGLu3x1mIv8DAABAacTcvyfMpCL5X/9f/1//X//f5/+337/+/2DS/++s9/3/+BD1//X/9f99/r/+P0v1W/8/5v77w0wqkv8BAACgCmLu3xtmIv8DAABAacTcvy/MRP4HAACA0oi5f3+YSUXyv/6//r/+v/6//n/7/ev/Dyb9/858/n8X+v/6//r/+v+s0sN/2PhVv/X/Y+4/EGZSkfwPAAAAVRBz/2vDTOR/AAAAKI2Y+38lzET+BwAAgNKIuf9Xw0wqkv/1/5u65/WHq/+v/6//r/+f0/8fTPr/nen/d6H/r/+v/6//T08t2/8P0Xut+/8x9x8MM6lI/gcAAIAqiLn/18JM5H8AAAAojZj7XxdmIv8DAABAacTcfyjMpCL5X//f5//r/+v/6/+33/9a9//H4v3q/6+K/n9n+v9d6P/r/+v/6//TU/32+f8x978+zKQi+R8AAACqIOb+B8JM5H8AAAAojZj73xBmIv8DAABAacTc/8Ywk4rkf/1//X/9f/1//f/2+/f5/4NJ/78z/f8u9P/1//X/9f/pqX7r/8fc/6Ywk4rkfwAAAKiCmPvfHGYi/wMAAEBpxNz/ljAT+R8AAABKI+b+t4aZVCT/6//r/+v/6//r/7ffv/7/YNL/70z/vwv9f/1//X/9f3qq3/r/Mff/ephJRfI/AAAAVEHM/Q+Gmcj/AAAAUBox978tzET+BwAAgNKIuf/tYSYVyf/6//r/+v/6//r/7fffu/7/+vzf+v9rQ/+/swHr///i5nC5/n9B/7+/j/9q+/8jLV9fl/7/D5br/y+sa729/j/XQ7/1/2Puf0eYSUXyPwAAAFRBzP3vDDOR/wEAAKA0Yu5/V5iJ/A8AAAClEXP/b4SZVCT/6//Xj2Oxvaz/X9b+/5D+v/6/z/+vCP3/zgas/+/z/1vo//f38fv8f/1/luq3/n/M/e8OM6lI/gcAAIAqiLn/oTAT+R8AAABKI+b+h8NM5H8AAAAojZj73xNmUpH8r//v8/+r0f/3+f+Z/r/+f0Xo/3em/9/Fje7/v6D/P8jHf136//+p/89g67f+f8z9j4SZVCT/AwAAQBXE3P/eMBP5HwAAAEoj5v7fDDOR/wEAAKA0Yu5/X5hJRfK//v+g9P8nBrT//7j+/3Xs/995c7Gd/r/+P4v0/zvT/+/iRvf/ff7/QB+/z//X/2epfuv/x9z//jCTlef/8RVvCQAAANwQMff/VphJRf7+HwAAAKog5v7fDjOR/wEAAKA0Yu7/nTCTiuR//f9B6f/7/P9M/9/n/7c8Hv1//f921q7/H9959P/1//X/I/1//X/9f1r1W/8/5v7fDTOpSP4HAACAKoi5/wNhJvI/AAAADIR2/092q5j7D4eZyP8AAABQGjH3HwkzqUj+1//X/9f/79P+/59t+ZfvffudR3bq/69F/3+43f71/wfTmn7+f/3F7/P/9f/1/xP9f/1//X9a9Vv/P+b+o2EmFcn/AAAAUAUx9/9emIn8DwAAAKURc/+xMBP5HwAAAEoj5v6ZMJOK5H/9f/1//f8+7f8P8Of/x/MxQP3/tvvv2/5/fNPV/2+r6N+nVXR9+//vXeyJ6/9fbf9/rO2l+v/6/4N8/Pr/+v8s1W/9/5j7Z8NMKpL/AQAAoApC7h86XszFK+R/AAAAKI2Y+0+Emcj/AAAAUBox938wzKQi+V//X/9/EPr/6zL9/0Hq/w/g5/+33X+n/n9txOf/96vUv/9Z/kLR/2/RP/3/9vT/9f8H+fj1//X/Warf+v8x98+FmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3nwwzqUj+1/+/tv7/cv3qRvr/Pv+/dX3o/5en/5/dyM//1//vaLX9e/3/QP+/2v3//9H/1//X/6c3+q3/H3P/qTCTiuR/AACA/2fvPposq887jt+2B6an8MI7L7xxlZd+CSzstf0CvPDGG1e5vMAB2zgzOEdsbOMoCYFyQAEEQkgC5QBKSCiDJJRzQAkhUaOi53meTqfP7XC77zn//+ezmEc009wr1dQMv+n56kAPcvdfE7fY/wAAANCM3P2/HbfY/wAAANCM3P2/E7d0sv/1/yd5/v92paz/3/3+J9H//6L+/6DX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/78Ytnex/AAAA6EHu/t+LW+x/AAAAaEbu/mvjFvsfAAAAmpG7//fjlk72/57+f2PRZ/+fGe8R+/9t+v/d738S/b/n/x/4+vp//X/Lzrb/v+Hpn/n0//p//X/Q/x+q/z9/0Ofr/2nR1Pr/3P1/ELd0sv8BAACgB7n7/zBusf8BAACgGbn7r4tb7H8AAABoRu7+P4pbOtn/q3v+/4Wtj8+0/y/6f/3/1gf0//p//f9sef7/uJ76/2sfvuqax+/+2XuO8vr6f/2/5//r/1mtqfX/ufv/OG7pZP8DAABAD3L3/0ncYv8DAABAM3L3/2ncYv8DAABAM3L3/1nc0sn+X13/P+vn/xf9v/5/6wP6f/2//n+29P/jeur/j/P67ff/F0b/7rr7+ZNa9/vX/+v/2W9q/X/u/j+PWzrZ/wAAANCD3P1/EbfY/wAAANCM3P3Xxy32PwAAADQjd//FuKWT/a//P/3+/yn9v/4/rv5f/6//P336/3H6/yWa7//Hrbufn/v71//r/9lvav1/7v4b4pZO9j8AAAD0IHf/X8Yt9j8AAAA0I3f/X8Ut9j8AAAA0I3f/X8ctnex//b/n/+v/9f/6/+HX1//Pk/5/nP5/Cf3/Sfv5K/T/+n/9Pzsdsf9/cuSn7ZX0/7n7/yZu6WT/AwAAQA9y9/9t3GL/AwAAQDNy9/9d3GL/AwAAQDNy9/993NLJ/tf/6//1//r/Y/f/+3/obdH/D9P/nw39/7jJ9P8b5wY/rP+fff/v+f/6f/0/u0zt+f+5+/8hbulk/wMAAEAPcvf/Y9wysv+P/Jv5AAAAwFrl7v+nuMXX/wEAAGD2sjrL3f/PcUsn+1//r//X/+v/Pf9/+PXH+v97drw//f+06P/HTab/P4D+X/8/5/ev/9f/s9/U+v/c/f8St3Sy/wEAAKAHuftvjFvsfwAAAGhG7v5/jVvsfwAAAGhG7v5/i1s62f/D/f/239f/H47+f/f71/8P//hYVf+f/0T9/2j//0ue/98n/f+4s+//z+v/d//z9f+naN3vv/H+/8Kyz9f/M2Rq/X/u/pvilk72PwAAAPQgd/+/xy32PwAAADQjd/9/xC32PwAAADQjd/9/xi2d7H/P/9f/6//n1/97/v9l63z+/+LM+/9z+v9D0v+P8/z/JfT/+n/9v+f/s1JT6/9z998ct3Sy/wEAAKAHNz+x2Nr9/7VY2P8AAAAwRzv/7MDeP1Aacvf/d9xi/wMAAEAzcvf/T9zSyf7X/+v/9f/6f/3/8OtPq//3/P/D0v+P0/8vof8/jX7+XGP9/y0Hff4U+v/r9f9MzK7+/77tj6+r/8/d/79xSyf7HwAAAHqQu///4hb7HwAAAJqRu///4xb7HwAAAJqRu/8ZcUsn+//U+/8LB7+2/l//r//X/+v/9f+rpv8fp/9fQv/v+f+e/6//Z6W2+//dPx+uq//P3f/MuKWT/Q8AAAA9yN3/rLjF/gcAAIBm5O6/JW6x/wEAAKAZufufHbd0sv89/1//r//X/+v/h19f/z9P+v9x+v8l9P/6f/2//p+V2vX8/x3W1f/n7r81bulk/wMAAEAPcvffFrfY/wAAANCM3P3PiVvsfwAAAGhG7v7nxi2d7H/9/+n2//lx/b/+f6H/1//r/89Et/3/xtCvRPsd0P8/+JsXf2X3R/T/+n/9v/5f/88KTKL/v7T9b5e5+58Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi1H3P8/vdJ3dXb0/57/r//X/+v/h19f/z9P3fb/h+T5/0vo//X/+n/9Pys1if5/x1/n7n9R3OLr/wAAANCM3P0vjlvsfwAAAGhG7v6XxC32PwAAADQjd/9L45ZO9r/+X/+v/9f/6/+HX/+4/f/mYpj+/2zo/8fp/5fQ/+v/9f/6f1Zqav1/7v7b45ZO9j8AAAD0IHf/y+IW+x8AAACakbv/5XGL/Q8AAADNyN3/irilk/2v/9f/6//1//r/4df3/P950v+P0/8vFos7Rt7AUP9/6bz+X/+v/9f/c0xT6/9z978ybulk/wMAAEAPcvffEbfY/wAAANCM3P13xi32PwAAADQjd/+r4pZO9r/+X/+v/9f/6/+HX1//P0/6/3H6/yU8/1//r//X/7NSU+v/c/ffFbd0sv8BAACgB7n7745b7H8AAABoRu7+V8ct9j8AAAA0I3f/PXFLJ/tf/6//1//r/0+l/7+o/99L/382Tq//X+j/9f/6/yX0//p//T97nVX//2T8fL+s/8/d/5q4pZP9DwAAAD3I3X9v3GL/AwAAQDNy9782brH/AQAAoBm5+18Xt3Sy//X/+v9D9v9b70j/r//fyfP/L9P/T4vn/4/T/y+h/9f/6//1/6zUWfX/B/X+e/86d//r45ZO9j8AAAD0IHf/fXGL/Q8AAADNyN1/f9xi/wMAAEAzcve/IW7pZP/r//X/u/v/xcLz//X/+v/LzqD/31zo/1dO/z9O/7+E/r/N/v8nFg31/xcO/Hz9P1M0tf4/d/8b45ZO9j8AAAD0IHf/m+IW+x8AAACakbv/zXGL/Q8AAADNyN3/lrilpf3/1MHp2/z7//N7PlH/v1gsHrlu9c//1//r//X/nv8/C/r/cfr/JfT/bfb/nv+v/2dtptb/5+5/a9zS0v4HAACAzuXuf1vcYv8DAABAM3L3vz1usf8BAACgGbn73xG3dLL/59//7/1E/f/iRM//1/9vfUD/r//X/8/WSfv7Wzfj1zT9v/5f/z/Yz28c8O89C/2//l//z4Cp9f+5+98Zt3Sy/wEAAKAHufsfiFvsfwAAAGhG7v4H4xb7HwAAAJqRu/9dcUsn+1//r//X/8+z/9/U/+v/9f+DpvL8/6uv/uWH9P/6/xb7/zH6f/2//p+9ptb/5+5/d9zSyf4HAACAHuTuf0/cYv8DAABAM3L3vzdusf8BAACgGbn73xe3dLL/9/f/VywuF6qXDfX/0ajp/3fQ/+9+//r/4R8fnv+v/9f/n76p9P+e/3+896//1//P+f0fqf//uf2fr/+nRVPr/3P3PxS3dLL/AQAAoAe5+98ft9j/AAAA0Izc/R+IW+x/AAAAaEbu/ofjlk72v+f/6//1//p//f/w6+v/50n/P07/v4T+/+T9fP6sqv+f7/P/f1L/z+pMrf/P3f/BuGVr+P38Tx3zvyYAAAAwIbn7PxS3dPL1fwAAAOhB7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/6/+HX1//P0/6/3H6/yX66f83hz647n7+pNb9/pvp/z3/nxWaWv+fu/+jcUsn+x8AAADa9sTWt7n7Pxa32P8AAADQjNz9H49b7H8AAABoRu7+R+KWTva//l//337//+v6/z2vr//X/7dM/5+/og/T/y/RT/8/aN39/Nzfv/5f/89+U+v/c/c/Grd0sv8BAACgB7n7PxG32P8AAADQjNz9n4xb7H8AAABoRu7+T8Utnex//X9f/f/Gosf+3/P/9f/6/57Mp/+/7dzQRz3/X/+v/5/v+9f/6//Zb2r9f+7+xzbOdbn/AQAAYK5+9Rd+69HDft/Htr7dXHw6brH/AQAAoBm5+z8Tt9j/AAAA0Izc/Z+NWzrZ//r/vvr/Pp//r//X/+v/ezKf/n+Y/l//r/+f7/vX/+v/2W9q/X/u/s/FLTuG3+D/QQ8AAACwPlce7bvn7v983NLJ1/8BAACgB7n7vxC37Nv/lw75p9oBAACAqcnd/8W4pZOv/+v/J97/L06p/4/vp/+/TP+v/x96ff3/POn/x52w/7+0of/X/4/Q/+v/9f/sNbX+P3f/vXctutz/AAAA0Khdv6Pwpa1vNxdfjlvsfwAAAGhG7v6vxC32PwAAADQjd/9X45ZO9r/+f+L9/7Ge/3+h/pPn/3fe/9+4Ofj6+n/9f8v0/+M8/38J/b/+X/+v/2eljtD/bw3S0+7/c/d/LW7pZP8DAABAD3L3fz1usf8BAACgGbn7vxG32P8AAADQjNz934xbOtn/+v819P83nV8sTrX/P8Tz//X/ffT/B7z+6vv/3X3r2fX/P3PVxQd+7TfuvF3/z7az7P/zx4L+X/+v/79M/6//1/+z19Se/5+7/1txSyf7HwAAAHqQu//xuMX+BwAAgGbk7v923PL0/r9/Xe8KAAAAWKXc/d+JWzr5+r/+v8Xn/8+z/8//rdfQ/1+cX/+fTfFU+v/dPP9/mP7/bHj+/zj9/xL6f/2//l//z0pNrf/P3f/duKWT/Q8AAAA9yN3/vbgl9//GkX/rHgAAAJiY3P3fj1t8/R8AAACakbv/ibilk/2v/9f/T6X/T57/v/1583n+/27H6P+vXOj/9f8rov8fp/9fQv+v/9f/6/9Zqan1/7n7fxC3dLL/AQAAoAe5+5+MW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/5f/6//1/9PoP/fov/X/6+C/n+c/n8J/b/+X/+v/2elptb/5+7/cQAAAP//Yf5tgA==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

5.356878863s ago: executing program 1 (id=1543):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x4}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
write(r0, &(0x7f00000000c0)="8f2a", 0x2)

4.336925509s ago: executing program 2 (id=1547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x8010743f, &(0x7f00000002c0))

4.232152982s ago: executing program 1 (id=1548):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[0x1], &(0x7f0000000a80)=[r2], &(0x7f0000000ac0), 0x0, 0x2})

3.570969849s ago: executing program 32 (id=1548):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[0x1], &(0x7f0000000a80)=[r2], &(0x7f0000000ac0), 0x0, 0x2})

3.5202897s ago: executing program 2 (id=1551):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x0, 0x80000001, 0xb, 0x1fd, 0x1})

3.220073048s ago: executing program 2 (id=1552):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0xc, 0x89, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3ff, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="001028"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000400)='illinois\x00', 0x8)

2.587735984s ago: executing program 3 (id=1554):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r2 = getpid()
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)

2.358029539s ago: executing program 3 (id=1555):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x7000000)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x20000, 0x4})
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e)

2.133220195s ago: executing program 3 (id=1556):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.007209918s ago: executing program 0 (id=1557):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x220000c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@xino_auto}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

1.772365805s ago: executing program 3 (id=1558):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0xa01f, 0x100000000)

1.758462935s ago: executing program 0 (id=1559):
r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x81, 0x95, 0x1, 0x200, 0x8000000000000000, 0x1, 0x9, 0x4, 0x8, 0x936, 0x4})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000100)={[{}, {@mb_optimize_scan}, {@sysvgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x4d5, &(0x7f0000000a00)="$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")
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000080))

1.55625399s ago: executing program 3 (id=1560):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)

1.319937086s ago: executing program 0 (id=1561):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a})

1.144457721s ago: executing program 0 (id=1562):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x70001)
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160)
open_by_handle_at(r1, &(0x7f0000000080)=ANY=[], 0x531500)

1.103261312s ago: executing program 3 (id=1563):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101175129205705092006c70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x0, 0x4, 0xb, {0xb, 0x21, "3b919095a6ab92b5ea"}}, 0x0}, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

903.600416ms ago: executing program 2 (id=1564):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000180), 0xd, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

823.625198ms ago: executing program 0 (id=1565):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setresuid(0x0, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077, 0x41100}, 0x94)

550.855536ms ago: executing program 0 (id=1566):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}})

544.799896ms ago: executing program 2 (id=1567):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x22148c8, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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")
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}])

0s ago: executing program 2 (id=1568):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="f5", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x800}, 0xc084)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x600000000000000)

kernel console output (not intermixed with test programs):

7327]  mtrr_del+0xc3/0xf0
[  170.672058][ T7327]  mtrr_ioctl+0xcb6/0x13a0
[  170.676544][ T7327]  ? mtrr_close+0x200/0x200
[  170.681299][ T7327]  ? __fget_files+0x28/0x460
[  170.685997][ T7327]  ? mtrr_close+0x200/0x200
[  170.690592][ T7327]  proc_reg_unlocked_ioctl+0x1d2/0x2c0
[  170.696294][ T7327]  ? proc_reg_poll+0x290/0x290
[  170.701236][ T7327]  __se_sys_ioctl+0xfd/0x170
[  170.705893][ T7327]  do_syscall_64+0x55/0xb0
[  170.710366][ T7327]  ? clear_bhb_loop+0x40/0x90
[  170.715102][ T7327]  ? clear_bhb_loop+0x40/0x90
[  170.719835][ T7327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.725786][ T7327] RIP: 0033:0x7f194499e0d9
[  170.730354][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.750017][ T7327] RSP: 002b:00007f1945842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.758508][ T7327] RAX: ffffffffffffffda RBX: 00007f1944c25fa0 RCX: 00007f194499e0d9
[  170.766557][ T7327] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  170.774620][ T7327] RBP: 00007f1944a35024 R08: 0000000000000000 R09: 0000000000000000
[  170.782651][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.790765][ T7327] R13: 00007f1944c26038 R14: 00007f1944c25fa0 R15: 00007ffce4ce7c88
[  170.798823][ T7327]  </TASK>
[  171.527320][ T7354] loop0: detected capacity change from 0 to 512
[  171.554736][ T7354] EXT4-fs: inline encryption not supported
[  171.590490][ T7354] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  171.630055][ T7354] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  171.650227][ T7354] EXT4-fs (loop0): 1 truncate cleaned up
[  171.678075][ T7354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.802548][ T7354] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5960: inode #12: comm syz.0.584: bad extra_isize 62 (inode size 256)
[  171.866787][ T7354] EXT4-fs (loop0): Remounting filesystem read-only
[  171.957879][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.568957][ T7378] program syz.1.594 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.705707][ T7382] loop0: detected capacity change from 0 to 64
[  172.817093][ T7386] erspan0: entered promiscuous mode
[  172.824213][ T7382] hfs: request for non-existent node 237 in B*Tree
[  172.844640][ T7382] hfs: request for non-existent node 237 in B*Tree
[  172.857475][ T7382] hfs: request for non-existent node 237 in B*Tree
[  172.880865][ T7382] hfs: request for non-existent node 237 in B*Tree
[  172.915618][ T7382] hfs: request for non-existent node 237 in B*Tree
[  172.934456][ T7382] hfs: request for non-existent node 237 in B*Tree
[  172.969812][   T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  173.190957][   T27] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  173.219110][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.234807][   T27] usb 3-1: Product: syz
[  173.249452][   T27] usb 3-1: Manufacturer: syz
[  173.254551][   T27] usb 3-1: SerialNumber: syz
[  173.272341][   T27] usb 3-1: config 0 descriptor??
[  173.283391][   T27] ch341 3-1:0.0: ch341-uart converter detected
[  173.297318][ T7396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.602'.
[  173.337177][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'.
[  173.701449][ T7392] loop3: detected capacity change from 0 to 32768
[  173.740974][ T7392] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  173.765113][ T7392] JBD2: Ignoring recovery information on journal
[  173.859813][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  173.953414][ T7392] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  174.095069][    T8] usb 2-1: Using ep0 maxpacket: 32
[  174.119984][   T27] usb 3-1: failed to send control message: -71
[  174.120107][    T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  174.139785][   T27] ch341-uart: probe of ttyUSB0 failed with error -71
[  174.167380][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9
[  174.193601][   T27] usb 3-1: USB disconnect, device number 4
[  174.205945][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  174.240842][   T27] ch341 3-1:0.0: device disconnected
[  174.250998][    T8] usb 2-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.00
[  174.287469][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.320692][    T8] usb 2-1: config 0 descriptor??
[  174.367537][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[  174.649450][ T7419] pim6reg1: tun_chr_ioctl cmd 1074025681
[  174.756831][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.774573][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.791068][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.798152][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.806146][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.813631][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.821274][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.828353][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.837695][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.853198][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.863011][    T8] wacom 0003:056A:00C7.0001: unknown main item tag 0x0
[  174.899332][    T8] wacom 0003:056A:00C7.0001: hidraw0: USB HID v5.40 Device [HID 056a:00c7] on usb-dummy_hcd.1-1/input0
[  175.059273][    T8] usb 2-1: USB disconnect, device number 4
[  175.156935][ T7424] fido_id[7424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  175.191412][ T7430] loop3: detected capacity change from 0 to 128
[  175.466306][ T7434] loop0: detected capacity change from 0 to 512
[  175.708252][ T7434] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  175.737947][ T7434] EXT4-fs (loop0): Test dummy encryption mode enabled
[  175.766693][ T7434] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.907141][ T7428] loop2: detected capacity change from 0 to 32768
[  176.039128][ T7428] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  176.039128][ T7428] 
[  176.093322][ T7428] ERROR: (device loop2): remounting filesystem as read-only
[  176.112309][ T7428] ialloc: diAlloc returned -5!
[  176.115215][ T7434] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  176.137885][ T7434] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.619: Directory hole found for htree leaf block 0
[  176.165222][ T7434] EXT4-fs (loop0): Remounting filesystem read-only
[  176.172582][ T7428] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  176.172582][ T7428] 
[  176.296640][ T5776] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  176.726322][ T7464] loop3: detected capacity change from 0 to 2048
[  176.791681][ T7464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.168965][ T7477] loop2: detected capacity change from 0 to 256
[  177.269788][   T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  177.452592][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.478662][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.514865][   T27] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  177.538670][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.577213][   T27] usb 2-1: config 0 descriptor??
[  177.791349][ T7495] loop3: detected capacity change from 0 to 128
[  177.934371][ T7495] syz.3.643: attempt to access beyond end of device
[  177.934371][ T7495] loop3: rw=2049, sector=154, nr_sectors = 96 limit=128
[  177.980823][ T7495] syz.3.643: attempt to access beyond end of device
[  177.980823][ T7495] loop3: rw=2049, sector=138, nr_sectors = 16 limit=128
[  178.023243][   T27] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  178.060094][   T27] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  178.074605][   T27] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  178.103730][   T27] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  178.123096][   T27] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  178.139795][   T27] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  178.157003][   T27] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  178.181749][   T27] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  178.393054][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.421243][   T27] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device
[  178.428780][   T27] pyra 0003:1E7D:2CF6.0002: couldn't install mouse
[  178.452415][   T27] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71
[  178.476039][ T7500] bond0: (slave bond1): Enslaving as an active interface with an up link
[  178.486019][   T27] usb 2-1: USB disconnect, device number 5
[  178.535996][ T7501] fido_id[7501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  178.598876][ T7506] loop3: detected capacity change from 0 to 2048
[  178.646025][ T7506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.659939][ T7508] binder: 7507:7508 ioctl c018620c 200000000280 returned -1
[  179.474370][ T5824] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  179.699748][ T5824] usb 2-1: Using ep0 maxpacket: 16
[  179.715770][ T5824] usb 2-1: unable to get BOS descriptor or descriptor too short
[  179.749815][ T5824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.777498][ T5824] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  179.806725][ T5824] usb 2-1: string descriptor 0 read error: -22
[  179.823480][ T5824] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  179.832794][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.868109][ T5824] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  179.903394][ T5824] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  179.994751][ T7543] dccp_invalid_packet: pskb_may_pull failed
[  180.216428][ T7547] Bluetooth: MGMT ver 1.22
[  180.400218][ T5824] usb 2-1: USB disconnect, device number 6
[  180.428770][ T7551] bond0: entered promiscuous mode
[  180.439747][ T7551] bond_slave_0: entered promiscuous mode
[  180.458120][ T7551] bond_slave_1: entered promiscuous mode
[  180.490276][ T7550] bond0: left promiscuous mode
[  180.511068][ T7550] bond_slave_0: left promiscuous mode
[  180.517022][ T7550] bond_slave_1: left promiscuous mode
[  180.848627][ T7557] loop2: detected capacity change from 0 to 4096
[  180.866479][ T7557] ntfs3: Bad value for 'uid'
[  181.197204][ T7564] netlink: 'syz.3.674': attribute type 2 has an invalid length.
[  181.230209][ T7564] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.674'.
[  181.680084][ T7562] loop0: detected capacity change from 0 to 32768
[  181.719135][ T7557] loop2: detected capacity change from 0 to 32768
[  181.762744][   T28] audit: type=1800 audit(1786506296.009:55): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.673" name="file1" dev="loop0" ino=4 res=0 errno=0
[  181.783474][    C1] vkms_vblank_simulate: vblank timer overrun
[  181.853428][ T7562] ERROR: (device loop0): dbAllocNext: Corrupt dmap page
[  181.853428][ T7562] 
[  181.875760][ T7557] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.884868][ T7577] use of bytesused == 0 is deprecated and will be removed in the future,
[  181.948760][ T7577] use the actual size instead.
[  182.078967][ T7557] XFS (loop2): Ending clean mount
[  182.310532][ T5778] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.622615][ T7598] loop3: detected capacity change from 0 to 16
[  182.694435][ T7598] erofs: (device loop3): mounted with root inode @ nid 36.
[  182.969315][ T7603] loop3: detected capacity change from 0 to 256
[  183.011978][ T7605] loop2: detected capacity change from 0 to 1024
[  183.044852][ T7603] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  183.168283][ T7607] netlink: 116 bytes leftover after parsing attributes in process `syz.1.689'.
[  183.456476][ T7611] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  183.562758][ T7615] loop3: detected capacity change from 0 to 256
[  183.655314][ T7615] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  183.692753][ T7595] loop0: detected capacity change from 0 to 32768
[  184.097959][ T7623] loop0: detected capacity change from 0 to 64
[  184.222855][   T28] audit: type=1800 audit(1786506554.464:56): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.697" name="file1" dev="loop0" ino=22 res=0 errno=0
[  184.498028][ T7613] loop1: detected capacity change from 0 to 32768
[  184.591853][ T7613] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  184.712821][ T7613] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  184.777068][ T7613] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  184.868690][ T7613] XFS (loop1): Ending clean mount
[  185.174960][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.283257][ T5858] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  185.518615][ T7645] loop2: detected capacity change from 0 to 512
[  185.523626][ T5858] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  185.554829][ T5858] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  185.568403][ T5858] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  185.571614][ T7645] EXT4-fs: Ignoring removed oldalloc option
[  185.596777][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.613300][ T7645] EXT4-fs (loop2): Test dummy encryption mode enabled
[  185.614112][ T7637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  185.643868][ T5858] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  185.690982][ T7645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.076187][    T9] usb 1-1: USB disconnect, device number 8
[  186.359061][ T7645] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  186.444129][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.764694][ T7672] maxtcpc: probe of 0-0002 failed with error -5
[  186.786157][ T7672] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x02
[  186.906396][ T7663] loop1: detected capacity change from 0 to 40427
[  186.942481][ T7663] F2FS-fs (loop1): invalid crc value
[  186.970091][ T7663] F2FS-fs (loop1): Found nat_bits in checkpoint
[  187.156101][ T7663] F2FS-fs (loop1): Start checkpoint disabled!
[  187.212217][ T7663] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  187.737075][   T60] kworker/u4:4: attempt to access beyond end of device
[  187.737075][   T60] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  187.756086][   T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  187.766320][   T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  187.893737][ T7696] process 'syz.2.723' launched './file2' with NULL argv: empty string added
[  188.527628][ T7712] scsi_dev_info_list_add_str: bad dev info string 'e' '(null)' '(null)'
[  189.603660][ T7723] loop0: detected capacity change from 0 to 32768
[  189.644585][ T7736] loop2: detected capacity change from 0 to 64
[  189.684608][ T7742] loop1: detected capacity change from 0 to 64
[  189.752130][   T28] audit: type=1800 audit(1786506559.994:57): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.737" name="file1" dev="loop2" ino=21 res=0 errno=0
[  189.780343][ T7723] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  189.849915][   T28] audit: type=1800 audit(1786506560.084:58): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.738" name="file1" dev="loop1" ino=22 res=0 errno=0
[  189.915213][ T7723] XFS (loop0): Ending clean mount
[  190.122215][ T7751] loop3: detected capacity change from 0 to 512
[  190.318005][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  190.335244][ T7756] loop2: detected capacity change from 0 to 16
[  190.479847][ T7756] erofs: (device loop2): mounted with root inode @ nid 36.
[  190.511865][ T5763] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  190.577076][ T7756] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  190.700198][ T5763] usb 2-1: Using ep0 maxpacket: 32
[  190.713153][ T5763] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  190.728366][ T5763] usb 2-1: config 0 has no interface number 0
[  190.746157][ T5763] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  190.758513][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.786718][ T5763] usb 2-1: Product: syz
[  190.798191][ T5763] usb 2-1: Manufacturer: syz
[  190.808663][ T5763] usb 2-1: SerialNumber: syz
[  190.832081][ T5763] usb 2-1: config 0 descriptor??
[  190.856467][ T5763] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  191.078374][ T5763] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  191.116099][ T5763] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  191.382378][ T7761] loop2: detected capacity change from 0 to 32768
[  191.437356][ T7761] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.471840][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  191.475763][ T5858] usb 2-1: USB disconnect, device number 7
[  191.545240][ T5858] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  191.556812][ T7761] XFS (loop2): Ending clean mount
[  191.617993][ T5858] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  191.670539][ T5858] quatech2 2-1:0.51: device disconnected
[  191.722250][ T7781] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  191.854390][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'.
[  191.870843][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.872862][ T7783] ipvlan2: entered allmulticast mode
[  191.890522][ T7783] syz_tun: entered allmulticast mode
[  192.133593][ T7790] <
[  192.474607][ T7797] loop2: detected capacity change from 0 to 512
[  192.971504][ T7810] loop2: detected capacity change from 0 to 1024
[  193.128439][ T7810] hfsplus: invalid xattr key length: 0
[  193.224175][   T42] hfsplus: b-tree write err: -5, ino 8
[  193.349726][ T7800] loop3: detected capacity change from 0 to 32768
[  193.413909][ T7800] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  193.534509][ T7800] XFS (loop3): Ending clean mount
[  193.767976][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  193.918755][   T28] audit: type=1326 audit(1786506564.154:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd950f9e0d9 code=0x7fc00000
[  194.321629][ T7840] loop3: detected capacity change from 0 to 1024
[  194.330477][ T7840] EXT4-fs: Ignoring removed mblk_io_submit option
[  194.337794][ T7840] EXT4-fs: inline encryption not supported
[  194.345143][ T7840] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data
[  195.150327][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  195.254204][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  195.261947][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  195.296127][ T7857] loop3: detected capacity change from 0 to 32768
[  195.348481][ T7857] JBD2: Ignoring recovery information on journal
[  195.355029][    T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  195.355099][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  195.355126][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.392458][    T9] gspca_main: stv0680-2.14.0 probing 041e:4007
[  195.517395][ T7857] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  195.696125][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[  195.788879][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.784'.
[  195.818964][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.784'.
[  195.855563][ T7874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.784'.
[  195.883010][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.784'.
[  196.150759][ T7883] program syz.3.788 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.464156][    T9] stv0680 2-1:4.0: Could not get descriptor 0200
[  196.677943][    T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  196.686391][    T9] stv0680 2-1:4.0: last error: 34,  command = 0x2
[  196.709671][    T9] usb 2-1: USB disconnect, device number 8
[  197.829454][ T7891] loop2: detected capacity change from 0 to 32768
[  197.917989][ T7891] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  197.936801][ T7917] loop0: detected capacity change from 0 to 4096
[  197.957417][ T7917] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  198.097149][ T7917] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  198.175176][ T7891] XFS (loop2): Ending clean mount
[  198.806423][ T7937] loop3: detected capacity change from 0 to 256
[  198.832511][ T5778] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  198.848398][ T7937] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  198.874676][ T7939] loop0: detected capacity change from 0 to 1024
[  199.584422][ T7951] loop0: detected capacity change from 0 to 128
[  199.790892][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'.
[  199.811797][ T7957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.818'.
[  200.191774][ T7968] loop2: detected capacity change from 0 to 8
[  200.297961][ T7968] SQUASHFS error: Unknown LZ4 version
[  200.326518][ T7968] squashfs image failed sanity check
[  200.357451][ T7974] bond0: entered promiscuous mode
[  200.408071][ T7974] bond_slave_0: entered promiscuous mode
[  200.421370][ T7974] bond_slave_1: entered promiscuous mode
[  200.470536][ T7974] batadv_slave_0: entered promiscuous mode
[  200.554154][ T7977] misc userio: Can't change port type on an already running userio instance
[  200.798722][ T7984] netlink: 92 bytes leftover after parsing attributes in process `syz.1.829'.
[  200.835217][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.829'.
[  201.802493][ T8005] loop3: detected capacity change from 0 to 1024
[  201.855972][ T8005] hfsplus: request for non-existent node 3 in B*Tree
[  201.880904][ T8005] hfsplus: request for non-existent node 3 in B*Tree
[  201.952660][ T8005] hfsplus: request for non-existent node 4 in B*Tree
[  201.966914][ T8005] hfsplus: request for non-existent node 4 in B*Tree
[  202.817018][ T5763] IPVS: starting estimator thread 0...
[  202.919702][ T8020] IPVS: using max 17 ests per chain, 40800 per kthread
[  203.055475][ T8001] loop2: detected capacity change from 0 to 32768
[  203.209184][ T8001] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.248132][ T8027] loop0: detected capacity change from 0 to 4096
[  203.312832][ T8027] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  203.340379][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  203.418356][ T8027] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  203.500851][ T8027] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  203.516440][ T8027] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  203.550144][ T8027] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  203.585102][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.604645][ T8027] ntfs: volume version 3.1.
[  203.620101][    T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  203.649592][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.664763][ T8027] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  203.692055][    T8] usb 2-1: config 0 descriptor??
[  203.698341][ T8001] XFS (loop2): Ending clean mount
[  203.714596][ T8027] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  203.769704][ T8027] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  203.795482][ T8001] XFS (loop2): Quotacheck needed: Please wait.
[  203.844181][ T8027] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  203.860041][ T8027] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  203.956057][ T8001] XFS (loop2): Quotacheck: Done.
[  203.981133][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  203.987215][    T8] usbhid: probe of 2-1:0.0 failed with error -71
[  204.044313][    T8] usb 2-1: USB disconnect, device number 9
[  204.395250][ T5778] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.483649][ T8038] loop3: detected capacity change from 0 to 40427
[  204.519954][ T8038] F2FS-fs (loop3): invalid crc value
[  204.575136][ T8038] F2FS-fs (loop3): Found nat_bits in checkpoint
[  204.649868][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  204.711387][ T8038] F2FS-fs (loop3): Start checkpoint disabled!
[  204.740360][ T8038] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  204.847265][    T8] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  204.892881][    T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[  204.908876][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.938420][    T8] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  204.963495][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.984356][    T8] usb 2-1: Product: syz
[  204.988603][    T8] usb 2-1: Manufacturer: syz
[  205.008066][    T8] usb 2-1: SerialNumber: syz
[  205.080114][   T49] kworker/u4:3: attempt to access beyond end of device
[  205.080114][   T49] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  205.109935][   T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  205.117219][   T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  205.524290][    T8] usb 2-1: USB disconnect, device number 10
[  205.616723][ T8046] loop2: detected capacity change from 0 to 32768
[  205.650486][ T8046] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  205.772019][ T8052] loop0: detected capacity change from 0 to 1024
[  205.899980][ T5783] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  206.825625][ T8054] loop3: detected capacity change from 0 to 32768
[  206.927763][ T8054] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.047783][ T8054] XFS (loop3): Ending clean mount
[  207.160233][ T8094] loop0: detected capacity change from 0 to 1024
[  207.328736][ T8094] hfsplus: xattr exists yet
[  207.357166][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.551275][   T27] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  207.741442][   T27] usb 3-1: not running at top speed; connect to a high speed hub
[  207.767662][   T27] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  207.784510][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.793433][ T8106] loop0: detected capacity change from 0 to 64
[  207.806177][   T27] usb 3-1: Product: syz
[  207.819978][   T27] usb 3-1: Manufacturer: syz
[  207.835547][   T27] usb 3-1: SerialNumber: syz
[  207.845087][ T8106] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  208.321541][    C1] usb 3-1: received EP1 urb->status = -2
[  208.328869][   T27] usb 3-1: unable to init card! (ret=-110)
[  208.338194][   T27] snd-usb-caiaq: probe of 3-1:1.0 failed with error -110
[  208.528567][ T8126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.883'.
[  208.608561][ T8128] loop1: detected capacity change from 0 to 1024
[  209.499829][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  209.567867][   T27] usb 3-1: USB disconnect, device number 5
[  209.709722][    T9] usb 2-1: Using ep0 maxpacket: 32
[  209.722778][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  209.749653][    T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  209.775955][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  209.787470][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  209.801761][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.813048][    T9] usb 2-1: Product: syz
[  209.817287][    T9] usb 2-1: Manufacturer: syz
[  209.824004][    T9] usb 2-1: SerialNumber: syz
[  209.832617][    T9] usb 2-1: config 0 descriptor??
[  209.967875][ T8161] loop3: detected capacity change from 0 to 64
[  210.219413][ T8164] loop3: detected capacity change from 0 to 1024
[  210.252314][    T9] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  210.312226][ T8164] hfsplus: xattr exists yet
[  210.454615][    T9] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  210.515931][    T9] gs_usb: probe of 2-1:0.0 failed with error -22
[  210.712914][   T27] usb 2-1: USB disconnect, device number 11
[  210.880421][ T8178] tap0: tun_chr_ioctl cmd 1074025677
[  210.885966][ T8178] tap0: linktype set to 773
[  211.161470][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'.
[  211.174832][ T8184] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  211.543705][ T8189] loop3: detected capacity change from 0 to 4096
[  211.579704][ T8189] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  211.732964][ T8189] ntfs3: loop3: ino=0, attr_set_size
[  211.754988][ T8189] ntfs3: loop3: MFT: r=0, expect seq=0 instead of 1!
[  212.068000][ T8199] netlink: 'syz.2.917': attribute type 6 has an invalid length.
[  212.097096][ T8199] netlink: 'syz.2.917': attribute type 6 has an invalid length.
[  212.309680][ T5858] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  212.332879][ T8187] loop1: detected capacity change from 0 to 40427
[  212.354398][ T8187] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  212.362863][ T8187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  212.379477][ T8187] F2FS-fs (loop1): invalid crc value
[  212.489657][ T5858] usb 4-1: Using ep0 maxpacket: 32
[  212.502947][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  212.522779][ T5858] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  212.532137][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  212.552227][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.569610][ T5858] usb 4-1: Product: syz
[  212.573990][ T5858] usb 4-1: Manufacturer: syz
[  212.578713][ T5858] usb 4-1: SerialNumber: syz
[  212.596486][ T5858] usb 4-1: config 0 descriptor??
[  212.606965][ T8197] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  212.626963][ T5858] hub 4-1:0.0: bad descriptor, ignoring hub
[  212.642168][ T8187] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  212.644682][ T5858] hub: probe of 4-1:0.0 failed with error -5
[  212.655708][ T8187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  212.680895][ T5858] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  212.739756][    T8] usb 3-1: Using ep0 maxpacket: 16
[  212.749509][    T8] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  212.768374][    T8] usb 3-1: config 0 has no interface number 0
[  212.785061][    T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  212.815515][    T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  212.838370][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  212.838386][   T28] audit: type=1800 audit(1786506583.074:60): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.912" name="file1" dev="loop1" ino=10 res=0 errno=0
[  212.912295][    T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  212.944550][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.995202][    T8] usb 3-1: Product: syz
[  213.015391][    T8] usb 3-1: Manufacturer: syz
[  213.040986][    T8] usb 3-1: SerialNumber: syz
[  213.069053][    T8] usb 3-1: config 0 descriptor??
[  213.088245][ T8203] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  213.120003][ T8203] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  213.168148][   T27] usb 4-1: USB disconnect, device number 8
[  213.168288][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  213.370148][ T8203] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  213.377518][ T8203] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  213.500502][ T8211] loop0: detected capacity change from 0 to 512
[  213.514425][ T8211] EXT4-fs: inline encryption not supported
[  213.563016][ T8211] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.920: bad orphan inode 15
[  213.597515][ T8211] ext4_test_bit(bit=14, block=5) = 0
[  213.606031][    T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  213.621045][ T8211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.766821][ T8209] syz.1.912: attempt to access beyond end of device
[  213.766821][ T8209] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.785958][ T8209] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  213.803416][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.982688][ T8217] loop3: detected capacity change from 0 to 2048
[  214.014539][    T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  214.039835][    T8] asix: probe of 3-1:0.34 failed with error -71
[  214.069411][    T8] usb 3-1: USB disconnect, device number 6
[  214.085043][ T8217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.142639][ T8217] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  214.167889][ T8217] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  214.182896][ T8217] EXT4-fs (loop3): This should not happen!! Data will be lost
[  214.182896][ T8217] 
[  214.189908][   T27] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  214.197616][ T8217] EXT4-fs (loop3): Total free blocks count 0
[  214.207315][ T8217] EXT4-fs (loop3): Free/Dirty block details
[  214.216909][ T8217] EXT4-fs (loop3): free_blocks=2415919504
[  214.223397][ T8217] EXT4-fs (loop3): dirty_blocks=16
[  214.228749][ T8217] EXT4-fs (loop3): Block reservation details
[  214.237112][ T8217] EXT4-fs (loop3): i_reserved_data_blocks=1
[  214.281583][ T8220] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  214.431563][   T27] usb 1-1: not running at top speed; connect to a high speed hub
[  214.463884][   T27] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  214.489639][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.497717][   T27] usb 1-1: Product: syz
[  214.527496][   T27] usb 1-1: Manufacturer: syz
[  214.532675][   T27] usb 1-1: SerialNumber: syz
[  214.549864][   T27] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected
[  214.585976][   T27] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  214.608329][   T27] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  214.654346][   T27] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  214.684984][   T27] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  215.467522][ T8249] netlink: 'syz.3.934': attribute type 9 has an invalid length.
[  215.476063][ T8249] netlink: 371 bytes leftover after parsing attributes in process `syz.3.934'.
[  215.851898][ T8259] pimreg: tun_chr_ioctl cmd 2147767507
[  216.699154][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.730211][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.737563][ T8282] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.746076][ T8282] bridge_slave_0: left allmulticast mode
[  216.752168][ T8282] bridge_slave_0: left promiscuous mode
[  216.758271][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.776740][ T8282] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  216.965673][    T9] usb 1-1: USB disconnect, device number 9
[  216.990014][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'.
[  217.011103][    T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  217.050799][    T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  217.094509][    T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  217.133266][    T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  217.161043][    T9] keyspan 1-1:1.0: device disconnected
[  217.172503][ T5780] Bluetooth: hci1: command 0x0401 tx timeout
[  217.277562][ T8288] program syz.2.953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.353993][ T8290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.512319][ T8280] loop3: detected capacity change from 0 to 32768
[  217.524507][ T8296] loop2: detected capacity change from 0 to 8
[  217.653212][ T8296] SQUASHFS error: Failed to read block 0x26067d: -5
[  217.707626][ T8296] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  217.717189][ T8296] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  217.816048][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  217.816212][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  217.823026][ T5792] Bluetooth: hci0: command 0x0406 tx timeout
[  218.409241][ T8318] loop1: detected capacity change from 0 to 512
[  218.499705][ T8318] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  218.555543][ T8318] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  218.589055][ T8318] System zones: 1-12
[  218.595065][ T8318] EXT4-fs (loop1): orphan cleanup on readonly fs
[  218.613279][ T8318] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.965: attempt to clear invalid blocks 1024 len 1
[  218.651240][ T8318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.965: bg 0: block 361: padding at end of block bitmap is not set
[  218.691043][ T8318] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  218.782280][ T8318] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.965: invalid indirect mapped block 1811939328 (level 0)
[  218.810847][ T8318] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.965: invalid indirect mapped block 2 (level 2)
[  218.857024][ T8318] EXT4-fs (loop1): 1 truncate cleaned up
[  218.905542][ T8318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  219.146203][ T8340] (null): rxe_set_mtu: Set mtu to 512
[  219.161259][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  219.253950][   T51] Bluetooth: hci1: command 0x0401 tx timeout
[  219.589413][ T8340] infiniband syz1: set active
[  219.598113][ T8340] infiniband syz1: added syz_tun
[  219.691708][ T8340] RDS/IB: syz1: added
[  219.710706][ T8340] smc: adding ib device syz1 with port count 1
[  219.717540][ T8340] smc:    ib device syz1 port 1 has pnetid 
[  220.325467][ T8349] loop1: detected capacity change from 0 to 40427
[  220.347268][ T8349] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  220.356980][ T8349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  220.409954][ T8349] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  220.422853][ T8349] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  220.432513][ T8349] F2FS-fs (loop1): Image doesn't support compression
[  220.444833][ T8349] F2FS-fs (loop1): invalid crc value
[  220.471076][ T8349] F2FS-fs (loop1): Found nat_bits in checkpoint
[  220.579851][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  220.651334][ T8349] F2FS-fs (loop1): Start checkpoint disabled!
[  220.751334][ T8349] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  220.758487][ T8349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  220.840282][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.863713][   T23] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  220.873332][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.895282][   T23] usb 3-1: config 0 descriptor??
[  220.973265][   T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  221.019264][ T8349] F2FS-fs (loop1): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xa0d/0x1a00
[  221.061784][ T8349] syz.1.979: attempt to access beyond end of device
[  221.061784][ T8349] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  221.177548][ T8365] loop0: detected capacity change from 0 to 512
[  221.218861][ T8365] EXT4-fs: Ignoring removed nobh option
[  221.281591][ T8365] EXT4-fs (loop0): orphan cleanup on readonly fs
[  221.354266][ T8365] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.984: EA inode hash validation failed
[  221.412318][ T8365] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  221.449371][   T60] kworker/u4:4: attempt to access beyond end of device
[  221.449371][   T60] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  221.468308][    T8] usb 3-1: USB disconnect, device number 7
[  221.476991][ T8365] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.984: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  221.506169][   T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  221.513915][   T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  221.522419][   T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  221.543759][ T8365] EXT4-fs (loop0): Remounting filesystem read-only
[  221.552323][ T8365] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.984: ea_inode dec ref err=-117
[  221.567240][ T8365] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -5)
[  221.583284][ T8365] EXT4-fs (loop0): 1 orphan inode deleted
[  221.591052][ T8365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  221.712020][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.277286][ T8377] loop1: detected capacity change from 0 to 128
[  222.315911][ T8377] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  222.336237][ T8377] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.508228][ T8383] loop0: detected capacity change from 0 to 2048
[  222.562128][ T8383] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  222.631128][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.655576][ T6743] udevd[6743]: incorrect nilfs2 checksum on /dev/loop0
[  222.662954][ T8386] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.730598][ T8383] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  222.859770][ T8383] Remounting filesystem read-only
[  223.712939][ T8412] loop1: detected capacity change from 0 to 256
[  224.253772][ T8423] loop1: detected capacity change from 0 to 4096
[  224.373364][ T8427] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  224.608797][ T8431] ntfs3: loop1: failed to convert "0080" to macinuit
[  225.159661][   T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  225.260064][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  225.349751][   T27] usb 1-1: Using ep0 maxpacket: 32
[  225.365293][   T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  225.374030][   T27] usb 1-1: config 0 has no interface number 0
[  225.394377][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'.
[  225.396621][   T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.412124][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'.
[  225.439611][   T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.449473][   T27] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  225.450475][    T9] usb 2-1: Using ep0 maxpacket: 32
[  225.469799][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.490177][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  225.494875][   T27] usb 1-1: config 0 descriptor??
[  225.526410][    T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  225.544384][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.557671][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  225.587712][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.610033][    T9] usb 2-1: Product: syz
[  225.614283][    T9] usb 2-1: Manufacturer: syz
[  225.618921][    T9] usb 2-1: SerialNumber: syz
[  225.643251][    T9] usb 2-1: config 0 descriptor??
[  225.758821][ T8449] loop3: detected capacity change from 0 to 40427
[  225.800818][ T8449] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  225.807274][ T8449] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  225.833724][ T8449] F2FS-fs (loop3): invalid crc value
[  226.074465][ T8449] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  226.087553][ T8449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  226.113779][    T9] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  226.141765][   T27] uclogic 0003:28BD:0094.0003: pen parameters not found
[  226.160632][   T27] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring
[  226.183977][   T27] usb 1-1: USB disconnect, device number 10
[  226.257975][   T28] audit: type=1800 audit(1786506596.494:61): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1021" name="file1" dev="loop3" ino=10 res=0 errno=0
[  226.553056][    T9] usb 2-1: USB disconnect, device number 12
[  226.905549][ T8471] tun0: tun_chr_ioctl cmd 2148553947
[  227.003019][ T8466] syz.3.1021: attempt to access beyond end of device
[  227.003019][ T8466] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  227.047323][ T8466] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  227.124268][ T8475] loop2: detected capacity change from 0 to 256
[  227.143959][ T8475] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  227.210156][   T28] audit: type=1800 audit(1786506597.444:62): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1031" name="file1" dev="loop2" ino=1048653 res=0 errno=0
[  227.304035][   T28] audit: type=1800 audit(1786506597.454:63): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1031" name="file1" dev="loop2" ino=1048653 res=0 errno=0
[  227.441518][ T8478] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264)
[  227.474712][ T8478] FAT-fs (loop2): Filesystem has been set read-only
[  227.530946][ T8478] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  227.539394][ T8478] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  227.586784][ T8484] netlink: 4596 bytes leftover after parsing attributes in process `syz.1.1036'.
[  227.723694][ T8489] C: renamed from team_slave_0 (while UP)
[  227.732623][ T8489] netlink: 'syz.1.1038': attribute type 8 has an invalid length.
[  227.743742][ T8489] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  227.935666][ T8496] program syz.1.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  228.057320][ T8498] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1042'.
[  228.276456][   T27] kernel read not supported for file /adsp1 (pid: 27 comm: kworker/1:1)
[  228.309030][ T8506] batman_adv: batadv0: Adding interface: macvtap1
[  228.322872][ T8506] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  228.568554][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'.
[  228.642157][ T8516] IPVS: Error joining to the multicast group
[  229.483071][ T8542] loop0: detected capacity change from 0 to 512
[  229.497446][ T8542] EXT4-fs: Ignoring removed nobh option
[  229.519905][ T8542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  229.548543][ T8542] EXT4-fs (loop0): 1 truncate cleaned up
[  229.557878][ T8542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.786962][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.575904][ T8569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1073'.
[  231.009966][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'.
[  231.449280][ T8590] loop1: detected capacity change from 0 to 164
[  231.483034][ T8550] loop3: detected capacity change from 0 to 65536
[  231.497998][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'.
[  231.536110][ T8590] ISOFS: unable to read i-node block
[  231.555649][ T8590] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  231.659232][ T8550] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  231.907802][ T8550] XFS (loop3): Ending clean mount
[  232.168104][ T5774] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  232.366104][ T8583] loop2: detected capacity change from 0 to 40427
[  232.430126][ T8583] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  232.437434][ T8583] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  232.520151][ T8583] F2FS-fs (loop2): Image doesn't support compression
[  232.535471][ T8583] F2FS-fs (loop2): Image doesn't support compression
[  232.575837][ T8583] F2FS-fs (loop2): invalid crc value
[  232.806873][ T8583] F2FS-fs (loop2): Start checkpoint disabled!
[  232.862320][ T8583] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  232.899639][ T8583] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  233.177755][   T60] kworker/u4:4: attempt to access beyond end of device
[  233.177755][   T60] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.214817][   T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  233.226756][ T8622] loop3: detected capacity change from 0 to 256
[  233.327159][   T28] audit: type=1800 audit(1786506603.554:64): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1088" name="file1" dev="loop3" ino=1048654 res=0 errno=0
[  233.984868][ T8638] batman_adv: batadv0: Adding interface: macvtap1
[  233.992068][ T8638] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.010286][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  234.039891][ T8638] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  234.116725][ T8640] loop1: detected capacity change from 0 to 1764
[  234.230154][   T23] usb 1-1: Using ep0 maxpacket: 16
[  234.240039][   T23] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  234.255576][   T23] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  234.278972][   T23] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 57701, setting to 1024
[  234.294803][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[  234.312418][   T23] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  234.325828][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.338992][   T23] usb 1-1: Product: syz
[  234.343692][   T23] usb 1-1: Manufacturer: syz
[  234.348592][   T23] usb 1-1: SerialNumber: syz
[  234.363463][   T23] usb 1-1: config 0 descriptor??
[  234.405551][ T8631] loop3: detected capacity change from 0 to 32768
[  234.499151][ T8631] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  234.599830][   T23] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  234.892475][   T23] usb 1-1: USB disconnect, device number 11
[  234.900675][ T5125] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  235.067411][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[  235.509715][   T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  235.718259][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'.
[  235.761861][   T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.780034][   T27] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  235.789162][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.857750][   T27] usb 2-1: config 0 descriptor??
[  235.930652][   T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  236.007936][ T8671] loop0: detected capacity change from 0 to 1024
[  236.189910][ T8671] hfsplus: xattr searching failed
[  236.238086][ T8659] loop2: detected capacity change from 0 to 40427
[  236.283287][ T8659] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  236.304656][ T8659] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  236.335660][   T27] usb 2-1: USB disconnect, device number 13
[  236.343677][ T8659] F2FS-fs (loop2): invalid crc value
[  236.532913][ T8659] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  236.543704][ T8659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  236.631495][   T28] audit: type=1800 audit(1786506606.874:65): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1107" name="file1" dev="loop2" ino=10 res=0 errno=0
[  237.273011][ T8691] bond1: Removing last ns target with arp_interval on
[  237.619761][   T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  237.799323][ T8683] syz.2.1107: attempt to access beyond end of device
[  237.799323][ T8683] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.846000][ T8683] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  237.860582][   T27] usb 4-1: Using ep0 maxpacket: 16
[  237.868640][   T27] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.900651][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  237.907374][   T27] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  237.947651][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.074317][   T27] usb 4-1: config 0 descriptor??
[  238.499934][   T56] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  238.561234][   T27] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  238.568758][   T27] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  238.587717][   T27] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  238.606842][   T27] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  238.614695][   T27] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0
[  238.648500][   T27] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  238.700236][   T56] usb 2-1: Using ep0 maxpacket: 32
[  238.713353][   T56] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  238.749818][   T56] usb 2-1: config 0 has no interface number 0
[  238.756031][   T56] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  238.809942][   T56] usb 2-1: config 0 interface 85 has no altsetting 0
[  238.834373][   T56] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  238.858761][   T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.877971][   T56] usb 2-1: Product: syz
[  238.890836][   T56] usb 2-1: Manufacturer: syz
[  238.901952][   T56] usb 2-1: SerialNumber: syz
[  238.919702][   T56] usb 2-1: config 0 descriptor??
[  238.974638][    T9] usb 4-1: USB disconnect, device number 9
[  239.400599][ T8734] loop0: detected capacity change from 0 to 512
[  239.420579][ T8734] EXT4-fs: Ignoring removed orlov option
[  239.446159][ T8734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  239.455184][ T8734] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  239.472131][ T8734] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c028, mo2=0002]
[  239.482373][ T8734] EXT4-fs (loop0): orphan cleanup on readonly fs
[  239.515433][ T8734] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1138: Allocating blocks 41-42 which overlap fs metadata
[  239.550710][ T8734] EXT4-fs (loop0): Remounting filesystem read-only
[  239.586420][   T56] appletouch 2-1:0.85: Geyser mode initialized.
[  239.595548][   T56] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input13
[  239.620170][ T8734] Quota error (device loop0): write_blk: dquota write failed
[  239.633170][ T8734] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  239.643730][ T8734] EXT4-fs (loop0): 1 truncate cleaned up
[  239.690229][ T8734] EXT4-fs (loop0): pa ffff888076a53740: logic 1, phys. 41, len 23
[  239.707604][ T8734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  239.891718][   T56] usb 2-1: USB disconnect, device number 14
[  239.891855][    C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  239.978742][   T56] appletouch 2-1:0.85: input: appletouch disconnected
[  240.014883][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.190875][ T8746] block2mtd: illegal erase size
[  240.222001][ T8750] loop3: detected capacity change from 0 to 64
[  240.251131][ T8750] MINIX-fs: mounting file system with errors, running fsck is recommended
[  240.321845][ T8750] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  240.346858][ T8750] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  240.744758][ T8765] input: syz1 as /devices/virtual/input/input14
[  240.965595][ T8771] loop3: detected capacity change from 0 to 1024
[  241.026109][ T8771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.682739][ T8791] loop0: detected capacity change from 0 to 2048
[  241.733836][ T8794] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.787090][ T8794] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  241.818652][ T8794] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  241.845073][ T8794] Remounting filesystem read-only
[  241.957635][ T5776] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  241.987868][ T8796] netlink: 'syz.2.1168': attribute type 12 has an invalid length.
[  241.989710][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=18
[  242.003401][ T8796] netlink: 'syz.2.1168': attribute type 29 has an invalid length.
[  242.029787][ T8796] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1168'.
[  242.036183][ T5776] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  242.057200][ T8796] netlink: 'syz.2.1168': attribute type 1 has an invalid length.
[  242.065500][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.074843][ T8796] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1168'.
[  242.109740][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.129116][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.150010][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=2
[  242.156778][ T5776] NILFS (loop0): discard dirty block: blocknr=18, size=1024
[  242.174401][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.209907][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.218844][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.270102][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=6
[  242.276863][ T5776] NILFS (loop0): discard dirty block: blocknr=35, size=1024
[  242.300145][ T5776] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[  242.307518][ T5776] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  242.329607][ T5776] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  242.337018][ T5776] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  242.359615][ T5776] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  242.367037][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.389690][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.398806][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.431267][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=5
[  242.438035][ T5776] NILFS (loop0): discard dirty block: blocknr=41, size=1024
[  242.455713][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.475221][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.495456][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.516006][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=4
[  242.526739][ T8799] loop2: detected capacity change from 0 to 4096
[  242.529761][ T5776] NILFS (loop0): discard dirty block: blocknr=40, size=1024
[  242.551194][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.574033][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.609073][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.628097][ T8800] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.639416][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=3
[  242.654300][ T5776] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  242.679667][ T5776] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  242.702395][ T5776] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  242.718282][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.749254][ T5776] NILFS (loop0): discard dirty page: offset=65536, ino=3
[  242.756971][   T28] audit: type=1800 audit(1786506868.987:66): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1170" name="file1" dev="loop2" ino=15 res=0 errno=0
[  242.786465][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.827721][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.857681][ T5776] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  242.879627][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.896015][ T5776] NILFS (loop0): discard dirty page: offset=196608, ino=3
[  242.919723][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.957343][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.993953][ T5776] NILFS (loop0): discard dirty block: blocknr=49, size=1024
[  243.012586][ T5776] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.078357][ T8783] loop1: detected capacity change from 0 to 65536
[  243.184331][ T8783] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  243.258892][ T8819] loop3: detected capacity change from 0 to 128
[  243.336057][   T28] audit: type=1800 audit(1786506869.577:67): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1174" name="file2" dev="loop3" ino=1048655 res=0 errno=0
[  243.341971][ T8783] XFS (loop1): Ending clean mount
[  243.389206][ T8819] syz.3.1174: attempt to access beyond end of device
[  243.389206][ T8819] loop3: rw=2049, sector=145, nr_sectors = 79 limit=128
[  243.534300][ T8822] loop2: detected capacity change from 0 to 256
[  243.664679][ T8822] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  243.699197][ T8822] FAT-fs (loop2): Filesystem has been set read-only
[  243.706851][ T8822] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  243.721556][ T5775] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  243.740971][ T8822] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  243.777722][   T28] audit: type=1800 audit(1786506870.017:68): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1175" name="file1" dev="loop2" ino=1048656 res=0 errno=0
[  244.166323][   T23] IPVS: starting estimator thread 0...
[  244.173497][ T8834] IPVS: fo: FWM 3 0x00000003 - no destination available
[  244.289716][ T8835] IPVS: using max 20 ests per chain, 48000 per kthread
[  245.532260][ T8846] loop0: detected capacity change from 0 to 32768
[  245.584388][ T8846] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  245.766523][ T8852] loop1: detected capacity change from 0 to 40427
[  245.779668][ T8846] XFS (loop0): Ending clean mount
[  245.816853][ T8852] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  245.857145][ T8852] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  245.905128][ T8852] F2FS-fs (loop1): invalid crc value
[  245.924715][ T8852] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  245.934928][ T8846] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  245.968064][ T8852] F2FS-fs (loop1): Found nat_bits in checkpoint
[  246.147901][ T8852] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  246.156376][ T5776] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  246.190375][ T8852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  246.951367][ T8893] loop0: detected capacity change from 0 to 128
[  246.959175][ T8893] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  247.041172][ T8893] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  247.217520][ T2999] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  247.242251][ T8898] loop2: detected capacity change from 0 to 256
[  247.323404][ T8898] exFAT-fs (loop2): error, The cluster chain has a loop
[  247.358952][ T8901] ip_tables: iptables: counters copy to user failed while replacing table
[  247.368097][ T8898] exFAT-fs (loop2): Filesystem has been set read-only
[  247.379983][ T8898] exFAT-fs (loop2): failed to count the number of clusters in root
[  247.397617][ T8898] exFAT-fs (loop2): failed to recognize exfat type
[  247.649855][ T8909] loop0: detected capacity change from 0 to 64
[  247.822825][ T8917] loop3: detected capacity change from 0 to 128
[  247.890560][   T28] audit: type=1800 audit(1786506874.127:69): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1211" name="file1" dev="loop3" ino=1048660 res=0 errno=0
[  248.677643][ T8939] loop2: detected capacity change from 0 to 1024
[  249.014147][ T8949] loop1: detected capacity change from 0 to 128
[  249.078600][   T28] audit: type=1800 audit(1786506875.317:70): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1224" name="file1" dev="loop1" ino=1048661 res=0 errno=0
[  249.847297][ T8973] loop1: detected capacity change from 0 to 1024
[  249.926309][ T8973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  249.940263][ T8973] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.027897][ T8973] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.1235: Freeing blocks not in datazone - block = 0, count = 16
[  250.160257][ T2999] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:10: bg 0: block 112: padding at end of block bitmap is not set
[  250.200124][ T2999] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  250.247918][ T2999] EXT4-fs (loop1): This should not happen!! Data will be lost
[  250.247918][ T2999] 
[  250.268822][ T2999] EXT4-fs (loop1): Total free blocks count 0
[  250.280112][ T2999] EXT4-fs (loop1): Free/Dirty block details
[  250.286171][ T2999] EXT4-fs (loop1): free_blocks=16
[  250.309837][ T2999] EXT4-fs (loop1): dirty_blocks=16
[  250.330293][ T2999] EXT4-fs (loop1): Block reservation details
[  250.346715][ T2999] EXT4-fs (loop1): i_reserved_data_blocks=1
[  250.358263][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  250.488232][ T8991] ip_tables: iptables: counters copy to user failed while replacing table
[  250.697198][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0c22
[  250.717319][ T8998] loop1: detected capacity change from 0 to 512
[  250.738055][ T8998] EXT4-fs: inline encryption not supported
[  250.778452][ T8998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  250.819935][ T8998] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  250.862154][ T9003] loop0: detected capacity change from 0 to 1024
[  250.896990][ T8998] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 1
[  250.950151][ T8998] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  250.991488][ T8998] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1245: Failed to acquire dquot type 1
[  251.009407][ T8998] EXT4-fs (loop1): Remounting filesystem read-only
[  251.029796][ T8998] EXT4-fs (loop1): 1 truncate cleaned up
[  251.036866][ T8998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.157012][   T42] hfsplus: b-tree write err: -5, ino 25
[  251.171228][   T42] hfsplus: b-tree write err: -5, ino 4
[  251.182413][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.191383][   T42] hfsplus: b-tree write err: -5, ino 2
[  251.206466][   T42] hfsplus: b-tree write err: -5, ino 17
[  251.473714][ T9013] block nbd1: shutting down sockets
[  251.570245][ T5781] Bluetooth: hci4: command 0x1003 tx timeout
[  251.577164][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  251.789169][ T9016] loop1: detected capacity change from 0 to 512
[  251.946752][ T9016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.959833][ T9016] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.264184][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.676912][ T9046] loop2: detected capacity change from 0 to 512
[  252.703686][ T9044] can0: slcan on ptm0.
[  252.713820][ T9046] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1262: Invalid inode bitmap blk 4 in block_group 0
[  252.736265][ T9046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.754083][ T9051] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  253.093373][ T9041] can0 (unregistered): slcan off ptm0.
[  253.139741][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.941274][ T9088] loop3: detected capacity change from 0 to 512
[  254.011790][ T9088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.039684][ T9088] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.179943][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  254.305179][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.391126][    T8] usb 1-1: Using ep0 maxpacket: 32
[  254.410220][    T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  254.418383][    T8] usb 1-1: config 0 has no interface number 0
[  254.462889][    T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  254.477680][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.488148][ T9098] loop1: detected capacity change from 0 to 4096
[  254.502727][    T8] usb 1-1: Product: syz
[  254.515478][    T8] usb 1-1: Manufacturer: syz
[  254.531695][    T8] usb 1-1: SerialNumber: syz
[  254.571545][    T8] usb 1-1: config 0 descriptor??
[  254.604457][    T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  254.850419][    T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  254.886284][    T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  255.110075][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 170
[  255.315699][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  255.323145][   T27] usb 1-1: USB disconnect, device number 12
[  255.381011][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  255.410659][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  255.469176][   T27] quatech2 1-1:0.51: device disconnected
[  255.715184][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'.
[  256.157909][ T9154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1294'.
[  256.382594][ T9162] loop2: detected capacity change from 0 to 512
[  256.406843][ T9162] EXT4-fs: Ignoring removed orlov option
[  256.443871][ T9162] EXT4-fs: Ignoring removed mblk_io_submit option
[  256.494277][ T9162] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.1297: corrupted in-inode xattr: e_value size too large
[  256.519287][ T9162] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1297: couldn't read orphan inode 15 (err -117)
[  256.545002][ T9162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.698150][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  256.708223][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.739301][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.832884][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'.
[  256.977540][ T9170] loop0: detected capacity change from 0 to 4096
[  257.006486][ T9170] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  257.102389][ T9174] kAFS: Invalid Command on /proc/fs/afs/cells file
[  257.327524][ T9179] tipc: Started in network mode
[  257.334595][ T9179] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  257.369735][ T9179] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  257.415660][ T9179] tipc: Enabled bearer <udp:syz0>, priority 10
[  257.747545][ T9189] loop0: detected capacity change from 0 to 512
[  257.783979][ T9189] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  257.825039][ T9189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  257.872001][ T9189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.932168][ T9189] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.965443][ T9189] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1307: corrupted inode contents
[  258.027558][ T9200] loop2: detected capacity change from 0 to 128
[  258.055213][ T9189] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #2: comm syz.0.1307: mark_inode_dirty error
[  258.150266][ T9189] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1307: corrupted inode contents
[  258.230696][ T9203] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1307: corrupted inode contents
[  258.280951][ T9203] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #2: comm syz.0.1307: mark_inode_dirty error
[  258.322221][ T9207] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  258.360093][ T9203] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1307: corrupted inode contents
[  258.398321][ T9203] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #2: comm syz.0.1307: mark_inode_dirty error
[  258.525044][ T5763] tipc: Node number set to 1
[  258.590708][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.899732][   T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  258.970753][ T9226] loop3: detected capacity change from 0 to 128
[  259.049231][   T28] audit: type=1800 audit(1786506885.287:71): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1321" name="file1" dev="loop3" ino=1048663 res=0 errno=0
[  259.097355][   T28] audit: type=1800 audit(1786506885.317:72): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1321" name="file1" dev="loop3" ino=1048663 res=0 errno=0
[  259.146296][   T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  259.157249][   T23] usb 3-1: config 0 has no interface number 0
[  259.178198][   T23] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  259.187895][ T9230] loop0: detected capacity change from 0 to 512
[  259.224000][   T23] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.245717][ T9230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.261472][ T9230] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  259.272027][   T23] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  259.316812][ T9230] EXT4-fs (loop0): shut down requested (1)
[  259.348157][   T23] usb 3-1: config 0 interface 1 has no altsetting 0
[  259.372045][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.402027][   T23] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  259.419741][   T23] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[  259.427981][   T23] usb 3-1: Manufacturer: syz
[  259.463846][   T23] usb 3-1: config 0 descriptor??
[  259.589161][ T9237] loop0: detected capacity change from 0 to 512
[  259.631155][ T9237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  259.707060][ T9237] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  259.792634][ T9242] loop3: detected capacity change from 0 to 4096
[  259.799706][ T9237] EXT4-fs (loop0): 1 truncate cleaned up
[  259.836518][ T9237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.944760][ T9246] netlink: 'syz.1.1331': attribute type 1 has an invalid length.
[  259.984540][ T9247] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.051405][ T9242] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.'
[  260.110989][ T9242] Remounting filesystem read-only
[  260.135157][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.184642][   T23] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0005/input/input15
[  260.212302][ T5774] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  260.240173][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=18
[  260.263775][ T5774] NILFS (loop3): discard dirty block: blocknr=0, size=4096
[  260.285946][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=2
[  260.295227][ T5774] NILFS (loop3): discard dirty block: blocknr=14, size=4096
[  260.311359][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=6
[  260.348704][ T5774] NILFS (loop3): discard dirty block: blocknr=23, size=4096
[  260.364192][   T23] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0005/input/input16
[  260.366846][ T5774] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  260.408111][ T5774] NILFS (loop3): discard dirty block: blocknr=24, size=4096
[  260.433846][   T23] uclogic 0003:145F:0212.0005: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.2-1/input1
[  260.434213][ T5774] NILFS (loop3): discard dirty page: offset=8192, ino=6
[  260.460041][ T5774] NILFS (loop3): discard dirty block: blocknr=25, size=4096
[  260.472232][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=3
[  260.479124][ T5774] NILFS (loop3): discard dirty block: blocknr=28, size=4096
[  260.489616][   T23] usb 3-1: USB disconnect, device number 8
[  260.509213][ T5774] NILFS (loop3): discard dirty page: offset=4096, ino=3
[  260.549055][ T5774] NILFS (loop3): discard dirty block: blocknr=29, size=4096
[  260.589649][ T5774] NILFS (loop3): discard dirty page: offset=270336, ino=3
[  260.619596][ T5774] NILFS (loop3): discard dirty block: blocknr=0, size=4096
[  260.810645][ T9259] loop0: detected capacity change from 0 to 1024
[  260.839453][ T9259] EXT4-fs: Ignoring removed orlov option
[  260.906598][ T9259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.030360][ T9259] EXT4-fs error (device loop0): __ext4_new_inode:1290: comm syz.0.1338: failed to insert inode 16: doubly allocated?
[  261.071313][ T9260] fido_id[9260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  261.240527][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.584196][ T9280] loop3: detected capacity change from 0 to 64
[  261.639820][   T28] audit: type=1800 audit(1786506887.877:73): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1346" name="file1" dev="loop3" ino=21 res=0 errno=0
[  261.689834][   T28] audit: type=1800 audit(1786506887.907:74): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1346" name="file1" dev="loop3" ino=21 res=0 errno=0
[  262.127738][ T9294] loop0: detected capacity change from 0 to 256
[  262.166883][ T9294] exfat: Deprecated parameter 'namecase'
[  262.277575][ T9294] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[  262.806584][ T9287] loop3: detected capacity change from 0 to 40427
[  262.839316][ T9287] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  262.861604][ T9287] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  262.882395][ T9287] F2FS-fs (loop3): invalid crc value
[  263.007830][ T9316] loop1: detected capacity change from 0 to 256
[  263.113442][ T9316] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  263.198479][ T9287] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  263.200366][   T28] audit: type=1800 audit(1786506889.437:75): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1361" name="file1" dev="loop1" ino=1048664 res=0 errno=0
[  263.240459][ T9287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  263.442989][   T28] audit: type=1800 audit(1786506889.687:76): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1349" name="file1" dev="loop3" ino=10 res=0 errno=0
[  263.471587][ T9287] syz.3.1349: attempt to access beyond end of device
[  263.471587][ T9287] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  263.598595][ T5774] syz-executor: attempt to access beyond end of device
[  263.598595][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.654546][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  264.317504][ T9324] loop1: detected capacity change from 0 to 32768
[  264.377248][ T9324] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  264.643020][ T9324] (syz.1.1364,9324,1):ocfs2_double_lock:1190 ERROR: status = -2
[  264.708452][ T9324] (syz.1.1364,9324,1):ocfs2_rename:1299 ERROR: status = -2
[  264.730184][ T9324] (syz.1.1364,9324,1):ocfs2_rename:1690 ERROR: status = -2
[  264.794062][ T9343] loop3: detected capacity change from 0 to 512
[  264.909051][ T9343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.979023][ T5775] ocfs2: Unmounting device (7,1) on (node local)
[  265.010305][ T9343] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.244423][ T9351] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  265.277692][ T9343] overlayfs: conflicting lowerdir path
[  265.432077][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1374'.
[  265.490153][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1374'.
[  265.512700][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.749904][ T9360] netlink: 'syz.3.1377': attribute type 1 has an invalid length.
[  265.784601][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1377'.
[  266.135200][ T9353] loop0: detected capacity change from 0 to 40427
[  266.197116][ T9353] F2FS-fs (loop0): invalid crc value
[  266.228621][ T9353] F2FS-fs (loop0): Found nat_bits in checkpoint
[  266.389794][ T9353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  266.552688][ T9374] f2fs_ckpt-7:0: attempt to access beyond end of device
[  266.552688][ T9374] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.605660][ T9384] loop1: detected capacity change from 0 to 512
[  266.631110][ T9374] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  266.669779][ T9384] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1388: inode has both inline data and extents flags
[  266.694136][ T9384] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1388: couldn't read orphan inode 15 (err -117)
[  266.710186][   T28] audit: type=1800 audit(1786506892.957:77): pid=9353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1376" name="file1" dev="loop0" ino=10 res=0 errno=0
[  266.733179][ T9387] loop2: detected capacity change from 0 to 764
[  266.757107][ T9385] syz.0.1376: attempt to access beyond end of device
[  266.757107][ T9385] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  266.774983][ T9385] syz.0.1376: attempt to access beyond end of device
[  266.774983][ T9385] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  266.779439][ T9384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.819302][ T9391] loop3: detected capacity change from 0 to 2048
[  266.902659][ T9391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.047336][ T9391] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  267.099243][ T9391] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  267.113474][ T9391] EXT4-fs (loop3): This should not happen!! Data will be lost
[  267.113474][ T9391] 
[  267.135548][ T9391] EXT4-fs (loop3): Total free blocks count 0
[  267.144975][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.156667][ T9391] EXT4-fs (loop3): Free/Dirty block details
[  267.163989][ T9395] program syz.2.1392 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.189378][ T9391] EXT4-fs (loop3): free_blocks=4096
[  267.219761][ T9391] EXT4-fs (loop3): dirty_blocks=16
[  267.228036][ T9391] EXT4-fs (loop3): Block reservation details
[  267.260682][ T9391] EXT4-fs (loop3): i_reserved_data_blocks=1
[  267.350879][ T9397] loop1: detected capacity change from 0 to 512
[  267.397154][ T9397] EXT4-fs (loop1): 1 truncate cleaned up
[  267.426794][ T9397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.462959][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.599569][   T28] audit: type=1800 audit(1786506893.837:78): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1393" name="file1" dev="loop1" ino=15 res=0 errno=0
[  267.753906][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.059136][ T9440] loop1: detected capacity change from 0 to 512
[  269.106665][ T9440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.120948][ T9440] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.178117][ T9440] overlayfs: conflicting lowerdir path
[  269.326234][ T9448] loop0: detected capacity change from 0 to 256
[  269.385017][ T9450] loop2: detected capacity change from 0 to 256
[  269.460535][ T9448] FAT-fs (loop0): Directory bread(block 64) failed
[  269.467289][ T9448] FAT-fs (loop0): Directory bread(block 65) failed
[  269.511117][ T9448] FAT-fs (loop0): Directory bread(block 66) failed
[  269.538451][ T9448] FAT-fs (loop0): Directory bread(block 67) failed
[  269.539069][ T9450] FAT-fs (loop2): Directory bread(block 64) failed
[  269.556329][ T9448] FAT-fs (loop0): Directory bread(block 68) failed
[  269.568686][ T9448] FAT-fs (loop0): Directory bread(block 69) failed
[  269.584879][ T9448] FAT-fs (loop0): Directory bread(block 70) failed
[  269.585106][ T9450] FAT-fs (loop2): Directory bread(block 65) failed
[  269.606780][ T9450] FAT-fs (loop2): Directory bread(block 66) failed
[  269.609926][ T9448] FAT-fs (loop0): Directory bread(block 71) failed
[  269.614109][ T9450] FAT-fs (loop2): Directory bread(block 67) failed
[  269.627302][ T9450] FAT-fs (loop2): Directory bread(block 68) failed
[  269.635129][ T9450] FAT-fs (loop2): Directory bread(block 69) failed
[  269.643916][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.646004][ T9448] FAT-fs (loop0): Directory bread(block 72) failed
[  269.655541][ T9450] FAT-fs (loop2): Directory bread(block 70) failed
[  269.667482][ T9450] FAT-fs (loop2): Directory bread(block 71) failed
[  269.674364][ T9450] FAT-fs (loop2): Directory bread(block 72) failed
[  269.681738][ T9450] FAT-fs (loop2): Directory bread(block 73) failed
[  269.695285][ T9448] FAT-fs (loop0): Directory bread(block 73) failed
[  269.938966][ T9456] loop3: detected capacity change from 0 to 1024
[  270.092327][ T9458] loop1: detected capacity change from 0 to 2048
[  270.115090][ T9458]  loop1: p1 < > p4
[  270.115090][ T9458]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  270.126460][ T9456] gfs2: path_lookup on c::: returned error -2
[  270.153190][ T9458] loop1: p4 size 722688 extends beyond EOD, truncated
[  270.175372][ T9458] loop1: p6 start 262464109 is beyond EOD, truncated
[  270.199830][ T9458] loop1: p7 size 2304 extends beyond EOD, truncated
[  270.371636][   T56] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  270.622284][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.655224][   T56] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  270.676292][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.694358][   T56] usb 3-1: config 0 descriptor??
[  270.944057][ T5785] Bluetooth: hci2: unexpected event for opcode 0x202f
[  270.955381][   T56] usbhid 3-1:0.0: can't add hid device: -71
[  270.963200][   T56] usbhid: probe of 3-1:0.0 failed with error -71
[  270.979095][   T56] usb 3-1: USB disconnect, device number 9
[  271.560106][   T56] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  271.691720][ T9476] loop3: detected capacity change from 0 to 32768
[  271.727061][ T9476] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  271.769721][   T56] usb 3-1: Using ep0 maxpacket: 16
[  271.778555][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.795629][   T56] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40
[  271.805895][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.827587][   T56] usb 3-1: config 0 descriptor??
[  271.843949][ T9499] loop0: detected capacity change from 0 to 512
[  271.883139][ T9499] EXT4-fs: inline encryption not supported
[  271.903997][ T9499] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  271.920528][ T9476] XFS (loop3): Ending clean mount
[  271.950718][ T9499] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  272.004773][ T9499] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  272.082557][ T9499] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1433: bg 0: block 248: padding at end of block bitmap is not set
[  272.166254][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  272.183665][ T9499] Quota error (device loop0): write_blk: dquota write failed
[  272.204400][ T9499] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  272.237404][ T9499] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1433: Failed to acquire dquot type 1
[  272.261524][   T56] powermate: Expected payload of 3--6 bytes, found 8 bytes!
[  272.347349][   T56] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17
[  272.409230][    C0] powermate: config urb returned -71
[  272.418142][    C0] powermate: config urb returned -71
[  272.425371][    C0] powermate: config urb returned -71
[  272.431192][    C0] powermate: config urb returned -71
[  272.440016][ T9499] EXT4-fs (loop0): 1 truncate cleaned up
[  272.461859][   T56] usb 3-1: USB disconnect, device number 10
[  272.467979][    C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  272.500778][ T9499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  272.815973][ T9511] ima: rule for LSM 'unconfined_t' is undefined
[  272.846430][   T28] audit: type=1807 audit(1786506899.057:79): action=measure func=FILE_CHECK obj_type=unconfined_t res=0
[  272.893020][ T9510] ima: policy update failed
[  272.909693][   T28] audit: type=1802 audit(1786506899.127:80): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1437" res=0 errno=0
[  272.967204][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  273.026941][   T28] audit: type=1802 audit(1786506899.167:81): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1437" res=0 errno=0
[  273.048780][ T9514] loop3: detected capacity change from 0 to 512
[  273.155954][ T9514] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1438: Unrecognised inode hash code 4
[  273.185444][ T9514] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1438: Corrupt directory, running e2fsck is recommended
[  273.341139][ T9521] kAFS: bad VL server IP address
[  273.349321][ T9514] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  273.417225][ T9514] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.1438: corrupted in-inode xattr: invalid ea_ino
[  273.496426][ T9514] EXT4-fs (loop3): Remounting filesystem read-only
[  273.526204][ T9514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.530326][ T9523] gretap0: entered promiscuous mode
[  273.593136][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'.
[  273.617935][ T9523] gretap0: left promiscuous mode
[  274.131605][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.406517][ T9545] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9545]
[  274.440194][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1451'.
[  274.472368][ T9528] loop1: detected capacity change from 0 to 32768
[  275.395198][ T9547] loop3: detected capacity change from 0 to 40427
[  275.432559][ T9547] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  275.449911][ T9547] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  275.473024][ T9547] F2FS-fs (loop3): invalid crc value
[  275.499086][ T9547] F2FS-fs (loop3): Found nat_bits in checkpoint
[  275.669708][    T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  275.679587][ T9547] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  275.699749][ T9547] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  275.819651][   T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  275.863182][ T9547] syz.3.1453: attempt to access beyond end of device
[  275.863182][ T9547] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  275.901081][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  275.911726][    T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  275.923590][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.943239][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  275.952723][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.960838][    T8] usb 2-1: Product: syz
[  275.965219][    T8] usb 2-1: Manufacturer: syz
[  275.985527][    T8] usb 2-1: SerialNumber: syz
[  276.009027][    T8] hub 2-1:1.0: bad descriptor, ignoring hub
[  276.014962][ T9561] loop2: detected capacity change from 0 to 32768
[  276.022192][    T8] hub: probe of 2-1:1.0 failed with error -5
[  276.030186][   T27] usb 1-1: Using ep0 maxpacket: 32
[  276.040186][ T5774] syz-executor: attempt to access beyond end of device
[  276.040186][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.060525][   T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  276.071333][   T27] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  276.084317][   T27] usb 1-1: config 0 interface 0 has no altsetting 0
[  276.086974][ T9561] JBD2: Ignoring recovery information on journal
[  276.100773][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  276.112585][   T27] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  276.122371][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.144094][   T27] usb 1-1: Product: syz
[  276.148371][   T27] usb 1-1: Manufacturer: syz
[  276.180521][   T27] usb 1-1: SerialNumber: syz
[  276.208820][   T27] usb 1-1: config 0 descriptor??
[  276.238053][    T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  276.255447][ T9561] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  276.574599][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  276.711357][   T27] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  276.824720][ T9560] usb 2-1: reset high-speed USB device number 15 using dummy_hcd
[  277.334568][   T27] usb 1-1: USB disconnect, device number 13
[  277.474057][   T56] usb 2-1: USB disconnect, device number 15
[  277.498785][   T56] usblp0: removed
[  277.546777][ T9578] loop3: detected capacity change from 0 to 32768
[  277.622009][ T9578] ERROR: (device loop3): diRead: i_ino != di_number
[  277.622009][ T9578] 
[  277.634479][ T9578] ERROR: (device loop3): remounting filesystem as read-only
[  277.648204][ T9578] ERROR: (device loop3): diRead: i_ino != di_number
[  277.648204][ T9578] 
[  277.740189][ T9582] loop2: detected capacity change from 0 to 32768
[  277.809924][ T9582] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.968379][ T9594] loop3: detected capacity change from 0 to 8192
[  278.046998][ T9582] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  278.072080][ T9594]  loop3: p1 p2 p4[EZD]
[  278.110740][ T9594] loop3: p4 start 201326592 is beyond EOD, truncated
[  278.154206][ T9582] XFS (loop2): Starting recovery (logdev: internal)
[  278.173619][ T5140]  loop3: p1 p2 p4[EZD]
[  278.186792][ T9598] pimreg1: tun_chr_ioctl cmd 1074025677
[  278.196415][ T5140] loop3: p4 start 201326592 is beyond EOD, truncated
[  278.226124][ T9598] pimreg1: linktype set to 825
[  278.239185][ T9582] XFS (loop2): Ending recovery (logdev: internal)
[  278.498013][ T9601] loop0: detected capacity change from 0 to 4096
[  278.514953][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.719795][ T9606] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.829622][ T9601] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  278.914118][ T9601] Remounting filesystem read-only
[  278.950239][ T9610] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  278.983183][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  278.989360][ T6743] udevd[6743]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  279.092976][ T6743] udevd[6743]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  279.131584][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  279.256671][ T5776] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  279.274650][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=2
[  279.283515][ T5776] NILFS (loop0): discard dirty block: blocknr=14, size=4096
[  279.316318][ T5776] NILFS (loop0): discard dirty page: offset=0, ino=6
[  279.333776][ T5776] NILFS (loop0): discard dirty block: blocknr=23, size=4096
[  279.350732][ T5776] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  279.360025][ T5776] NILFS (loop0): discard dirty block: blocknr=24, size=4096
[  279.367443][ T5776] NILFS (loop0): discard dirty page: offset=8192, ino=6
[  279.376479][ T9619] loop3: detected capacity change from 0 to 512
[  279.387948][ T5776] NILFS (loop0): discard dirty block: blocknr=25, size=4096
[  279.463209][ T9619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  279.508223][ T9619] ext4 filesystem being mounted at /384/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.977716][ T9630] loop2: detected capacity change from 0 to 4096
[  280.422876][ T9626] loop1: detected capacity change from 0 to 131072
[  280.432225][ T9626] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  280.439084][ T9626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  280.444923][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  280.455230][ T9626] F2FS-fs (loop1): invalid crc value
[  280.505916][ T9626] F2FS-fs (loop1): Found nat_bits in checkpoint
[  280.611916][ T9626] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  280.619068][ T9626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  280.835868][ T9626] F2FS-fs (loop1): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  281.580454][ T9636] loop0: detected capacity change from 0 to 40427
[  281.597297][ T9636] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  281.604628][ T9636] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  281.622367][ T9636] F2FS-fs (loop0): invalid crc value
[  281.876489][ T9636] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  281.903916][ T9636] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  282.048347][   T28] audit: type=1800 audit(1786506908.287:82): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1485" name="file1" dev="loop0" ino=10 res=0 errno=0
[  282.102127][ T9636] syz.0.1485: attempt to access beyond end of device
[  282.102127][ T9636] loop0: rw=2049, sector=53248, nr_sectors = 24 limit=40427
[  282.307053][ T5776] syz-executor: attempt to access beyond end of device
[  282.307053][ T5776] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  282.343119][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  282.798582][ T9656] loop2: detected capacity change from 0 to 40427
[  282.830159][ T9656] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  282.849913][ T9656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  282.896477][ T9656] F2FS-fs (loop2): invalid crc value
[  282.945155][ T9656] F2FS-fs (loop2): Found nat_bits in checkpoint
[  283.183919][ T9656] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  283.211312][ T9656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  283.340159][ T9656] syz.2.1490: attempt to access beyond end of device
[  283.340159][ T9656] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  283.439184][ T5778] syz-executor: attempt to access beyond end of device
[  283.439184][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  283.491991][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  283.683802][ T9673] loop3: detected capacity change from 0 to 32768
[  283.701855][ T9673] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1497 (9673)
[  283.745677][ T9673] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  283.770333][ T9673] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  283.799824][ T9673] BTRFS info (device loop3): force zlib compression, level 3
[  283.807306][ T9673] BTRFS info (device loop3): allowing degraded mounts
[  283.829771][ T9673] BTRFS info (device loop3): turning on async discard
[  283.837014][ T9673] BTRFS info (device loop3): allowing degraded mounts
[  283.856078][ T5858] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  283.884092][ T9673] BTRFS info (device loop3): using free space tree
[  284.069837][ T5858] usb 1-1: Using ep0 maxpacket: 8
[  284.150011][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  284.180129][ T5858] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  284.206264][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.266390][ T5858] usb 1-1: config 0 descriptor??
[  284.369352][ T5774] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  284.501034][ T5858] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  284.740275][   T56] usb 1-1: USB disconnect, device number 14
[  284.810018][ T5763] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  285.019749][ T5763] usb 2-1: Using ep0 maxpacket: 32
[  285.020945][ T5858] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  285.031940][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.049950][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.060341][ T5763] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  285.069466][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.080725][ T5763] usb 2-1: config 0 descriptor??
[  285.219785][ T5858] usb 3-1: Using ep0 maxpacket: 32
[  285.232784][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  285.243099][ T5858] usb 3-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da
[  285.263703][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.271996][ T5858] usb 3-1: Product: syz
[  285.276314][ T5858] usb 3-1: Manufacturer: syz
[  285.285893][ T5858] usb 3-1: SerialNumber: syz
[  285.294033][ T5858] usb 3-1: config 0 descriptor??
[  285.527349][ T5763] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[  285.537741][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.545389][ T5763] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[  285.570584][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.616270][ T5858] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X found
[  285.625623][ T5858] snd_usb_podhd 3-1:0.0: set_interface failed
[  285.633610][ T5858] snd_usb_podhd 3-1:0.0: Line 6 POD HD500X now disconnected
[  285.641696][ T5858] snd_usb_podhd: probe of 3-1:0.0 failed with error -71
[  285.650590][ T9717] loop0: detected capacity change from 0 to 512
[  285.659984][ T5858] usb 3-1: USB disconnect, device number 11
[  285.673437][ T9717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  285.716732][ T5763] ft260 0003:0403:6030.0006: chip code: 0000 0000
[  285.728431][ T9717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.750745][ T9717] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.772644][ T9717] EXT4-fs (loop0): shut down requested (2)
[  285.833824][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.919740][ T5763] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  286.139750][ T5763] ft260 0003:0403:6030.0006: failed to retrieve status: -71, no wakeup
[  286.168417][ T5763] ft260 0003:0403:6030.0006: failed to retrieve status: -71
[  286.190641][ T5763] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71
[  286.249418][ T5763] usb 2-1: USB disconnect, device number 16
[  286.279833][ T5858] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  286.508126][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0
[  286.533483][ T5858] usb 3-1: string descriptor 0 read error: -22
[  286.540661][ T5858] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da
[  286.551201][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.568739][ T5858] usb 3-1: config 0 descriptor??
[  286.723260][ T9737] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  286.923709][ T9742] Format for deleting device is "id" (uint).
[  287.034062][ T5824] usb 3-1: USB disconnect, device number 12
[  288.209516][    C0] sched: RT throttling activated
[  288.567595][ T9748] loop1: detected capacity change from 0 to 131072
[  288.600454][ T9748] F2FS-fs (loop1): invalid crc value
[  288.634262][ T9748] F2FS-fs (loop1): Found nat_bits in checkpoint
[  288.718384][ T9748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  289.087475][ T9744] loop0: detected capacity change from 0 to 262144
[  289.129714][ T9744] F2FS-fs (loop0): Found nat_bits in checkpoint
[  289.200865][ T9756] syzkaller1: entered promiscuous mode
[  289.206503][ T9744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  289.215669][ T9756] syzkaller1: entered allmulticast mode
[  289.638478][ T9764] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  290.148994][ T9772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1531'.
[  290.179678][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'.
[  290.188724][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'.
[  290.350754][ T9774] hub 1-0:1.0: USB hub found
[  290.360154][ T9774] hub 1-0:1.0: 1 port detected
[  292.059336][ T9791] loop1: detected capacity change from 0 to 32768
[  292.123888][ T9795] loop3: detected capacity change from 0 to 32768
[  292.137157][ T9791] 
[  292.137157][ T9791]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  292.137157][ T9791] 
[  292.183009][ T9795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1541 (9795)
[  292.193845][ T9791] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  292.273329][ T9795] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  292.298550][ T9795] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  292.325917][ T9795] BTRFS info (device loop3): setting nodatasum
[  292.353723][ T9795] BTRFS info (device loop3): force zlib compression, level 3
[  292.373999][ T9795] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  292.408656][ T9795] BTRFS info (device loop3): use lzo compression, level 0
[  292.418781][ T9795] BTRFS info (device loop3): turning on flush-on-commit
[  292.438203][ T9795] BTRFS info (device loop3): enabling auto defrag
[  292.482086][ T9795] BTRFS info (device loop3): max_inline at 4096
[  292.509799][ T9795] BTRFS info (device loop3): turning on async discard
[  292.516665][ T9795] BTRFS info (device loop3): using free space tree
[  292.528813][ T5775] ERROR: (device loop1): diWrite: ixpxd invalid
[  292.528813][ T5775] 
[  292.587996][ T5775] ERROR: (device loop1): txCommit: 
[  292.587996][ T5775] 
[  292.619772][   T56] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  292.787035][ T9795] BTRFS info (device loop3): enabling ssd optimizations
[  292.816410][   T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.827627][   T56] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  292.843497][   T56] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  292.857439][   T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  292.880099][   T56] usb 1-1: SerialNumber: syz
[  293.092433][ T5775] 
[  293.092433][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  293.092433][ T5775] 
[  293.127408][ T5775] 
[  293.127408][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  293.127408][ T5775] 
[  293.154447][   T56] usb 1-1: 0:2 : does not exist
[  293.182575][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  293.242583][   T56] usb 1-1: USB disconnect, device number 15
[  293.316883][   T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.455697][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  293.659261][   T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.919770][ T5824] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  293.936014][   T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.140044][ T5824] usb 4-1: Using ep0 maxpacket: 8
[  294.151531][ T5824] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  294.166454][   T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.177292][ T5824] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.177326][ T5824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.177353][ T5824] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  294.177381][ T5824] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.177428][ T5824] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  294.177455][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.441184][ T5824] usb 4-1: GET_CAPABILITIES returned 0
[  294.446879][ T5824] usbtmc 4-1:16.0: can't read capabilities
[  294.560936][ T9829] syz.0.1550 uses obsolete (PF_INET,SOCK_PACKET)
[  294.736457][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  294.766271][ T5824] usb 4-1: USB disconnect, device number 10
[  295.125212][ T5763] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  295.134588][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  295.148067][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  295.159570][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  295.169351][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  295.178115][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  295.187526][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  295.341388][ T5763] usb 3-1: too many endpoints for config 0 interface 0 altsetting 12: 137, using maximum allowed: 30
[  295.378227][ T5763] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  295.428741][ T5763] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 137
[  295.490052][ T5763] usb 3-1: config 0 interface 0 has no altsetting 0
[  295.496888][ T5763] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  295.540092][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.561650][ T5763] usb 3-1: config 0 descriptor??
[  295.580502][ T9835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  295.956806][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'.
[  296.036382][ T9858] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  296.127931][ T5763] uclogic 0003:28BD:0042.0007: interface is invalid, ignoring
[  296.278348][ T9863] loop0: detected capacity change from 0 to 512
[  296.356807][ T9863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.371053][ T5858] usb 3-1: USB disconnect, device number 13
[  296.398077][ T9863] ext4 filesystem being mounted at /376/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.590239][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.860835][ T9875] loop0: detected capacity change from 0 to 256
[  297.000580][ T9841] chnl_net:caif_netlink_parms(): no params data found
[  297.250352][   T51] Bluetooth: hci1: command tx timeout
[  297.311647][   T56] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  297.493266][ T9894] loop2: detected capacity change from 0 to 512
[  297.494902][ T9894] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  297.529785][   T56] usb 4-1: Using ep0 maxpacket: 32
[  297.597197][   T56] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  297.597230][   T56] usb 4-1: config 2 has no interface number 0
[  297.597273][   T56] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  297.597303][   T56] usb 4-1: config 2 interface 88 has no altsetting 0
[  297.617484][   T56] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  297.617520][   T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.617541][   T56] usb 4-1: Product: syz
[  297.617556][   T56] usb 4-1: Manufacturer: syz
[  297.617571][   T56] usb 4-1: SerialNumber: syz
[  297.648312][ T9879] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  297.775003][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.775146][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.775375][ T9841] bridge_slave_0: entered allmulticast mode
[  297.777382][ T9841] bridge_slave_0: entered promiscuous mode
[  297.795881][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.799032][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.799298][ T9841] bridge_slave_1: entered allmulticast mode
[  297.809618][ T9841] bridge_slave_1: entered promiscuous mode
[  297.839628][   T42] bond0: left promiscuous mode
[  297.839772][   T42] bond_slave_0: left promiscuous mode
[  297.840212][   T42] bond_slave_1: left promiscuous mode
[  297.869191][   T42] batadv_slave_0: left promiscuous mode
[  297.902788][ T9879] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  297.908439][   T42] hsr_slave_0: left promiscuous mode
[  297.910463][   T42] hsr_slave_1: left promiscuous mode
[  297.915521][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.915670][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.917891][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.917922][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.922132][   T42] bridge_slave_1: left allmulticast mode
[  297.922188][   T42] bridge_slave_1: left promiscuous mode
[  297.925744][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.092938][   T28] audit: type=1326 audit(1786506924.337:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c2479e0d9 code=0x0
[  298.126379][   T42] veth1_macvtap: left allmulticast mode
[  298.126440][   T42] veth1_macvtap: left promiscuous mode
[  298.126822][   T42] veth0_macvtap: left promiscuous mode
[  298.127016][   T42] veth1_vlan: left promiscuous mode
[  298.127368][   T42] veth0_vlan: left promiscuous mode
[  298.355225][ T9891] ==================================================================
[  298.355241][ T9891] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0
[  298.355272][ T9891] Write of size 4 at addr ffffc900040d1000 by task syz.0.1566/9891
[  298.355292][ T9891] 
[  298.355299][ T9891] CPU: 1 PID: 9891 Comm: syz.0.1566 Not tainted syzkaller #0
[  298.355322][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.355337][ T9891] Call Trace:
[  298.355346][ T9891]  <TASK>
[  298.355354][ T9891]  dump_stack_lvl+0x18c/0x250
[  298.355380][ T9891]  ? sys_imageblit+0x1bac/0x25d0
[  298.355401][ T9891]  ? show_regs_print_info+0x20/0x20
[  298.355429][ T9891]  ? load_image+0x420/0x420
[  298.355462][ T9891]  ? mark_lock+0x94/0x320
[  298.355491][ T9891]  print_report+0xa8/0x210
[  298.355514][ T9891]  ? sys_imageblit+0x1bac/0x25d0
[  298.355533][ T9891]  kasan_report+0x117/0x150
[  298.355563][ T9891]  ? sys_imageblit+0x1bac/0x25d0
[  298.355588][ T9891]  sys_imageblit+0x1bac/0x25d0
[  298.355617][ T9891]  ? sys_copyarea+0x2530/0x2530
[  298.355660][ T9891]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  298.355694][ T9891]  soft_cursor+0xa01/0xc30
[  298.355730][ T9891]  bit_cursor+0x16b2/0x1f10
[  298.355773][ T9891]  ? bit_clear_margins+0x550/0x550
[  298.355810][ T9891]  ? get_color+0x2e8/0x4d0
[  298.355837][ T9891]  ? bit_clear_margins+0x550/0x550
[  298.355868][ T9891]  ? fbcon_cursor+0x430/0x640
[  298.355904][ T9891]  ? add_softcursor+0x8c/0x440
[  298.355935][ T9891]  con_flush_chars+0x1fa/0x280
[  298.355965][ T9891]  con_write+0x2e/0x40
[  298.355993][ T9891]  do_output_char+0x64a/0x960
[  298.356026][ T9891]  __process_echoes+0x2e0/0x9f0
[  298.356068][ T9891]  n_tty_receive_buf_common+0xc81/0x1380
[  298.356111][ T9891]  ? paste_selection+0x1cb/0x4d0
[  298.356142][ T9891]  paste_selection+0x329/0x4d0
[  298.356178][ T9891]  ? set_selection_kernel+0x17b0/0x17b0
[  298.356212][ T9891]  ? do_task_dead+0xd0/0xd0
[  298.356238][ T9891]  ? __get_user_1+0x11/0x20
[  298.356262][ T9891]  ? tioclinux+0x34e/0x450
[  298.356289][ T9891]  vt_ioctl+0x813/0x1f00
[  298.356322][ T9891]  ? __vt_event_wait+0x260/0x260
[  298.356357][ T9891]  ? __fget_files+0x28/0x460
[  298.356396][ T9891]  ? tty_jobctrl_ioctl+0x378/0xba0
[  298.356422][ T9891]  tty_ioctl+0x91e/0xdc0
[  298.356448][ T9891]  ? tty_get_icount+0xb0/0xb0
[  298.356475][ T9891]  __se_sys_ioctl+0xfd/0x170
[  298.356511][ T9891]  do_syscall_64+0x55/0xb0
[  298.356534][ T9891]  ? clear_bhb_loop+0x40/0x90
[  298.356558][ T9891]  ? clear_bhb_loop+0x40/0x90
[  298.356580][ T9891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.356604][ T9891] RIP: 0033:0x7fd950f9e0d9
[  298.356625][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.356645][ T9891] RSP: 002b:00007fd951de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  298.356669][ T9891] RAX: ffffffffffffffda RBX: 00007fd951225fa0 RCX: 00007fd950f9e0d9
[  298.356686][ T9891] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000005
[  298.356701][ T9891] RBP: 00007fd951035024 R08: 0000000000000000 R09: 0000000000000000
[  298.356716][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.356730][ T9891] R13: 00007fd951226038 R14: 00007fd951225fa0 R15: 00007ffcc9350e88
[  298.356755][ T9891]  </TASK>
[  298.356763][ T9891] 
[  298.356767][ T9891] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc90003dd1000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520
[  298.356813][ T9891] Memory state around the buggy address:
[  298.356833][ T9891]  ffffc900040d0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  298.356847][ T9891]  ffffc900040d0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  298.356861][ T9891] >ffffc900040d1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  298.356871][ T9891]                    ^
[  298.356888][ T9891]  ffffc900040d1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  298.356903][ T9891]  ffffc900040d1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  298.356913][ T9891] ==================================================================
[  298.356958][ T9891] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  298.356969][ T9891] CPU: 1 PID: 9891 Comm: syz.0.1566 Not tainted syzkaller #0
[  298.356989][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.357000][ T9891] Call Trace:
[  298.357008][ T9891]  <TASK>
[  298.357015][ T9891]  dump_stack_lvl+0x18c/0x250
[  298.357041][ T9891]  ? show_regs_print_info+0x20/0x20
[  298.357065][ T9891]  ? load_image+0x420/0x420
[  298.357105][ T9891]  panic+0x2ca/0x720
[  298.357137][ T9891]  ? bpf_jit_dump+0xd0/0xd0
[  298.357166][ T9891]  ? _raw_spin_unlock_irqrestore+0xc0/0x120
[  298.357200][ T9891]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  298.357232][ T9891]  ? _raw_spin_unlock+0x40/0x40
[  298.357261][ T9891]  ? print_memory_metadata+0x314/0x400
[  298.357284][ T9891]  ? sys_imageblit+0x1bac/0x25d0
[  298.357303][ T9891]  check_panic_on_warn+0x84/0xa0
[  298.357332][ T9891]  ? sys_imageblit+0x1bac/0x25d0
[  298.357350][ T9891]  end_report+0x6f/0x130
[  298.357376][ T9891]  kasan_report+0x128/0x150
[  298.357402][ T9891]  ? sys_imageblit+0x1bac/0x25d0
[  298.357426][ T9891]  sys_imageblit+0x1bac/0x25d0
[  298.357455][ T9891]  ? sys_copyarea+0x2530/0x2530
[  298.357496][ T9891]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  298.357526][ T9891]  soft_cursor+0xa01/0xc30
[  298.357562][ T9891]  bit_cursor+0x16b2/0x1f10
[  298.357603][ T9891]  ? bit_clear_margins+0x550/0x550
[  298.357639][ T9891]  ? get_color+0x2e8/0x4d0
[  298.357664][ T9891]  ? bit_clear_margins+0x550/0x550
[  298.357695][ T9891]  ? fbcon_cursor+0x430/0x640
[  298.357721][ T9891]  ? add_softcursor+0x8c/0x440
[  298.357750][ T9891]  con_flush_chars+0x1fa/0x280
[  298.357779][ T9891]  con_write+0x2e/0x40
[  298.357805][ T9891]  do_output_char+0x64a/0x960
[  298.357838][ T9891]  __process_echoes+0x2e0/0x9f0
[  298.357901][ T9891]  n_tty_receive_buf_common+0xc81/0x1380
[  298.357949][ T9891]  ? paste_selection+0x1cb/0x4d0
[  298.357982][ T9891]  paste_selection+0x329/0x4d0
[  298.358018][ T9891]  ? set_selection_kernel+0x17b0/0x17b0
[  298.358051][ T9891]  ? do_task_dead+0xd0/0xd0
[  298.358075][ T9891]  ? __get_user_1+0x11/0x20
[  298.358100][ T9891]  ? tioclinux+0x34e/0x450
[  298.358125][ T9891]  vt_ioctl+0x813/0x1f00
[  298.358157][ T9891]  ? __vt_event_wait+0x260/0x260
[  298.358194][ T9891]  ? __fget_files+0x28/0x460
[  298.358226][ T9891]  ? tty_jobctrl_ioctl+0x378/0xba0
[  298.358252][ T9891]  tty_ioctl+0x91e/0xdc0
[  298.358277][ T9891]  ? tty_get_icount+0xb0/0xb0
[  298.358302][ T9891]  __se_sys_ioctl+0xfd/0x170
[  298.358332][ T9891]  do_syscall_64+0x55/0xb0
[  298.358354][ T9891]  ? clear_bhb_loop+0x40/0x90
[  298.358376][ T9891]  ? clear_bhb_loop+0x40/0x90
[  298.358400][ T9891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.358423][ T9891] RIP: 0033:0x7fd950f9e0d9
[  298.358441][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.358461][ T9891] RSP: 002b:00007fd951de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  298.358483][ T9891] RAX: ffffffffffffffda RBX: 00007fd951225fa0 RCX: 00007fd950f9e0d9
[  298.358499][ T9891] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000005
[  298.358514][ T9891] RBP: 00007fd951035024 R08: 0000000000000000 R09: 0000000000000000
[  298.358527][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.358540][ T9891] R13: 00007fd951226038 R14: 00007fd951225fa0 R15: 00007ffcc9350e88
[  298.358564][ T9891]  </TASK>
[  298.359132][ T9891] Kernel Offset: disabled