program: socket(0x1d, 0x803, 0xfcc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffff9, 0xce, 0x7, @buffer={0x0, 0x1000, &(0x7f0000000580)=""/4096}, &(0x7f0000000040)="7f0031ad1914030031f9e543e19ee6d789b52285c70ad5a6303efd9e2d41e53f8f1d90f2b7595509b179e483d4425b29adb2ea7b6f40ba9f85c1ef7a9a43de8b343fa2427c75c9fe9f92961247114d2327a75d91e9e6b8615b1dd737239d9c3fd322ae0cf75f8b4039b78b569ec015d46c558144372317330c8d182285c4c01dc9ff6a62890e6641b3e622504e421f34d122c3be928a6bb8c18583b59031a57f19fe63fea1007ab739f66bfe2abe0a95436b13348a837ff97a050c7095961bd1b95e2bd86fb0fe1d9843c7346aa9", 0x0, 0x8, 0x1, 0x403, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d63703433372c6e6f71756f74612c6572726f72733d636f6e74696e75652c646973636172643d307830303030303030303030303030000001006572726f72733d636f6e74696e75652c71756f74612c646973636172642c67727071756f74612c00"], 0x1, 0x60ed, &(0x7f00000048c0)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGALEWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo8zma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPqrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HxHDpYhm/e1/no14PSI+eibiwcO7683N5/fZj+//+R9/+MlTP/r7n4Zn/vuX2/03pi13585v//PXewfbZgAAAChNXdd1lT7mn0yf73tddwoAmIv8+l8n+Xb1wtWbC9YftVqtVh/Buq2e7F67iIjN9jrNewaH4wHgiNmMj7vuAh2Sf9EGEfFU150AFlrVdQc4FA8e3l2vUr5V+/Vgbac9nwuyJ//Navf6jmnTWcbPMZnX42sr+vHclP6szKkPiyTn3xvP/+pO+ygtd9j5z8u0/Ec7lz4VJ+ffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PdHz8d+ngm7Ivjzv+uzanPgAAAAAAAADA5+2g4//tMv4fAAAALKzms3rjd888um3ad7E1t1+pIp4eWx4oTLpYZrXrfgAAAAAAAAAAAABASQY75/BeqSKGEfH06mpd181P23j9pA66/lFX+vZDybp+kgcAgB0fPTN2LX8VsRwRV9J3/Q1XV1frenlltV6tV5by+9nR0nK90vpcm6fNbUujfbwhHozq5pctt9Zrm/V5eVb7+O9r7mtU9/fRsfnoMHAAiIidV6MHXpGOmbp+Nrp+l8PRYP8/fuz/7EfXj1MAAADg8NV1XVfp67xPpmP+va47BQDMRX79Hz8uoFar1Wq1+vjVbfVk99pFRGy212neMxiOHwCOmM34uOsu0CH5F20QES903QlgoVVdd4BD8eDh3fUq5Vu1Xw/S+O75XJA9+W9W2+vl9SdNZxk/x2Rej6+t6MdzU/rz/Jz6sEhy/r3x/K/utI/Scoed/7xMy7/ZzhMd9KdrOf/+eP5jjk/+vYn5lyrnP3ii/PvyBwAAAACABZb//n9ioY7/jj7r5sz0uOO/a4d2rwAAAAAAAABwuB48vLuer3vNx/+/MGE5138eTzn/Sv5Fyvn3xvL/6thy/db8/bce5f/vh3fX/3j7X/+fp/vNfynPVOmRVaVHRJXuqRqk6UG27tO2hv1Rc0/DqtcfpHN+6uE7cT1uxEac3bNsL/1/PGo/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+NGvL3d3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp4/6HvU/t9+3ppPu5fP2Lvzl7+Jsz01b0d7etrdm+lzroz/b/yVOj+OWtjZun71y7ffvmuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfzh64vwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/92ap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4nLquty8RvRwRF9P1P11dmwkAzNfl9JUbdZJvn1fdn/P9qdVHvK4WrD9zrT+pF6s/avVRrNvqyd5sFxHxt/Y6FyPi15N+GQCwyD6JiH923Qk6I/+C5e/7a6anuu4MMFe33v/gp9du3Ni4eavrngAAAAAAAAAAn1Ue/3OtNf7zqbqu740tt2f817di7aDjfw7yzO4Ao1MGqu4/+TY9zlZv1O+1hht/MaaN/z3cnXvc+N+DGfc3nNE+mtG+NKN9eUb7xAs9WnL+L7bGOz8VESfHhl8vYfzX8THvS5Dzf6n1eG7y/8rYcu38698f5fx7e/I/c/u9X5y59f4Hr11/79q7G+9u/OzCuXNnL1y8eOnSpTPvXL+xcXbn3w57fLhy/nnsa+eBliXnnzOXf1ly/l9KtfzLkvP/cqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP/XUi3/suT8X021/MuS8/96quVflpz/a6mWf1ly/qdTLf+y5PzPpHqf+a8cdr+Yj5x/PsJl/y9Lzj+f2SD/suT8z6da/mXJ+V9ItfzLkvN/PdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl538p1fIvS87/W6mWf1ly/t9OtfzLkvN/I9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP+bqZZ/WR59/78ZM2bM5Jmun5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xsh11vcDP3v12rkZCPk7+RtYO8YYZ5NdX+ILrYsJ14Zbya2kl9iud+0s+BavXZI0kh0FSiSMiirahhdtAUVt3lRYVV7QKqC8QK0qVSLtC/oGUaHyIqoCCkiV2ipkqznzPM/OzJ6d2bUn9sw5n48U/+yZM3POnDlzdr+7+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA02vD+mS8OZFlW+y//Y22WXVv7++rxtfll77naWwgAAABcrl/mf756Q7pg/zJu1LDMP779+8/Pz8/PZ58e+pORr87PpyvGs2xkVZbl10UXf/zgQOMywVPZ2MBgw78HO6x+qMP1wx2uH+lw/WiH61d1uH6sw/WLdsAiq+s/j8nvbFP+17X1XZrdmI3k120quNVTA6sGB+PPcnID+W3mR45ks9mxbCabalq+vuxAvvwLG2rr+kgW1zXYsK71tSPk508cjtswEPbxpqZ1Ldxn9NP3ZeO/+PkTh//qzCs3F82Ou6Hp/urbuWVjbTs/Hy6pb+tAtirtk7idgw3bub7gORlq2s6B/Ha1v7du56vL3M6hhc28olqf87FsMP/7S/l+Gm78sV7aT+vDZf99a5Zl5xc2u3WZRevKBrM1TZcMLjw/Y/UjsnYftUPpzdnwio7TDcs4TmtzelPzcdr6mojP/4Zwu+EltqHxafrpk6MNz/tr85dynEa1R73Ua6X1GOz2a6VXjsF4XLyUP+inC4/BTeHxP7F56WOw8NgpOAbT4244Bjd2OgYHR4fybU5PwkB+m4VjcFvT8kP5mgby+fLm9sfg5JnjpybnHnv89tnjh47OHJ05sWPbtqkdu3bt2bNn8sjssZmp+p+XuLd735psML0GNoZ9F18D72pZtvFQnf/G6KLz76W+DsfavA7Xtizb7dfhcOuDG7gyL8jFx3T9tXFfbaePXRjMlniN5c/P1st/HabH3fA6HG54HRZ+TSl4HQ4v43VYW+bU1uV9zzLc8F/RNiz9teDyjsG1Dcdg6/cjrcdgt78f6ZVjcCwcFz/cuvTXgvVhe5+eWOn3I0OLjsH0cMO5p3ZJ+n5/bE8+io7LW2pXXDOanZ2bOX3Ho4fOnDm9LQvjinhLw7HSeryuaXhM2aLjdXDFx+v+2bc/fUvB5WvDvhq7vfbH2JLPVW2ZnXe0f67yr27F+7Pp0u1ZGF12pfdn0Vfz2v4czbKvfe/Je77zxNfev+T+rOXNz09e/vfiKZc2nH9Hljj/xtz/en196a6eGhoZrr9+h9LeGWk6Hzc/VcP5uWsgX/erk8s7H4+E/670+fjGNufjdS3Ldvt8PNL64OL5eKDTTzsuT+vzORaOk2NT7c/HtWXWbV/pMTnc9nx8a5gDYf+/OySFlIsajp2ljtu0ruHhkfC4huMamo/THU3Lj4RsVlvXc9sv7Tjdcmv9vobSo1twpY7T8ZZlu32cpp99LXWcDnT66dulaX0+x8JxceOO9sdpbZkXd17+uXN1/GvDuXO00zE4MjRa2+aRdBDm5/tsfnU8Bu/IDmcns2PZdH7taH48DeTrmrhzecfgaPjvSp8r17U5Bre0LNvtYzB9HVvq2BsYXvzgu6D1+RwLx8Uzd7Y/BmvLfGB3d7933RIuScs0fO/a+vO1pX7mdUvLbnqjjpXhsJ3f293+Z7O1ZY7tWWnObL+fbguXXFOwn1pfv0u9pqazK7Of1oXtfGXP0vuptj21Zb66d5nH0/4sy849clf+897w+5W/PfuD55t+71L0O51zj9z1s+uO/MNKth+A/vd6faypf61r+M3Ucn7/DwAAAPSo5t/bxdw/GGYi/wMAAEBpxNwf/6/wRP4HAACA0oi5fzjMpCL5f90HXpl9/VyWmvnzQbw+7Ya768vF/3tiKvx7fH5B7fK7np35r78/t7x1D2ZZ9trdf1C4/Lq743bVjYftvPjB5ssXef72Za374P3n0nob++tfD/cfH89yD4OiCu5UlmUv3PDlfD3jD17I54t3H8znPeeffqq2zKt76/+Ot3/5LfXl/zyUf/cfOdR0+5fDfvhJmFMfLd4f8XbfuvDu9bsfWFhfvN3Axuvzh/3MQ/X7je+T85Wn6svH/bzU9n/nS899q7b8o+8s3v5zg8Xb/1y432fD/J+31ZdvfA5q/463+0LY/ri+eLs7vvndwu2/+MX68qc+VF/uYJhx/VvCvzd96JXZxv316MChpseVfbi+XFz/1A/+KL8+3l+8/9btHztwoWl/tB4fL/5r/X4mW5aPl8f1RH/Xsv7a/TQen3H9z/3hwab93Gn9F+95+W21+21d/20ty516ZGu+/oX7a37Hpr/4wpcL1xe3Z//fnGp6PPs/FV7HYf3PPBSOx3D9/16s31/ruysc/FTz+Scu//W155oeT/SRX9TXf/G9R/O5amz1mmuuve768++o7bsse2lV/f46rf/oX55s2v5v3FTfH/H62NFvXf9S4vpPf27ixMm5s7PTaa8+cUP+3jkfq29P3N4bwrm19d8HTp55eOb0+NT4VJaNl/ct9C7ZN8P8WX2cb7/0/KIz6Nb7w/N5y5+9sGbzv3wpXv5v99Uvv/DR+tetd4XlvhIuXxuev5Wtf7FnNtyUv74HXgxbOL/4/YIvx/pN/7lnWQuGx9/6fUE83k+99eF8P9Suy79uxNf1ZW7/j6br9/PtsF/nwzszb7xpYX2Ny8f3Rrhwb/31ftn7L5zm4vP61+H5/vhP6vcftys+3h+F72O+u675fBePj2+fG2y9//xdPM6H80l2vn59XCru7wuv3lS4efF9SLLzN+f//uN0Pzev6GEuZe6xucljsyfOPjp5ZmbuzOTcY48fOH7y7IkzB/L38jzwmU63Xzg/rcnPT9Mzu3Zm+dnqZH28wa729p+6//D07qnN0zNHDp09cub+UzOnjx6emzs8Mz23+dCRIzOf63T72el927bv3bF7+8TR2el9e/bu3bF3YvbEydpm1Deqg11Tn504cfpAfpO5fTv3brvzzp1TE8dPTs/s2z01NXG20+3zr00TtVv//sTpmWOHzswen5mYm318Zt+2vbt2be/4boDHTx2ZG588ffbE5Nm5mdOT9ccyfia/uPa1r9PtKae5f69/P9tqoP5GfNknb9uV3p+15tknl7yr+iItbyD6Sngvmn9606k9y/l3zP0jYSYVyf8AAABQBTH3j4aZyP8AAABQGjH3rwozkf8BAACgNGLuHwszqUj+79X+f2thctn9/3XnlrV+/X/9/8b9pf9fsf7/vb3W/6+fL/T/u+Ny+/f6/4H+v/6//r/+v/4/XdBr/f+Y+1dnWSXzPwAAAFRBzP1rwkzkfwAAACiNmPuvCTOR/wEAAKA0Yu6/NsykIvm/V/v/l/z5//r/TbfT/9f/L1q//r/+f5np/7en/9+B/v9kVq3+//lubr/+v/4/i/Va/z/m/uvCTCqS/wEAAKAKYu6/PsxE/gcAAIDSiLn/hjAT+R8AAABKI+b+tWEmFcn/+v/6//r/+v/6/8Xr1//vT/r/7en/d6D/7/P/9f/1/+mqXuv/x9z/pjCTiuR/AAAAqIKY+98cZiL/AwAAQO8ZvrSbxdz/ljCTRfn/ElcAAAAAXHUx99+YtRTBK/L7f/1//X/9f/1//f/i9S+//z+U6f/3Dv3/9vT/O9D/1//X/9f/p6t6rf+f5/5sLHtrmElF8j8AAABUQcz9N4WZyP8AAABQGjH3/78wE/kfAAAASiPm/nVhJhXJ//r/+v/6//r/+v/F6/f5//1J/789/f8O9P/1//X/9f/pql7r/8fcf3OYSUXyPwAAAFRBzP23hJnI/wAAAFAaMff//zAT+R8AAABKI+b+9WEmFcn/+v893v+PzVH9f/1//X/9f/3/ZdH/b0//vwP9f/1//X/9f7qq1/r/Mfe/LcykIvkfAAAAqiDm/reHmcj/AAAAUBox978jzET+BwAAgNKIuX88zKQi+V//v8f7/z7/X/9f/1//X/9/RfT/29P/70D/X/9f/1//n67qtf5/zP0bwkwqkv8BAACgCmLu3xhmIv8DAABAacTcf2uYifwPAAAApRFz/6Ywk4rkf/1//X/9f/1//f/i9ev/9yf9//b0/zvQ/9f/1//X/6ereq3/H3P/O8NMKpL/AQAAoApi7t8cZiL/AwAAQGnE3P+uMBP5HwAAAEoj5v4tYSYVyf/6//r/+v/6//r/xevX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/neHmVQk/wMAAEAVxNy/NcxE/gcAAIDSiLn/tjAT+R8AAABKI+b+iTCTiuR//X/9f/1//X/9/+L16//3J/3/9vT/O9D/1//X/9f/p6t6rf8fc//tYSYVyf8AAABQBTH33xFmIv8DAABAacTcPxlmIv8DAABAacTcPxVmUpH8r/+v/6//r/+/ov7/OxbuV/+/Tv+/t+j/t6f/34H+v/7/Ve//j+j/Uyq91v+PuX9bmElF8j8AAABUQcz928NM5H8AAAAojZj7d4SZyP8AAABQGjH37wwzqUj+1//X/9f/1//3+f/F69f/70/6/+11v/8fH6L+v/6//r/P/9f/Z7Fe6//H3H9nmElF8j8AAABUQcz9u8JM5H8AAAAojZj7d4eZyP8AAABQGjH37wkzqUj+1//X/9f/1//X/y9ev/5/f9L/b8/n/3eg/6//r/+v/09X9Vr/P+b+vWEmFcn/AAAAUAUx978nzET+BwAAgNKIuf9XwkzkfwAAACiNmPt/NcykIvlf/1//X/9f/1//v3j9+v/9Sf+/Pf3/DvT/9f/1//X/6ape6//H3L8vzKQi+R8AAACqIOb+Xwszkf8BAACgNGLuf2+YifwPAAAApRFz//4wk4rkf/1//X/9f/1//f/i9ev/9yf9//b0/zvQ/19Zf77lC4D+v/6//j+teq3/H3P/+8JMKpL/AQAAoApi7r8rzET+BwAAgNKIuf/9YSbyPwAAAJRGzP0fCDOpSP7X/9f/1//X/9f/L16//n9/0v9vT/+/A/1/n/+v/6//T1f1Wv8/5v4PhplUJP8DAABAFcTc/6EwE/kfAAAASiPm/g+Hmcj/AAAAUBox938kzKQi+V//X/9f/1//X/+/eP36//1J/789/f8O9P9L1v8fv07/X/+fN0pRAlrs0vr/17625Aovs/8fc/+vh5lUJP8DAABAFcTcf3eYifwPAAAApRFz/0fDTOR/AAAAKI2Y+z8WZlKR/K//r/+v/6//r/9fvH79//6k/99en/X/f3l9uFz/v07/v7e3vyf7/z9eqv8/v6r19vr/vBEurf9fqCv9/5j7Px5mUpH8DwAAAFUQc/8nwkzkfwAAACiNmPs/GWYi/wMAAEBpxNz/G2EmFcn/+v+17VhoL+v/6//nF+j/6//r//ct/f/2+qz/7/P/W+j/9/b292T/3+f/c5X1Wv8/5v5PhZlUJP8DAABAFcTcf0+YifwPAAAApRFz/71hJvI/AAAAlEbM/feFmVQk/+v/+/x//X/9f/3/4vXr//cn/f/29P870P/X/++1/v9/6P/T33qt/x9z//1hJhXJ/wAAAFAFMfc/EGYi/wMAAEBpxNz/m2Em8j8AAACURsz9nw4zqUj+1//vl/7/uP6//r/+f8vj0f/X/y+i/9+e/n8H+v/6/73W//f5//S5Xuv/x9z/YJjJ8vP/2LKXBAAAAK6KmPt/K8ykIr//BwAAgCqIuf+3w0zkfwAAACiNmPt/J8ykIvlf/79f+v8+/z/T/9f/b3k8+v/6/0WuXP8/nnn0//X/9f8j/X/9f/1/WvVa/z/m/t8NM6lI/gcAAIAqiLn/oTAT+R8AAAD6QtH/k90q5v4DYSbyPwAAAJRGzP0Hw0wqkv/1//X/9f97tP//pxv/+Yff/8TBbfr/+v/6/ytyRT//v/bi9/n/+v/6/4n+v/6//j+teq3/H3P/oTCTiuR/AAAAqIKY+38vzET+BwAAgNKIuf9wmIn8DwAAAKURc/90mElF8r/+v/6//n+P9v/7+PP/4/7Q/2/Wtf5/POnq/xe6ov3/BxZ64vr/K+3/jxZeqv+v/9/P26//r//PYr3W/4+5fybMpCL5HwAAAKog5P7BI/W5cIX8DwAAAKURc//RMBP5HwAAAEoj5v6Hw0wqkv/1//X/9f/1/33+f/H6e7b/7/P/29L/b693+v/F9P/1//t5+/X/9f9ZrNf6/zH3z4aZVCT/AwAAQBXE3P+ZMBP5HwAAAEoj5v7PhpnI/wAAAFAaMfcfCzOpSP7X/9f/1//X/9f/L16//n9/0v9vT/+/A/1//X/9f/1/uqrX+v8x9x8PM6lI/gcAAIAqiLn/RJiJ/A8AAAClEXP/yTAT+R8AAOD/2LuPJjvvKo/jVzNyjVR+AbOYjffzErzwrGdewCxmM4uZKooFyeRkmRxNzsHkbIINxiSTk00ymIzJGUww2UCJovqco+7W08+VxO3Wc//n89kckGluG1QWP6xv/WEYufvvE7c02f/6f/3/sP3/FUfT/+/+OaT/36H/n6b/Pxr6/3n6/zX0//p//b/+n41aWv+fu/++cUuT/Q8AAAAd5O6/X9xi/wMAAMAwcvdfGbfY/wAAADCM3P33j1ua7P99/f+xVc/+PzNe/f9I/b/3/w/8fP2//n9kR9v/X/33v/Lp//X/+v+g/9f/6//Zb2n9f+7+B8QtTfY/AAAAdJC7/4Fxi/0PAAAAw8jd/6C4xf4HAACAYeTuf3Dc0mT/L/79/wi7vf+v/1/p//X/+/589P/6/yne/5/Xqf+/8vZL73XXjf920/l8vv5f/6//1/+zWUvr/3P3PyRuabL/AQAAoIPc/Q+NW+x/AAAAGEbu/ofFLfY/AAAAbL0r4ubuf3jc0mT/L77/D/p//f9K/z9A/x//Pen/9f+HSP8/r1P/fyGfr//X/+v/9f9s1tL6/9z9j4hbmux/AAAA6CB3/yPjFvsfAAAAhpG7/6q4xf4HAACAYeTuPxW3NNn/+v/D7///qv/X/8fV/3v/X/9/+PT/8/T/a+j/9f/6f/0/G7W0/j93/9VxS5P9DwAAAB3k7n9U3GL/AwAAwDBy9z86brH/AQAAYBi5+x8TtzTZ//p/7//r//X/+v/pz9f/byf9/7yj7/+nfoU8mP5/6/v/S/T/+n/9P7udZ/9/98xftjfS/+fuf2zc0mT/AwAAQAe5+x8Xt9j/AAAAMIzc/Y+PW+x/AAAAGEbu/ifELU32v/5f/6//1//r/6c/X/+/nfT/8xbz/v+x45M/rP/f+v7f+//6f/0/eyzt/f/c/U+MW5rsfwAAAOggd/+T4hb7HwAAAIaRu//JcYv9DwAAAMPI3f+UuKXJ/tf/6//1//p//f/058/1/zft+v70/8ui/5+3mP7/APp//f82f//6f/0/Z1ta/5+7/6lxS5P9DwAAAB3k7r8mbrH/AQAAYBi5+58Wt9j/AAAAMIzc/U+PW5rs/+n+/8wf1/+fG/3/3u9f/z/982NT/X/+O+r/Z/v///D+f0/6/3n6/zX0//p//f9B/f/JdV+v/2fK0vr/3P3PiFua7H8AAADoIHf/M+MW+x8AAACGkbv/WXGL/Q8AAADDyN3/7Lilyf73/r/+X/+/ff2/9/93XMz3/1dH3v8f1/+fI/3/PP3/Gvp//b/+3/v/bNTS+v/c/c+JW5rsfwAAAOggd/9z4xb7HwAAALbD7t87sP83lIbc/c+LW+x/AAAAGEbu/ufHLU32v/5f/6//1//37v9PbEn/7/3/c6X/n6f/X+Pi9v/HBu3/jw/W/1970Ncvof+/Sv/Pwuzp/28+8+MXq//P3f+CuKXJ/gcAAIAOcve/MG6x/wEAAGAYuftfFLfY/wAAADCM3P0vjlua7P9D7/9PHvzZ+n/9v/5f/3/x+/9tef9f/3+u9P/z9P9reP/f+//e/9f/s1F7+v9dLlb/n7v/JXFLk/0PAAAAHeTuf2ncYv8DAADAMHL3Xxu32P8AAAAwjNz9L4tbmux/7//r//X/+n/9//Tn6/+3k/5/nv5/Df2//l//r/9no5bW/+fuf3nc0mT/AwAAQAe5+18Rt9j/AAAAMIzc/a+MW+x/AAAAGEbu/lfFLU32v/7/cPv//HH9v/5/pf/X/+v/j0Tb/v/Y1K9EZzug/7/1Hqf+a++P6P/1//p//b/+nw1YRP9/+sz/uszd/+q4pcn+BwAAgA5y978mbrH/AQAAYBi5+18bt9j/AAAAMIzc/a+LWwbZ/yfW/HH9v/f/9f/6f/3/9Ofr/7dT2/7/HHn/fw39v/5f/6//Z6MW0f/v+ue5+18ftwyy/wEAAIBV7f43xC32PwAAAAwjd/8b4xb7HwAAAIaRu/9NcUuT/a//1//r//X/+v/pz9f/byf9/zz9/xr6f/2//l//z0Ytrf/P3X9d3NJk/wMAAEAHufvfHLfY/wAAADCM3P1viVvsfwAAABhG7v63xi1N9r/+X/+v/9f/6/+nP1//v530//P0/6vV6vqZb2Cq/z/9L/p//b/+X//PBVpa/5+7/21xS5P9DwAAAB3k7r8+brH/AQAAYBi5+2+IW+x/AAAAGEbu/rfHLU32v/5f/6//1//r/6c/X/+/nfT/8/T/a3j/X/+v/9f/s1FL6/9z978jbmmy/wEAAKCD3P03xi32PwAAAAwjd/874xb7HwAAAIaRu/+muKXJ/tf/6//1//p//f/05+v/t9Ph9f8r/b/+X/+/hv5f/6//Z7+l9f+5+98VtzTZ/wAAANBB7v53xy32PwAAAAwjd/974hb7HwAAAIaRu/+9cUuT/a//1//r//X/+v/pz9f/byfv/8/T/6+h/9f/6//1/2zU0vr/3P3vi1ua7H8AAADoIHf/zXGL/Q8AAADDyN3//rjF/gcAAIBh5O7/QNzSZP/r//X/e/v/1Ur/r//X/+84gv7/xEr/v3H6/3n6/zX0/2P2//+0Gqj/P3ng1+v/WaKl9f+5+z8YtzTZ/wAAANBB7v4PxS32PwAAAAwjd/+H4xb7HwAAAIaRu/8jcUuT/a//1/97/1//r/+f/nzv/28n/f88/f8a+v8x+3/v/+v/uWiW1v/n7v9o3NJk/wMAAEAHufs/FrfY/wAAADCM3P0fj1vsfwAAABhG7v5PxC1N9r/+X/+v/9f/6/+nP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/8n45Ym+x8AAAA6yN1/S9xi/wMAAMAwcvffGrfY/wAAADCM3P2filua7H/9v/5f/7+d/f8J/b/+X/8/aSn9/+WX/+dt+n/9v/5f/6//1/93t7T+P3f/p+OWJvsfAAAAOsjd/5m4xf4HAACAYeTu/2zcYv8DAADAMHL3fy5uabL/z+7/L1ntFKo7pvr/aNT0/7vo//d+//r/6Z8f3v/X/+v/D99S+n/v/1/Y96//1/9v8/d/Xv3/ZWd/vf6fES2t/8/df1vc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGEbu/tvjlib73/v/+n/9v/5f/z/9+fr/7aT/n6f/X0P/r//3/v+9/++f9f9sztL6/9z9X4xbmux/AAAA6CB3/5fiFvsfAAAAhpG7/8txi/0PAAAAw8jd/5W4pcn+1//r//X/+n/9//Tn6/+3k/5/nv5/Df2//l//7/1/Nmpp/X/u/q/GLU32PwAAAHSQu/9rcYv9DwAAAMPI3f/1uMX+BwAAgGHk7v9G3NJk/2++/79M/x/0/0vp//9X/7/v8/X/+v+R6f/zV/Rp+v819P/6f/2//p+NWlr/n7v/jrilyf4HAACADnL3fzNusf8BAABgGLn7vxW32P8AAAAwjNz9345bmux/7//36v+PrTr2/97/1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P3fiVua7H8AAADYVv/97/e841z/tbn7vxu32P8AAAAwjNz934tb7H8AAAAYRu7+78ctTfa//r9X/9/z/X/9v/5f/9+J/n+e/n8N/b/+X/+v/2ejltb/5+7/Qdyya/gdP+8/SwAAAGBJcvf/MG5p8vf/AQAAoIPc/T+KW87a/6fP8Xe1AwAAAEuTu//HcUuTv/+v/194/78av/+/c6X/1//v0P/r/zdB/z/vH+z/Tx/T/+v/Z+j/9f/6f/ZbWv+fu/8ncUuT/Q8AAACD2vP/KOTu/2ncYv8DAADAMHL3/yxusf8BAABgGLn7fx63NNn/+v+F9/8X9P7/yfpH29D/e///EPv/a05Mfr7+X/8/Mv3/PO//r6H/1//r//X/bNTS+v/c/XfGLU32PwAAAHSQu/8XcYv9DwAAAMPI3f/LuMX+BwAAgGHk7v9V3NJk/+v/R+z/t+v9f/2/9/8vvP//10tP3fI//3/Ddfp/zjjK/j9/Luj/9f/6/x36f/2//p/9ltb/5+7/ddzSZP8DAABAB7n774pb7H8AAAAYRu7+38Qt9j8AAAAMI3f/b+OWJvtf/6//X0r/n/9ZX4T+/9T29f/ZFHfv/73/r/8/m/f/5+n/19D/6//1//p/Nmpp/X/u/t/FLU32PwAAAHSQu//3cYv9DwAAAMPI3f+HuMX+BwAAgGHk7v9j3NJk/+v/9f9L6f+T9//PfJ33/3fo//X/50P/P0//v4b+X/+v/9f/s1FL6/9z9/8pbmmy/wEAAKCD3P13xy32PwAAAAwjd/+f4xb7HwAAAIaRu/8vcUuT/a//1//r//X/+v/pz9f/byf9/zz9/xr6f/2//l//z0Ytrf/P3f+3AAAA//90Km2p") chdir(&(0x7f000000aac0)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20000014) r2 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0x5, 0x1c5, 0x0, r1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f00000002c0)={'pim6reg1\x00', 0x3fdd6fb5, 0x10}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, 0x0, &(0x7f0000000080)=0xd7) madvise(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x13) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_devices(r7, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) [ 103.345116][ T5329] loop0: detected capacity change from 0 to 32768 [ 103.355040][ T4649] Bluetooth: hci0: command tx timeout [ 103.676539][ T5329] find_entry called with index = 0 [ 103.681442][ T5329] read_mapping_page failed! [ 103.684175][ T5329] ERROR: (device loop0): txCommit: [ 103.684175][ T5329] [ 103.691393][ T5329] ERROR: (device loop0): diFree: numfree > numinos [ 103.691393][ T5329] [ 103.712535][ T5329] wlan0 speed is unknown, defaulting to 1000 [ 103.715124][ T5329] wlan0 speed is unknown, defaulting to 1000 [ 103.733308][ T5329] wlan0 speed is unknown, defaulting to 1000 [ 103.741155][ T5329] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 103.772859][ T5329] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 103.782419][ T5329] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 103.862807][ T5329] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.896210][ T109] ================================================================== [ 103.899934][ T109] BUG: KASAN: slab-use-after-free in txUnlock+0x951/0xde0 [ 103.902511][ T109] Read of size 2 at addr ffff88803177bc98 by task jfsCommit/109 [ 103.904904][ T109] [ 103.905715][ T109] CPU: 0 UID: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 103.905729][ T109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.905735][ T109] Call Trace: [ 103.905743][ T109] [ 103.905749][ T109] dump_stack_lvl+0xe8/0x150 [ 103.905764][ T109] print_address_description+0x55/0x1e0 [ 103.905775][ T109] ? txUnlock+0x951/0xde0 [ 103.905783][ T109] print_report+0x58/0x70 [ 103.905791][ T109] kasan_report+0x117/0x150 [ 103.905800][ T109] ? txUnlock+0x951/0xde0 [ 103.905808][ T109] txUnlock+0x951/0xde0 [ 103.905816][ T109] jfs_lazycommit+0x59f/0xac0 [ 103.905824][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 103.905831][ T109] ? __pfx_default_wake_function+0x10/0x10 [ 103.905839][ T109] ? __kthread_parkme+0x71/0x1f0 [ 103.905847][ T109] ? __kthread_parkme+0x196/0x1f0 [ 103.905855][ T109] kthread+0x388/0x470 [ 103.905864][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 103.905871][ T109] ? __pfx_kthread+0x10/0x10 [ 103.905879][ T109] ret_from_fork+0x514/0xb70 [ 103.905894][ T109] ? __pfx_ret_from_fork+0x10/0x10 [ 103.905907][ T109] ? __switch_to+0xc89/0x1420 [ 103.905920][ T109] ? __pfx_kthread+0x10/0x10 [ 103.905933][ T109] ret_from_fork_asm+0x1a/0x30 [ 103.905947][ T109] [ 103.905951][ T109] [ 103.953875][ T109] Allocated by task 5329: [ 103.955516][ T109] kasan_save_track+0x3e/0x80 [ 103.957405][ T109] __kasan_slab_alloc+0x6c/0x80 [ 103.959713][ T109] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 103.962242][ T109] mempool_alloc_noprof+0x1bf/0x300 [ 103.964138][ T109] __get_metapage+0x4ed/0xdf0 [ 103.965861][ T109] diWrite+0x401/0x1f60 [ 103.967408][ T109] txCommit+0x83a/0x54a0 [ 103.968910][ T109] __jfs_xattr_set+0x10e/0x170 [ 103.970701][ T109] __vfs_setxattr+0x442/0x480 [ 103.972370][ T109] __vfs_setxattr_noperm+0x12a/0x660 [ 103.974338][ T109] vfs_setxattr+0x163/0x360 [ 103.976337][ T109] filename_setxattr+0x296/0x630 [ 103.978664][ T109] path_setxattrat+0x408/0x450 [ 103.980798][ T109] __x64_sys_setxattr+0xbc/0xe0 [ 103.982519][ T109] do_syscall_64+0x174/0x580 [ 103.984891][ T109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.986932][ T109] [ 103.987745][ T109] Freed by task 76: [ 103.989049][ T109] kasan_save_track+0x3e/0x80 [ 103.990703][ T109] kasan_save_free_info+0x40/0x50 [ 103.992655][ T109] __kasan_slab_free+0x5c/0x80 [ 103.994691][ T109] kmem_cache_free+0x182/0x650 [ 103.996744][ T109] mempool_free+0xec/0x130 [ 103.998432][ T109] metapage_release_folio+0x462/0x590 [ 104.000936][ T109] shrink_folio_list+0x2364/0x5330 [ 104.003011][ T109] evict_folios+0x3821/0x4b40 [ 104.004658][ T109] try_to_shrink_lruvec+0xb4f/0xed0 [ 104.006411][ T109] shrink_one+0x233/0x730 [ 104.007853][ T109] shrink_node+0x3303/0x3b60 [ 104.009397][ T109] kswapd+0x17b6/0x31c0 [ 104.010883][ T109] kthread+0x388/0x470 [ 104.012882][ T109] ret_from_fork+0x514/0xb70 [ 104.015812][ T109] ret_from_fork_asm+0x1a/0x30 [ 104.018260][ T109] [ 104.019123][ T109] The buggy address belongs to the object at ffff88803177bc98 [ 104.019123][ T109] which belongs to the cache jfs_mp of size 184 [ 104.023179][ T109] The buggy address is located 0 bytes inside of [ 104.023179][ T109] freed 184-byte region [ffff88803177bc98, ffff88803177bd50) [ 104.027481][ T109] [ 104.028387][ T109] The buggy address belongs to the physical page: [ 104.030460][ T109] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3177b [ 104.033424][ T109] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 104.036164][ T109] page_type: f5(slab) [ 104.037804][ T109] raw: 04fff00000000000 ffff888031763c80 dead000000000122 0000000000000000 [ 104.041228][ T109] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 104.044568][ T109] page dumped because: kasan: bad access detected [ 104.047198][ T109] page_owner tracks the page as allocated [ 104.050314][ T109] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9666767425, free_ts 0 [ 104.057963][ T109] post_alloc_hook+0x1f9/0x250 [ 104.059852][ T109] get_page_from_freelist+0x21fa/0x2270 [ 104.062105][ T109] __alloc_frozen_pages_noprof+0x18d/0x380 [ 104.064290][ T109] allocate_slab+0x79/0x5e0 [ 104.066292][ T109] refill_objects+0x2d5/0x350 [ 104.068215][ T109] __pcs_replace_empty_main+0x2bf/0x6b0 [ 104.070651][ T109] kmem_cache_alloc_noprof+0x382/0x5f0 [ 104.073226][ T109] mempool_init_node+0x1f4/0x4f0 [ 104.075332][ T109] mempool_create_node_noprof+0xb8/0x150 [ 104.077594][ T109] metapage_init+0xed/0x150 [ 104.080234][ T109] init_jfs_fs+0xfd/0x4e0 [ 104.082039][ T109] do_one_initcall+0x250/0x870 [ 104.084283][ T109] do_initcall_level+0x10a/0x1a0 [ 104.086776][ T109] do_initcalls+0x59/0xa0 [ 104.088807][ T109] kernel_init_freeable+0x29d/0x3e0 [ 104.090806][ T109] kernel_init+0x1d/0x1d0 [ 104.092243][ T109] page_owner free stack trace missing [ 104.094391][ T109] [ 104.095317][ T109] Memory state around the buggy address: [ 104.097253][ T109] ffff88803177bb80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.100514][ T109] ffff88803177bc00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 104.103724][ T109] >ffff88803177bc80: fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb [ 104.107437][ T109] ^ [ 104.109337][ T109] ffff88803177bd00: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 104.113485][ T109] ffff88803177bd80: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.116709][ T109] ================================================================== [ 104.148151][ T5329] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.232705][ T5329] wlan0 speed is unknown, defaulting to 1000