program: r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x6229, &(0x7f00000018c0)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjyW7Xqe2dtefzkeyd3zyz9jP+7uyL5+UJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC+/70frHQi4sbP04yliM9EL6IbsVDWyxGxsLyUl+9HxHOx0xzPRsRgLqK8/863pyNejYiPzkZsba+vlrMvH7Af3/3j33/3wzNv/e0Pg4v//dO93mvjlrt//1f/+fODw60zAAAAtE1RFEUnfcw/lz7fd5vuFAAwFfn1v0jy/FNf//qfb/1llvqjVqvVavUU6qpitAfVIiI2qvcp3zPYHQ8AJ8xGfNx0F2iQ/FutHxFnmu4EMNM6TXeAY7G1vb7aSfl2qq8Hy7vt+ViQfflvdB6d3zHudpL6MSbTenxtRi+eGdOfhSn1YZbk/Lv1/G/stg/Tcsed/7SMy3+4e+pT6+T8e/X8a05P/t2R+bdVzr//RPn35A8AAAAAADMs//9/qeH9v3OHX5UD+aT9v8tT6gMAAAAAAAAAHLXDjv/3iPH/AAAAYGaVn9VLvzm7N2/ctdjK+dc7EU/VlgdaJp0ss9h0PwAAAAAAAAAAAACgTfq7x/Be70QMIuKpxcWiKMqvqnr9pA57/5Ou7esPbdb0kzwAAOz66GztXP5OxHxEXE/X+hssLi4WxfzCYrFYLMzl97PDuflioSjSdfj2Pt8uFEUxNzzAG+L+sCh/2HzlflWTPi9Paq//vPJ3DYveATp2RAaR/zQjNZE0AOzZfTXa8op0yhTF0+PefMA+tv9TaCmWmn5cMfuafpgCAAAAx68oiqKTLud9Lu3z7zbdKQBgKvLrf32/wKHq7pj2iKP5+Wq1Wq1Wqz9VXVWM9qBaRMRG9T7lewbD8QPACbMRHzfdBRok/1brR8RzTXcCmGmdpjvAsdjaXl/t7Obbz/N2Xg/S+O75WJB9+W90du6X7z/qdpL6MSbTenxtRi+eGdOfZ6fUh1mS8++mDB69H7ix2z5Myx13/tMyLv/hzilz7ZPz79Xzrzk9+XdH5t9WOf/+E+Xfkz8AAAAAAMyw/P//pfr//1u4/3d5Sn0AAAAAAAAAgKO2tb2+ms97zfv/PzdiOed/nk45/86T5r+QpuV/ouX8u7X8v1xbrleZfvjm3vb/7+311d/f+9dn8+1B85/LE530yOqkR0Qn/aZOuhzFER8YtDnoDcvfNOh0e/10zE8xeCduxe1Yi0v7lu2mv8de+8q+9rKng33tl/e19x9rv7KvfZCuO1As5PYLsRo/idvx9k572TY3Yf3nJ7QXE9pz/j3P/62U8+9Xvsr8F1N7p3Zbevhh97Htvno76ve8cevzv7x0/Ksz0Wb0Hq1bVbl+5xvoz87f5MwwfnZ37c6F+zfv3buzEulm39zLkW6OWM5/sPM1t/f8/8Jue37er26vDz8cPnH+s2Iz+mPzf6EyXa7vS1PuWxNy/sP0lfN/O7WP3v5Pcv7jt/+XG+gPAAAAAAAAAAAAAAAAfJKiKHZOEX0jIq6m83+aOjcTAJiu/PpfJHm+Wq1Wq9Xq01dXFaO9Xi0i4q/V+5TvGX4x6ocBALPsfxHxj6Y7QWPk32L5en/l7YtNdwaYqrvvf/Cjm7dvr92523RPAAAAAAAAAIBPK4//uVwZ//nFiFiqLbdv/Nc3Y/mw43/288SjAUaPeKDvMTa7w163Mtz487EzPveFceN/n4/Hx//OY+L2qusxxmBC+3BC+9yE9vmRc/fSGnmiR0XO//nKeOdl/udqw6+3YfzX+pj3bZDzP195PJf5f6m2XDX/4rczl//GQRfcjO6+/C/ee++nF+++/8Ert967+e7au2s/vrKycunK1avXrl27+M6t22uXdr8fT69nQM4/j33tONB2yfnnzOXfLjn/L6Ra/u2S8/9iquXfLjn//H5P/u2S88+ffeTfLjn/l1It/3bJ+X8l1fJvl63t9bky/5dTLf92ydv/V1Mt/3bJ+b+Savm3S87/Qqrl3y45/4upPkD+Lg9/iuT88x4u23+75PxXUi3/dsn5X061/Nsl538l1fJvl5z/q6mWf7vk/L+Wavm3S87/aqrl3y45/6+n+oD5TzrsmRMi538t1bb/dsn5fyPV8m+XnP83Uy3/dsn5v5Zq+bdLzv9bqZZ/u+T8v51q+bdLzv87qZZ/u+T8X0+1/Ntl7/r/JkyYMJEnmn5mAgAAAAAAAAAAAADqpnE4cdPrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/J8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkOss7gJ/Zm9cOIQZCcFJD1o4xxlmy60t8oXUxIVwaoBRIAvSC7XrXZsE3vHYJFMmmgRIJo6KKivRDW0CojVRVWBUfaEVpPlS9fCrtB/qloqqE1KgyKKAitRXNVjPnfd+dmZ2d2ct4ffac309Knt2Zc+a8c+Y9Z+fZ9X8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzba9afqztSzL6v81/rc5y15U/3rj2ObGba+/1SMEAAAAVuv/Gv9//o50w9ElrNS0zN+96h+/MTc3N5e9f/D3hr84N5fuGMuy4Q1Z1rgvuv7vH6g1LxM8mY3WBpq+H+ix+cEe9w/1uH+4x/0jPe7f0OP+0R73L9gBC2zMfx/TeLAdjS8357s0uzMbbty3o8NaT9Y2DAzE3+U01BrrzA2fymayM9l0NtmyfL5srbH8t7bVt/W2LG5roGlbW+sz5EefPBnHUAv7eEfLtuYfM/rBG7OxH//okyf/+NKNuzvVnruh5fHyce7aXh/np8Mt+Vhr2Ya0T+I4B5rGubXDazLYMs5aY7361+3jfH6J4xycH+aaan/NR7OBxtffaeynoeZf66X9tDXc9t/3ZVl2dX7Y7css2FY2kG1quWVg/vUZzWdk/THqU+ml2dCy5um2JczTep3a0TpP24+J+PpvC+sNLTKG5pfpB58aWfC6L3eeRvVnvdix0j4H+32sFGUOxnnxncaTfqrjHNwRnv8ndy4+BzvOnQ5zMD3vpjm4vdccHBgZbIw5vQi1xjrzc3BPy/KDjS3VGvW5nd3n4MSlsxcmZj/+idfNnD1xevr09Ll9e/ZM7jtw4NChQxOnZs5MT+b/X+HeLr5N2UA6BraHfRePgde0Lds8Vee+0r/jcLTLcbi5bdl+H4dD7U+utjYH5MI5nR8bj9Z3+ui1gWyRY6zx+uxe/XGYnnfTcTjUdBx2/JnS4TgcWsJxWF/mwu6lvWcZavqv0xhu1s+CzU1zsP39SPsc7Pf7kaLMwdEwL/519+I/C7aG8T41vtz3I4ML5mB6uuHcU78lvd8fPdQoneblPfU7bhvJLs9OX3zgiROXLl3ck4WyJl7WNFfa5+umpueULZivA8uer0dnXvXUPR1u3xz21ejr6v8bXfS1qi+z/4Hur1Xjp1vn/dly694slD5b6/3Z6ad5fX+mXrLL/qwv8+mJ1b8XT31p0/l3eJHzb+z7X8i3lx7qycHhofz4HUx7Z7jlfNz6Ug01zl21xrafn1ja+Xg4/LfW5+M7u5yPt7Qt2+/z8XD7k4vn41qv33asTvvrORrmyZnJ7ufj+jJb9i53Tg51PR/fF2ot7P/Xhk4h9UVNc2exeZu2NTQ0HJ7XUNxC6zzd17L8cOjN6tt6Zu/K5umu+/LHGkzPbt5azdOxtmX7PU/T+WqxeVrr9du3lWl/PUfDvLhzX/d5Wl/m2f2rP3dujF82nTtHes3B4cGR+piH0yTMz/dzG+McfCA7mZ3PzmRTjXtHGvOp1tjW+INLm4Mj4b+1Pldu6TIHd7Ut2+85mH6OLTb3akMLn3wftL+eo2FePP1g9zlYX+bhg/1977or3JKWaXrv2v77tcV+53VP2266mb/zqo/zbw52/91sfZkzh5bbZ3bfT/eHW27rsJ/aj9/FjqmpbG3205YwzhuHFt9P9fHUl/ni4SXOp6NZll356EON3/eGv6/8+eXvfqPl7y6d/qZz5aMP/fD2U3+7nPEDsP69kJdN+c+6pr9MLeXv/wAAAMC6EPv+gVAT/T8AAACURuz7478KT/T/AAAAUBqx7x8KNalI/7/l4RszL1zJUjJ/Loj3p93wSL5czLhOhu/H5ubVb3/oa9M/+csrS9v2QJZlP33kNzsuv+WROK7cWBjn9Te33r5wxStL2v7xx+aXa86vfzk8fnw+S50GnSK4k1mWfeuOzze2M/aBa4367CPHG/U9V596sr7M84fz7+P6z70sX/4PQvj36KkTLes/F/bD90OdfHvn/RHX+/q11249+Pj89uJ6te0vbjztpz+YP278nJwvPJkvH/fzYuP/q8898/X68k+8uvP4rwx0Hv8z4XG/Fur/vDJfvvk1qH8f1/tMGH/cXlzvga9+u+P4r382X/7CW/Lljocat78rfL/jLTdmmvfXE7UTLc8re2u+XNz+5Hd/p3F/fLz4+O3jHz12rWV/tM+PZ/85f5yJtuXj7XE70V+0bb/+OM3zM27/md8+3rKfe23/+nuee2X9cdu3f3/bcoNt67d/YtMffubzHbcXx3P0zy60PJ+j7w7Hcdj+0x8M8zHc/7/XP9+y3ej4u1vPP3H5L2++0vJ8orf9ON/+9TecbtT/GPvJ79/2ottffPXe+r7Lsu+8N3+8Xts//UfnW8b/lbt2N16PeH/M6LdvfzFx+xc/Nn7u/Ozlmammvdr47Jx35OPZMLpxU328d4Rza/v3x85f+tD0xbHJscksGyvvR+it2FdD/WFeri53/d2Phdfzni99a9POf/pcvP1fHs1vv/b2/OfWa8JyXwi3b85fv7naKrf/9La7Gsd37dn8+5Ycex9s3fGfh5a0YHj+7e8L4ny/8PIPNfZD/b7Gz414XK9y/N+byh/nm2G/zoVPZt5+1/z2mpePn41w7b358b7q/RdOc/F1/ZPwer/z+/njx3HF5/u98D7m21taz3dxfnzzykD74zc+xeNqOJ9kV/P741Jxf197/q6Ow4ufQ5Jdvbvx/e+mx7l7WU9zMbMfn504M3Pu8hMTl6ZnL03MfvwTx86ev3zu0rHGZ3ke+3Cv9efPT5sa56ep6QP7s8mNWZadzybX4IR1c8Zf/2pp47/w2Mmpg5M7p6ZPnbh86tJjF6Yvnj45O3tyemp254lTp6Y/1mv9makje/Ye3ndw7/jpmakjhw4f3nd4fObc+fow8kH1cGDyI+PnLh5rrDJ7ZP/hPQ8+uH9y/Oz5qekjBycnxy/3Wr/xs2m8vvZvjF+cPnPi0szZ6fHZmU9MH9lz+MCBvT0/DfDshVOzYxMXL5+buDw7fXEify5jlxo313/29Vqfcpr9t/z9bLta/kF82bvuP5A+n7Xua59a9KHyRdo+QPRG+Cyaf3jJhUNL+T72/cOhJhXp/wEAAKAKYt8/Emqi/wcAAIDSiH3/hlAT/T8AAACURuz7R0NNKtL/y//L/y8t/5/fL/9frfz/hY/mudL1nv+P+Xn5/2q4xfn/VW+/D/n/e7vdKf/fg/z/Lc3Pr8rArR+//L/8PwsVLf8f+/6NWVbJ/h8AAACqIPb9m0JN9P8AAABQGrHvvy3URP8PAAAApRH7/heFmlSk/5f/X1L+f2+vwFX58/+u/792+f/585D8f25V+f/44sj/V8ay8/ePP9rybQny/13J//cg/79+8/8FGL/8v/w/7YYXvedW5f9j3397qElF+n8AAACogtj3vzjURP8PAAAApRH7/jtCTfT/AAAAUBqx798calKR/l/+f8XX/x9t/kb+v3X88v+tXP8/zIf1eP3/psHI/68Prv/fnfx/DyvO/4/K/6/H/P9wf8df7Px/z+HL/3NTFO36/7Hvf0moSUX6fwAAAKiC2Pe/NNRE/w8AAAClEfv+l4Wa6P8BAACgNGLff2eoSUX6f/n/Fef/W8j/t45f/r/z/JD/X4f5/67X/8+/kv8vFvn/7uT/e3D9/2rl//s8/mLn//t9/f/hN7evL/9PJ0XL/8e+/+WhJhXp/wEAAKAKYt9/V6iJ/h8AAABKI/b9rwg10f8DAABAacS+f0uoSUX6f/l/+X/5/6rk/zfK//c9/5+T/y8W+f/u5P97kP+X/5f/X1r+v8ObX/l/Oila/j/2/XeHmlSk/wcAAIAqiH3/PaEm+n8AAAAojdj3/0yoif4fAAAASiP2/VtDTSrS/295+MbjX2p8Jf+fyf/L/5c6/59v5/4R+X/5/3KT/+9O/r8H+X/5f/n/JV7/f6Hl5P839HowSqNo+f/Y978y1GRB49f+jhQAAABYL2Lf/6pQk4r8/R8AAACqIPb994aa6P8BAACgNGLfPxZqsv76//cNrGAl1/8vV/7/T//66Xsz+X/5/x7bL2n+P04D+f+Kk//vTv6/B/l/+X/5/zXJ/1MdRcv/x75/W6jJ+uv/AQAAgEXEvn97qIn+HwAAAEoj9v33hZro/wEAAKA0Yt+/I9SkIv2//H+58v+R/L/8f7ftlzT/n8j/V5v8fwdNB+k6yf+Pyf/L/6/H8Zcj/x/f/cr/0x9Fy//Hvv/VoSYV6f8BAACgCmLfvzPURP8PAAAApRH7/teEmuj/AQAAoDRi378r1KQi/b/8v/y//L/8v/x/5+3L/69P8v/dLTf/P+L6//L/8v8Vy/+7/j/9VbT8f+z7XxtqUpH+HwAAAKog9v27Q030/wAAAFAa8d9v5v/uVf8PAAAAZRT7/vFQk4r0/6vI/88Nyv8n8v+t4y9q/r8m/y//v4L8fy0kuOX/1wf5/+7WyfX/5f8LlP+v3y7/L/8v/89KFS3/H/v+14WaVKT/BwAAgCqIff8DoSb6fwAAACiN2PdPhJro/wEAAKA0Yt8/GWpSkf7f9f8rl//fUOX8v+v/y/+7/n/5yf93J//fg/y/6/+XLf+fZfL/3FJFy//Hvn9PqElF+n8AAACogtj37w010f8DAABAacS+f1+oif4fAAAASiP2/ftDTSrS/6/n/H+tU+he/r9lPdf/l//vtH35f/n/MpP/707+vwf5f/n/suX/Xf+fW6xo+f/Y9z8YalKR/h8AAACqIPb9B0JN9P8AAABQGrHvPxhqEvr/Tv+uGwAAAFhfYt9/KNSkIn//X8/5/85PqKL5/9/6+5Zty//L/3fbfn/y/xvl/0OV/y+Wkub/2w+LFZP/70H+X/5f/l/+n74qWv4/9v2HQ00q0v8DAABAFcS+//WhJvp/AAAAKI3Y9/9sqIn+HwAAAEoj9v0/F2pSkf5f/r8k+f828v/y/9227/r/8v9lVtL8f9+UKv8/IP8v/1+s8cv/y/+z0M3P/8evlpb/j33/kVCTivT/AAAAUAWx7//5UBP9PwAAAJRG7PvfEGqi/wcAAIDSiH3/0VCTivT/8v/y//L/8v83J///hqxdEfP/9ckj/18u8v/dlSr/7/r/8v8FG7/8v/w/CxXt+v+x739jqElF+n8AAACogtj3PxRqov8HAACA0oh9/5tCTfT/AAAAUBqx73841KQi/b/8v/y//L/8v+v/d96+/P/6JP/fnfx/D/L/8v/y//L/9FXR8v+x739zqElF+n8AAACogtj3vyXURP8PAAAApRH7/reGmuj/AQAAoDRi3/+2UJOK9P/y//L/Rcr/j7SNX/5f/j+T/5f/Xyb5/+7k/3uQ/5f/l/+X/6evipb/j33/L4SaVKT/BwAAgCqIff8joSb6fwAAACiN2Pe/PdRE/w8AAAClEfv+d4SaVKT/l/+X/y9S/j9z/X/5/8rk/7OWvSr/3z/y/93J//cg/y//L/8v/09fFS3/H/v+d4aaVKT/BwAAgCqIff8vhpro/wEAAKA0Yt//rlAT/T8AAACURuz7fynUpCL9v/y//H+x8v9zVzLX/0/k/3N9yf/XVypU/t/1/28W+f/u5P976JD/3yD/L/8v/y//z4oVLf8f+/53h5pUpP8HAACAKoh9/3tCTfT/AAAAUBqx739vqIn+HwAAAEoj9v2PhppUpP+X/69k/j895eLl/13/X/6/Ktf/l/+/WeT/u5P/78H1/+X/5f/l/+mrouX/Y9//WKhJRfp/AAAAqILY9z8eaqL/BwAAgNKIff/7Qk30/wAAAFAase9/f6hJRfp/+f9K5v8LfP3/suX/h1rmx83J/28oZP5/tOn1TPNS/l/+fw3I/3cn/9+D/H/Iz2cD8v8FzP+H2bxxkfXl/ymiouX/Y9//gVCTivT/AAAAUAWx7//lUBP9PwAAAJRG7Pt/JdRE/w8AAAClEfv+Xw01qUj/L/8v/y//7/r/rv/fefvy/+uT/H938v89yP+7/n+R8/89yP9TREXL/8e+/9dCTRZt/H74X0t4mgAAAECBxL7/g6EmFfn7PwAAAFRB7PuPhZro/wEAAKA0Yt9/PNSkIv2//H97/j9eUVX+X/5/3eX/h+T/c/L/1da//P8rbs8y+X/5f/l/+X/5f/l/VqNo+f/Y958INalI/w8AAABVEPv+Xw810f8DAABAacS+/2Soif4fAAAASiP2/VOhJhXp/+X/Xf+/X/n/n8r/3+r8v+v/B/L/1eb6/93J//cg/y//L/8v/09fFS3/H/v+6VCTivT/AAAAUGLp18Gx7z8VaqL/BwAAgNKIff/pUBP9PwAAAJRG7Ps/FGpSkf5f/l/+3/X/b0X+f6hlefn/nPy//H8/yP93J//fg/y//L/8v/w/fVW0/H/s+2dCTSrS/wMAAEAVxL7/w6Em+n8AAAAojdj3fyTURP8PAAAApRH7/jOhJhXp/+X/5f+rnv+vZdn/s3cfT3adZR7Hrz22pJ6N50+YzWxmNcthZTbsKXbsqGJtosnBNjmDyRgwYHIOJkeTc86YYHKOJhqqRKn1PI+61bfPUTh97znv+/lsnpHGUl/ZmqF+qL5+r/X+v/5/3dfX/y+T/n+Y/n+E/l//r//X/zOpufX/ufuvils62f8AAADQg9z994pb7H8AAABoRu7+e8ct9j8AAAA0I3f/feKWTva//l//33v/v9rK+//7/3r9/2n6f/3/FA7095ed348/tP//v/+/+h76f/2//n+Q/l//r//nbHPr/3P33zdu6WT/AwAAQA9y998vbrH/AQAAoBm5++8ft9j/AAAA0Izc/VfHLZ3sf/2//l//r//f1//fov/X/y+b9/+H6f9H6P/1//p//T+Tmlv/n7v/AXFLJ/sfAAAAepC7/4Fxi/0PAAAAzcjd/6C4xf4HAACAZuTuf3Dc0sn+1//r//X/S+n/j3n//6xfj/5f/7+O/n+Y/n+E/l//r//X/zOpufX/ufsfErd0sv8BAACgB7n7Hxq32P8AAADQjNz9D4tb7H8AAABoRu7+h8ctnex//b/+X/+/lP5/Q+//6//1/wt30+rM/0/Q/x+k/x8x0v+vVvr/Iefcz6//5S3n8x9C/6//56DN9v+n/pLh/j93/yPiljuvVscu+FcJAAAAzEnu/kfGLZ38+T8AAAD0IHf/NXGL/Q8AAADNyN1/bdzSyf7X/+v/9f/6f/3/+q+v/1+mc+vvjx/64/X/4dD+/3//66p79tv/e/9/mPf/9f/6f842t/f/c/dfF7d0sv8BAACgB7n7HxW32P8AAADQjNz9j45b7H8AAABoRu7+x8Qtnex//f/59P83H/rzzaf//499P25P/79bu+j/9f/6f/1/6y62v9f/h67f/9+pb+r/9f/6f/0/F2du/X/u/sfGLZ3sfwAAAOhB7v7HxS32PwAAADQjd//j4xb7HwAAAJqRu/8JcUsn+1//7/1//b/+/0L7/7tdsv/nT/r/9fT/m6H/H6b/H9HK+/8X+Ltm2/38xdr259f/6/85aG79f+7+J8Ytnex/AAAA6EHu/ifFLfY/AAAANCN3/5PjFvsfAAAAmpG7/ylxSyf7X/+v/19G/59fQf8/p/6/1ff/k/5/mfT/w/T/I1rp/y/Qtvv5pX9+/b/+n4Pm1v/n7n9q3NLJ/gcAAIAe5O5/Wtxi/wMAAEAzcvc/PW6x/wEAAKAZufufEbd0sv/1//r/ZfT/3v/X/3v/X/9/bvT/w/T/I/T/+n/9v/6fSc2t/8/df33c0sn+BwAAgB7k7n9m3GL/AwAAQDNy9z8rbrH/AQAAoBm5+58dt3Sy//X/+n/9v/5f/7/+6+v/l0n/P0z/P0L/r//X/+v/mdSM+v89P+rE6jlxSyf7HwAAAHqQu/+5cYv9DwAAAM3I3f+8uMX+BwAAgGbk7n9+3NLJ/tf/z6b/38352ur/d1ar1QX3/3fR/y+7/9/Z88+zfl/q//X/G6D/H6b/H6H/1//r//X/TGpG/f/ut3P3vyBu6WT/AwAAQA9y998Qt9j/AAAA0Izc/S+MW+x/AAAAaEbu/hfFLZ3sf/3/bPr/XW31/97/P/v3R0/9v/f/D9L/b4b+f5j+f4T+X/+v/9f/M6m59f+5+18cNx27/IJ/iQAAAMDM5O6/MW7p5M//AQAAoAe5+18St9j/AAAAsFDXH/ie3P0vjVs62f/6/2n7/2N7vk//r/8/+/eH/l//r/8/evr/Yfr/Efp//b/+X//PpObW/+fuf1nc0sn+BwAAgB7k7r8pbrH/AQAAoBm5+18et9j/AAAA0Izc/a+IWzrZ//p/7//r//X/+v/1X1//v0z6/2H6/xH6f/3/dvv/42f+R/0/bTiP/v/kyZPXHHn/n7v/lXFLJ/sfAAAAepC7/1Vxi/0PAAAAzcjd/+q4xf4HAACAZuTuf03c0sn+1/8fRf9/ulacdf+fv9WX1f9fu1rp//X/+n/9/zD9/zD9/wj9v/7f+//6fyY1t/f/c/e/Nm7pZP8DAABAD3L3vy5usf8BAACgGbn7Xx+32P8AAADQjNz9b4hbOtn/+n/v/y+o//f+v/5/369nYf3/HSv9/0Ysov/fOfzrz73/v07/r/8f0F3/f9c77fum/l//z0Fz6/9z978xbulk/wMAAEAPcve/KW6x/wEAAKAZufvfHLfY/wAAANCM3P1viZsu62T/6//1//p//b/+f/3X3/D7/8dWq5X+fwKL6P8HzL3/9/6//n9Id/3/WfT/+n8Omlv/n7v/rXFLJ/sfAAAAepC7/21xi/0PAAAAzcjdf3PcYv8DAABAM3L3vz1u6WT/6//1//p//X/z/f91i+j/vf8/Ef3/MP3/CP2//l//r/9nI7bV/+fuf0fc0sn+BwAAgB7k7n9n3GL/AwAAQDNy978rbrH/AQAAoBm5+98dt3Sy//X/+v/z6f/zc+r/2+r/j8+u/z+x7+fr5P1//f9E9P/D9P8j9P/6f/3/9fp/pjS39/9z978nbulk/wMAAEAPcve/N279V7f2PwAAADQjd//74hb7HwAAAJqRu//9cUsn+1//r//3/r/+v/n3//X/XdH/D9P/j9D/6//1/97/Z1Jz6/9z938gbulk/wMAAEAPcvd/MG6x/wEAAKAZufs/FLfY/wAAANCM3P23xC2d7H/9v/5f/6//1/+f/meo/2+D/n/YZvr/Hf2//r/6+Uvi/wr0//r/sR9Pm+bW/+fu/3Dc0sn+BwAAgB7k7v9I3GL/AwAAQDNy9380brH/AQAAYJEuW/N9ufs/Frd0sv/1//p//b/+X/+//uvr/5dJ/z/M+/+H+c8b9n5L/3+u/fx/7/vW0t7/P/s/v/T/+n+mN7f+P3f/x+OWTvY/AAAA9CB3/yfiFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9r//X/zfT/5/6EPp//b/+v3v6/2H6/xHe/9/q+/lL//z6f/0/B82t/8/d/+m4pZP9DwAAAD3I3f+ZuMX+BwAAgGbk7v9s3GL/AwAAQDN2d3/GZR3uf/3/1vr/3Z9f/+/9f/2//l//Py39/zD9/wj9v/5f/6//Z1Jz6/8/t/ujTqw+H7d0sv8BAACgB7n7vxC32P8AAADQjNz9X4xbDt//J47+UwEAAABTyt3/pbilkz//1/97/38Z/f/Jkyev0f/r//f/es70/7fp/yn6/2H6/xH6f/2//l//z6Tm1v/n7v9y3NLJ/gcAAIAe5O7/Stxi/wMAAEAzcvd/NW6x/wEAAKAZufu/Frd0sv/1/6c+xxX1/Ufb/9/4P2v7/xP6f+//6/9X3v/X/09E/7/eTlz9/4gW+//z+DdXb7ufv1jb/vz6f/0/B82t/8/d//W4pZP9DwAAAD3I3f+NuOXA/r91g58KAAAAmFLu/m/GLf78HwAAAJqRu/9bcUsn+1//v7n3/0/9vevl/f+d1frPr//X/+v/9f9HTf8/TP8/osX+/zxsu59f+ufX/+v/OWhu/X/u/m/HLfuH3+Xn96sEAAAA5iR3/3filk7+/B8AAAB6kLv/1rjF/gcAAIBm5O7/btzSyf7X/2+u/9/bz7fe/2/m/f8T+n/9/5T9/6X6/zbo/4fp/0ccWf9/LH9+/f8R2vbn1//v7f/zd7P+v3dz6/9z938vbulk/wMAAEAPcvd/P26x/wEAAKAZuft/ELfY/wAAANCM3P23xS179v+6trsV+n/9/3L7f+//6/+9/6//P0j/vzP4vz3X/v/46uL6/6T/9/6//r/X/t/7/5w2t/4/d/8P4xZ//g8AAACLc/kh35+7/0dxi/0PAAAAzcjd/+O4xf4HAACAZuTu/0nccvul2/pIG6X/1//r//X/+v/1X1//v0z6/2He/x+h/5+in79S/99G/79a6f+5eHPr/3P3/zRu8ef/AAAA0Izc/T+LW+x/AAAAaEbu/p/HLfY/AAAANCN3/y/ilk72v/5f/3+R/f9umqn/P03/f5r+fz39/2bo/4fp/0fo/73/r//3/j+Tmlv/n7v/l3FLJ/sfAAAAepC7/1dxi/0PAAAAzcjd/+u4xf4HAACAZuTu/03c0sn+31r/H3+r9f/b7f8v9f7/Lv2//n/d19f/L5P+f5j+f4T+X/+v/9f/M6m59f+5+38bt3Sy/wEAAKAHuft/F7fY/wAAANCM3P2/j1vsfwAAAGhG7v4/xC2d7H/v//fd/0/w/r/+f7j/P7736+j/9f/6/6On/x+m/1+v/kHp//X/+n/9P5OaW/+fu/+PcUsn+x8AAAB6kLv/T3GL/Q8AAADNyN1/e9xi/wMAAEAzcvf/OW7pZP/r//X/+n/v/+v/1399/f8y6f+HbbP/v/sV41/W+/9b7//zI+j/9f/6fyYxt/4/d/9f4pZO9j8AAAD0IHf/X+MW+x8AAACakbv/b3GL/Q8AAADNyN3/97ilk/0/0v+febtc/z9I/7//8+v/1//+0P/r//X/R0//P8z7/yP0/97/1//r/5nU3Pr/3P3/iFs62f8AAADQg9z9d8Qt9j8AAAA0I3f/P+MW+x8AAACakbv/X3FLJ/vf+/9L6v+vnGf/f+bfEqH/1//v0v+vp//fDP3/MP3/CP2//l//r/9nUnPr/3P3/zsAAP//rZFKsw==") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(0xee01, r1, 0x0) setfsuid(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x8000b) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r6, 0x0, &(0x7f0000a95000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x20800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) r8 = dup3(r0, r2, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f00000003c0)={0x18, r10}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}, {@uuid_off}, {@redirect_dir_follow}], [{@dont_hash}, {@subj_role={'subj_role', 0x3d, 'pids.events\x00'}}, {@uid_lt={'uid<', r1}}, {@func={'func', 0x3d, 'PATH_CHECK'}}], 0x2c}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='L'], 0x1, 0xbc2, &(0x7f0000000cc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) [ 85.096404][ T5345] Bluetooth: hci0: command tx timeout [ 85.429825][ T5369] loop0: detected capacity change from 0 to 32768 [ 85.842158][ T5369] ------------[ cut here ]------------ [ 85.844807][ T5369] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:329:16 [ 85.848729][ T5369] shift exponent 127 is too large for 64-bit type 's64' (aka 'long long') [ 85.852418][ T5369] CPU: 0 UID: 16877 PID: 5369 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.852432][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.852439][ T5369] Call Trace: [ 85.852445][ T5369] [ 85.852450][ T5369] dump_stack_lvl+0x189/0x250 [ 85.852541][ T5369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.852554][ T5369] ? __pfx__printk+0x10/0x10 [ 85.852591][ T5369] ? _raw_spin_unlock+0x28/0x50 [ 85.852632][ T5369] ? txBeginAnon+0x38e/0x3f0 [ 85.852674][ T5369] ubsan_epilogue+0xa/0x40 [ 85.852688][ T5369] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 85.852719][ T5369] extAlloc+0xd52/0xfb0 [ 85.852744][ T5369] ? __pfx_extAlloc+0x10/0x10 [ 85.852756][ T5369] ? down_write_nested+0x169/0x200 [ 85.852769][ T5369] ? __pfx_down_write_nested+0x10/0x10 [ 85.852789][ T5369] jfs_get_block+0x346/0xab0 [ 85.852804][ T5369] ? __pfx_jfs_get_block+0x10/0x10 [ 85.852813][ T5369] ? do_raw_spin_unlock+0x4d/0x240 [ 85.852834][ T5369] __block_write_begin_int+0x6b2/0x1900 [ 85.852856][ T5369] ? __pfx_jfs_get_block+0x10/0x10 [ 85.852871][ T5369] ? __pfx___block_write_begin_int+0x10/0x10 [ 85.852883][ T5369] ? __filemap_get_folio+0x79f/0xaf0 [ 85.852904][ T5369] ? __pfx_jfs_get_block+0x10/0x10 [ 85.852916][ T5369] block_write_begin+0x8a/0x120 [ 85.852925][ T5369] ? jfs_write_begin+0x1d/0x80 [ 85.852939][ T5369] jfs_write_begin+0x35/0x80 [ 85.852954][ T5369] generic_perform_write+0x2c5/0x900 [ 85.852975][ T5369] ? __pfx_generic_perform_write+0x10/0x10 [ 85.852985][ T5369] ? file_update_time+0x416/0x490 [ 85.852999][ T5369] ? __generic_file_write_iter+0xf9/0x230 [ 85.853008][ T5369] ? generic_file_write_iter+0x103/0x550 [ 85.853021][ T5369] generic_file_write_iter+0x117/0x550 [ 85.853034][ T5369] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.853058][ T5369] ? __lock_acquire+0xab9/0xd20 [ 85.853080][ T5369] ? rcu_read_lock_any_held+0xb3/0x120 [ 85.853093][ T5369] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 85.853114][ T5369] vfs_write+0x5c6/0xb30 [ 85.853131][ T5369] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.853143][ T5369] ? __pfx_vfs_write+0x10/0x10 [ 85.853160][ T5369] ? __fget_files+0x2a/0x420 [ 85.853181][ T5369] ksys_write+0x145/0x250 [ 85.853193][ T5369] ? __pfx_ksys_write+0x10/0x10 [ 85.853203][ T5369] ? rcu_is_watching+0x15/0xb0 [ 85.853218][ T5369] ? do_syscall_64+0xbe/0x3b0 [ 85.853231][ T5369] do_syscall_64+0xfa/0x3b0 [ 85.853240][ T5369] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.853255][ T5369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.853265][ T5369] ? clear_bhb_loop+0x60/0xb0 [ 85.853278][ T5369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.853288][ T5369] RIP: 0033:0x7fdea798eba9 [ 85.853298][ T5369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.853306][ T5369] RSP: 002b:00007fdea876c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.853319][ T5369] RAX: ffffffffffffffda RBX: 00007fdea7bd5fa0 RCX: 00007fdea798eba9 [ 85.853326][ T5369] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 000000000000000b [ 85.853333][ T5369] RBP: 00007fdea7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.853339][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.853345][ T5369] R13: 00007fdea7bd6038 R14: 00007fdea7bd5fa0 R15: 00007ffd77d39438 [ 85.853363][ T5369] [ 85.853368][ T5369] ---[ end trace ]--- [ 86.014403][ T5369] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 86.017330][ T5369] CPU: 0 UID: 16877 PID: 5369 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.021053][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.025198][ T5369] Call Trace: [ 86.026589][ T5369] [ 86.027857][ T5369] dump_stack_lvl+0x99/0x250 [ 86.029726][ T5369] ? __asan_memcpy+0x40/0x70 [ 86.031685][ T5369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.034153][ T5369] ? __pfx__printk+0x10/0x10 [ 86.036159][ T5369] vpanic+0x281/0x750 [ 86.037900][ T5369] ? __pfx_vpanic+0x10/0x10 [ 86.040006][ T5369] panic+0xb9/0xc0 [ 86.041579][ T5369] ? __pfx_panic+0x10/0x10 [ 86.044066][ T5369] ? __pfx__printk+0x10/0x10 [ 86.046546][ T5369] ? txBeginAnon+0x38e/0x3f0 [ 86.049017][ T5369] check_panic_on_warn+0x89/0xb0 [ 86.051572][ T5369] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 86.054862][ T5369] extAlloc+0xd52/0xfb0 [ 86.057060][ T5369] ? __pfx_extAlloc+0x10/0x10 [ 86.059533][ T5369] ? down_write_nested+0x169/0x200 [ 86.062056][ T5369] ? __pfx_down_write_nested+0x10/0x10 [ 86.064392][ T5369] jfs_get_block+0x346/0xab0 [ 86.066349][ T5369] ? __pfx_jfs_get_block+0x10/0x10 [ 86.068485][ T5369] ? do_raw_spin_unlock+0x4d/0x240 [ 86.070761][ T5369] __block_write_begin_int+0x6b2/0x1900 [ 86.073080][ T5369] ? __pfx_jfs_get_block+0x10/0x10 [ 86.075187][ T5369] ? __pfx___block_write_begin_int+0x10/0x10 [ 86.077610][ T5369] ? __filemap_get_folio+0x79f/0xaf0 [ 86.079814][ T5369] ? __pfx_jfs_get_block+0x10/0x10 [ 86.081962][ T5369] block_write_begin+0x8a/0x120 [ 86.083827][ T5369] ? jfs_write_begin+0x1d/0x80 [ 86.085716][ T5369] jfs_write_begin+0x35/0x80 [ 86.087356][ T5369] generic_perform_write+0x2c5/0x900 [ 86.089460][ T5369] ? __pfx_generic_perform_write+0x10/0x10 [ 86.091834][ T5369] ? file_update_time+0x416/0x490 [ 86.093933][ T5369] ? __generic_file_write_iter+0xf9/0x230 [ 86.096363][ T5369] ? generic_file_write_iter+0x103/0x550 [ 86.098738][ T5369] generic_file_write_iter+0x117/0x550 [ 86.101080][ T5369] ? __pfx_generic_file_write_iter+0x10/0x10 [ 86.103552][ T5369] ? __lock_acquire+0xab9/0xd20 [ 86.105613][ T5369] ? rcu_read_lock_any_held+0xb3/0x120 [ 86.107852][ T5369] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 86.110267][ T5369] vfs_write+0x5c6/0xb30 [ 86.112240][ T5369] ? __pfx_generic_file_write_iter+0x10/0x10 [ 86.114657][ T5369] ? __pfx_vfs_write+0x10/0x10 [ 86.116732][ T5369] ? __fget_files+0x2a/0x420 [ 86.118700][ T5369] ksys_write+0x145/0x250 [ 86.120558][ T5369] ? __pfx_ksys_write+0x10/0x10 [ 86.122620][ T5369] ? rcu_is_watching+0x15/0xb0 [ 86.124692][ T5369] ? do_syscall_64+0xbe/0x3b0 [ 86.126755][ T5369] do_syscall_64+0xfa/0x3b0 [ 86.128705][ T5369] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.130930][ T5369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.133490][ T5369] ? clear_bhb_loop+0x60/0xb0 [ 86.135441][ T5369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.137909][ T5369] RIP: 0033:0x7fdea798eba9 [ 86.139812][ T5369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.147843][ T5369] RSP: 002b:00007fdea876c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.151286][ T5369] RAX: ffffffffffffffda RBX: 00007fdea7bd5fa0 RCX: 00007fdea798eba9 [ 86.154528][ T5369] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 000000000000000b [ 86.157906][ T5369] RBP: 00007fdea7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 86.161224][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.164387][ T5369] R13: 00007fdea7bd6038 R14: 00007fdea7bd5fa0 R15: 00007ffd77d39438 [ 86.167563][ T5369] [ 86.169151][ T5369] Kernel Offset: disabled [ 86.171260][ T5369] Rebooting in 86400 seconds..