program:
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6591ac6d0100000000000000b5384050da"], 0x1, 0xd99, &(0x7f0000000e80)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='dummy0\x00', 0x10)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'das16m1\x00', [0x2f00, 0x800081, 0xd09a, 0x2, 0x0, 0xffffff7e, 0x1, 0x6, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x7ff, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]})
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_test\x00', [0x9e1, 0x2166, 0x0, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0x8, 0x344, 0x1, 0x7, 0x1, 0x9, 0x3, 0x9, 0xe, 0x100, 0x3, 0x80, 0x7ff, 0x1, 0x1, 0xb0c4, 0x7df, 0x8, 0x7, 0x1]})
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b63707573657420bd2937eee872d00d0b5130a05e66b4d87ca43e738748af29d05829762cd4bab0e35e59fc9201306962a7abe246577fb372147de533b7660191dc1d65972958b1c415ec79ba389fd9a5cc4e230ae14bb79eac9ff1bce4e113806cb3c56fbb2ecf5d646b6270e828188d355ab30684b7de5c63b83b4f094f01870713f33b"], 0x8)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3ea269eca05f1940, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000013c0), 0x800, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES8, @ANYRESHEX], 0xfe, 0x627c, &(0x7f0000002ec0)="$eJzs3U1vXFf9B/DfPHj80H9TK4uq/wghNy0PpTSJkxICBdouYMGmCxSxQ4lct4pIASUBpZVFXFlILFjxCkBILBFiiVjwArpgy44VKyLZSKCuuOja58TXk5nawfbcsc/nIzn3/u65Mz7X33nMfTgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMS3v/Wd5U5E3PhJWrAY8X/Ri+hGzNf1UkTMLy3m9fsR8VxsN8ezETEzG1HffvufZyJejYiPzkRsbq2t1IsvH7Af3/z9X3/zvafe+svvZi7++w/3eq+NW+/+/V/8648PDrfNAAAAUJqqqqpO+pp/Ln2/77bdKQBgIvL7f5Xk5ae+/uXf3/rTNPVHrVar1eoJ1E3VaA+aRUSsN29Tf2awOx4ATpj1+LjtLtAi+RetHxFPtd0JYKp12u4Ax2Jza22lk/LtNN8Plnba87Ege/Jf7zw6v2PcdD/Dx5hM6vG1Eb04O6Y/8xPqwzTJ+XeH87+x0z5I6x13/pMyLv/BzqlPxcn594bzH3J68u+OzL9UOf/+E+Xfkz8AAAAAAEyx/P//iy3v/509/KYcyCft/12aUB8AAAAAAAAA4Kgddvy/R4z/BwAAAFOr/q5e+9WZ3WXjrsVWL7/eiXh6aH2gMOlkmYW2+wEAAAAAAAAAAAAAJenvHMN7vRMxExFPLyxUVVX/NA3XT+qwtz/pSt9+KFnbL/IAALDjozP5XP6ZnQWdiLmIuJ6u9TezsLBQVXPzC9VCNT+bP88OZueq+cb32jytl80ODvCBuD+o6juba9yuab/vy/u1D99f/bsGVe8AHTsi6Y8ZY5pbDBwA0htUxKZ3pFOmqp4Z9+ED9vD8P4UWY7HtxxXTr+2HKQAAAHD8qqqqOuly3ufSPv9u250CACYiv/8P7xc4VN0d0x5xNPevVp+ces8xoVPQH7VaXXjdVI32oFlExHrzNvVnBsPxA8AJsx4ft90FWiT/ovUj4rm2OwFMtU7bHeBYbG6trXRSvp3m+0Ea3z0fC7In//XO9u3y7UdN9zN8jMmkHl8b0YuzY/rz7IT6ME1y/t3h/G/stA/Sesed/6SMy3+wfcpceXL+veH8h5ye/Lsj8y9Vzr//RPn35A8AAAAAAFMs////ov2/eZMBAAAAAAAA4MTZ3Fpbyee95v3/nxqxnvM/T6ecf+dJ859P8/I/0XL+3aH8Pz+0Xq8x//DN3ef/P7fWVn577x//n6cHzX82z3TSI6uTHhGd9Js6/TQ9zNY9bmOmN6h/00yn2+unY36qmXfiVtyO1bi0Z91u+nvsti/vae+lizrvtl/e095/rP3KnvaZdN2Baj63X4iV+GHcjre32+u22X22f26f9mqf9px/z+t/kXL+/Uc/Z79b57+Q2jtD09rDD7uPPe+b01G/541bn/75pePfnH1tRO/RtjXV23e+hf5s/02eGsSP767euXD/5r17d5YjTfYsvRxpcsRy/jPbP7O7r/8v7LTn1/3m8/Xhh4Mnzn9abER/bP4vNObr7X1pwn1rQ85/kH5y/m+n9tHP/5Oc//jn/8st9AcAAAAAAAAAAAAAAAA+SVVV26eIvhERV9P5P22dmwkATFZ+/6+SvFytVqvVavXpq5uq0V5vFhHx5+Zt6s8MPx11ZwDANPtPRPyt7U7QGvkXLF/vr56+2HZngIm6+/4H3795+/bqnbtt9wQAAAAAAAAA+F/l8T+XGuM/vxgRi0Pr7Rn/9c1YOuz4n/0882iA0SMe6HuMje6g120MN/58bI/PfWHc+N/n4/Hxv/OYuL3mdowxs0/7YJ/22X3a50Yu3U1r5IkeDTn/5xvjndf5nxsafr2E8V+Hx7wvQc7/fOPxXOf/uaH1mvlXv566/NcPuuJGdPfkf/Heez+6ePf9D1659d7Nd1ffXf3BleXlS1euXr127drFd27dXr208+/x9HoK5Pzz2NeOAy1Lzj9nLv+y5Pw/k2r5lyXn/9lUy78sOf/8eU/+Zcn55+8+8i9Lzv+lVMu/LDn/L6Ra/mXZ3FqbrfN/OdXyL0t+/n8x1fIvS87/lVTLvyw5/wupln9Zcv4XU32A/F0e/hTJ+ec9XJ7/Zcn5L6da/mXJ+V9OtfzLkvO/kmr5lyXn/2qq5V+WnP+XUi3/suT8r6Za/mXJ+X851fIvS87/WqrlX5ac/1dSLf+y5Py/mmr5lyXn/1qq5V+WnP/XUi3/suT8v55q+Zcl5/+NVMu/LDn/11Mt/7LsXv/fjJlpmPnZ0d5hL6Zku07aTNuvTAAAAAAAAAAAAADAsEkcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9lBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu9cYuc76fuBn9ua1Q4iBEJz8DWwSY4yzZNeX+MIfFxOuDVBuCYVesF3v2iz4htcugSLZNFAiYVRUgZq+aAsItZGqCqviBa0ozYuql1elfUHfVFSVkBpVIQqoSG1Fs9XMeZ7HM7OzM7ve8Xr2PJ+PZP92Z86Z88yZ55yd39rfOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS7+02zn68VRVH/0/hrc1G8oP71xonNjdted7NHCAAAAKzW/zb+fu62dMPhZazUtMzfvuIfvrWwsLBQfHD4K6NfXlhId0wUxeiGomjcF139tw/VmpcJHivGa0NN3w/12Pxwj/tHetw/2uP+sR73b+hx/3iP+xftgEU2lr+PaTzYtsaXm8tdWtxejDbu29ZhrcdqG4aG4u9yGmqNdRZGTxRzxalitphuWb5cttZY/jt317f19iJua6hpW1vrM+THnz4ex1AL+3hby7auPWb0ozcWEz/58aeP/9GFZ+7sVHvuhpbHK8e54576OD8bbinHWis2pH0SxznUNM6tHV6T4ZZx1hrr1b9uH+dzyxzn8LVhrqn213y8GGp8/b3Gfhpp/rVe2k9bw23/dW9RFJevDbt9mUXbKoaKTS23DF17fcbLGVl/jPpUenExsqJ5evcy5mm9zmxrnaftx0R8/e8O640sMYbml+lHnxlb9LqvdJ5G9We91LHSPgf7fawMyhyM8+J7jSf9eMc5uC08/09vX3oOdpw7HeZget5Nc/CeXnNwaGy4Meb0ItQa61ybg7talh9ubKnWqE9v7z4Hpy6cPjc1/8lPvXbu9LGTsydnz+zZtWt6z759Bw4cmDoxd2p2uvz7Ovf24NtUDKVj4J6w7+Ix8Oq2ZZun6sLX+nccjnc5Dje3Ldvv43Ck/cnV1uaAXDyny2Pj4fpOH78yVCxxjDVen52rPw7T8246DkeajsOOP1M6HIcjyzgO68uc27m89ywjTX86jeFG/SzY3DQH29+PtM/Bfr8fGZQ5OB7mxb/sXPpnwdYw3scnV/p+ZHjRHExPN5x76rek9/vjBxql07y8q37HLWPFxfnZ8/c/euzChfO7ilDWxEua5kr7fN3U9JyKRfN1aMXz9fDcKx6/q8Ptm8O+Gn9t/a/xJV+r+jJ77+/+WjV+unXeny237i5C6bO13p+dfprX92fqJbvsz/oyn51a/Xvx1Jc2nX9Hlzj/xr7/+XJ76aEeGx4dKY/f4bR3RlvOx60v1Ujj3FVrbPu5qeWdj0fDn7U+H9/e5Xy8pW3Zfp+PR9ufXDwf13r9tmN12l/P8TBPTk13Px/Xl9mye6VzcqTr+fjeUGth/78mdAqpL2qaO0vN27StkZHR8LxG4hZa5+meluVHQ29W39aTu69vnu64t3ys4fTsrlmreTrRtmy/52k6Xy01T2u9fvt2fdpfz/EwL27f032e1pd5au/qz50b45dN586xXnNwdHisPubRNAnL8/3CxjgH7y+OF2eLU8VM496xxnyqNbY1+cDy5uBY+LPW58otXebgjrZl+z0H08+xpeZebWTxk++D9tdzPMyLJx7oPgfry7x5f3/fu+4It6Rlmt67tv9+banfed3Vtptu5O+86uP86/3dfzdbX+bUgZX2md33033hlls67Kf243epY2qmWJv9tCWM85kDS++n+njqy3z54DLn0+GiKC59/MHG73vDv6/82cXvf6vl3106/ZvOpY8/+OytJ/5mJeMHYP17viybyp91Tf8ytZx//wcAAADWhdj3D4Wa6P8BAACgMmLfH/9XeKL/BwAAgMqIff9IqEkm/f+WNz8z9/ylIiXzF4J4f9oND5XLxYzrdPh+YuGa+u0PfmP2p39xaXnbHiqK4mcP/UbH5bc8FMdVmgjjvPqW1tsXr3hpWds/+si15Zrz618Njx+fz3KnQacI7nRRFN+57YuN7Ux86EqjPvXQ0UZ93+XHH6sv89zB8vu4/tMvKZf//RD+PXziWMv6T4f98MNQp9/ReX/E9b555TVb93/g2vbierV7Xth42k98uHzc+Dk5X3qsXD7u56XG/5dfePKb9eUffVXn8V8a6jz+J8PjfiPU/355uXzza1D/Pq73uTD+uL243v1f/27H8V/9fLn8ubeWyx0NNW5/R/h+21ufmWveX4/WjrU8r+Jt5XJx+9Pf/+3G/fHx4uO3j3/8yJWW/dE+P576p/JxptqWj7fH7UR/3rb9+uM0z8+4/Sd/62jLfu61/avve/rl9cdt3/59bcsNt63f/olNf/C5L3bcXhzP4T891/J8Dr83HMdh+098OMzHcP//XP1iy3ajo+9tPf/E5b+6+VLL84ne/pNy+1ffcLJR/33ip793ywtufeHlV9b3XVF87/3l4/Xa/sk/PNsy/q/dsbPxesT7Y0a/fftLids//4nJM2fnL87NNO3VxmfnvLMcz4bxjZvq470tnFvbvz9y9sJHZs9PTE9MF8VEdT9C77p9PdRny3J5pevvfCS8nnf97nc2bf/HL8Tb//nh8vYr7yh/br06LPelcPvm8vVbqK1y+0/cfUfj+K49VX7fkmPvg63b/uPAshYMz7/9fUGc7+de+pHGfqjf1/i5EY/rVY7/BzPl43w77NeF8MnM99xxbXvNy8fPRrjy/vJ4X/X+C6e5+Lr+cXi93/XD8vHjuOLz/UF4H/PdLa3nuzg/vn1pqP3xG5/icTmcT4rL5f1xqbi/rzx3R8fhxc8hKS7f2fj+d9Lj3Lmip7mU+U/OT52aO3Px0akLs/MXpuY/+akjp89ePHPhSOOzPI98tNf6185Pmxrnp5nZfXuL6Y1FUZwtptfghHVjxl//annjP/fI8Zn909tnZk8cu3jiwiPnZs+fPD4/f3x2Zn77sRMnZj/Ra/25mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+jDKQfWwb/pjk2fOH2msMn9o78FdDzywd3ry9NmZ2UP7p6cnL/Zav/GzabK+9q9Pnp89dezC3OnZyfm5T80e2nVw377dPT8N8PS5E/MTU+cvnpm6OD97fqp8LhMXGjfXf/b1Wp9qmv/X8v1su1r5QXzFu+/blz6fte4bn1nyocpF2j5A9JnwWTR//6JzB5bzfez7R0NNMun/AQAAIAex7x8LNdH/AwAAQGXEvn9DqIn+HwAAACoj9v3joSaZ9P/y//L/y8v/l/fL/+eV/z/38TJXut7z/zE/L/+fh5uc/1/19uX/5f+rl/9ffn5+vY9f/l/+n8UGLf8f+/6NRZFl/w8AAAA5iH3/plAT/T8AAABURuz7bwk10f8DAABAZcS+/wWhJpn0/znk/9/TYbEV5v939wpcVT//v26u/7+xkP+X/2/O/8cXR/4/GyvO33/g4ZZv5f8D+X/5f/l/+X/5f1ZtdMl7blb+P/b9t4aaZNL/AwAAQA5i3//CUBP9PwAAAFRG7PtvCzXR/wMAAEBlxL5/c6hJJv1/Dvn/Tlz/v7L5f9f/l//v7/X/mwYj/78+uP5/d53z/2O3LLpJ/n+F+f9x+f/1mP8f7e/4Bzv/33P48v/cEIN2/f/Y978o1CST/h8AAAByEPv+F4ea6P8BAACgMmLf/5JQE/0/AAAAVEbs+28PNcmk/5f/X7/5/yOF/L/8v/z/Dc//d73+f/mV/P9gkf/vzvX/e3D9/7zy/30e/2Dn//t9/f/Rt7SvL/9PJ4OW/499/0tDTTLp/wEAACAHse+/I9RE/w8AAACVEfv+l4Wa6P8BAACgMmLfvyXUJJP+X/5//eb/Xf9f/l/+/2bn/0vy/4NF/r87+f8e5P/l/+X/l5f/7/DmV/6fTnrl/x98fXmeXqv8f+z77ww1yaT/BwAAgBzEvv+uUBP9PwAAAFRG7Pv/X6iJ/h8AAAAqI/b9W0NNMun/5f/l/+X/88r/3zcm/y//X23y/93J//cg/y//L/+/zOv/L7aS/P+GXg9GZfTK/7/7vn2NU2B7/r9Df9WX/H/s+18eapJJ/w8AAAA5iH3/K0JN9P8AAABQGbHvf2Woif4fAAAAKiP2/ROhJpn0//L/1cr//8lfPfHKQv5f/r/H9iua/4/TQP4/c/L/3cn/9yD/L/8v/78m+X/ycb35/w76kv+Pff/doSaZ9P8AAACQg9j33xNqov8HAACAyoh9/72hJvp/AAAAqIzY928LNcmk/5f/r1b+P5L/l//vtv2K5v8T+f+8yf930HSQyv/3IP8v/599/j+++5X/pz8GLf8f+/5XhZpk0v8DAABADmLfvz3URP8PAAAAlRH7/leHmuj/AQAAoDJi378j1CST/l/+P+/8f03+v0H+X/6/0/bl/9cn+f/uVpr/H5P/l/+X/88s/+/6//TXoOX/Y9//mlCTTPp/AAAAyEHs+3eGmuj/AQAAoDLi/98s/9+r/h8AAACqKPb9k6EmmfT/8v955/9zu/5/Tf5f/l/+v/Lk/7tz/f8e5P/l/+X/5f/pq0HL/8e+/7WhJpn0/wAAAJCD2PffH2qi/wcAAIDKiH3/VKiJ/h8AAAAqI/b906EmmfT/8v/y/znl/13/X/5f/r/65P+7k//vQf5f/r9q+f+ikP/nphq0/H/s+3eFmmTS/wMAAEAOYt+/O9RE/w8AAACVEfv+PaEm+n8AAACojNj37w01yaT/l/+X/5f/l/+X/++8ffn/9alb/v4ry1hf/j+Q/5f/l/+vRv7f9f+5yQYt/x/7/gdCTTLp/wEAACAHse/fF2qi/wcAAIDKiH3//lCT0P93+n/dAAAAwPoS+/4DoSaZ/Pu//H9F8v+/+Xct25b/l//vtv3+5P83yv+HKv8/WCp6/f/2w+K6rc/8//Pp+cv/y/8P8vjl/+X/WWzQ8v+x7z8YapJJ/w8AAAA5iH3/60JN9P8AAABQGbHv//+hJvp/AAAAqIzY978+1CST/l/+vyL5/zby//L/3bbv+v/y/1VW0fx/36zP/P8S1/8fkv+X/1/9+Mf6OH75/+Xk/zf0ehgq5sbn/+NXy8v/x77/UKhJJv0/AAAA5CD2/T8XaqL/BwAAgMqIff8bQk30/wAAAFAZse8/HGqSSf8v/y//L/8v/39j8v9vKNoNYv6/Pnnk/6tF/r+7SuX/Xf9f/n/Axi//7/r/LDZo1/+Pff8bQ00y6f8BAAAgB7HvfzDURP8PAAAAlRH7/jeFmuj/AQAAoDJi3//mUJNM+n/5f/l/+X/5f9f/77x9+f/1Sf6/O/n/HuT/5f/l/+X/6aubl//f0PH+2Pe/JdQkk/4fAAAAchD7/reGmuj/AQAAoDJi3/+2UBP9PwAAAFRG7PvfHmqSSf8v/y//L/9fzfz/hi7bl/+X/68y+f/u5P97kP+X/1+r/P/44vXl/6miQbv+f+z7fz7UJJP+HwAAAHIQ+/6HQk30/wAAAFAZse9/R6iJ/h8AAAAqI/b97ww1yaT/l/+X/5f/r2b+v9v25f/l/6tM/r87+f8e5P/l/13/X/6fvhq0/H/s+98VapJJ/w8AAAA5iH3/L4Sa6P8BAACgMmLf/+5QE/0/AAAAVEbs+98TapJJ/9+f/H+tKFOt8v/N5P+vJ/+/cKl5Pfl/+f+iX/n/+kry/1mQ/+9O/r+HDvn/DfL/8v/y//L/XLdBy//Hvv+9oSaZ9P8AAACQg9j3vy/URP8PAAAAlRH7/veHmuj/AQAAoDJi3/9wqEkm/b/r/2eZ/09PefDy/67/L//v+v/y/6sj/9+d/H8Prv8v/78u8/+joX5sMv5skv9nUAxa/j/2/Y+EmmTS/wMAAEAOYt//gVAT/T8AAABURuz7fzHURP8PAAAAlRH7/g+GmmTS/8v/Z5n/H+Dr/1ct/z/SMj9yyv+PN72eaV7K/8v/rwH5/+7k/3uQ/5f/H+T8f5jNG5dY3/X/GUSDlv+Pff+HQk0y6f8BAAAgB7Hv/6VQE/0/AAAAVEbs+3851ET/DwAAAJUR+/5fCTXJpP/PIv8/tHgx+X/5/+b95fr/rv/fafvy/+uT/H938v89yP/nk/8f6f/4b971/0vy/wyiQcv/x77/V0NNlmz8nv3PZTxNAAAAYIDEvv/DoSaZ/Ps/AAAA5CD2/UdCTfT/AAAAUBmx7z8aapJJ/59F/r+DpfP/8Yqq8v/y//L/8v/y/+tR//L/L7u1KOT/5f/l/yub/78B45f/l/9nsUHL/8e+/1ioSSb9PwAAAOQg9v2/Fmqi/wcAAIDKiH3/8VAT/T8AAABURuz7Z0JNMun/1zr/35TrHR3M/L/r/19v/v9n8v/y/4H8f2fy/2vD9f+7k//vQf5f/l/+X/6fvhq0/H/s+2dDTTLp/wEAAKDC0q+DY99/ItRE/w8AAACVEfv+k6Em+n8AAACojNj3fyTUJJP+3/X/5f9d//9m5P9HWpaX/y/J/8v/94P8f3fy/z3I/8v/y//L/9NXg5b/j33/XKhJJv0/AAAA5CD2/R8NNdH/AwAAQGXEvv9joSb6fwAAAKiM2PefCjXJpP+X/5f/zz3/XyuKy67//3/s3UeTXGf1x/G2rDQreAmsWbE0K3vBC6DYsaOKtYkmB8vkDCaaDAZMzjmbnHPOJmMymGAMVUN5fM6RRt1zr6Rpdd/7PJ/P5vzlv8W07MGuH6pvPfr/VV9f/z9P+v9h+v8R+n/9v/5f/89aTa3/z91/ZdzSyf4HAACAHuTuv1/cYv8DAABAM3L33z9usf8BAACgGbn7HxC3dLL/9f/6/977/8VW3v/f/+e33//f8XdI/6//34Sl/v7o6j/voCj8wP7/bpdddR/9v/5f/z9I/6//1/9ztqn1/7n7Hxi3dLL/AQAAoAe5+x8Ut9j/AAAA0Izc/Q+OW+x/AAAAaEbu/qvilk72v/5f/z/S/+dfH/1/L/3/jd7/1//Pm/f/h82j/79sd3dX/7+K/n/an1//r/9n2dT6/9z9D4lbOtn/AAAA0IPc/Q+NW+x/AAAAaEbu/ofFLfY/AAAANCN3/8Pjlk72v/5f/+/9/7n0/8dn/P5/fD/o//X/G6D/HzaP/t/7//r/eX5+/b/+n2Xn3/8f+I/ttfT/ufsfEbd0sv8BAACgB7n7Hxm32P8AAADQjNz9j4pb7H8AAABoRu7+R8ctnex//b/+X/8/l/5/Q+//6//1/zN3/eL0PxP0/8v0/yNG+v/FQv8/5Jz7+dW/vPl8/gPo//X/LDv//v/A/6i19P+5+x8Tt1yxWBy/0F8kAAAAMCm5+x8bt3Ty+/8AAADQg9z9V8ct9j8AAAA0I3f/qbilk/2v/9f/6//1//r/1V9f/z9P3v8fdvj+/653vvK+/fb/3v8f5v3/dff/t39nNNn/y6w7MrX+P3f/NXFLJ/sfAAAAepC7/3Fxi/0PAAAAzcjd//i4xf4HAACAZuTuf0Lc0sn+1/9Pq//P3OXC+/9L9/28M/r/vdpF/z/3/v8e+n/9v/5/hP5/mPf/R+z9Y26nfqj/1/97/9/7/xzO1Pr/3P1PjFs62f8AAADQg9z9T4pb7H8AAABoRu7+J8ct9j8AAAA0I3f/U+KWTva//n9a/b/3//X/3v/X/+v/D0f/P0z/P6KV9/8v8Ltm2/38YW378+v/9f8sm1r/n7v/qXFLJ/sfAAAAepC7/2lxi/0PAAAAzcjd//S4xf4HAACAZuTuf0bc0sn+1//r/yfW/x9Z3f/nV9D/6/8vfv+f9P/zpP8fpv8f0Ur/f4G23c/P/fPr//X/LJta/5+7/5lxSyf7HwAAAHqQu/9ZcYv9DwAAAM3I3f/suMX+BwAAgGbk7n9O3NLJ/tf/6/8n1v97/1//v/X+3/v/86b/H6b/H6H/1//r//X/rNXU+v/c/dfGLZ3sfwAAAOhB7v7nxi32PwAAADQjd//z4hb7HwAAAJqRu//5cUsn+1//v6r/v0X/r//X/+v/9f8zpf8fpv8fof/X/+v/9f+s1YT6/zN+1snFC+KWTvY/AAAA9CB3/wvjFvsfAAAAmpG7/0Vxi/0PAAAAzcjdf13c0sn+1/9P5v3/vZyvrf5/Z7FY6P8Xnfb/O2f8/azvS/2//n8D9P/D9P8j9P/6f/2//p/zcsnIv+km1P/v/Th3/4vjlk72PwAAAPQgd/9L4hb7HwAAAJqRu/+lcYv9DwAAAM3I3f+yuKWT/a//n0z/v6et/t/7/2d/f/TU/3v/f5n+fzP0/8P0/yP0//p//b/+n7WaWv+fu//lcdPxYxf8SwQAAAAmJnf/K+KWTn7/HwAAAHqQu/+VcYv9DwAAADN17dIfyd3/qrilk/2v/19v/3/8jD+m/9f/n/39of/X/+v/Lz79/zD9/wj9v/5f/6//Z62m1v/n7n913NLJ/gcAAIAe5O6/Pm6x/wEAAKAZuftfE7fY/wAAANCM3P2vjVs62f/6f+//6//1//r/1V9f/z9P+v9h+v8R+v8D+/lzeRpb/3/o/v/E6f9T/08bzqP/393dvfqi9/+5+18Xt3Sy/wEAAKAHuftviFvsfwAAAGhG7v7Xxy32PwAAADQjd/8b4pZO9r/+v9P+P7/V59X/n1osJtn/H9H/76f/X03/vxn6/2H6/xH6f+//e/9f/89aTe39/9z9b4xbOtn/AAAA0IPc/W+KW+x/AAAAaEbu/jfHLfY/AAAANCN3/1vilk72v/6/0/7f+//e/9f/b7r/v22h/9+IWfT/Owd//an3/9fo//X/A7rr/+95930/1P/r/1k2tf4/d/9b45ZO9j8AAAD0IHf/2+IW+x8AAACakbv/7XGL/Q8AAADNyN3/jrjpaCf7X/+v/9f/6//1/6u//obf/z++WCz0/2swi/5/wNT7//W8/3/2f8tP0//r/+f8+fX/+n+WTa3/z93/zrilk/0PAAAAPcjd/664xf4HAACAZuTuf3fcYv8DAABAM3L3vydu6WT/6//n3f/fvND/6//1/6P9/zWz6P+9/78m+v9h0+j/D6b/1//P+fPr//X/nLtt9f+5+98bt3Sy/wEAAKAHufvfF7fY/wAAANCM3P3vj1vsfwAAAGhG7v4PxC2d7H/9/7z7/02//5+fU//fVv9/YnL9/8l9/3mdvP+v/18T/f8w/f8I/b/+X/9/rf6fdZra+/+5+z8Yt3Sy/wEAAKAHufs/FLf+p1v7HwAAAJqRu//DcYv9DwAAAM3I3f+RuKWT/a//1/97/1//3/z7//r/ruj/h+n/R+j/9f/6f+//s1ZT6/9z9380bulk/wMAAEAPcvd/LG6x/wEAAKAZufs/HrfY/wAAANCM3P03xi2d7H/9v/5f/6//1//f8fdQ/98G/f+wzfT/Oxvs/4/vXf3/dPv/S+K/Bfp//f/Yz6dNU+v/c/d/Im7pZP8DAABAa46t+GO5+z8Zt9j/AAAA0Izc/Z+KW+x/AAAAmKWjK/5Y7v5Pxy2z3P+rKvRh+n/9v/5f/6//X/319f/ztJX+P78p9P/e/w/99P932fejub3/f/a/vy5d6P/1/6zb1Pr/3P2fiVtmuf8BAACAVXL3fzZusf8BAACgGbn7Pxe32P8AAADQjNz9n49bOtn/+n/9v/5f/6//X/319f/ztLb+/8TC+//6f/3/ht/Pn/vn1//r/1k2tf4/d/8X4pZO9j8AAAD0IHf/F+MW+x8AAACakbv/S3GL/Q8AAADN2Nv9GZd1uP/1//p//b/+X/+/+uvr/+dpK+//6//1//r/Pfp//b/+n7NNrf//8t7POrn4StzSyf4HAACAHuTu/2rcYv8DAABAM3L3fy1usf8BAACgGbn7vx63dLL/9f/72vNT+v+p9v+7u7tX6/8vWVyp/1/Z/9804/7/Ov3/mun/h3Xc/x89pw+g/9f/T77/P/vfkqfp/5miqfX/ufu/Ebd0sv8BAACgB7n7vxm32P8AAADQjNz934pb7H8AAABoRu7+b8ctnex//f8E3v8/qf/3/r/3/xfe/9f/r4n+f1jH/f+5abH/P3nuv/xt9/OHte3P7/1//T/Lptb/5+7/TtzSyf4HAACAHuTu/27cYv8DAABAM3L3fy9usf8BAACgGbn7vx+3dLL/9f+b6/9v/2vXy/v/O4vVn1//r//X/+v/Lzb9/zD9/4gW+//zsO1+fu6fX/+v/2fZ1Pr/3P0/iFv2D79j5/erBAAAAKYkd/8P45ZOfv8fAAAAepC7/0dxi/0PAAAAzcjd/+O4pZP9r/+fwPv/Dfb/3v9f/f2h/590/39E/98G/f+wKfT/9xr4svp//f+cP7/+/8z+P7+b9f+9m1r/n7v/J3FLJ/sfAAAAepC7/6dxyxU72/pIAAAAwJrl7v9Z3OL3/wEAAKAZuftvilvO2P+r2u5W6P/1//p//b/+f/XX1//Pk/5/2Ln2/ycWh+v/k/f/9f/6/177f+//c4cN9/+nxvr/3P0/j1v8/j8AAADMzrED/nju/l/ELfY/AAAANCN3/y/jFvsfAAAAmpG7/1dxyy1HtvWRNkr/r//X/4/0/7fGN7j+X/+v/58F/f+wKbz/P0T/30T/f7n+v43+f7HQ/3N4G+7/R3+cu//XcYvf/wcAAIBm5O7/Tdxi/wMAAEAzcvf/Nm6x/wEAAKAZuft/F7d0sv/1//r/Q/b/e2lm0/2/9//1/0H/Pw/6/2Hb7/9vGPyy+v8m+n/v/zfS/3v/n3XYRv+/M/D/z91/c9zSyf4HAACAHuTu/33cYv8DAABAM3L3/yFusf8BAACgGbn7/xi3dLL/t9b/x19q/f/s+//23/8f7P93F/p//b/+f1r0/8O23/8P0//r/+f8+fX/+n+WbaP/H/zx3s86ufhT3NLJ/gcAAIAe5O7/c9xi/wMAAEAzcvf/JW6x/wEAAKAZufv/Grd0sv+9/6//1/97/1//v/rr6//nSf8/TP+/Wv2N0v/r//X/+n/Wamr9f+7+v8Utnex/AAAA6EHu/r/HLfY/AAAANCN3/y1xi/0PAAAAzcjd/4+4pYn9f3T0z9D/z7L/rzxa/6//1//r/9lP/z9sm/3/ve80/mW9/7/1/j8/gv5f/6//Zy2m1v/n7v9n3NLE/gcAAABul7v/X3GL/Q8AAADNyN3/77jF/gcAAIBm5O6/NW7pZP+P9P8n6k/U/w/y/v/+z6//X/39of/X/+v/Lz79/zDv/4/Q/3v/X/+v/2etptb/5+7/T9zSyf4HAACAHuTuvy1usf8BAACgGbn7/xu32P8AAADQjNz9/4tbOtn/3v+fU/9/uf5f/6//1//r/0fo/4fp/0fo//X/+n/9P2s1tf4/d///AwAA//8Mx0aY")
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200), 0x175d9003)
ioctl$CDROMRESET(r6, 0x5312)
syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
[ 86.344733][ T5347] syz.0.0 (5347) used greatest stack depth: 16344 bytes left
[ 86.433199][ T10] cfg80211: failed to load regulatory.db
[ 85.003726][ T4689] Bluetooth: hci0: command tx timeout
[ 85.159380][ T5347] loop0: detected capacity change from 0 to 4096
[ 85.227487][ T5352] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 85.264814][ T5347] ------------[ cut here ]------------
[ 85.268237][ T5347] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:525:9
[ 85.271805][ T5347] shift exponent 8388737 is too large for 32-bit type 'int'
[ 85.284473][ T5347] CPU: 0 UID: 0 PID: 5347 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full)
[ 85.284493][ T5347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.284502][ T5347] Call Trace:
[ 85.284508][ T5347]
[ 85.284514][ T5347] dump_stack_lvl+0x189/0x250
[ 85.284604][ T5347] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.284618][ T5347] ? __pfx__printk+0x10/0x10
[ 85.284645][ T5347] ubsan_epilogue+0xa/0x40
[ 85.284663][ T5347] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 85.284720][ T5347] ? __comedi_request_region+0x74/0x140
[ 85.284765][ T5347] das16m1_attach+0x8ee/0xb20
[ 85.284789][ T5347] comedi_device_attach+0x520/0x670
[ 85.284808][ T5347] comedi_unlocked_ioctl+0x686/0xf40
[ 85.284831][ T5347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 85.284869][ T5347] ? __lock_acquire+0xab9/0xd20
[ 85.284896][ T5347] ? __fget_files+0x2a/0x420
[ 85.284915][ T5347] ? __fget_files+0x2a/0x420
[ 85.284930][ T5347] ? __fget_files+0x3a0/0x420
[ 85.284943][ T5347] ? __fget_files+0x2a/0x420
[ 85.284961][ T5347] ? bpf_lsm_file_ioctl+0x9/0x20
[ 85.284975][ T5347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 85.284993][ T5347] __se_sys_ioctl+0xf9/0x170
[ 85.285010][ T5347] do_syscall_64+0xfa/0x3b0
[ 85.285054][ T5347] ? lockdep_hardirqs_on+0x9c/0x150
[ 85.285068][ T5347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.285080][ T5347] ? clear_bhb_loop+0x60/0xb0
[ 85.285096][ T5347] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.285109][ T5347] RIP: 0033:0x7f85d7d8e9a9
[ 85.285122][ T5347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 85.285133][ T5347] RSP: 002b:00007f85d8b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 85.285154][ T5347] RAX: ffffffffffffffda RBX: 00007f85d7fb5fa0 RCX: 00007f85d7d8e9a9
[ 85.285163][ T5347] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006
[ 85.285172][ T5347] RBP: 00007f85d7e10d69 R08: 0000000000000000 R09: 0000000000000000
[ 85.285179][ T5347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.285187][ T5347] R13: 0000000000000000 R14: 00007f85d7fb5fa0 R15: 00007ffe06c3ad28
[ 85.285208][ T5347]
[ 85.285213][ T5347] ---[ end trace ]---
[ 85.396897][ T5347] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 85.400051][ T5347] CPU: 0 UID: 0 PID: 5347 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full)
[ 85.405129][ T5347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.409626][ T5347] Call Trace:
[ 85.411125][ T5347]
[ 85.412528][ T5347] dump_stack_lvl+0x99/0x250
[ 85.414568][ T5347] ? __asan_memcpy+0x40/0x70
[ 85.416789][ T5347] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.419058][ T5347] ? __pfx__printk+0x10/0x10
[ 85.421071][ T5347] panic+0x2db/0x790
[ 85.422795][ T5347] ? __pfx_panic+0x10/0x10
[ 85.424747][ T5347] ? _printk+0xcf/0x120
[ 85.426463][ T5347] ? __pfx__printk+0x10/0x10
[ 85.428362][ T5347] check_panic_on_warn+0x89/0xb0
[ 85.430480][ T5347] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 85.432987][ T5347] ? __comedi_request_region+0x74/0x140
[ 85.435509][ T5347] das16m1_attach+0x8ee/0xb20
[ 85.437579][ T5347] comedi_device_attach+0x520/0x670
[ 85.439553][ T5347] comedi_unlocked_ioctl+0x686/0xf40
[ 85.441742][ T5347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 85.444033][ T5347] ? __lock_acquire+0xab9/0xd20
[ 85.446080][ T5347] ? __fget_files+0x2a/0x420
[ 85.448122][ T5347] ? __fget_files+0x2a/0x420
[ 85.449891][ T5347] ? __fget_files+0x3a0/0x420
[ 85.451905][ T5347] ? __fget_files+0x2a/0x420
[ 85.453877][ T5347] ? bpf_lsm_file_ioctl+0x9/0x20
[ 85.456011][ T5347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 85.458301][ T5347] __se_sys_ioctl+0xf9/0x170
[ 85.460271][ T5347] do_syscall_64+0xfa/0x3b0
[ 85.462200][ T5347] ? lockdep_hardirqs_on+0x9c/0x150
[ 85.464252][ T5347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.466803][ T5347] ? clear_bhb_loop+0x60/0xb0
[ 85.468832][ T5347] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.471221][ T5347] RIP: 0033:0x7f85d7d8e9a9
[ 85.473082][ T5347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 85.481226][ T5347] RSP: 002b:00007f85d8b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 85.485063][ T5347] RAX: ffffffffffffffda RBX: 00007f85d7fb5fa0 RCX: 00007f85d7d8e9a9
[ 85.489076][ T5347] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006
[ 85.492464][ T5347] RBP: 00007f85d7e10d69 R08: 0000000000000000 R09: 0000000000000000
[ 85.495737][ T5347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.498991][ T5347] R13: 0000000000000000 R14: 00007f85d7fb5fa0 R15: 00007ffe06c3ad28
[ 85.502232][ T5347]
[ 85.503910][ T5347] Kernel Offset: disabled
[ 85.505751][ T5347] Rebooting in 86400 seconds..