last executing test programs:

7.374002729s ago: executing program 4 (id=271):
socket$kcm(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x3, 0x73)
socket$kcm(0x11, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r0], 0xfe33)

7.093583537s ago: executing program 4 (id=272):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x9, 0x3, 0x31324d4e, 0x6, 0x0, 0x3, 0x9, 0xfeedcafe, 0x2, 0x1}})

6.606351257s ago: executing program 0 (id=275):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ae0000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000003c000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x1a6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.603553406s ago: executing program 4 (id=276):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0xfffffffc)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000000000, 0x0, 0x0, 0xaaa, 0x2}, &(0x7f0000000000)={0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x9c8a}, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)

6.398786145s ago: executing program 0 (id=278):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r1 = getpid()
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = syz_open_procfs(r1, &(0x7f0000000340)='timerslack_ns\x00')
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0)

6.145825428s ago: executing program 0 (id=279):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x5, 0x101d82)

5.220624359s ago: executing program 4 (id=281):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40080, 0x0, 0x0, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000080)='./file3\x00', 0x108)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

5.131937492s ago: executing program 2 (id=283):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c)
listen(r2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000091)

4.360127548s ago: executing program 4 (id=287):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000015ac0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@swalloc}, {@ikeep}]}, 0x1, 0x15aa0, &(0x7f000002b5c0)="$eJzs3XtsnXX9wPGn29pd2GC/nzNOI2FjYxvg2KUbu4i4dtBRYBU3LgXBWWUD3MDBhm4Ew0UCIvEGCoTEwNAAihk3xUiCzEAERYIQcIpgRIxBIyJ/wOQyap6e55Snh7Mm/dbvty57vZL2nOc55/O0Pe37fE+3k57OtpWtWTYqq7g4q/XTxVcu+PVTLTdf/vCaLSeNmdFW2btkfHHxpOJ0cnG6f5Zlw4rdIyq79l7/ox8PyzeGlY+71+gxDeOybHixuaQ4XVA5OffY6vW6axS7qx8/a+j9vBu+UnnrsU+WZaPzM3N/cOpT5eMUI9ve9YXuoTpblrX13oyV71tD5XuYNRbny29Nlbf9Hq281f35KF+3Yai+rul/vmPTUH3s3Ulny7L2mu9/3uLwYl/e46TaBvdEtT/nh99x9xXFTdhQ3GYjalrZLXS2tPXc19a/n8+yxZds6+qu3G+OzCoLRX6/Oia/C8+ybOxQf18YnJbW5tb857W6XXzbqz/LS+r9XOy1qHVGlmXzizWgegoA7CZaWpuX1ln/R/W3/r9v+45zrP8AsPtqb2ltrrP+j+1v/b+n+5bNxT8WLqhMvT20XwQAMCBt7XXX//H9rf+v3XLTT6z/ALD7WrG8Z/3fq2b9n9Df+v/4mkO/Xlyv+rhhZ+mQPc8fK/a/Wdo/vLT/jdL+xtJxytdvKu3/d2n/yPyyOtcfV3rezdTS/r1L+6eV9u9T2j+jtH986TlPr5f2zy4+19z0Xd+iAPC/b0Vz29Ks7/PjcxOrl9db/8ecO/n7Q/X5AgAAAAAAAAAAAAAAAMCeYMPmC9Z2rVu3+jxnnHHGmd4zQ33PBMT2TvRD/ZkAAKmk+HViqL9GAKCv9o6Wl4b3fbXq4eWNfR9b3XM6b0fnmRd+96s3VU+Li4+pc8g+r/Pf3d3d/czGOQ8XmyNrrjuqdjg//tolN55ZbE6q/fuDPX+Ad1Jj9qk1Z61bPTv/UFMas035xpz8q5jWmH0j35ibb0xvzG7LN5p7NkZn2/KNQz7zuXWnN9T8yV/YM7V3XJwN71Ns39euL/e/dsmTs6un/RyyerQRWdH/hC9OWFVzWdUu+u89/uRdvS49MHgD6/+5F6un/RzyXev/0+O3X1fvsl3333v8/fUP8dR5/N+n0drH/TWP/yfVOWTv/N+W3TUx739Y25Ypxa4R1dcVKbbr9l86/pTa/nsO3vv4Pz/U1Orj//x3iwMGdWPAHqa945KX+lv/++9/xAdqZhrK/T9x52Ez8/6vOmr9zGJX4wD7n9rf+t9wU9/PFRiY9o4t3TXr/wD6r/s6WL39P7fh1Xl5/yOvPuW80mUD6f+A2v5nbTx7/awNmy+YedbZXWesPmP1Oc3zZy88dNH8RQvmzep5SFB5P7gbBfYQg1v/szE1Mw1Ztrp3/oFXjjwq73/rMzuvL3aNGmD/0/pd/7dZ/6Gu/YdlTU3Zpq6NG8+bU3lf3ZxbeV+5Wp3+B/D7/5Tqf6JVXxezIcsm9s5ffOfPGvP+D+9ad3Kxq2mA/U/vr/+mdz4uEGCQ6//pNTN9+l/6bNNbef8XfuvqrmLXQH//n9Hv+v8n6z8MRntHzRN+/svy/jc+dvaBgeMH+v8/iCdF/52LLrwucPwg/UM8Kfp/z7LtoY/TD9Y/xJOi/1duveefgeMf0j/Ek6L/+34/cVPg+Ez9Qzwp+r925uhfBI4fon+IJ0X/z628+bjA8Vn6h3hS9P/ZByacFjg+W/8QT4r+J//8gUcDx+foH+JJ0f+4+VvPDxyfq3+IJ0X/bcc0vhA43qx/iCdF/9+7vWts4Pg8/UM8Kfp/+elf3RA4Pl//EE+K/h+c/IepgeOH6h/iSdH/l1etvztwfIH+IZ4U/b927dvdgeML9Q/xpOj//hdPOCtwfJH+IZ4U/X/zg0dsDxxfrH+IJ0X/z3z65ZbA8Q/rH+JJ0f/CS6/aGjh+mP4hnhT9b3hr0sLA8Y/oH+JJ0f+qUXMuDxw/XP8QT4r+J3z+hvGB4x/VP8STov+/zD7u+sDxJfqHeFL0f0fHm3sHjrfoH+JJ0f+X7vv7nYHjrfqHeFL0/8hDLdMCx5fqH+JJ0f9BUw/4ZeD4EfqHeFL033XK11YFjh+pf4gnRf/Lt974fOB4m/4hnhT9N/1m3hcCx5fpH+JJ0f+m99+3OHD8KP1DPCn6bz7j/34YON6uf4gnRf/7XZP9f+D40fqHeFL0f/xLt18WOH6M/iGeFP3fO+7xtYHjx+of4knR/84Np+8MHF+uf4gnRf9PXHH+0sDxDv1DPCn6v+H1Pz4dOP4x/UM8Kfqf+d4zfxc4fpz+IZ4U/a9Z+2BH4PjH9Q/xpOj/6Buf/Ffg+Ar9Qzwp+m94fvOawPGV+od4UvT/QsO+VwaOH69/iCdF/7dddO9+geMn6B/iSdH/ZVfduiVw/ET9Qzwp+n/81bELAsdP0j/Ek6L/uw679ILA8U79Qzwp+n+j9cB/BI6frH+IJ0X/v7134YrA8VP0D/Gk6P87j1zzUOD4J/QP8aTo/6IZOw4OHD9V/xBPiv7nnXjq/YHjp+kf4knR/8Sbl4d+iE/qH+JJ0f/KZ//67cDxVfoHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sMOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXftnjRoMAwD+5Npe/9iqg4ObnURBRLlBsIu5wpUDXergTQoOzhXUuZOlIvgBnBTcHVwEBXFxEUHUL+HqIhappElqSAMdWghHfz944fK8IXnufZP3IZcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwzQa3OxHzBRb63v6317dvPL5e/ry8ad7L27NnRvk0Wsni+7F7ZqI6EQsZn2T+S7H19686mQbnepxj83OJQuRTDRndf/BPmmX549kN+/kSd52nIiI2ezDxurltf1H4egapSuDYhiTYt6SfA5j6n98t3XzduZX3hqvj+q+SVvfa/3Hl35b5x4no3RlWJv/zEQ5d/X7+6iqX+ed90vfakM5WbtXxsIoHVzP8m1e5yO+Xrp9YTtf16cjLxTZujqXLeERMd/2vHAwab+XrZNJuZ3P+vpkOf9N6/vGxZ+9iFgoawAAMF7Sfm+5of6XPwg01v/nH+48VP8BYHwN0372LB+1+j9f9jfV/+WlZ8P2MgYADmowbKz/u+/Xm+p/9+7mRnsZAwAHtXpjp/53a/X/VNnfVP8fzZx9XXSX7w3+Vg658/+xIr5ViU9U4n8q8anKcar7dyvx35X4dCXfrUMeDgA4ElZ7g+XY+/x/uuxvqv9P3308317GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GMHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3n1AS1IXitY/Aww5i4IEycGA5AxKDhIkgwICknNUgkiQoKAICgqKZFAEFZAgoAQRRQQUFCXnnHMO861hZnAc93B9993vcXXvvdY53V1dXfPv/6+r6pzDWlRVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV1b9L6y+/1tIDA+MOf7T/Pz1/8aKHLnTdTUudcsjVW5683vhzLD9s6ZKTDhlNAwMDYwwMzDB0pbGGrTvxzuefPsbQB2OMvN0Jxht/0EQDg8bkUe2y+38x7ElH3Bn0zrgHHTbs6+0mGRgYGG/onWkuvWjyf20mnK2/1ArLD5/GEW7D7w8MHn5/5K+xh31NduDAwGRvf1jg8zHyuoPeq/c197JvHPxe/dv/Tq2/1AorjeI/tDFH2I1uP7c16uf8xkNmX3GUqRxrlH3l36L1l1p+laH2fJwfGHjivjdfGzLsuD7OwLATxdDj6vhDD+EDAwMTvtcu9X/XUkvPt/RQ/xGP30YfNOLcjcf3MWY664yh59mJhh0nJt5/xLmgqqqq/j1aaun5loHz/4g/COD5/xPLTXdd5/+qqqp/31Zaaun5Bkb6O9/bCwcNTDjieTr/Hzf9i0PewyFXVVXV/2XLr4Tn/3f++zqd/+9a/vl53sMhV1VV1f9la6769vl/nFHO/1OMeJ7O/8c/cc3iw58eNPxlb460yUEj/feE10daPuZIy18bafngkbYz8vpjj7T8lZGWjzP0OVh/0oGBiXcevvyN/6n5qaqq+k9szfmWX2bgn3//n2rE83T+X/vYi058D4dcVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX1b9dbT15y2d+v/73vwEjXrn7nGtbD/7+Ag8654oYb3rOB/u9o0D///xD/7S99ONR53DNnGBjYcZ33eij1HvRvc636+v+l/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Giu/7/kiNvpljx1v+GrLvLEmRdOOtJLZ9hm+J2LFz10oW3+3w/9veg/9fr/A9sMGhgY7jvpUMvVllpz7TmGPrjwzCcWHHjnuYWHPrfY5GMOjPn2S+d4+/uso9nwkiPfTvHONs55e/srDTl5zEGjDGKkTjr81H22Xv/l+Ue9nX3072OMEXfmf3G3O4cMGTLkHxYOb9zRvHjE9ke8l1Gdh499jqFjn2v3HXaea7e99p5zmx023WqLrbbYcb4F5l54wUUWWGSh+efacpvtt5h72PfRzNkMb3+f+V+ZswlHnbMnlxp5zkZ9b6Obsxnefc7e3uJU567w6Ig5G+v/cM5mfvc5e/s48fZYZxg8sMnbUzP0n5xl8MCeQx/MM87Qj9Dwdacauu7ik48xMHDk39/o0HvjvPMZHLT/0HXWX36tpf8+sn/eB/95P317Vkccv0ZMyYzDb2caNsQZRnr7E+98/gVjDH3wD9M8wXjjD5poYDjl37kWGXaz5d4j1hsySsMXTzryexo27kGHDft6u0kGBgbGe3tAV5493cjbGQ3B/0T/rfP/P3ktPOidiRo0/Gv4OsO8llphpb//W2/P89C5G3P4soWGLhx1zv4n+6fxzjDWOxg03uVXWnq+oYtH50efryXXveqp4W9uoWGveuu/jULjnfBdxrvSUjjeCd9tvIMnuXKGEfP/PzTeUY51q7z9fXTHnyVHuX23Y92YtIEtrp9u1GPdyqMf4j/sxyPmaJxRVhrdsW7rE5fcbuRj6WiOdasMHfvggZGPdUP/2ZlHHOuGvqPZBg8cOfTBvEMfzD544IyhD+Z7+8F4A1cMffDxzXbafvNBb59fh2937qHbXXLyQW9jPTLlGOuOefSQIbMMH8tEo4x1+OdjhpHP50tNPmwyR7x2xHaHrjpiu7fM/tjsQ44aMmS24duZ+P9guyNeS+M9afxhz404d889ynYHv8t2R7z2n/aHOQa9c+AazfFm+VGON8N/xh3xz/3D19jDvqa/dtgX7i8jr/tfHjNp/x33Xca71NLzLQP77zsfR9p/H9nooPEHBgYWGD7mEbf/pw0a3XjHevfxLg3jHevdxvvCefOs8j8w3oGRxvsPn7NjJx/2WZlj+DqTwBsd3edsxGtHPY69vS8PP+zPMZqx/MNxbIZ/Oo4dMOYYo0z2SI3uZ7bNYf1h96d6Z2tvjH3HMiPmfvAo2/2vfmYb6b0MguPYpKP+PjfonoFBNOcD6zy/x1v/xZwPHvjH3y1GzPmI177bnI/u5/1/mPNp333O/9Wfk+cY/oPs4FHGP/KcD77snP1HzPnYo2z3v5rzEe9lNOeOf5rzsQcGBtOcvzLOsHl7t+Pp6OZ8xGtHzPnQt7jY5GMNLDf0J/Lhcz7baN7HP8z5VP8zn/PxYf1h97d4Z9GKyz17+Yg5H3WO/6s5H/Fe/tU5H3TFO5/zWd5+bqYxBsYee2DPTXfffdd5hn0f8XDeYd/5WDTVEsPm+d3OpaMzGvHad9svZhnN+/4Ho0n/JaNBo87ZqLdTjzXKin+//87W5lz8nBv/u8eiEe/lXzY6iY9F90w/bN7e7eei0c35iNfSeXCKkV4/6u+ha6769s/dE4xyHhzxEjwP3nv4xxYZscnhL3tzlGGOMXz56yMtH3Ok5a+NtHzwSNsZef2xR1r+ykjLh76FsUdaf9BI0zXi/sgfr4lHWj7yoWGSkZaPfGqcdKTf5V4dafncI3003uXPOP9njfib5DajHuTrX62//7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+40Vz/f//ht0tuO/Hr+w6/nNzgS+85bXSXnbP0H339/+G+/3D9/1lOu+fSMQbeee5dr88+bJ3/lddnX2jYzS6rjFhv1OuDD1/8L1+ffapTNzxh4P/N9dn/W43YV/+F6+J1/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLG831/68Yfrv/A0usdszwC6EPPmGRu958r8f7Hvcfff3/4b7/cP3/N+9a5IQxBt557l2v/z9sHcf1/2/d+JDVB/4XX/9/xL76L1z/v9x1/neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cXz9/0HDbweu2PjsDY4Yejv08Rr3LD/dez3e97j/1Ov/j3vmDAMDO67zXg+l3oM6/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFDb/+/8Cw6/+PaNCSfS4wuP7/v3ej8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/qfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+H86f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6Yxf8z+WMW/8/mj1n8N8gfs/hvmD9m8d8of8zi/7n8MYv/xvljFv9N8scs/pvmj1n8P58/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6Yxf8L+WMW/y/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMX/S/ljFv998scs/l/OH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/V/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4v/V/DGL/9fyxyz+h+aPWfwPyx+z+H89f8zi/438MYv/4fljFv9v5o9Z/I/IH7P4H5k/ZvH/Vv6Yxf/b+WMW/6Pyxyz+R+ePWfy/kz9m8f9u/pjF/5j8MYv/sfljFv/v5Y9Z/L+fP2bxPy5/zOL/g/wxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/H+aPWfx/lD9m8T8jf8zi/+P8MYv/mfljFv+z8scs/j/JH7P4/zR/zOL/s/wxi//Z+WMW/3Pyxyz+5+aPWfx/nj9m8T8vf8zif37+mMX/gvwxi/+F+WMW/1/kj1n8L8ofs/hfnD9m8b8kf8zi/8v8MYv/r/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/r/DGL/5X5Yxb/3+SPWfyvyh+z+P82f8zi/7v8MYv/1fljFv/f549Z/K/JH7P4/yF/zOJ/bf6Yxf+6/DGL//Ve/yFDhgwZ7ZMW/z96/d81i/+f8scs/jfkj1n8b8wfs/j/OX/M4v+X/DGL/035Yxb/v+aPWfz/lj9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvEfkj8m8X/7bv7/nMV/UP6YxX+M/DGL/5j5Yxb/sfLHLP6D88cs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf99+WMW/ynyxyz+788fs/h/IH/M4j9l/pjFf6r8MYv/B/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4v+h/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/h/OH7P4fyR/zOL/0fwxi//H8scs/nPmj1n8P54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8if8zi/8n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+n8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/+n88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw/kz9m8f9s/pjFf4P8MYv/hvljFv+N8scs/p/LH7P4b5w/ZvHfJH/M4r9p/pjF//P5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfy/kD9m8f9i/pjFf4/8MYv/nvljFv+98scs/nvnj1n8v5Q/ZvHfJ3/M4v/l/DGL/775Yxb//fLHLP77549Z/A/IH7P4fyV/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP5fzR+z+H8tf8zif2j+mMX/sPwxi//X88cs/t/IH7P4H54/ZvH/Zv6Yxf+I/DGL/5H5Yxb/b+WPWfy/nT9m8T8qf8zif3T+mMX/O/ljFv/v5o9Z/I/JH7P4H5s/ZvH/Xv6Yxf/7+WMW/+Pyxyz+P8gfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/2H+mMX/R/ljFv8z8scs/j/OH7P4n5k/ZvE/K3/M4v+T/DGL/0/zxyz+P8sfs/ifnT9m8T8nf8zif27+mMX/5/ljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9F/pjF/6L8MYv/xfljFv9L8scs/r/MH7P4/yp/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP6//tf8B///Nq7/pVn8r2z/xyz+v8kfs/hflT9m8f9t/pjF/3f5Yxb/q/PHLP6/zx+z+F+TP2bx/0P+mMX/2vwxi/91+WMW/+vzxyz+f8wfs/j/KX/M4n9D/pjF/8b8MYv/n/PHLP5/yR+z+N+UP2bx/2v+mMX/b/ljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/IfljEv8xB/LHLP6D8scs/mPkj1n8x8wfs/iPlT9m8R+cP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/u/LH7P4T5E/ZvF/f/6Yxf8D+WMW/ynzxyz+U+WPWfw/mD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/w/lj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnzN/zOL/8fwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/xP5Yxb/T+aPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/VP6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/D+dP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+Z/DGL/2fzxyz+G+SPWfw3zB+z+G+UP2bx/1z+mMV/4/wxi/8m+WMW/03zxyz+n88fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+F/DGL/xfzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/pfwxi/8++WMW/y/nj1n8980fs/jvlz9m8d8/f8zif0D+mMX/K/ljFv8D88cs/gflj1n8D84fs/gfkj9m8f/qcP9x36tx/S/N4v+19n/M4n9o/pjF/7D8MYv/1/PHLP7fyB+z+B+eP2bx/2b+mMX/iPwxi/+R+WMW/2/lj1n8v50/ZvE/Kn/M4n90/pjF/zv5Yxb/7+aPWfyPyR+z+B+bP2bx/17+mMX/+/ljFv/j8scs/j/IH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9h/pjF/0f5Yxb/M/LHLP4/zh+z+J+ZP2bxPyt/zOL/k/wxi/9P88cs/j/LH7P4n50/ZvE/J3/M4n9u/pjF/+f5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvH/Rf6Yxf+i/DGL/8X5Yxb/S/LHLP6/zB+z+P8qf8zif2n+mMX/svwxi//lI/l3DcC/Z/G/ov0fs/j/On/M4n9l/pjF/zf5Yxb/q/LHLP6/zR+z+P8uf8zif3X+mMX/9/ljFv9r8scs/n/IH7P4X5s/ZvG/Ln/M4n99/pjF/4/5Yxb/P+WPWfxvyB+z+N+YP2bx/3P+mMX/L/ljFv+b8scs/n/NH7P4/y1/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8ziPyR/TOI/1kD+mMV/UP6YxX+M/DGL/5j5Yxb/sfLHLP6D88cs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf99+WMW/ynyxyz+788fs/h/IH/M4j9l/pjFf6r8MYv/B/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4v+h/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/h/OH7P4fyR/zOL/0fwxi//H8scs/nPmj1n8P54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8if8zi/8n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+n8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/+n88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw/kz9m8f9s/pjFf4P8MYv/hvljFv+N8scs/p/LH7P4b5w/ZvHfJH/M4r9p/pjF//P5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfy/kD9m8f9i/pjFf4/8MYv/nvljFv+98scs/nvnj1n8v5Q/ZvHfJ3/M4v/l/DGL/775Yxb//fLHLP77549Z/A/IH7P4fyV/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP5fzR+z+H8tf8zif2j+mMX/sPwxi//X88cs/t/IH7P4H54/ZvH/Zv6Yxf+I/DGL/5H5Yxb/b+WPWfy/nT9m8T8qf8zif3T+mMX/O/ljFv/v5o9Z/I/JH7P4H5s/ZvH/Xv6Yxf/7+WMW/+Pyxyz+P8gfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/2H+mMX/R/ljFv8z8scs/j/OH7P4n5k/ZvE/K3/M4v+T/DGL/0/zxyz+P8sfs/ifnT9m8T8nf8zif27+mMX/5/ljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9F/pjF/6L8MYv/xfljFv9L8scs/r/MH7P4/yp/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP6/zh+z+F+ZP2bx/03+mMX/qvwxi/9v88cs/r/LH7P4X50/ZvH/ff6Yxf+a/DGL/x/yxyz+1+aPWfyvyx+z+F+fP2bx/2P+mMX/T/ljFv8b8scs/jfmj1n8/5w/ZvH/S/6Yxf+m/DGL/1/zxyz+f8sfs/jfnD9m8b8lf8zif2v+mMX/tlH8J/p/Pa7/pVn8b2//xyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvEfkj8m8R88kD9m8R+UP2bxHyN/zOI/Zv6YxX+s/DGL/+D8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf1/+mMV/ivwxi//788cs/h/IH7P4T5k/ZvGfKn/M4v/B/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4fyh/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/nPljFv+P549Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+n8gfs/h/Mn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi/+n8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+n8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/8/kj1n8P5s/ZvHfIH/M4r9h/pjFf6P8MYv/5/LHLP4b549Z/DfJH7P4b5o/ZvH/fP6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/y/kj1n8v5g/ZvHfI3/M4r9n/pjFf6/8sRH+Yw0MDPwn+++dP2bZ/7+UP2bx3yd/zOL/5fwxi/+++WMW//3yxyz+++ePWfwPyB+z+H8lf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+X80fs/h/LX/M4n9o/pjF/7D8MYv/1/PHLP7fyB+z+B+eP2bx/2b+mMX/iPwxi/+R+WMW/2/lj1n8v50/ZvE/Kn/M4n90/pjF/zv5Yxb/7+aPWfyPyR+z+B+bP2bx/17+mMX/+/ljFv/j8scs/j/IH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9h/pjF/0f5Yxb/M/LHLP4/zh+z+J+ZP2bxPyt/zOL/k/wxi/9P88cs/j/LH7P4n50/ZvE/J3/M4n9u/pjF/+f5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvH/Rf6Yxf+i/DGL/8X5Yxb/S/LHLP6/zB+z+P8qf8zif2n+mMX/svwxi//l+WMW/yvyxyz+v84fs/hfmT9m8f9N/pjF/6r8MYv/b/PHLP6/yx+z+F+dP2bx/33+mMX/mvwxi/8f8scs/tfmj1n8r8sfs/hfnz9m8f9j/pjF/0/5Yxb/G/LHLP435o9Z/P+cP2bx/0v+mMX/pvwxi/9f88cs/n/LH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n873L5v/6vrmjxv9vl/y9n8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+A/JH5P4jz2QP2bxH5Q/ZvEfI3/M4j9m/pjFf6z8MYv/4Pwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvF/X/6YxX+K/DGL//vzxyz+H8gfs/hPmT9m8Z8qf8zi/8H8MYv/1PljFv9p8scs/tPmj1n8p8sfs/h/KH/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/+c+WMW/4/nj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP6fyB+z+H8yf8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/6fyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/6fwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/z+SPWfw/mz9m8d8gf8ziv2H+mMV/o/wxi//n8scs/hvnj1n8N8kfs/hvmj9m8f98/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/+75Yxb/L+SPWfy/mD9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/y/lj1n898kfs/h/OX/M4r9v/pjFf7/8MYv//vljFv8D8scs/l/JH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/V/PHLP5fyx+z+B+aP2bxPyx/zOL/9fwxi/838scs/ofnj1n8v5k/ZvE/In/M4n9k/pjF/1v5Yxb/b+ePWfyPyh+z+B+dP2bx/07+mMX/u/ljFv9j8scs/sfmj1n8v5c/ZvH/fv6Yxf+4/DGL/w/yxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/H+YP2bx/1H+mMX/jPwxi/+P88cs/mfmj1n8z8ofs/j/JH/M4v/T/DGL/8/yxyz+Z+ePWfzPyR+z+J+bP2bx/3n+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfx/kT9m8b8of8zif3H+mMX/kvwxi/8v88cs/r/KH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/r/PHLP5X5o9Z/H+TP2bxvyp/zOL/2/wxi//v8scs/lfnj1n8f58/ZvG/Jn/M4v+H/DGL/7X5Yxb/6/LHLP7X549Z/P+YP2bx/1P+mMX/hvwxi/+N+WMW/z/nj1n8/5I/ZvG/KX/M4v/X/DGL/9/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/kPyxyT+4wzkj/3n+0/6zlP5/3P/+f5vN84Y+WMW/zHzxyz+Y+WPWfwH549Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi//78scs/lPkj1n8358/ZvH/QP6YxX/K/DGL/1T5Yxb/D+aPWfynzh+z+E+TP2bxnzZ/zOI/Xf6Yxf9D+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/OfMH7P4fzx/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9E/pjF/5P5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8P5U/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv9P549Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/h/Jn/M4v/Z/DGL/wb5Yxb/DfPHLP4b5Y9Z/D+XP2bx3zh/zOK/Sf6YxX/T/DGL/+fzxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/IX/M4v/F/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P4fyl/zOK/T/6Yxf/L+WMW/33zxyz+++WPWfz3zx+z+B+QP2bx/0r+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfy/mj9m8f9a/pjF/9D8MYv/YfljFv+v549Z/L+RP2bxPzx/zOL/zfwxi/8R+WMW/yPzxyz+38ofs/h/O3/M4n9U/pjF/+j8MYv/d/LHLP7fzR+z+B+TP2bxPzZ/zOL/vfwxi//388cs/sflj1n8f5A/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zi/8P8MYv/j/LHLP5n5I9Z/H+cP2bxPzN/zOJ/Vv6Yxf8n+WMW/5/mj1n8f5Y/ZvE/O3/M4n9O/pjF/9z8MYv/z/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4v+L/DGL/0X5Yxb/i/PHLP6X5I9Z/H+ZP2bx/1X+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfx/nT9m8b8yf8zi/5v8MYv/VfljFv/f5o9Z/H+XP2bxvzp/zOL/+/wxi/81+WMW/z/kj1n8r80fs/hflz9m8b8+f8zi/8f8MYv/n/LHLP435I9Z/G/MH7P4/zl/zOL/l/wxi/9N+WMW/7/mj1n8/5Y/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxH5I/JvEfdyB/zOI/KH/M4j9G/pjFf8z8MYv/WPljFv/B+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4v++/DGL/xT5Yxb/9+ePWfw/kD9m8Z8yf8ziP1X+mMX/g/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8f9Q/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/znzxyz+H88fs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/D+RP2bx/2T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/T+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/T+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP6fyR+z+H82f8ziv0H+mMV/w/wxi/9G+WMW/8/lj1n8N84fs/hvkj9m8d80f8zi//n8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP5fyB+z+H8xf8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+X8ofs/jvkz9m8f9y/pjFf9/8MYv/fvljFv/988cs/gfkj1n8v5I/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv+v5o9Z/L+WP2bxPzR/zOJ/WP6Yxf/r+WMW/2/kj1n8D88fs/h/M3/M4n9E/pjF/8j8MYv/t/LHLP7fzh+z+B+VP2bxPzp/zOL/nfwxi/9388cs/sfkj1n8j80fs/h/L3/M4v/9/DGL/3H5Yxb/H+SPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4/zB/zOL/o/wxi/8Z+WMW/x/nj1n8z8wfs/iflT9m8f9J/pjF/6f5Yxb/n+WPWfzPzh+z+J+TP2bxPzd/zOL/8/wxi/95+WMW//Pzxyz+F+SPWfwvzB+z+P8if8zif1H+mMX/4vwxi/8l+WMW/1/mj1n8f5U/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv9f549Z/K/MH7P4/yZ/zOJ/Vf6Yxf+3+WMW/9/lj1n8r84fs/j/Pn/M4n9N/pjF/w/5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zF/zOL/p/wxi/8N+WMW/xvzxyz+f84fs/j/JX/M4n9T/pjF/6/5Yxb/v+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8h+SPSfzHG8gfs/gPyh+z+I+RP2bxHzN/zOI/Vv6YxX9w/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+L8vf8ziP0X+mMX//fljFv8P5I9Z/KfMH7P4T5U/ZvH/YP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/D+UP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjFf878MYv/x/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/0/kj1n8P5k/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/U/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f90/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/9n8scs/p/NH7P4b5A/ZvHfMH/M4r9R/pjF/3P5Yxb/jfPHLP6b5I9Z/DfNH7P4fz5/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8X8scs/l/MH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/l/LHLP775I9Z/L+cP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/r+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf+r+WMW/6/lj1n8D80fs/gflj9m8f96/pjF/xv5Yxb/w/PHLP7fzB+z+B+RP2bxPzJ/zOL/rfwxi/+388cs/kflj1n8j84fs/h/J3/M4v/d/DGL/zH5Yxb/Y/PHLP7fyx+z+H8/f8zif1z+mMX/B/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+P8wfs/j/KH/M4n9G/pjF/8f5Yxb/M/PHLP5n5Y9Z/H+SP2bx/2n+mMX/Z/ljFv+z88cs/ufkj1n8z80fs/j/PH/M4n9e/pjF//z8MYv/BfljFv8L88cs/r/IH7P4X5Q/ZvG/OH/M4n9J/pjF/5f5Yxb/X+WPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/X+WMW/yvzxyz+v8kfs/hflT9m8f9t/pjF/3f5Yxb/q/PHLP6/zx+z+F+TP2bx/0P+mMX/2vwxi/91+WMW/+vzxyz+f8wfs/j/KX/M4n9D/pjF/8b8MYv/n/PHLP5/yR+z+N+UP2bx/2v+mMX/b/ljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/IfljEv/xB/LHLP6D8scs/mPkj1n8x8wfs/iPlT9m8R+cP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/u/LH7P4T5E/ZvF/f/6Yxf8D+WMW/ynzxyz+U+WPWfw/mD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/w/lj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnzN/zOL/8fwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/xP5Yxb/T+aPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/VP6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/D+dP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+Z/DGL/2fzxyz+G+SPWfw3zB+z+G+UP2bx/1z+mMV/4/wxi/8m+WMW/03zxyz+n88fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+F/DGL/xfzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/pfwxi/8++WMW/y/nj1n8980fs/jvlz9m8d8/f8zif0D+mMX/K/ljFv8D88cs/gflj1n8D84fs/gfkj9m8f9q/pjF/2v5Yxb/Q/PHLP6H5Y9Z/L+eP2bx/0b+mMX/8Pwxi/8388cs/kfkj1n8j8wfs/h/K3/M4v/t/DGL/1H5Yxb/o/PHLP7fyR+z+H83f8zif0z+mMX/2Pwxi//38scs/t/PH7P4H5c/ZvH/Qf6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/D/PHLP4/yh+z+J+RP2bx/3H+mMX/zPwxi/9Z+WMW/5/kj1n8f5o/ZvH/Wf6Yxf/s/DGL/zn5Yxb/c/PHLP4/zx+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/y/yxyz+F+WPWfwvzh+z+F+SP2bx/2X+mMX/V/ljFv9L88cs/pflj1n8L88fs/hfkT9m8f91/pjF/8r8MYv/b/LHLP5X5Y9Z/H+bP2bx/13+mMX/6vwxi//v88cs/tfkj1n8/5A/ZvG/Nn/M4n9d/pjF//r8MYv/H/PHLP5/yh+z+N+QP2bxvzF/zOL/5/wxi/9f8scs/jflj1n8/5o/ZvH/W/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMV/SP6YxH+Cgfwxi/+g/DGL/xj5Yxb/MfPHLP5j5Y9Z/Afnj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL//vyxyz+U+SPWfzfnz9m8f9A/pjFf8r8MYv/VPljFv8P5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjF/0P5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n858wfs/h/PH/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/0T+mMX/k/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfw/lT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/0/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H8mf8zi/9n8MYv/BvljFv8N88cs/hvlj1n8P5c/ZvHfOH/M4r9J/pjFf9P8MYv/5/PHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+H8hf8zi/8X8MYv/HvljFv8988cs/nvlj1n8984fs/h/KX/M4r9P/pjF/8v5Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvH/Sv6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/L+aP2bx/1r+mMX/0Pwxi/9h+WMW/6/nj1n8v5E/ZvE/PH/M4v/N/DGL/xH5Yxb/I/PHLP7fyh+z+H87f8zif1T+mMX/6Pwxi/938scs/t/NH7P4H5M/ZvE/Nn/M4v+9/DGL//fzxyz+x+WPWfx/kD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOL/w/wxi/+P8scs/mfkj1n8f5w/ZvE/M3/M4n9W/pjF/yf5Yxb/n+aPWfx/lj9m8T87f8zif07+mMX/3Pwxi//P88cs/uflj1n8z88fs/hfkD9m8b8wf8zi/4v8MYv/RfljFv+L88cs/pfkj1n8f5k/ZvH/Vf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/H+dP2bxvzJ/zOL/m/wxi/9V+WMW/9/mj1n8f5c/ZvG/On/M4v/7/DGL/zX5Yxb/P+SPWfyvzR+z+F+XP2bxvz5/zOL/x/wxi/+f8scs/jfkj1n8b8wfs/j/OX/M4v+X/DGL/035Yxb/v+aPWfz/lj9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvEfkj8m8Z9wIH/M4j8of8ziP0b+mMV/zPwxi/9Y+WMW/8H5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8zi/778MYv/FPljFv/3549Z/D+QP2bxnzJ/zOI/Vf6Yxf+D+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bx/1D+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/OfPHLP4fzx+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8P5E/ZvH/ZP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv9P5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/9P5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/p/JH7P4fzZ/zOK/Qf6YxX/D/DGL/0b5Yxb/z+WPWfw3zh+z+G+SP2bx3zR/zOL/+fwxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/l/IH7P4fzF/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP5fyh+z+O+TP2bx/3L+mMV/3/wxi/9++WMW//3zxyz+B+SPWfy/kj9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/6/mj1n8v5Y/ZvE/NH/M4n9Y/pjF/+v5Yxb/b+SPWfwPzx+z+H8zf8zif0T+mMX/yPwxi/+38scs/t/OH7P4H5U/ZvE/On/M4v+d/DGL/3fzxyz+x+SPWfyPzR+z+H8vf8zi//38MYv/cfljFv8f5I9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88eG+4+Yqv9Y/9Pyxyz7/+n5Yxb/H+aPWfx/lD9m8T8jf8zi/+P8MYv/mfljFv+z8scs/j/JH7P4/zR/zOL/s/wxi//Z+WMW/3Pyxyz+5+aPWfx/nj9m8T8vf8zif37+mMX/gvwxi/+F+WMW/1/kj1n8L8ofs/hfnD9m8b8kf8zi/8v8MYv/r/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/r/DGL/5X5Yxb/3+SPWfyvyh+z+P82f8zi/7v8MYv/1fljFv/f549Z/K/JH7P4/yF/zOJ/bf6Yxf+6/DGL//X5Yxb/P+aPWfz/lD9m8b8hf8zif2P+mMX/z/ljFv+/5I9Z/G/KH7P4/zV/zOL/t/wxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/kPwxif9EA/ljFv9B+WMW/zHyxyz+Y+aPWfzHyh+z+A/OH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW//flj1n8p8gfs/i/P3/M4v+B/DGL/5T5Yxb/qfLHLP4fzB+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL/4fyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4z5k/ZvH/eP6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4n8MYv/J/PHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/h/Kn/M4r9y/pjFf5X8MYv/qvljFv/V8scs/p/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9M/pjF/7P5Yxb/DfLHLP4b5o9Z/DfKH7P4fy5/zOK/cf6YxX+T/DGL/6b5Yxb/z+ePWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8d8sfs/jvnj9m8f9C/pjF/4v5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/Uv6YxX+f/DGL/5fzxyz+++aPWfz3yx+z+O+fP2bxPyB/zOL/lfwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+H81f8zi/7X8MYv/ofljFv/D8scs/l/PH7P4fyN/zOJ/eP6Yxf+b+WMW/yPyxyz+R+aPWfy/lT9m8f92/pjF/6j8MYv/0fljFv/v5I9Z/L+bP2bxPyZ/zOJ/bP6Yxf97+WMW/+/nj1n8j8sfs/j/IH/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/h/ljFv8f5Y9Z/M/IH7P4/zh/zOJ/Zv6Yxf+s/DGL/0/yxyz+P80fs/j/LH/M4n92/pjF/5z8MYv/ufljFv+f549Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/xf5Yxb/i/LHLP4X549Z/C/JH7P4/zJ/zOL/q/wxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P86f8zif2X+mMX/N/ljFv+r8scs/r/NH7P4/y5/zOJ/df6Yxf/3+WMW/2vyxyz+f8gfs/hfmz9m8b8uf8zif33+mMX/j/ljFv8/5Y9Z/G/IH7P435g/ZvH/c/6Yxf8v+WMW/5vyxyz+f80fs/j/LX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOI/JH9M4j/xQP6YxX9Q/pjFf4z8MYv/mPljFv+x8scs/oPzxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4j95/pjF/335Yxb/KfLHLP7vzx+z+H8gf8ziP2X+mMV/qvwxi/8H88cs/lPnj1n8p8kfs/hPmz9m8Z8uf8zi/6H8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+c+aPWfw/nj9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fyJ/zOL/yfwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP6fyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/6fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/D+TP2bx/2z+mMV/g/wxi/+G+WMW/43yxyz+n8sfs/hvnD9m8d8kf8ziv2n+mMX/8/ljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/L+QP2bx/2L+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfy/lD9m8d8nf8zi/+X8MYv/vvljFv/98scs/vvnj1n8D8gfs/h/JX/M4n9g/pjF/6D8MYv/wfljFv9D8scs/l/NH7P4fy1/zOJ/aP6Yxf+w/DGL/9fzxyz+38gfs/gfnj9m8f9m/pjF/4j8MYv/kfljFv9v5Y9Z/L+dP2bxPyp/zOJ/dP6Yxf87+WMW/+/mj1n8j8kfs/gfmz9m8f9e/pjF//v5Yxb/4/LHLP4/yB+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/Yf6Yxf9H+WMW/zPyxyz+P84fs/ifmT9m8T8rf8zi/5P8MYv/T/PHLP4/yx+z+J+dP2bxPyd/zOJ/bv6Yxf/n+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bx/0X+mMX/ovwxi//F+WMW/0vyxyz+v8wfs/j/Kn/M4n9p/pjF/7L8MYv/5fljFv8r8scs/r/OH7P4X5k/ZvH/Tf6Yxf+q/DGL/2/zxyz+v8sfs/hfnT9m8f99/pjF/5r8MYv/H/LHLP7X5o9Z/K/LH7P4X58/ZvH/Y/6Yxf9P+WMW/xvyxyz+N+aPWfz/nD9m8f9L/pjF/6b8MYv/X/PHLP5/yx+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/gPyR+T+E8ykD9m8R+UP2bxHyN/zOI/Zv6YxX+s/DGL/+D8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf1/+mMV/ivwxi//788cs/h/IH7P4T5k/ZvGfKn/M4v/B/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4fyh/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/h/PHLP4fyR/7/9ijBwQwEAMIgLWR2nZjOynPtm3btm3btm3btm1/YF9wO/OFafkf6D9q+R/kP2r5H+w/avkf4j9q+R/qP2r5H+Y/avkf7j9q+R/hP2r5H+k/avkf5T9q+R/tP2r5H+M/avkf6z9q+R/nP2r5H+8/avmf4D9q+Z/oP2r5n+Q/avmf7D9q+Z/iP2r5n+o/avn/l/+o5f/f/qOW///4j1r+/+s/avn/n/+o5f///qOW/2n8Ry3/0/qPWv6n8x+1/E/vP2r5n8F/1PI/o/+o5X8m/1HL/8z+o5b/WfxHLf+z+o9a/mfzH7X8z+4/avmfw3/U8j+n/6jlfy7/Ucv/3P6jlv95/Ect//P6j1r+5/MftfzP7z9q+V/Af9Tyv6D/qOV/If9Ry//C/qOW/0X8Ry3/i/qPWv4X8x+1/C/uP2r5X8J/1PK/pP+o5X8p/1HL/9L+o5b/ZfxHLf/L+o9a/pfzH7X8L+8/avlfwX/U8r+i/6jlfyX/Ucv/yv6jlv9V/Ect/6v6j1r+V/Mftfyv7j9q+V/Df9Tyv6b/qOV/Lf9Ry//a/qOW/3X8Ry3/6/qPWv7X8x+1/K/vP2r538B/1PK/of+o5X8j/1HL/8b+o5b/TfxHLf+b+o9a/jfzH7X8b+4/avnfwn/U8r+l/6jlfyv/Ucv/1v6jlv9t/Ect/9v6j1r+t/Mftfxv7z9q+d/Bf9Tyv6P/qOV/J/9Ry//O/qOW/138Ry3/u/qPWv538x+1/O/uP2r538N/1PK/p/+o5X8v/1HL/97+o5b/ffxHLf/7+o9a/vfzH7X87+8/avk/wH/U8n+g/6jl/yD/Ucv/wf6jlv9D/Ect/4f6j1r+D/Mftfwf7j9q+T/Cf9Tyf6T/qOX/KP9Ry//R/qOW/2P8Ry3/x/qPWv6P8x+1/B/vP2r5P8F/1PJ/ov+o5f8k/1HL/8n+o5b/U/xHLf+n+o9a/k/zH7X8n+4/avk/w3/U8n+m/6jl/yz/Ucv/2f6jlv9z/Ect/+f6j1r+z/Mftfyf7z9q+b/Af9Tyf6H/qOX/Iv9Ry//F/qOW/0v8Ry3/l/qPWv4v8x+1/F/uP2r5v8J/1PJ/pf+o5f8q/1HL/9X+o5b/a/xHLf/X+o9a/q/zH7X8X+8/avm/wX/U8n+j/6jl/yb/Ucv/zf6jlv9b/Ect/7f6j1r+b/Mftfzf7j9q+b/Df9Tyf6f/qOX/Lv9Ry//d/qOW/3v8Ry3/9/qPWv7v8x+1/N/vP2r5f8B/1PL/oP+o5f8h/1HL/8P+o5b/R/xHLf+P+o9a/h/zH7X8P+4/avl/wn/U8v+k/6jl/yn/Ucv/0/6jlv9n/Ect/8/6j1r+n/Mftfw/7z9q+X/Bf9Ty/6L/qOX/Jf9Ry//L/qOW/1f8Ry3/r/qPWv5f8x+1/L/uP2r5f8N/1PL/pv+o5f8t/1HL/9v+o5b/d/xHLf/v+o9a/t/zH7X8v+8/avn/wH/U8v+h/6jl/yP/Ucv/x/6jlv9P/Ect/5/6j0r+B3zBf9Ty/0X/Ucv/l/xHLf9f9h+1/H/Ff9Ty/1X/Ucv/1/xHLf9f9x+1/H/Df9Ty/03/Ucv/t/xHLf/f9h+1/H/Hf9Ty/13/Ucv/9/xHLf/f9x+1/A/wH7X8/8B/1PL/Q/9Ry/+P/Ect/z/2H7X8/8R/1PL/U/9Ry//P/Ect/z/3H7X8/8J/1PL/S/9Ry/+v/Ect/7/2H7X8/8Z/1PL/W/9Ry//v/Ect/7/3H7X8/8F/1PL/R/9Ry/+f/Ect/3/2H7X8/8V/1PL/V/9Ry//f/Ect/3/3H7X8/8N/1PL/T/9Ry/9A/1HL/yD/Ucv/YP9Ry/8Q/1HL/1D/Ucv/MP9Ry/9w/1HL/wj/Ucv/SP9Ry/8o/1HL/2j/Ucv/GP9Ry/9Y/1HL/zj/Ucv/eP9Ry/8E/1HL/0T/Ucv/JP9Ry/9k/1HL/xT/Ucv/VP/R5+4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LV/16ihOADgL73+sLXVDiIu0k5SR7lBcBBzhZSCLi3igYsgOFd0t1NFXfwXFJxFEMTJSbs4VRdH/RdcikUquSTlkQY6nBCO+3zgQfJ9Iff6vu/elyYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0o59t9kI4VZ5tH+v/eO3Z1a/f09c7uw9e3ZlbyYrojcWye/mwJoQwEcJy3jdZXHJm6/2bifxkIr7v6dm5ZCEkneZRPXx8wrCrzw/J0biT50UbOBtCmM0Pnm5c2Tp5FsZXP13LymnslHlLihyGqfI4btNFW/pdtMb1EV+btPV3/dq/9Latzx4l/XRtvZb/UBwXuat/v8dVfZ3fe/ntem0qJ2vflZHQT7Obeb6b9/kQZjbvfzgs9vWZUBSKfF+dy7fwEMJ823lhOGmv28vXa3U+SHqyPVnlv2FddH7sPsprw0JVAwCA0ZL2uqsN9b96INBY/z9f/rKq/gPA6FpPe90QPecbBJPt+aq/qf5f3Dv/pMUhAwBDytYb6//R+/Wm+t9/sfiuxSEDAEPauDWo/9O1+n+u6m+q/ys/P+2U3dV7g7/RLQe/HyvjB1G8E8X/RPGp6D7x9dNRfD+Kz0TjPfjf8wEA42Cjm62G4///X6j6m+r/3u27Sy0OGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgoAAD//0+Ao/Q=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)

4.103839228s ago: executing program 2 (id=289):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x9, 0xa08, 0x54f, 0x3, 0x4, 0xe8c0, 0x80, 0x4, 0x400, 0x9, 0x4, 0x2, 0x7f, 0x40, 0x3, 0x6], 0xb000, 0xa0204})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.980839633s ago: executing program 3 (id=290):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001300)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}, {@usrquota}, {@bh}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000020)
unshare(0x20000400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
fdatasync(r1)

3.356953694s ago: executing program 1 (id=293):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
r3 = dup2(r2, r1)
readv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1)
fcntl$setstatus(r2, 0x4, 0x2800)

3.229972387s ago: executing program 3 (id=294):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r1, 0x9)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
readv(r0, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f00000033c0)=""/4080, 0xff0}, {0x0}, {&(0x7f00000023c0)=""/4087, 0xff7}], 0x5)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

3.171429554s ago: executing program 1 (id=295):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x88)
getdents(r2, 0xfffffffffffffffd, 0x58)
r3 = mq_open(0x0, 0x840, 0x104, 0x0)
finit_module(r3, 0x0, 0x0)

2.766200494s ago: executing program 0 (id=296):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000001e00)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000009180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009040)={0x130, 0x0, 0x8000000000000001, {0x8, 0x7, 0x0, '\x00', {0x7ff, 0x63, 0x4, 0x2, r2, r3, 0x6000, '\x00', 0x6, 0xbb, 0xd2, 0x6, {0x0, 0x1000}, {0x9, 0x5}, {0xa9d, 0x724b}, {0x80000000004, 0x7}, 0x4, 0x800, 0x60, 0x101}}}})
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0xffffffff, 0x22000100, 0x0, 0x0, 0x8000000}}, 0x50)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)

2.709631312s ago: executing program 1 (id=297):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.683137548s ago: executing program 2 (id=298):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x7)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1.949605549s ago: executing program 4 (id=299):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x8000}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4a24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0x15, 0x0, 0x4}, 0x9c)

1.575556945s ago: executing program 0 (id=300):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0x5, &(0x7f0000000300)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])
io_getevents(r1, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
shutdown(r0, 0x0)

1.543789804s ago: executing program 2 (id=301):
timer_create(0x2, 0x0, 0x0)
timer_create(0x7, 0x0, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xe518e7befb3cdd24}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.457943133s ago: executing program 3 (id=302):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000002c0)="c3f0bdce963388b1a04c9d", 0xb, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="6e520aa2b06e63fe6a7f7b0fe06b670ad79cb3e35fa8e7d730f496ca053e2b9a4e7d7c621f4e596e8428591c35dfb000be7a8a674825aafe63dcccf7e68660b2a74b1e29ee55cbedb5022b7eed3cff4d51e5b0b1c4615c299f5454ed1c75b89521714bc9f991", 0x66}], 0x1}, 0x4000880)
sendto$inet6(r0, &(0x7f0000000100)="a2c1fd", 0x3, 0x8044, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c)
shutdown(r0, 0x1)

1.185210728s ago: executing program 1 (id=303):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xcf}, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

839.493635ms ago: executing program 1 (id=304):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x60242, 0x0)
write$vga_arbiter(r1, 0x0, 0x8)
close(0xffffffffffffffff)

797.259956ms ago: executing program 3 (id=305):
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20008054)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

617.052178ms ago: executing program 0 (id=306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x10, 0x4, 0x7, 0x909, 0x5, 0x9, 0xc, 0x8, 0x8, 0xfffffffffffffffe, 0x0, 0xff, 0xfffffffffffffc01, 0x0, 0x8, 0xd7], 0x26000, 0x804})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001240)={{0x100000, 0xc000, 0x0, 0x7, 0x8, 0x41, 0x0, 0x3, 0x0, 0x8, 0x6, 0x1}, {0xffff1000, 0x100000, 0xc, 0x0, 0x2, 0x0, 0xfc, 0xfe, 0x7, 0xff}, {0x1000, 0x8080000, 0x3, 0x0, 0x7, 0x35, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xfec00000, 0xdddd0000, 0x18592cbc7c573fcc, 0x9, 0x55, 0x5, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xd, 0x2d, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x8}, {0x3000, 0x0, 0xc, 0x78, 0x6, 0x4, 0x9, 0x0, 0x0, 0xff, 0x5, 0xfe}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x8, 0xfc, 0x0, 0x8}, {0x8080000, 0xd000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x22, 0x26, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x110, 0x2, 0xf801, 0x0, [0x80000001, 0x0, 0x5, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

503.472527ms ago: executing program 2 (id=307):
r0 = socket(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x4)
r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cgroup.stat\x00', 0x5000000, 0x0)
read$char_usb(r3, &(0x7f0000000080)=""/248, 0xf8)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x4000004, 0xffffdffd, 0xd3c0}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)

466.614274ms ago: executing program 3 (id=308):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@any, 0x5}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717edf6b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309977816048f24"}, 0x418, 0x8})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x3f00000000000000)

153.060032ms ago: executing program 2 (id=309):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[], 0x7, 0xf08, &(0x7f0000001e40)="$eJzs3U1sHNUdAPA368/EJl7zaaCEFFoRKNghidT0FgTqEXHpHRQSGmEoauiBiI/QA6ISokiIU8WBigulUorUSqBKFeqp7alVbz2hXqhUpVKiXhopcRXnPXv3xZPdnaxnvbu/n/T32zdvdv7/8UbOzOzs2wCMrcb6z8OHl4oQPvji/Sdee7b43ZVl926ssW/9ZxF7zRDCVEu/yLb3VVxw6fyrx7Zqi3Bw/WfqhyfPbTx3LoRwJuwLX4Zm+HRl9cInHz6+/7O3Zm9/9/Tzr2/T7m/I9wMAAEbR2b+s/uPBf/354cWLZ/ceDTMby9PxeTP25+Jx/4F4oJyOlxuhvV+0RKvpbL2JGI1svYlsvcksz2RJvqlsO1Ml6013yDfRsmyr/QQAAIBhlM5rm6FoLLf1G43l5avn/Vd8tTBdLL94cvXEqQEVCgAAAFT23zfWb7oVQgghhBBCCCHECMfawqCvQAAAAADjJp8v7Bpn+jtT18bWmt3lP/dYY+vnQx/U/e9f/uHK//Gb/uIAAFDdqB5Npv1Kx9FpHoN8HsGJ7Hm9Hv83su1M9lhn2byCwzLfYFmd+e91pyqrv9fXcVDK6s/nw9ypyurP5+ncqcrqn6m5jqrK6p+tuY6qyurfVXMdVZXVv7vmOqoqq3+u5jqqKqt/vuY6qiqr/6aa66iqrP49NddRVVn9w3JbbVn9zZrrqKqs/sWa66iqrP6ba66jqrL6b6m5jqrK6r+15joG5Z7Ypt/D3my89fw5P6cblnM8AAAAGHf/M/+fEEIIIcQIxG07oAYhhBA7Od4Y9AUIAAAAYODS5wLSp97XojQ+0WF8ssP4VIfx6Q7jMx3GAQAAgBB+//aJO98rNj/nf6Pz4aV5o9L8S73OY5TPR9hr/hud96x9axd6zj8s85YBAAAwXorvf3n5oSc+ennx4tm9R1vOfi/H8900D+hkvDbweeyn+wLms36RzqGPtudplKyXXx+4qWx7T93gjgIAAMAYS+fvzVCsn3I3NvqNxvLy5vn4UpgqTpxcPX4g9tP3s/xpYWrmyvJH6y0bAAAA6MHm+X7RWN7i/D99j+9SmC6WXzy5euLU1f78xvKpRut1gYXN5UXrdYFmtvxgyfJDsZ++v/OHC7vWly8f+9Hqs/3eeQAAABgTp145/fwzq6vHf7zlg/Rp9uut08uD9PmCXp4VQhH6k90DDzzo9sEA/ygBAADb4uuv35/6yaH5P1z9/P/m/Hfp8//7Yr8Z5/b7a1wh3SeQPgdwzef1n27Ps1C23kvt6zWz9SZizGR1z7ZsJ7TMN5iet1iWr9m+nemSfHNZvvksXz5PwWS2fsq3J1uez0+Y1lvIlufzME5mOYos/30BAAAAyq28/MJLK6deOf3IyReeee74c8dfPHTwyPeOHDnw6HcfXVm/r3+l9e5+AAAAYBht3vQ76EoAAAAAAAAAAAAAAAAAAABgfNXxdWKD3kcAAAAYd/95I4RwRghREle/ArP/2938JsrB76MY3di1A2oQQgjR77h4nbGJHVCfEGLHxtpa/k3zAAAAANvr0vlXj7W21zhT9DXfxtbiu7GXY97Uzj/y98UrkVY791j79ZLdfa2GcVf3v3/5hyv/x2/2N/9setD1379G+waOVsv7wMqvllrz3zXZZf58/5+qln9/lv+B0F3+tY+y/E9Xy/9gln93l/mv2f+XquV/KOZfiv3993ebv/31n4lt2o9dXeb/Trb/z4Zu82f73+wyYebhmB8AxlFj0AVsk3SUkI6j52I/7W883Az53Q+9Hv83su1M3nDl7dtNx0F3xH46XprP8ia91j+Xbe+minXmhuWukrL6+/U6brey+qdqrqOqsvqna66jqrL6Z2quo6qy+mdrrqOqsvq7PQ8dtLL6h+W6cln9czXXUVVZ/fM111FVWf29/j8+KGX176m5jqrK6l+ouY6qyuqveFmtdmX1L9ZcR1Vl9d9ccx1VldV/S811VFVW/6011zEod8e27Hw4nX8uxLHUb2b9mS1+l6N6bQEAAACGzb/N/yeGJQ7PD74GIYToW+zaATWI8Y747s/A6xBiNGJt7fLaFYOuQ4jrxdraoK9AMEjb+2lmAHYqf//Hm9d/vHn9x5vXn+tJ9/AXWT+Z6DA+2WF8qsP4dDae/3ud6TB+S7bdtSiN39ph/LYO43s6jN/RYXypw/idHcbv6jB+d4dxAAAAxsPtsXV+CAAAAKPrtV9//s5vH3j6/OLFs3uPhulr5p0/EPsz8b31t2M/n/c+mYrv+f809n8Z2z/G9p/Z+u4/AQAAgO2XvifG+/8AAAAwutL3lDr/BwAAgNG1GFvn/wAAADC6bo6t838AAAAYYcXs1otjm64L3Bfbbuf1AwB2vm/E9p7Y7o3tvbH9ZmzTccD9sf1WTfUBAP3zix/87Mh7xeZ8/4ey8UtxeWqvcebqlYKi0T6T/67Y7o7tt7usJ/8+gG7zJ3u6zLNd+RduMD8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDoa6z8PH14qQvjgi/ef+Pn0O3+7suzejTX2rf8sYq8ZQpjaeF4a3ez/Jq546fyrx1rby7EtwsFQhGJjeXjy3EamuRDCmbAvfBma4dOV1QuffPj4/s/emr393dPPv76Nv4K2/QMAAIBR9P8AAAD//6d9HGQ=")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x8da6)
read(r0, &(0x7f0000002400)=""/4096, 0x1000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x208cc5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x289, &(0x7f00000009c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180))

106.056857ms ago: executing program 3 (id=310):
r0 = io_uring_setup(0x3c93, &(0x7f0000000180)={0x0, 0x7b61, 0x80, 0x0, 0x60})
syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=311):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10)
listen(r0, 0x2005)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="42ec6c47ba0e0db80258de8ff2d341c90000567f8770063d48589b38d002fbd9006400", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002080)="9f46fbdd571d89ec81c13229c3fd39b470e046aa3d5ea3dd12e7c57d83575958112823", 0x23}], 0x1}}], 0x2, 0x48045)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts.
[   73.862246][ T5805] cgroup: Unknown subsys name 'net'
[   74.101352][ T5805] cgroup: Unknown subsys name 'cpuset'
[   74.157991][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.845494][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.118193][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.129925][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.175741][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.176577][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.179074][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.179855][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.189314][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.190522][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.193173][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.193603][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.196878][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.225541][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.237134][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.253991][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.265108][   T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.268003][   T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.269205][   T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.272003][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.273132][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.273955][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.274407][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.275818][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.276611][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.278417][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.279272][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.308787][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   79.343218][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   79.361829][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   79.407005][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   79.429070][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   79.713063][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.714202][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.714359][ T5822] bridge_slave_0: entered allmulticast mode
[   79.716255][ T5822] bridge_slave_0: entered promiscuous mode
[   79.758852][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.759018][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.759158][ T5818] bridge_slave_0: entered allmulticast mode
[   79.760911][ T5818] bridge_slave_0: entered promiscuous mode
[   79.789485][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.789671][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.789813][ T5822] bridge_slave_1: entered allmulticast mode
[   79.791554][ T5822] bridge_slave_1: entered promiscuous mode
[   79.793170][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.793331][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.793466][ T5821] bridge_slave_0: entered allmulticast mode
[   79.795208][ T5821] bridge_slave_0: entered promiscuous mode
[   79.821764][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.822042][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.822325][ T5818] bridge_slave_1: entered allmulticast mode
[   79.826453][ T5818] bridge_slave_1: entered promiscuous mode
[   79.877205][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.879034][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.879179][ T5821] bridge_slave_1: entered allmulticast mode
[   79.900331][ T5821] bridge_slave_1: entered promiscuous mode
[   79.901855][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.902016][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.902162][ T5819] bridge_slave_0: entered allmulticast mode
[   79.903977][ T5819] bridge_slave_0: entered promiscuous mode
[   79.930168][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.930461][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.931039][ T5820] bridge_slave_0: entered allmulticast mode
[   79.934142][ T5820] bridge_slave_0: entered promiscuous mode
[   79.974553][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.974713][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.974855][ T5819] bridge_slave_1: entered allmulticast mode
[   79.976636][ T5819] bridge_slave_1: entered promiscuous mode
[   80.001719][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.002012][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.005416][ T5820] bridge_slave_1: entered allmulticast mode
[   80.009298][ T5820] bridge_slave_1: entered promiscuous mode
[   80.020638][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.059611][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.081933][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.086077][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.123078][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.156810][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.163592][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.187619][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.221348][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.348876][ T5831] Bluetooth: hci2: command tx timeout
[   80.348876][ T5824] Bluetooth: hci0: command tx timeout
[   80.418673][ T5831] Bluetooth: hci4: command tx timeout
[   80.418696][ T5824] Bluetooth: hci3: command tx timeout
[   80.418798][ T5831] Bluetooth: hci1: command tx timeout
[   80.463907][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.466714][ T5822] team0: Port device team_slave_0 added
[   80.522104][ T5818] team0: Port device team_slave_0 added
[   80.542843][ T5822] team0: Port device team_slave_1 added
[   80.545401][ T5821] team0: Port device team_slave_0 added
[   80.567264][ T5818] team0: Port device team_slave_1 added
[   80.603137][ T5821] team0: Port device team_slave_1 added
[   80.605683][ T5819] team0: Port device team_slave_0 added
[   80.631438][ T5820] team0: Port device team_slave_0 added
[   80.664515][ T5819] team0: Port device team_slave_1 added
[   80.682675][ T5820] team0: Port device team_slave_1 added
[   80.684214][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.684222][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.684235][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.747003][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.747012][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.747025][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.773210][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.773226][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.773250][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.776661][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.776674][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.776696][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.806368][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.806383][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.806405][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.852831][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.852846][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.852869][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.855820][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.855830][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.855853][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.873130][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.873144][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.873167][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.904075][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.904089][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.904112][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.912540][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.912554][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.912577][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.095433][ T5822] hsr_slave_0: entered promiscuous mode
[   81.099123][ T5822] hsr_slave_1: entered promiscuous mode
[   81.167851][ T5818] hsr_slave_0: entered promiscuous mode
[   81.169037][ T5818] hsr_slave_1: entered promiscuous mode
[   81.170138][ T5818] debugfs: 'hsr0' already exists in 'hsr'
[   81.170218][ T5818] Cannot create hsr debugfs directory
[   81.180790][ T5821] hsr_slave_0: entered promiscuous mode
[   81.182691][ T5821] hsr_slave_1: entered promiscuous mode
[   81.184238][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   81.184259][ T5821] Cannot create hsr debugfs directory
[   81.238564][ T5819] hsr_slave_0: entered promiscuous mode
[   81.239762][ T5819] hsr_slave_1: entered promiscuous mode
[   81.240766][ T5819] debugfs: 'hsr0' already exists in 'hsr'
[   81.240787][ T5819] Cannot create hsr debugfs directory
[   81.247067][ T5820] hsr_slave_0: entered promiscuous mode
[   81.249906][ T5820] hsr_slave_1: entered promiscuous mode
[   81.251420][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   81.251440][ T5820] Cannot create hsr debugfs directory
[   82.412446][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.419072][ T5826] Bluetooth: hci2: command tx timeout
[   82.427900][ T5826] Bluetooth: hci0: command tx timeout
[   82.468686][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.484148][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.497524][ T5826] Bluetooth: hci3: command tx timeout
[   82.507528][ T5826] Bluetooth: hci1: command tx timeout
[   82.507556][ T5826] Bluetooth: hci4: command tx timeout
[   82.526764][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.537548][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.573267][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.594184][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.632012][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.742409][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.772696][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.776574][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.811724][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.825391][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.850878][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.890009][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.934428][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.080194][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.113523][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.124810][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.152657][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.168951][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.191762][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.223298][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.256457][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.381696][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.409484][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.428801][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.463088][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.477084][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.501178][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.512553][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.554896][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.716087][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.764036][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.796871][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.811111][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.852428][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.869323][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.913587][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.934489][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.973739][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.016821][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   84.069976][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.088710][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.088892][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.155044][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.155170][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.223234][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   84.260267][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.281918][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.282134][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.327155][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.329623][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.407172][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   84.489682][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.492057][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.493026][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.498076][ T5826] Bluetooth: hci2: command tx timeout
[   84.498154][ T5831] Bluetooth: hci0: command tx timeout
[   84.579918][ T5826] Bluetooth: hci1: command tx timeout
[   84.579948][ T5826] Bluetooth: hci3: command tx timeout
[   84.580061][ T5831] Bluetooth: hci4: command tx timeout
[   84.589738][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.589935][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.682056][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   84.782994][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.803326][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.804642][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.874313][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.874485][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.987252][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   85.054755][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.054908][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.122935][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.125047][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.151317][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.426507][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.618648][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.875661][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.895600][ T5821] veth0_vlan: entered promiscuous mode
[   85.965996][ T5821] veth1_vlan: entered promiscuous mode
[   86.028683][ T5819] veth0_vlan: entered promiscuous mode
[   86.031090][ T5822] veth0_vlan: entered promiscuous mode
[   86.055979][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.091985][ T5819] veth1_vlan: entered promiscuous mode
[   86.110839][ T5822] veth1_vlan: entered promiscuous mode
[   86.176186][ T5818] veth0_vlan: entered promiscuous mode
[   86.192419][ T5821] veth0_macvtap: entered promiscuous mode
[   86.232060][ T5821] veth1_macvtap: entered promiscuous mode
[   86.248041][ T5818] veth1_vlan: entered promiscuous mode
[   86.322080][ T5819] veth0_macvtap: entered promiscuous mode
[   86.343082][ T5822] veth0_macvtap: entered promiscuous mode
[   86.362245][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.363329][ T5819] veth1_macvtap: entered promiscuous mode
[   86.368779][ T5820] veth0_vlan: entered promiscuous mode
[   86.384914][ T5822] veth1_macvtap: entered promiscuous mode
[   86.403526][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.451647][ T5820] veth1_vlan: entered promiscuous mode
[   86.461300][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.481215][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.486035][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.508830][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.508904][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.511081][ T5818] veth0_macvtap: entered promiscuous mode
[   86.556783][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.577562][ T5824] Bluetooth: hci2: command tx timeout
[   86.577604][ T5831] Bluetooth: hci0: command tx timeout
[   86.654630][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.655670][ T5818] veth1_macvtap: entered promiscuous mode
[   86.657674][ T5824] Bluetooth: hci3: command tx timeout
[   86.657696][ T5824] Bluetooth: hci1: command tx timeout
[   86.657742][ T5831] Bluetooth: hci4: command tx timeout
[   86.700864][   T32] cfg80211: failed to load regulatory.db
[   86.714853][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.817616][   T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.842741][   T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.896529][   T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.004820][   T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.038810][   T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.049265][   T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.083245][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.084107][   T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.155722][   T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.225643][ T5820] veth0_macvtap: entered promiscuous mode
[   87.249024][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.374856][ T5820] veth1_macvtap: entered promiscuous mode
[   87.412728][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.412749][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.477992][ T1531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.540113][ T1531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.632259][ T1531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.648752][ T1531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.789877][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.909015][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.910875][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.910891][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.172647][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.172667][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.232053][  T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.241450][  T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.242166][  T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.242208][  T156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.325093][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.325109][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.392754][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.392770][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.743477][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.743495][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.164458][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.164477][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.395926][ T1531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.395952][ T1531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.591726][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.591744][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.974844][ T1531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.974863][ T1531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.300638][ T5962] loop3: detected capacity change from 0 to 32768
[   91.501489][ T5962] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.639454][ T5962] XFS (loop3): Ending clean mount
[   91.711560][ T5965] overlayfs: upper fs does not support file handles, falling back to index=off.
[   91.897003][ T5963] loop2: detected capacity change from 0 to 131072
[   92.065034][ T5963] F2FS-fs (loop2): invalid crc value
[   92.263635][ T5963] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   92.293148][ T5963] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   92.878703][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.100558][ T5819] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   93.376249][ T5961] syz.1.2 (5961) used greatest stack depth: 18648 bytes left
[   93.558443][ T5976] syz.1.2 (5976) used greatest stack depth: 17376 bytes left
[   95.423687][ T5998] loop1: detected capacity change from 0 to 32768
[   95.883892][ T5996] loop0: detected capacity change from 0 to 131072
[   95.988988][ T5996] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[   95.989014][ T5996] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   96.053082][ T5996] F2FS-fs (loop0): invalid crc value
[   96.069519][ T5998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.18 (5998)
[   96.239165][ T5996] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   96.316222][ T5996] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   96.316252][ T5996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   96.402233][ T5998] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.402277][ T5998] BTRFS info (device loop1): using sha256 checksum algorithm
[   96.500069][   T38] audit: type=1800 audit(1776872588.355:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=7 res=0 errno=0
[   96.842139][ T5998] BTRFS info (device loop1): rebuilding free space tree
[   96.924062][ T5998] BTRFS info (device loop1): enabling ssd optimizations
[   96.924086][ T5998] BTRFS info (device loop1): using spread ssd allocation scheme
[   96.924106][ T5998] BTRFS info (device loop1): enabling free space tree
[   96.924119][ T5998] BTRFS info (device loop1): force clearing of disk cache
[   96.924133][ T5998] BTRFS info (device loop1): enabling auto defrag
[   96.924154][ T5998] BTRFS info (device loop1): max_inline set to 0
[   98.324650][ T5831] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   98.324697][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[   98.324719][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   98.324730][ T5831] Workqueue: hci2 hci_rx_work
[   98.324768][ T5831] Call Trace:
[   98.324778][ T5831]  <TASK>
[   98.324786][ T5831]  dump_stack_lvl+0xe8/0x150
[   98.324811][ T5831]  sysfs_create_dir_ns+0x271/0x2a0
[   98.324835][ T5831]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[   98.324856][ T5831]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   98.324884][ T5831]  ? rt_spin_unlock+0x160/0x200
[   98.324908][ T5831]  kobject_add_internal+0x631/0xd10
[   98.324946][ T5831]  kobject_add+0x163/0x240
[   98.324992][ T5831]  ? __pfx_kobject_add+0x10/0x10
[   98.325028][ T5831]  ? get_device_parent+0x370/0x3a0
[   98.325058][ T5831]  device_add+0x408/0xbb0
[   98.325086][ T5831]  hci_conn_add_sysfs+0xd5/0x210
[   98.325115][ T5831]  le_conn_complete_evt+0x10e6/0x16b0
[   98.325147][ T5831]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   98.325169][ T5831]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   98.325196][ T5831]  ? lockdep_hardirqs_on+0x7a/0x110
[   98.325223][ T5831]  ? skb_pull_data+0xfb/0x200
[   98.325249][ T5831]  hci_le_conn_complete_evt+0x187/0x470
[   98.325277][ T5831]  hci_event_packet+0x659/0xef0
[   98.325311][ T5831]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[   98.325331][ T5831]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   98.325360][ T5831]  ? __pfx_hci_event_packet+0x10/0x10
[   98.325386][ T5831]  ? rt_spin_unlock+0x14f/0x200
[   98.325416][ T5831]  ? hci_send_to_monitor+0xe2/0x590
[   98.325442][ T5831]  hci_rx_work+0x3ee/0x1040
[   98.325480][ T5831]  ? process_one_work+0x8b7/0x1710
[   98.325500][ T5831]  process_one_work+0x9a3/0x1710
[   98.325542][ T5831]  ? __pfx_process_one_work+0x10/0x10
[   98.325560][ T5831]  ? do_raw_spin_lock+0x12b/0x2f0
[   98.325601][ T5831]  worker_thread+0xba8/0x11e0
[   98.325650][ T5831]  kthread+0x388/0x470
[   98.325676][ T5831]  ? __pfx_worker_thread+0x10/0x10
[   98.325695][ T5831]  ? __pfx_kthread+0x10/0x10
[   98.325721][ T5831]  ret_from_fork+0x514/0xb70
[   98.325746][ T5831]  ? __pfx_ret_from_fork+0x10/0x10
[   98.325768][ T5831]  ? __switch_to+0xc79/0x1410
[   98.325800][ T5831]  ? __pfx_kthread+0x10/0x10
[   98.325826][ T5831]  ret_from_fork_asm+0x1a/0x30
[   98.325868][ T5831]  </TASK>
[   98.327114][ T5831] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   98.327156][ T5831] Bluetooth: hci2: failed to register connection device
[   99.055115][ T1184] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  100.223235][ T6040] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET)
[  100.393091][ T6042] loop2: detected capacity change from 0 to 32768
[  100.394096][ T6042] btrfs: Deprecated parameter 'usebackuproot'
[  100.394657][ T6042] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  100.440578][ T6042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15 (6042)
[  100.464639][ T6042] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.464670][ T6042] BTRFS info (device loop2): using crc32c checksum algorithm
[  100.774038][   T57] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  100.800690][ T6042] BTRFS error (device loop2): failed to load root extent
[  100.800745][ T6042] BTRFS warning (device loop2): try to load backup roots slot 1
[  100.810930][   T68] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  100.811052][ T6042] BTRFS warning (device loop2): couldn't read tree root
[  100.811069][ T6042] BTRFS warning (device loop2): try to load backup roots slot 2
[  100.820600][   T68] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  100.820718][ T6042] BTRFS warning (device loop2): couldn't read tree root
[  100.820735][ T6042] BTRFS warning (device loop2): try to load backup roots slot 3
[  100.872262][ T6042] BTRFS info (device loop2): rebuilding free space tree
[  100.983977][ T6042] BTRFS info (device loop2): checking UUID tree
[  100.997824][ T6042] BTRFS info (device loop2): enabling ssd optimizations
[  100.997847][ T6042] BTRFS info (device loop2): using spread ssd allocation scheme
[  100.997864][ T6042] BTRFS info (device loop2): turning on async discard
[  100.997878][ T6042] BTRFS info (device loop2): enabling free space tree
[  100.997893][ T6042] BTRFS info (device loop2): force clearing of disk cache
[  100.997908][ T6042] BTRFS info (device loop2): enabling auto defrag
[  100.997922][ T6042] BTRFS info (device loop2): trying to use backup root at mount time
[  100.997953][ T6042] BTRFS info (device loop2): force zlib compression, level 3
[  101.170209][   T38] audit: type=1800 audit(1776872593.075:3): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15" name="file1" dev="loop2" ino=257 res=0 errno=0
[  101.665813][ T5818] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.722812][ T5821] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.451055][ T6089] loop1: detected capacity change from 0 to 32768
[  103.492657][ T6089] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.610209][ T6089] XFS (loop1): Ending clean mount
[  104.383493][ T1630] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.554379][   T13] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  104.554432][   T13] XFS (loop1): Unmount and run xfs_repair
[  104.554444][   T13] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  104.554460][   T13] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  104.554473][   T13] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  104.554486][   T13] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  104.554499][   T13] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01  ....lK..........
[  104.554511][   T13] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00  ................
[  104.554524][   T13] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  104.554536][   T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  104.554549][   T13] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  104.554742][   T13] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74
[  104.646702][ T1630] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  104.670568][ T1630] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  104.670596][ T1630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.670614][ T1630] usb 5-1: Product: syz
[  104.670627][ T1630] usb 5-1: Manufacturer: syz
[  104.670639][ T1630] usb 5-1: SerialNumber: syz
[  104.903045][   T13] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  104.903095][   T13] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  104.911938][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  105.692565][ T1630] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  105.757742][ T5818] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  106.441884][ T1630] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  106.442545][ T1630] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  106.442627][ T1630] usb 5-1: media controller created
[  106.802817][ T1630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.420377][ T6143] loop2: detected capacity change from 0 to 64
[  107.468780][ T6143] =======================================================
[  107.468780][ T6143] WARNING: The mand mount option has been deprecated and
[  107.468780][ T6143]          and is ignored by this kernel. Remove the mand
[  107.468780][ T6143]          option from the mount to silence this warning.
[  107.468780][ T6143] =======================================================
[  107.559045][ T6144] loop1: detected capacity change from 0 to 764
[  107.615881][ T6128] loop3: detected capacity change from 0 to 131072
[  107.651264][ T6128] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  107.651292][ T6128] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  107.681782][ T6128] F2FS-fs (loop3): invalid crc value
[  107.990014][ T6128] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.002672][ T6128] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  108.002698][ T6128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  108.062920][   T38] audit: type=1800 audit(1776872599.975:4): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.40" name="file1" dev="loop3" ino=7 res=0 errno=0
[  109.356024][ T6162] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.44'.
[  109.473545][ T1630] usb 5-1: USB disconnect, device number 2
[  111.041489][ T6194] loop1: detected capacity change from 0 to 4096
[  112.439149][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'.
[  112.527490][ T1630] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  112.700665][ T1630] usb 5-1: Using ep0 maxpacket: 32
[  112.704630][ T1630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.704659][ T1630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.704695][ T1630] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  112.704716][ T1630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.783910][ T1630] usb 5-1: config 0 descriptor??
[  112.826416][ T1630] hub 5-1:0.0: USB hub found
[  112.921937][ T6202] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure
[  113.002371][ T1630] hub 5-1:0.0: 1 port detected
[  113.751001][ T1630] hub 5-1:0.0: activate --> -90
[  114.020038][  T820] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  114.258997][  T820] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  114.259067][  T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.259085][  T820] usb 2-1: Product: syz
[  114.259099][  T820] usb 2-1: Manufacturer: syz
[  114.259112][  T820] usb 2-1: SerialNumber: syz
[  114.328445][ T1630] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  114.328468][ T1630] usb 5-1-port1: connect-debounce failed
[  114.333604][ T6218] binder: 6217:6218 ioctl c0306201 200000000140 returned -11
[  114.366003][ T1630] usb 5-1-port1: cannot disable (err = -71)
[  114.399299][ T5152] usb 5-1: USB disconnect, device number 3
[  114.399572][ T1457] usb 5-1: Failed to suspend device, error -19
[  114.850449][  T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  114.850530][  T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  115.579644][  T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  115.579715][  T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  115.606848][  T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  116.489046][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.665374][  T820] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  116.692986][  T820] usb 2-1: USB disconnect, device number 2
[  116.869930][ T6249] loop4: detected capacity change from 0 to 131072
[  116.878821][ T6249] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  116.878840][ T6249] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  116.939330][ T6249] F2FS-fs (loop4): invalid crc value
[  117.113264][ T6249] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.173558][ T6249] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  117.173586][ T6249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  117.176098][ T6260] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.76'.
[  117.274296][   T38] audit: type=1800 audit(1776872609.175:5): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.73" name="file1" dev="loop4" ino=7 res=0 errno=0
[  119.842958][ T6299] loop1: detected capacity change from 0 to 128
[  120.387684][ T6299] process 'syz.1.91' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  120.389255][ T6299] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/18/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  120.435166][ T6297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  122.853099][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  123.047431][    T9] usb 3-1: Using ep0 maxpacket: 8
[  123.055256][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  123.057153][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  123.057167][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.057177][    T9] usb 3-1: Product: syz
[  123.057184][    T9] usb 3-1: Manufacturer: syz
[  123.057191][    T9] usb 3-1: SerialNumber: syz
[  123.140777][    T9] usb 3-1: config 0 descriptor??
[  123.179132][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  124.556942][   T38] audit: type=1804 audit(1776872616.385:6): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.104" name="/newroot/23/file0" dev="tmpfs" ino=146 res=1 errno=0
[  124.677596][ T6313] syz.0.94 (6313): drop_caches: 2
[  124.828126][    T9] gspca_zc3xx: reg_w_i err -71
[  125.441877][    T9] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  125.441975][    T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  125.515906][    T9] usb 3-1: USB disconnect, device number 2
[  126.142459][ T6369] loop0: detected capacity change from 0 to 32768
[  126.144349][ T6369] btrfs: Deprecated parameter 'usebackuproot'
[  126.144367][ T6369] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  126.180876][ T6369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.111 (6369)
[  126.253576][ T6369] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.253606][ T6369] BTRFS info (device loop0): using crc32c checksum algorithm
[  126.376050][ T3622] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  126.377200][ T6369] BTRFS error (device loop0): failed to load root extent
[  126.377238][ T6369] BTRFS warning (device loop0): try to load backup roots slot 1
[  126.387120][   T12] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  126.387224][ T6369] BTRFS warning (device loop0): couldn't read tree root
[  126.387242][ T6369] BTRFS warning (device loop0): try to load backup roots slot 2
[  126.397437][ T3622] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  126.397528][ T6369] BTRFS warning (device loop0): couldn't read tree root
[  126.397546][ T6369] BTRFS warning (device loop0): try to load backup roots slot 3
[  126.447695][ T6369] BTRFS info (device loop0): rebuilding free space tree
[  126.592563][ T6369] BTRFS info (device loop0): checking UUID tree
[  126.596381][ T6369] BTRFS info (device loop0): enabling ssd optimizations
[  126.596404][ T6369] BTRFS info (device loop0): turning on async discard
[  126.596418][ T6369] BTRFS info (device loop0): enabling free space tree
[  126.596432][ T6369] BTRFS info (device loop0): force clearing of disk cache
[  126.596446][ T6369] BTRFS info (device loop0): enabling auto defrag
[  126.596460][ T6369] BTRFS info (device loop0): trying to use backup root at mount time
[  126.596477][ T6369] BTRFS info (device loop0): use zstd compression, level 3
[  126.682094][ T6401] loop3: detected capacity change from 0 to 512
[  126.687825][ T6401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  126.800337][ T6401] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.115: iget: bad i_size value: 38620345925642
[  126.800492][ T6401] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  126.809094][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  126.809116][    C0] EXT4-fs (loop3): initial error at time 1776872618: ext4_orphan_get:1397: inode 15
[  126.809156][    C0] EXT4-fs (loop3): last error at time 1776872618: ext4_orphan_get:1397: inode 15
[  126.830244][ T6401] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.115: couldn't read orphan inode 15 (err -117)
[  126.830374][ T6401] loop3: lost filesystem error report for type 5 error -117
[  126.842798][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.898636][ T3622] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap
[  127.924798][ T3622] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  127.924826][ T3622] EXT4-fs (loop3): This should not happen!! Data will be lost
[  127.924826][ T3622] 
[  127.924848][ T3622] EXT4-fs (loop3): Total free blocks count 0
[  127.924859][ T3622] EXT4-fs (loop3): Free/Dirty block details
[  127.924897][ T3622] EXT4-fs (loop3): free_blocks=0
[  127.924924][ T3622] EXT4-fs (loop3): dirty_blocks=16000
[  127.924935][ T3622] EXT4-fs (loop3): Block reservation details
[  127.924945][ T3622] EXT4-fs (loop3): i_reserved_data_blocks=16000
[  128.347089][ T5820] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.963631][ T6415] loop1: detected capacity change from 0 to 131072
[  128.985434][ T6415] F2FS-fs (loop1): invalid crc value
[  129.131865][ T6415] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.147520][ T6415] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.764425][ T6427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.979233][ T6415] F2FS-fs (loop1): Start checkpoint disabled!
[  130.018424][ T6415] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  130.053791][  T147] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 6148 with max blocks 2048 with error 28
[  130.466422][ T5819] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  130.886653][ T6436] warning: `syz.2.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  131.000459][ T5152] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  131.174715][ T5152] usb 1-1: Using ep0 maxpacket: 32
[  131.206596][ T5152] usb 1-1: config 4 has too many interfaces: 223, using maximum allowed: 32
[  131.206622][ T5152] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 223
[  131.206668][ T5152] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.206692][ T5152] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.214969][ T5152] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  131.214994][ T5152] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  131.215013][ T5152] usb 1-1: Product: syz
[  131.215025][ T5152] usb 1-1: Manufacturer: syz
[  131.419482][ T5152] hub 1-1:4.0: USB hub found
[  131.649960][ T5152] hub 1-1:4.0: 2 ports detected
[  131.893993][ T6457] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  131.894029][ T6457] overlayfs: failed to set xattr on upper
[  131.894037][ T6457] overlayfs: ...falling back to redirect_dir=nofollow.
[  131.894045][ T6457] overlayfs: ...falling back to uuid=null.
[  131.894242][ T6457] overlayfs: conflicting lowerdir path
[  132.614607][ T6471] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.135'.
[  132.614628][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.135'.
[  132.752132][ T6473] loop3: detected capacity change from 0 to 512
[  132.761372][ T6473] EXT4-fs: inline encryption not supported
[  132.815065][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  132.836069][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  132.938351][ T5152] hub 1-1:4.0: hub_hub_status failed (err = -32)
[  132.938377][ T5152] hub 1-1:4.0: config failed, can't get hub status (err -32)
[  133.088293][ T5913] usb 1-1: USB disconnect, device number 2
[  133.090567][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.135505][ T6475] batadv_slave_0: entered promiscuous mode
[  133.200665][ T6478] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  133.320929][ T6473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.321077][ T6473] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.741129][ T6489] loop2: detected capacity change from 0 to 512
[  133.944292][ T6489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  134.011982][ T6489] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.139: iget: bad i_size value: 38620345925642
[  134.012012][ T6489] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  134.013703][ T6489] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.139: couldn't read orphan inode 15 (err -117)
[  134.013730][ T6489] loop2: lost filesystem error report for type 5 error -117
[  134.069032][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.150150][ T5152] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  134.242498][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.309645][ T5152] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.309670][ T5152] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.310976][ T5152] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  134.311001][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  134.311020][ T5152] usb 1-1: SerialNumber: syz
[  134.389353][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.681993][ T5152] usb 1-1: 0:2 : does not exist
[  134.789890][ T6506] loop2: detected capacity change from 0 to 64
[  135.014274][   T38] audit: type=1800 audit(1776872626.895:7): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file1" dev="loop2" ino=22 res=0 errno=0
[  135.186972][   T38] audit: type=1800 audit(1776872627.085:8): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file1" dev="loop2" ino=22 res=0 errno=0
[  135.415758][ T6516] loop1: detected capacity change from 0 to 256
[  135.625415][ T5152] usb 1-1: USB disconnect, device number 3
[  135.977025][ T6516] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  136.038954][ T6519] loop2: detected capacity change from 0 to 512
[  136.056854][ T6519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  136.482534][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.482671][ T6519] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.042357][ T5826] Bluetooth: hci3: link tx timeout
[  137.042502][ T5826] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.832651][ T6535] loop0: detected capacity change from 0 to 131072
[  137.835650][ T6535] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  137.835673][ T6535] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  137.905339][ T6535] F2FS-fs (loop0): invalid crc value
[  138.016689][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.107248][ T6535] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.110633][ T5913] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  138.148856][ T6535] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  138.148872][ T6535] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  138.271536][ T5913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  138.271561][ T5913] usb 4-1: config 0 has no interface number 0
[  138.271599][ T5913] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  138.271622][ T5913] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  138.271658][ T5913] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  138.271679][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.381954][ T5913] usb 4-1: config 0 descriptor??
[  138.396609][ T6553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  138.877920][ T5913] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  139.075580][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[  139.153621][ T5912] usb 4-1: USB disconnect, device number 2
[  139.340664][ T6568] loop1: detected capacity change from 0 to 128
[  140.140094][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140121][ T6568] FAT-fs (loop1): Filesystem has been set read-only
[  140.140564][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140592][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140616][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140640][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140664][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140688][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140710][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.140831][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141017][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141038][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141056][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141076][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141095][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141114][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141137][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.141158][ T6568] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  140.263359][ T6586] loop3: detected capacity change from 0 to 256
[  140.435504][   T38] audit: type=1800 audit(1776872888.290:9): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.164" name="file1" dev="loop1" ino=1048606 res=0 errno=0
[  140.451120][ T6586] exfat: Deprecated parameter 'namecase'
[  140.451235][ T6586] exfat: Deprecated parameter 'namecase'
[  140.488496][   T38] audit: type=1800 audit(1776872888.380:10): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.164" name="file1" dev="loop1" ino=1048606 res=0 errno=0
[  140.809611][ T6586] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d)
[  141.791183][ T6602] netlink: 'syz.1.173': attribute type 11 has an invalid length.
[  141.791205][ T6602] netlink: 36 bytes leftover after parsing attributes in process `syz.1.173'.
[  141.797039][ T6602] netlink: 'syz.1.173': attribute type 10 has an invalid length.
[  141.846093][ T6602] macvlan0: entered allmulticast mode
[  142.225244][ T6602] veth1_vlan: entered allmulticast mode
[  142.340929][ T6602] team0: Port device macvlan0 added
[  142.931505][   T38] audit: type=1804 audit(1776872890.760:11): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.180" name="bus" dev="ramfs" ino=10117 res=1 errno=0
[  143.428707][ T6636] netlink: 'syz.4.188': attribute type 1 has an invalid length.
[  143.549293][ T6636] bond1: entered promiscuous mode
[  143.555973][ T6636] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.842298][ T6636] bond1: (slave bridge1): making interface the new active one
[  143.842326][ T6636] bridge1: entered promiscuous mode
[  143.991334][ T6636] bridge1: left promiscuous mode
[  144.606649][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'.
[  145.093148][ T6669] tipc: Started in network mode
[  145.093168][ T6669] tipc: Node identity 4, cluster identity 4711
[  145.093178][ T6669] tipc: Node number set to 4
[  145.107381][ T1630] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  145.267395][ T1630] usb 4-1: Using ep0 maxpacket: 32
[  145.285412][ T1630] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  145.285438][ T1630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.285457][ T1630] usb 4-1: Product: syz
[  145.285470][ T1630] usb 4-1: Manufacturer: syz
[  145.285490][ T1630] usb 4-1: SerialNumber: syz
[  145.342040][ T1630] usb 4-1: config 0 descriptor??
[  145.346691][ T1630] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  145.422724][ T6679] loop0: detected capacity change from 0 to 512
[  145.454271][ T6679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  145.493100][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[  145.545777][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[  145.742805][ T6679] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.200: Unimplemented hash flags: 0x0001
[  145.742838][ T6679] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.200: Corrupt directory, running e2fsck is recommended
[  145.869001][ T6688] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.200: Unimplemented hash flags: 0x0001
[  145.869033][ T6688] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.200: Corrupt directory, running e2fsck is recommended
[  145.873818][ T6685] team1: entered promiscuous mode
[  145.906851][ T6685] team1: entered allmulticast mode
[  145.909165][ T6685] 8021q: adding VLAN 0 to HW filter on device team1
[  146.216941][ T6679] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.200: Unimplemented hash flags: 0x0001
[  146.216966][ T6679] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.200: Corrupt directory, running e2fsck is recommended
[  146.224962][ T6689] team2: entered promiscuous mode
[  146.224992][ T6689] team2: entered allmulticast mode
[  146.228877][ T6689] 8021q: adding VLAN 0 to HW filter on device team2
[  146.246458][ T6689] Zero length message leads to an empty skb
[  146.311946][ T6688] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.200: Unimplemented hash flags: 0x0001
[  146.311976][ T6688] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.200: Corrupt directory, running e2fsck is recommended
[  146.558283][ T6679] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.200: Unimplemented hash flags: 0x0001
[  146.558551][ T6679] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.200: Corrupt directory, running e2fsck is recommended
[  146.779024][ T6698] loop2: detected capacity change from 0 to 32768
[  146.834890][ T1630] gspca_topro: Sensor cx0342
[  146.943797][ T6698] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.000724][ T6698] XFS (loop2): Ending clean mount
[  147.155626][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.274755][ T1630] usb 4-1: USB disconnect, device number 3
[  148.002059][ T1214] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  148.002107][ T1214] XFS (loop2): Unmount and run xfs_repair
[  148.002118][ T1214] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  148.002133][ T1214] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  148.002147][ T1214] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  148.002160][ T1214] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  148.002172][ T1214] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01  ....lK..........
[  148.002185][ T1214] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00  ................
[  148.002196][ T1214] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  148.002209][ T1214] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  148.002220][ T1214] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  148.002233][ T1214] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x14 len 4 error 74
[  148.095788][ T1214] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  148.095833][ T1214] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  148.573322][ T5821] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.813425][ T6735] tipc: Started in network mode
[  148.813454][ T6735] tipc: Node identity ea8f973cf37e, cluster identity 4711
[  148.814087][ T6735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.836699][ T6735] syzkaller0: entered promiscuous mode
[  148.836720][ T6735] syzkaller0: entered allmulticast mode
[  149.544438][ T6733] loop0: detected capacity change from 0 to 131072
[  149.546158][ T6733] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  149.546179][ T6733] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  149.619517][ T6733] F2FS-fs (loop0): invalid crc value
[  149.684749][ T6734] tipc: Resetting bearer <eth:syzkaller0>
[  149.766256][ T6733] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.845193][ T6733] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  149.845220][ T6733] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  149.882343][   T38] audit: type=1800 audit(1776872897.790:12): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.215" name="file1" dev="loop0" ino=7 res=0 errno=0
[  150.003278][ T6734] tipc: Disabling bearer <eth:syzkaller0>
[  150.343799][ T6749] loop2: detected capacity change from 0 to 512
[  150.350584][ T6749] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.475857][ T6749] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002]
[  150.496579][ T5903] tipc: Node number set to 435263292
[  150.522632][ T6749] EXT4-fs (loop2): orphan cleanup on readonly fs
[  150.523918][ T6749] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  150.567141][ T6749] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  150.601349][ T6749] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.213: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  150.601390][ T6749] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  150.606170][ T6749] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.213: couldn't read orphan inode 13 (err -117)
[  150.606202][ T6749] loop2: lost filesystem error report for type 5 error -117
[  150.642841][ T6749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  150.879991][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.000554][ T6757] loop4: detected capacity change from 0 to 128
[  151.236353][ T6757] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  152.444466][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'.
[  152.658609][ T6783] loop1: detected capacity change from 0 to 512
[  152.830924][ T6783] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  152.836167][ T6783] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  152.836188][ T6783] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.232: Corrupt directory, running e2fsck is recommended
[  152.990538][ T6783] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  152.993252][ T6783] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.232: corrupted in-inode xattr: invalid ea_ino
[  152.993284][ T6783] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  152.997481][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  152.997504][    C0] EXT4-fs (loop1): initial error at time 1776872900: ext4_iget_extra_inode:5128: inode 15
[  152.997529][    C0] EXT4-fs (loop1): last error at time 1776872900: ext4_iget_extra_inode:5128: inode 15
[  153.042365][ T6783] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.232: couldn't read orphan inode 15 (err -117)
[  153.042393][ T6783] loop1: lost filesystem error report for type 5 error -117
[  153.066630][ T6783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.115735][ T6783] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  153.115762][ T6783] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  153.115778][ T6783] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.232: Corrupt directory, running e2fsck is recommended
[  153.342238][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.361423][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.433927][ T6797] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  153.433956][ T6797] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  153.433973][ T6797] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.232: Corrupt directory, running e2fsck is recommended
[  153.434639][ T6797] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  153.434664][ T6797] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  153.434680][ T6797] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.232: Corrupt directory, running e2fsck is recommended
[  153.443871][ T6797] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  153.444029][ T6797] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.232: path /54/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  153.572626][ T6797] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 2: comm syz.1.232: path /54/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  155.156331][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.453745][ T6811] loop3: detected capacity change from 0 to 764
[  156.503483][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.061499][ T6867] loop1: detected capacity change from 0 to 256
[  158.262296][   T38] audit: type=1800 audit(1776872906.170:13): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.260" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1048611 res=0 errno=0
[  158.506727][ T6871] loop1: detected capacity change from 0 to 512
[  158.615472][ T6871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  158.661464][ T6871] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.261: Unimplemented hash flags: 0x0001
[  158.661483][ T6871] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.261: Corrupt directory, running e2fsck is recommended
[  158.769492][ T6875] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.261: Unimplemented hash flags: 0x0001
[  158.769511][ T6875] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.261: Corrupt directory, running e2fsck is recommended
[  158.881061][ T6871] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.261: Unimplemented hash flags: 0x0001
[  158.881093][ T6871] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.261: Corrupt directory, running e2fsck is recommended
[  159.009389][ T6871] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.261: Unimplemented hash flags: 0x0001
[  159.009420][ T6871] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.261: Corrupt directory, running e2fsck is recommended
[  159.096898][ T3622] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.119646][ T3622] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.119697][ T3622] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.119730][ T3622] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.163731][ T6875] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.261: Unimplemented hash flags: 0x0001
[  159.163759][ T6875] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.261: Corrupt directory, running e2fsck is recommended
[  159.445521][ T6888] loop4: detected capacity change from 0 to 256
[  159.548575][ T5825] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[  159.644977][ T6888] FAT-fs (loop4): Directory bread(block 64) failed
[  159.645011][ T6888] FAT-fs (loop4): Directory bread(block 65) failed
[  159.645117][ T6888] FAT-fs (loop4): Directory bread(block 66) failed
[  159.645137][ T6888] FAT-fs (loop4): Directory bread(block 67) failed
[  159.645226][ T6888] FAT-fs (loop4): Directory bread(block 68) failed
[  159.645246][ T6888] FAT-fs (loop4): Directory bread(block 69) failed
[  159.645334][ T6888] FAT-fs (loop4): Directory bread(block 70) failed
[  159.645353][ T6888] FAT-fs (loop4): Directory bread(block 71) failed
[  159.645440][ T6888] FAT-fs (loop4): Directory bread(block 72) failed
[  159.645459][ T6888] FAT-fs (loop4): Directory bread(block 73) failed
[  159.776153][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short
[  159.776898][ T5825] usb 3-1: unable to read config index 0 descriptor/start: -71
[  159.776918][ T5825] usb 3-1: can't read configurations, error -71
[  159.883810][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.020790][ T6895] loop1: detected capacity change from 0 to 512
[  160.022161][ T6895] EXT4-fs: inline encryption not supported
[  160.150852][ T6895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.150988][ T6895] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.110039][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.337088][ T6936] loop4: detected capacity change from 0 to 128
[  162.348774][  T820] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  162.521102][ T6943] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  162.569486][  T820] usb 1-1: Using ep0 maxpacket: 32
[  162.621167][  T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.621199][  T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.621232][  T820] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  162.621252][  T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.665941][ T6936] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.709595][ T6936] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  162.798084][  T820] usb 1-1: config 0 descriptor??
[  163.254836][ T5822] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.516727][  T820] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[  163.518749][  T820] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[  163.620523][ T6960] loop3: detected capacity change from 0 to 1024
[  163.638605][ T6960] EXT4-fs: Ignoring removed bh option
[  163.669392][  T820] ft260 0003:0403:6030.0001: chip code: 0000 0000
[  164.002135][ T6960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.002286][ T6960] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.143647][ T6960] EXT4-fs (loop3): shut down requested (1)
[  164.490153][ T6958] loop4: detected capacity change from 0 to 131072
[  164.491411][ T6958] xfs: Deprecated parameter 'ikeep'
[  164.491429][ T6958] XFS: ikeep mount option is deprecated.
[  164.502904][  T820] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  164.623452][ T6958] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  164.638542][  T820] ft260 0003:0403:6030.0001: failed to retrieve status: -71, no wakeup
[  164.639809][  T820] ft260 0003:0403:6030.0001: failed to retrieve status: -71
[  164.640549][  T820] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71
[  164.707899][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  164.958270][ T6958] XFS (loop4): Starting recovery (logdev: internal)
[  165.023518][ T6958] XFS (loop4): Ending recovery (logdev: internal)
[  165.064321][ T6995] Bluetooth: MGMT ver 1.23
[  166.149625][  T820] usb 1-1: USB disconnect, device number 4
[  166.488613][ T5822] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  166.755979][ T7012] io-wq is not configured for unbound workers
[  167.255991][ T7015] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  167.476790][ T7023] loop2: detected capacity change from 0 to 4096
[  167.543073][ T5831] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  167.543107][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  167.543129][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  167.543141][ T5831] Workqueue: hci1 hci_rx_work
[  167.543170][ T5831] Call Trace:
[  167.543178][ T5831]  <TASK>
[  167.543186][ T5831]  dump_stack_lvl+0xe8/0x150
[  167.543212][ T5831]  sysfs_cr[  167.543212][ T5831]  sysfs_create_dir_ns+0x271/0x2a0
[  167.543237][ T5831]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  167.543258][ T5831]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  167.543286][ T5831]  ? rt_spin_unlock+0x160/0x200
[  167.543309][ T5831]  kobject_add_internal+0x631/0xd10
[  167.543346][ T5831]  kobject_add+0x163/0x240
[  167.543380][ T5831]  ? __pfx_kobject_add+0x10/0x10
[  167.543415][ T5831]  ? get_device_parent+0x370/0x3a0
[  167.543445][ T5831]  device_add+0x408/0xbb0
[  167.543475][ T5831]  hci_conn_add_sysfs+0xd5/0x210
[  167.543504][ T5831]  le_conn_complete_evt+0x10e6/0x16b0
[  167.543544][ T5831]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  167.543566][ T5831]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  167.543592][ T5831]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.543617][ T5831]  ? skb_pull_data+0xfb/0x200
[  167.543641][ T5831]  hci_le_conn_complete_evt+0x187/0x470
[  167.543671][ T5831]  hci_event_packet+0x659/0xef0
[  167.543704][ T5831]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  167.543721][ T5831]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  167.543749][ T5831]  ? __pfx_hci_event_packet+0x10/0x10
[  167.543773][ T5831]  ? rt_spin_unlock+0x14f/0x200
[  167.543803][ T5831]  ? hci_send_to_monitor+0xe2/0x590
[  167.543828][ T5831]  hci_rx_work+0x3ee/0x1040
[  167.543865][ T5831]  ? process_one_work+0x8b7/0x1710
[  167.543884][ T5831]  process_one_work+0x9a3/0x1710
[  167.543925][ T5831]  ? __pfx_process_one_work+0x10/0x10
[  167.543941][ T5831]  ? do_raw_spin_lock+0x12b/0x2f0
[  167.543978][ T5831]  worker_thread+0xba8/0x11e0
[  167.544023][ T5831]  kthread+0x388/0x470
[  167.544049][ T5831]  ? __pfx_worker_thread+0x10/0x10
[  167.544069][ T5831]  ? __pfx_kthread+0x10/0x10
[  167.544095][ T5831]  ret_from_fork+0x514/0xb70
[  167.544120][ T5831]  ? __pfx_ret_from_fork+0x10/0x10
[  167.544141][ T5831]  ? __switch_to+0xc79/0x1410
[  167.544171][ T5831]  ? __pfx_kthread+0x10/0x10
[  167.544197][ T5831]  ret_from_fork_asm+0x1a/0x30
[  167.544235][ T5831]  </TASK>
[  167.544294][ T5831] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  167.544331][ T5831] Bluetooth: hci1: failed to register connection device
[  167.619971][ T5831] ==================================================================
[  167.619985][ T5831] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.620014][ T5831] Read of size 8 at addr ffff8880613957b0 by task kworker/u9:4/5831
[  167.620028][ T5831] 
[  167.620038][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  167.620059][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  167.620072][ T5831] Workqueue: hci1 hci_rx_work
[  167.620098][ T5831] Call Trace:
[  167.620106][ T5831]  <TASK>
[  167.620113][ T5831]  dump_stack_lvl+0xe8/0x150
[  167.620135][ T5831]  print_address_description+0x55/0x1e0
[  167.620155][ T5831]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.620178][ T5831]  print_report+0x58/0x70
[  167.620195][ T5831]  kasan_report+0x117/0x150
[  167.620224][ T5831]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.620252][ T5831]  l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.620278][ T5831]  l2cap_connect_cfm+0x368/0x1560
[  167.620304][ T5831]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  167.620325][ T5831]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  167.620350][ T5831]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.620374][ T5831]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  167.620401][ T5831]  ? mutex_lock_nested+0x152/0x1d0
[  167.620418][ T5831]  ? hci_connect_cfm+0x2c/0x140
[  167.620436][ T5831]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  167.620458][ T5831]  hci_connect_cfm+0x95/0x140
[  167.620476][ T5831]  le_conn_complete_evt+0x1134/0x16b0
[  167.620500][ T5831]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  167.620519][ T5831]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  167.620551][ T5831]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.620576][ T5831]  ? skb_pull_data+0xfb/0x200
[  167.620596][ T5831]  hci_le_conn_complete_evt+0x187/0x470
[  167.620619][ T5831]  hci_event_packet+0x659/0xef0
[  167.620648][ T5831]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  167.620666][ T5831]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  167.620696][ T5831]  ? __pfx_hci_event_packet+0x10/0x10
[  167.620720][ T5831]  ? rt_spin_unlock+0x14f/0x200
[  167.620741][ T5831]  ? hci_send_to_monitor+0xe2/0x590
[  167.620761][ T5831]  hci_rx_work+0x3ee/0x1040
[  167.620788][ T5831]  ? process_one_work+0x8b7/0x1710
[  167.620807][ T5831]  process_one_work+0x9a3/0x1710
[  167.620833][ T5831]  ? __pfx_process_one_work+0x10/0x10
[  167.620851][ T5831]  ? do_raw_spin_lock+0x12b/0x2f0
[  167.620878][ T5831]  worker_thread+0xba8/0x11e0
[  167.620908][ T5831]  kthread+0x388/0x470
[  167.620932][ T5831]  ? __pfx_worker_thread+0x10/0x10
[  167.620950][ T5831]  ? __pfx_kthread+0x10/0x10
[  167.620973][ T5831]  ret_from_fork+0x514/0xb70
[  167.620994][ T5831]  ? __pfx_ret_from_fork+0x10/0x10
[  167.621012][ T5831]  ? __switch_to+0xc79/0x1410
[  167.621041][ T5831]  ? __pfx_kthread+0x10/0x10
[  167.621065][ T5831]  ret_from_fork_asm+0x1a/0x30
[  167.621093][ T5831]  </TASK>
[  167.621099][ T5831] 
[  167.621104][ T5831] Allocated by task 5831:
[  167.621113][ T5831]  kasan_save_track+0x3e/0x80
[  167.621136][ T5831]  __kasan_kmalloc+0x93/0xb0
[  167.621159][ T5831]  __kmalloc_noprof+0x3e7/0x7b0
[  167.621183][ T5831]  sk_prot_alloc+0xe7/0x210
[  167.621207][ T5831]  sk_alloc+0x3a/0x390
[  167.621228][ T5831]  bt_sock_alloc+0x3b/0x310
[  167.621252][ T5831]  l2cap_sock_new_connection_cb+0xf1/0x2f0
[  167.621275][ T5831]  l2cap_connect_cfm+0x368/0x1560
[  167.621294][ T5831]  hci_connect_cfm+0x95/0x140
[  167.621310][ T5831]  le_conn_complete_evt+0x1134/0x16b0
[  167.621327][ T5831]  hci_le_conn_complete_evt+0x187/0x470
[  167.621343][ T5831]  hci_event_packet+0x659/0xef0
[  167.621365][ T5831]  hci_rx_work+0x3ee/0x1040
[  167.621388][ T5831]  process_one_work+0x9a3/0x1710
[  167.621406][ T5831]  worker_thread+0xba8/0x11e0
[  167.621422][ T5831]  kthread+0x388/0x470
[  167.621443][ T5831]  ret_from_fork+0x514/0xb70
[  167.621463][ T5831]  ret_from_fork_asm+0x1a/0x30
[  167.621482][ T5831] 
[  167.621487][ T5831] Freed by task 7026:
[  167.621495][ T5831]  kasan_save_track+0x3e/0x80
[  167.621516][ T5831]  kasan_save_free_info+0x46/0x50
[  167.621541][ T5831]  __kasan_slab_free+0x5c/0x80
[  167.621563][ T5831]  kfree+0x1c5/0x6c0
[  167.621582][ T5831]  __sk_destruct+0x74b/0x9d0
[  167.621608][ T5831]  l2cap_sock_cleanup_listen+0xe0/0x440
[  167.621629][ T5831]  l2cap_sock_release+0x6e/0x270
[  167.621645][ T5831]  __sock_release+0xb9/0x250
[  167.621661][ T5831]  sock_close+0x1c/0x30
[  167.621677][ T5831]  __fput+0x461/0xa70
[  167.621696][ T5831]  task_work_run+0x1d9/0x270
[  167.621719][ T5831]  exit_to_user_mode_loop+0xed/0x480
[  167.621740][ T5831]  do_syscall_64+0x33e/0xf80
[  167.621763][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.621781][ T5831] 
[  167.621785][ T5831] The buggy address belongs to the object at ffff888061395000
[  167.621785][ T5831]  which belongs to the cache kmalloc-2k of size 2048
[  167.621801][ T5831] The buggy address is located 1968 bytes inside of
[  167.621801][ T5831]  freed 2048-byte region [ffff888061395000, ffff888061395800)
[  167.621821][ T5831] 
[  167.621826][ T5831] The buggy address belongs to the physical page:
[  167.621845][ T5831] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888061396000 pfn:0x61390
[  167.621865][ T5831] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  167.621880][ T5831] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[  167.621902][ T5831] page_type: f5(slab)
[  167.621920][ T5831] raw: 0080000000000240 ffff88813fe15000 ffff88813fe0fc88 ffffea0000ed7c10
[  167.621937][ T5831] raw: ffff888061396000 0000000800080006 00000000f5000000 0000000000000000
[  167.621956][ T5831] head: 0080000000000240 ffff88813fe15000 ffff88813fe0fc88 ffffea0000ed7c10
[  167.621970][ T5831] head: ffff888061396000 0000000800080006 00000000f5000000 0000000000000000
[  167.621985][ T5831] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  167.621998][ T5831] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  167.622008][ T5831] page dumped because: kasan: bad access detected
[  167.622021][ T5831] page_owner tracks the page as allocated
[  167.622027][ T5831] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5818, tgid 5818 (syz-executor), ts 89160842662, free_ts 0
[  167.622061][ T5831]  post_alloc_hook+0x231/0x280
[  167.622087][ T5831]  get_page_from_freelist+0x27d6/0x2850
[  167.622104][ T5831]  __alloc_frozen_pages_noprof+0x18d/0x380
[  167.622120][ T5831]  allocate_slab+0x77/0x660
[  167.622138][ T5831]  refill_objects+0x33c/0x3d0
[  167.622154][ T5831]  __pcs_replace_empty_main+0x373/0x720
[  167.622173][ T5831]  __kmalloc_node_track_caller_noprof+0x60b/0x7e0
[  167.622199][ T5831]  pskb_expand_head+0x230/0x1390
[  167.622215][ T5831]  netlink_trim+0x1b3/0x2c0
[  167.622236][ T5831]  netlink_broadcast_filtered+0x80/0xea0
[  167.622257][ T5831]  nlmsg_notify+0xf0/0x1a0
[  167.622279][ T5831]  register_netdevice+0x1ada/0x1ed0
[  167.622306][ T5831]  cfg80211_register_netdevice+0x138/0x2d0
[  167.622329][ T5831]  ieee80211_if_add+0xeac/0x13d0
[  167.622356][ T5831]  ieee80211_register_hw+0x3ebc/0x4a70
[  167.622376][ T5831]  mac80211_hwsim_new_radio+0x3051/0x54e0
[  167.622401][ T5831] page_owner free stack trace missing
[  167.622409][ T5831] 
[  167.622413][ T5831] Memory state around the buggy address:
[  167.622423][ T5831]  ffff888061395680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.622436][ T5831]  ffff888061395700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.622448][ T5831] >ffff888061395780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.622457][ T5831]                                      ^
[  167.622467][ T5831]  ffff888061395800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  167.622479][ T5831]  ffff888061395880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  167.622489][ T5831] ==================================================================
[  167.625429][ T5831] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  167.625445][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  167.625467][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  167.625477][ T5831] Workqueue: hci1 hci_rx_work
[  167.625505][ T5831] Call Trace:
[  167.625512][ T5831]  <TASK>
[  167.625519][ T5831]  vpanic+0x56c/0xa60
[  167.625552][ T5831]  ? __pfx_vpanic+0x10/0x10
[  167.625571][ T5831]  ? __pfx___schedule+0x10/0x10
[  167.625592][ T5831]  panic+0xc5/0xd0
[  167.625609][ T5831]  ? __pfx_panic+0x10/0x10
[  167.625630][ T5831]  ? preempt_schedule_common+0x82/0xd0
[  167.625654][ T5831]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.625676][ T5831]  check_panic_on_warn+0x89/0xb0
[  167.625701][ T5831]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.625724][ T5831]  end_report+0x73/0x170
[  167.625751][ T5831]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.625774][ T5831]  kasan_report+0x128/0x150
[  167.625801][ T5831]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.625827][ T5831]  l2cap_sock_new_connection_cb+0x208/0x2f0
[  167.625853][ T5831]  l2cap_connect_cfm+0x368/0x1560
[  167.625876][ T5831]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  167.625897][ T5831]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  167.625921][ T5831]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.625944][ T5831]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  167.625966][ T5831]  ? mutex_lock_nested+0x152/0x1d0
[  167.625982][ T5831]  ? hci_connect_cfm+0x2c/0x140
[  167.625999][ T5831]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  167.626020][ T5831]  hci_connect_cfm+0x95/0x140
[  167.626037][ T5831]  le_conn_complete_evt+0x1134/0x16b0
[  167.626061][ T5831]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  167.626080][ T5831]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  167.626105][ T5831]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.626130][ T5831]  ? skb_pull_data+0xfb/0x200
[  167.626151][ T5831]  hci_le_conn_complete_evt+0x187/0x470
[  167.626171][ T5831]  hci_event_packet+0x659/0xef0
[  167.626199][ T5831]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  167.626218][ T5831]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  167.626245][ T5831]  ? __pfx_hci_event_packet+0x10/0x10
[  167.626268][ T5831]  ? rt_spin_unlock+0x14f/0x200
[  167.626289][ T5831]  ? hci_send_to_monitor+0xe2/0x590
[  167.626309][ T5831]  hci_rx_work+0x3ee/0x1040
[  167.626338][ T5831]  ? process_one_work+0x8b7/0x1710
[  167.626355][ T5831]  process_one_work+0x9a3/0x1710
[  167.626382][ T5831]  ? __pfx_process_one_work+0x10/0x10
[  167.626400][ T5831]  ? do_raw_spin_lock+0x12b/0x2f0
[  167.626427][ T5831]  worker_thread+0xba8/0x11e0
[  167.626458][ T5831]  kthread+0x388/0x470
[  167.626482][ T5831]  ? __pfx_worker_thread+0x10/0x10
[  167.626501][ T5831]  ? __pfx_kthread+0x10/0x10
[  167.626524][ T5831]  ret_from_fork+0x514/0xb70
[  167.626552][ T5831]  ? __pfx_ret_from_fork+0x10/0x10
[  167.626572][ T5831]  ? __switch_to+0xc79/0x1410
[  167.626600][ T5831]  ? __pfx_kthread+0x10/0x10
[  167.626625][ T5831]  ret_from_fork_asm+0x1a/0x30
[  167.626651][ T5831]  </TASK>
[  167.626982][ T5831] Kernel Offset: disabled