program: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) (async, rerun: 64) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) (rerun: 64) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00', 0x4) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x7, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="414edc004323bb136e7d7e988038a264d0f9ae37cd4d1c9138f97619a17bb3e3af6219d9ca989aa35f8e526e7c6510d32be56b86bbe102a079a5727e0f30b0b9c1b1610c7d9c8add1b1e9bdc4325c9e9bb484a18ecb749e7835da20bed9c946b5976b7f3af2cf221a7eaefb60d633484b949f6e69308fa4267f04671f1a8a54ffb71f21e7f072091c7262219cea360eb0083b6a28cc8cfe36f035cb6929a6828fdcd0f2c4a4b0cd1e539dcfdbd978ea0d59107c66ce197e53585888c8bfc003605679e442a5be890b2f6272f49439827a9ffbd7d2e51885839867cc889ec0126e7c59d7f1af5b70bdcbfc3eb840f4efbd091a4f8a3f581a6ec505bc1c3a07ac8db563bbcb7475a8d61a695436327d3e7ed7f725f1d23ec87b4fb8c48223d4f8f5d1d7ffd386b74541d73294e42dd64a1cd67ade36081e994076125fa872b4f0cff033ccc8e3012275021fb9620580fae83fb8c59de17610c66eeeb9cf9fd4df43f35ad180b3e38f81d03383a1ddecbc2622007ee10a6d7277968abf6daf25621d45db6002349103716a5e5005ee416d9e5aed55ba785aca508b80b3adee24a1e6005fe4d8826c3377a0271ad1743c91d9ed90aab23f2fb8c902fa15293a0ea5b57dee0961bccce4dd1282dc1b3c354d0129117581e2c39199a8ac22622eed197d3c28a9af979dcbc03165e2241a799884ca27a00d3eb84cc9a76119ecb7a5966a8bc43195f1d868306a506fb22de796ad7879a38610a8ebd8679e860a0ae669824c511ef523f2fa739a3daeb343c3175ea0e12196bc9315105000511433fa47f5e97e7d32130fac0d4517ab5ec54785bd73b734d056b5c80a96680449d289051fc5ffcd07d9a2ad089e4876cd49b611deeee6d7a6627cf71f2941cd9b5d0c27a247bf9d186ab4a37b6ccd6275ceac5810740e372e225ea89dd8924f4300e9ed78a47ba53f83162c7c3a3954f60a7cb0567aa1eeb04d10e47941d0e5f49acae239455cdbad71513a27680e6afb5c825a4a54dc5749f160e363d189a1e6a5813504104b096603fbe003fbda491c983dad11b89641663c85c4cbf5fcdf1bdaacf96565ccec54be0bd69057674cf355a1a2ef8b083affbf702bc088e3292f822157fd176ccc4934a9a41b4aea932a339d51097e1434040da97692db66c63d73563193a878d2c0f23d40e11c8ec8921923a7410038f8ac8a3d6e71030123d55661c54b212f72a9460f9bd273eaae46c70107ed16fbf19f46921decb162da9a9242bbf3b6eeba5e5da7bece41ce25fb71a7290e1d25e5953703f5199dbc75e53abf6c584430c71a2f54c3aabd81f454c40bd21d316a1996a593dc8b6af3f8e4dad9c0b3b14c32a293dca2b4acd572b3d156e10439b43dd60af3c8c0a2277c0a10beafa015c4ee8beaf4d25dc2318f8038131f9fe1760571b0ce4c6b94bf8827414a23ad719d6ec3d27ffd74e310de43486c86d706007f1b7466c4e98a6c9076f1fb5710dd9469e7bca45d4e43550e6564df32811e8ceebf1cc6435cb77d4cc2074d1a8d2217c3cb91d969a7f8cd9ae0a70beb0bbb587611794ef6f852267b8047bf9e331531defa84f26dc8c172b351ccfd1f3dc4c4b5935231d7f370f9e4b92d3083444e35e115923115a82a60161e6db9a15cd4d88576f172c80edea2d259e5b99d127c8a580894e3014a31390b3b3cc07ce01f79011ddfe75f6a12c1dbd6ddd91ba81cfe71e339529c7ad3d1b1429afcb8bfaa98e2951f8aebdc067a70cfc0090938b3d6dc989aae6f258e149d3ab678cf13ae5ce300ea8392bae01174907a159bb41b96a58897ed4a8694e9a582a401a09e5f604dbbe4c6e94f45d905790e2aa5cc23d1bdf06cae9e3cf7e557ed094c35bbfd24ee5b48a0082ed7e54bb3e699d352dc17e2e2aafcda3f36f099e50fb45ec323737e004156955fa4c7d9659da06140c897ad341d4fdf4e6f9f29c121eaaf193b40318e7aa0b2e6bbfaa2357314ea269a811dea4d064d22de142418567e49f1688239fecf18d3f11ef09d8974af4d49d5b7a987b43263d49d9744fb8d9d0a9d4b7536e2360354144b550e61acf20b9e1f9222572d6bc9d344c10892d7d5c632940e9db885574f5dddae7c538546e06f9e64e7403cde593d9a2c65f266e907166ea97c03ac8fc7fce20409d7ea22d1134465771265be3e404ce466489c4c32dd2e253d5b2c7478a57a8dde706c64c561ea8202d188978b8624b89ce6cfff3eef7051b7b8e4257f405463ff78aba8ec5b70dbb0c9502b0dca60677573c70639b4c8e189a3a0f7587efebf27db2f2351d060824750704edb8870731b21d21477774147b311aad23969baf0161bcc88fb7cada537fe22c7ff064bca500704b595f8a389402aa08052f4901ad63b55610b6c093c4ddbd828b0ccbea9d144955fab08a24bc912c6ab2ab60b09278cab1bc01fdf1a7fbbe493dc25970ea6cb6ebc3fd062c5357488f56f3add298a25c36b2a146875243fe9ab0f69bde3ccda0d26a3b54823ebe8c2f4ed37d07c765bac040b73a0c6b210f6add9f925fd3f36986702e08c55834709c518511218bb3411b7e44fdb901876bdb8ef4c873bd0697d15246ffadd17226c646381f0a5885cefc937f2b65cfa4267435afd64f19eb5f17abc9ab863ec9b5ce2d5edebd4f7ff9952ca455b7e6a1180fb7dfd689441cbdccfb1a130ae4e2c27599e116185ec295c77d0ab48ff381fc0390f215f02ed1f680244e8918c0070ae2ae6c6fb977e46a0d8087200966beb278acf89f529ffd5efb4342eef873c9f327d886594980f6ee5069063a04f8fd66295e99a5524da59674a250b6010a8ea6ca78a9810393429e048e2da5170af727ac6283d4ef141d0a40d6c8296a273e348cd9c1e5a5b7d31894a70796cf1ab901b26d98adf2577f3f8a6a146f8e7a8e8144ab2254e346eec38a3f52282beaca0b2c3986d121abb9319e7ea885e6948adcdfd06ccfaf38f55b05d84c2d4e21d5400c5920dae6697ff45f6ef96ac3250a6d22f403cf16ec988d8c28e01002f7642599b3322d2422d944bcc3ff87a88c99685f990f88b3714ae309231ac33338fc6b3a2efc2c9fe6cbc188b57510d00b81c453f8963855e8b88c8546db5c4525550ababf5572e711b455cda9cc1539a4a1cd28ff9be492d052ef9418494b126e7acee0e05f8d8afb9d1736c7de1ab53612ab89c0fa48a6b30a6d262c6d2b0980ecba25badd652704048df7631865391ab5002ddbac858252ca731af7975bed47e4c0bf99a4ab83b901281245312c53604623b45ecd493f6a2131fb8c6806168939d8bf0605923f4ffcd98687467e7b82325a611fe6586ac307efe33fc52fd72a93248cd66c4b0c7dd8c8c5402dce6b0cae058fdfd728a24c233f3417a805d5e435744bc18762a309561efebb31a669376700771ec453b8d763f5c201c0b9882ff874f754618245ba081c355022c794a65fc3b2734d068425b5c75408e1dbe07531f6fa03cee5514047cf374ef1629b0eda2438189d12c2660a4a8272fe84fcdbbdb08507d62528ae8d1febaf2c532ff530f068c1f677ec4c916595407c6e0e3632163c7bd5eb7677aa8a9275b686eb118acf69922a96dd0c6e120d7f8422ccf8cc2eac267bfe257fb0c5b65de58fcfb73a0b9946f2ee2c79a85191187f362450c770824d031f97e40196d44c426910a43003506988082681ed0067b42d5d8973aadebde5f4d66d87cd48c5ac682f57155e20fd4ebb1102e0956d70ccd7fce9250d6172278dc97f228baea949863680636679206d166aa992cce15e50e35c903443943afdf0e6ff710902746a86a74e130cd745632410bb3b150df4827d70e96ae66c1cd24d346f031a14354e72a401eae254ebfdd3e4d1eaced4f8185ef35a003474d76a46c1349baac70d81f9a71195441c4994908996739297420672608c2c606b1e64ee965eb70e1a1a0b504c798ffb860fd2b42bd32e042fd06ed1fbac411b458ebe0511a792613cbbda94bdc76dc6f52e470a0dcf776f45de00a9f8fe49851bebf8d37ce9c991df196f33346c37fc50317d96a9d3a15228c242774ceafc5e56be2dcfaf0c2a0fe564801a67783e73d7ba696a762837fbe8405c0756763bd61eb9a2fa3fcb0408a7b2a2f92a5d2f49c2bf4071cc34a153873b114f9cc0b93c258025ff56baa56b5368a4cf5edfc38ea4b421565aa90661ec41399a5dd1e23799adb2ae308e9304da4e2150e97c976f754cf4faf08092424e2bde534788365e2e15726076ee2808cd8f29bec72ac101ab929cbefe9998906dc8cd3b82d7090a3b71ab17d5439f8fc8e764cd0606ecef12de6b6a72bc147e6222fce631c2ab86f589ddb7056b1bfe3b7dc1d06d098766545e2cd1c778b2dce3aeba5e9098841d4bfc046c33bc5c975bf40b54d9ed2e39eddce270c0c97a2e271f95dd416b9f4e38cc07680c217d2be49d78c8635d75cbc8e8e8c4acbc7b3c1c64e8a3e65f456c1ffd36688ff6d9fdb24626ecd60db1476f64ab9026b974559ac031d81e7b24a0cc10c35f08b1363828d37d7b6041f0bc8c8e082e25d7a7a5d307960258d189a24c8aa8f7c3e2774f2698a968f1732f0235e769c4b111230074a7261e390f8af8e29dd9bd7a120b41ec97b215d3abefaf7f9b2cdd0909ba09661d72864ffb6d553ba98282bd70a39a04d84f758995e3e0509f96bbd21158ad834a65d5b670ec580ce52ba0d976d629b4b194a1e71ba5ff72f35cc289ef39eff653dcb52a6d3efb3dbea4ee06632279ea65a8626f26dca167df8d8d03a64ef4da61666be0054e995751ca78ce77d794493270e257d167265d0b80323c3b25acfc526f7375a579ba5a86eefa6b3e1db7f8f6f9a56a53253a9a6708433706661edbb2ef1eeb2092cd326838287af04a536e0af46645557775d149a76d32aa035efb6a4bc9655da0467bba5db83b50e78d0a5421fd7a9744615db5f41f20fadd608f83a0ffdf2d494dbcd7e1a88fb519cbb316a0507b69584db8220ea5f21b66927cfee74fd58ce7142fa59b8297af740d720bedd165128a12095cffdd2cc4d18fdc3e72ad466ccd7c8d024ec74a651533fba59b4f514de062a400e01c206cb924559204dc2a1d79d315e454d3b0b2f8067e2012a4dfec6eea8dda7da3889ef48f42b8a02b397830181212f762d1a33617db3f2e6d71cdf56178c3bb3d34e3f63ab74618a1a402585caf3bc3869d573a6129be23dc7dfc0bcd188757b6721d1b0166b3558a3eee7171379fd43c00949ec212e706c80c195a80a914d8f8f2f51e717304e835d1e4a4b042d8b1b48fb0d6e8fc7432af27da29682f647f0a74b68d03f2f2f8075dbf04645e931e8316f9f890a6b570770d9174b9b167680861030bb48be5efbfcba00a255d7b81175628538e66fa794790c64974a337d3c15a3e544815080d46a2efb5d79db254c3bfa413f82786a66420766e0263f7c6ffd86d668adb22c4d55edc46c2ff7ebe5a2e2caea5bc07a8d78819ccf96e41c25ddc6bbb5e24f1a661a04d42a993105c3b132b39f868912d29c11c5881b7a8cec9742a50ba614114e5de5e250146a36495b30b0cabeb4ce800bd4902ca500cfd4d76d74631b506734e4abcf7498bbc755e19959705660f15c4b01b8fd950c42dd8e24e8878247952e7ce5ab3b2d1748da770c98a68a4e4e74007390b01bbc20aedf0b45cd23b6be8a854a09483ef1e5eea49926e85faeb98625b83f99fcc67d7568a7d17d44295d35b979f5ea721ea90e2f8ac577abe804b34144315db6e05e8b4c15a864ff8b2c4de", 0x1000}, {&(0x7f0000000100)="c52f01f00e1141cc5f9d360587", 0xd}, {&(0x7f0000000140)="128d91d274be9d04a37cc88686916ac32ada459f56b5f1391aa17c72403eb729fee40e23b07695bf2aa4a3567e64702efc9e09c3590c51782d6912c20c732a604c0692ed89ffe5ba1636da3e73958e99", 0x50}], 0x3) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async, rerun: 64) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x5105, &(0x7f000000a280)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac895ztz7nLln7oxjY/r5yMw5z/md5znPvZzF/V7nnBMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghPDC758dqaqfuTF57sJUc/ehbVNXD0xuOBtCrbO9ltd3bX/2lTd37HpxLHaYfjlbNhr9hsy6Xswaa3o2zvXr/Xk9hDCSDFDPl8+sK43avbqvPGClm5f3Ht+yv7n55NF2/fqV86fLL505Y6s9gdWSn1eX5s+lZuf3ULJH0e469Wo9p2jWPz3h/pUXAQAsyUSrsyg+juYfcYv2wbSetJtJu5204yeEdndjObJx1/Sb56a0vkrzbGZRYbTvPJN6/v4X7VbaP2knUWMJ8+zdNY80Y/3mOZPUV2ueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHeSR94efqiqfubG5LkLU83dh7ZNXT0wueFsCI3O9lpWrq19/2jzr2+3nzj049avTl56/rF63i8uh7t2Dr/FlSfGQ3ijq3IpDnt5fQit3kKnGb4sF97qrDwXCwAAANxN7u/8HiraWRwc6WnXOmmy1vkXZWHx5uW9x7fsb24+ebRdv37l/Onlj9fqM15zwfGKdmP+p9YVjGP8Tcebr8dd95XGqZaOmOb5xy9O/F3Vv5T/G9X5P75z8j8AAAC3Qv5Px6m2WP7/7rU/PqnqX8r/m3oOWcr/ccYx/w+F5eV/AAAAuJPd7vzfLI1TbbH8P/rSyNdV/Uv5f2Kw/D/cPe248dc44T3jIUwsNnUAAACgj/j/7vNfLcS8nn1zkOb1px49fKFqvFL+bw6W/0dW9FUBAAAAt+LYFzsfrqqX8n9rsPw/eltnDQAAACzFOx+OfVBVL+X/6cHy/9p8mV/5kHX6Kf4VwpHxEMbmVmayws+h/XRRAAAAAFZIzOl/frr7h6r9Svl/pvr+//FOB/H6/577/5Wu/+8qZHf9e9KNAQAAALgXla/nj7fHz55c0O/5+4Ne///A/w6/WnX8Uv4/OFj+r3cvV/L5fwAAALAM/7Xn/+0sdq+Hlbj//30fvftLVf9S/m8Plv/jcl33yzsV35/3xkPYOLeS303wm3i4PUlhdqSr0NFKeuyIPfLC7GhXoWMm6bF1PIQH51YOJoX/x0I7KVxbnxeOJYWzsZCfD0XhRFI4Fc+0z9fn000L38dCfoHFbLyCYl1xSUTS43q/HnOFBXucLw4OAABwT4nhOc+yI73NkEbZ2Z5n2S20w9rFRhhabIf6YjsMJzukO/bbHqZ7C3F7+9zmpT3//9hg+T++FWuyRb/r/0O8/j9/rmFx/f90LDSSwmwstNI7BrTiMbKw+3E8RqOV97i2sSgAAADAXS1+L1Bf5XkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MPevcfIVd2HAz+zr/E+vF5IfgrhFyWbpMZxE6/XNnmopcqaUjUiTbNuaFAVpbGx12Txgh3blBiFyNhENEJQ2iAlfxRhFEU1f0CtQERSQLhIcYTKI6IqCiBQaA1RECklicgDKa5m7z2zd87dmZ21vcZLPx/JO2fme553Hp5z751zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4v+HwV67621bxh393wdPPXTx22b71F798zQVnPh7C+PTjlSxc6bv+1rGf33n+XfvuW3vbPUcvfH9PXi6Ph/7an478znWx1qNLQ7i3EkJXGlg1kAW68/sDsb53DIRwRpgJ1EtM9GUl0obD93tDOBBmAvWqvtcbwkAhcNETDz14Yy1xS28Iy0MI1bSNZ6tZG71p4JyeLNCXBrZ3ZYFfHcvUA9/tyAJwwuKbof6iPzTemGFo9nJNXn/dJ61jb6x0eJ0xMdQ838/WL3CnCnrSB8ZP6GkrVceCKL09Dnu3LYJ3W2k73+xpK36Ryr+hHJsJVUPHlomtm66c2h0f6QgjI53Nalqg5/mpV7+0eT7pRfM6jB0YOimvw5seW35n58pPPHrPquUvHvzA/pdOtJs/KmzSYnqhVUP+mls0z2M05vNkEbz9St+Shn3pCiFs/fzvfbJVvDT/H2o9/48v53jb0ZA71vr6YDY3j48MxMQrg9ncHAAAABaNxbDXdPvIAx9pVV9p/j/c3vH/eMg/n8xnoz0cwth0Yv+yEM6afjwL3BGbu2RZCO+eTo03BtYngcMhvH06sbJeVVJiSSwxnAR+MpgHxpLAkRgYTwLfioGbk8B1MXAoCWyOgcNJ4PwYCJON4/j9wWwcvz7WJFAq0RsDG7ONeCiehfCLwdhasq2eqVcFAABwkuSzw+7Gu4VzHU40Q5xeHuqdK0M8A7tphmpSQzqDrU+rmtbQNVcNHXPVUB/33tbDL9Vcmavm0mkYlcYMt/7ybz4VWijN/0dbz/+rs3SkUjr+H8KG6b8xd0cemarHN443ZAAAAABOQP+vn/9mq3hp/j/W3vn/cZ9IZyFzeCTuhti2LITRxkBW7R+WA9lR7/48AAAAAItB/Xh8/Vj4ZH6bnaKdzqfL+cfnmT8e+B+bNX/P4fs3tupvaf4/3t75/32Nt1knjsRefG1ZCEsKgR/EXtYC04Zj4McfbQzk4z8SN8ANsar8xIR6VTfEEhtjYDQJHGhW4of1Emc1BvInq974/vo4JvMShQAAAACccnF3QDwuH8//f89v117Vqlxp/r9xfuf/T8+DS6f3T/WHsLorhM70hwGP9GULA8bAQCVPPNCX1dWZVnVtXwjn1QaWVvV8vv5/V7rG4BO9WVUxcNZ7Dr56Ti3xzd4QVhcDT37m9g/WEruTQL3xv+wN4V210aaNf2dJ1nh32vjXl4TwzkKgXtUlS0KoNdaTVvVQNb+OQVrVP1dDeEshUK/qQ9UQ9gQAFqn4X+mW4oO79ly9bdPU1MTOBUzEffi9Yevk1MTI5u1TW6pN+rQl6XPDMkbXlsfU7pVvnsmXKPr03RsG2knXfyc4Wmwr349fOnEwvx+/C3VPj3Ntd8PddemQ3/fechOh8E2q2ZA7FnjIfcVKZp7EUv0xf0/oD0uu3DWxc+SLm3bv3rkm+9tu9rXZ33iYKdtWa9Jt1Tdb39p4eTRdLStxvNtqRbGS1bsv37F6156rV01evunSiUsnrljzobWj546uG/3wuatroxrN/s4x1BWzVZ0M9djtbY7rJA717K5CJafiU0NCopConh7dkGid2N6/ouX/yaX5/47W8//4qRM/+fP1GZod/x+Kh/mzx2cO82+MgQPtHv8fanY0v35iwHAS2BsDex3mBwAA4M0hTvLj3sy4V/qnK7/zYqtypfn/3vZ+/3+S1v+vL11/YbNl/lfGEqPN1v9Pl/mvr/+/t9n6/+ky//X1/w8s/Pr/pcCV9UCySX5h/X8AAODN4NSt/z/n8v7pBQJKGeZc3j+9QEApw5zL+Ld7gYB5r///7H/+1X+HFkrz/5vbm/9buB8AAABOH1/+s6v+X6t4af5/oL35/6lf/y80O/9/uFlgvNnCgNb/AwAAYJFqtv7f0PV9n2tVrjT/P9Te/D+edtHRkDvW+vpgtqZdSNe0e2Ww/pMBAAAAWBw6wshId5t5G1ZGXX/8bT6VLwXaKl30/J8cnd/5/4fbm/83/C7jpseW39m58hOPvn7PquUvHvzA/pdmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMAb7/n/2LeuVbz0+/+wYfrxZr//j9f9i78veGtD7ljr3Ov/5fcv+vhde6aXLHxkMIT3FgPb9m07I+TX5l9RDDz42ZVvqyX2pSXuf+78F2qJz6WBj60687Va4rwksDEukvj2NBCvqvja0iQQl1f89zQQt8ehNNCTB766NBtHJd1WPx3ItlUl3VZPD4SwrBCob6t7B7I2KukAb0kC9QF+IQ3EAf55HuhIe3VXf9arGBiIRW/rz3oFAMBpK34L7A5bJ6cmRuNX+Hh7dlfjbdSwZNm15WorbTb/TL402afv3jDQTroz/S46c63x7lCtDWFN6etqMUtlepQnp5Y5Nt1bmwx5rtXeOpqUS8130/U0H1FvNqKRzduntnTPOfB1c2dZ2zVnljWlyU4xS8f0Jm2jljb60saI2tw2bXQ53u8IIyOdSa4/iMGh0GCuV0S7v9cvrvPX7FVQzHPF0f2/alVfaf4/1N78v1oc12v5xQD2xivr/d0yy/wDAADAwvrq+t98I/771PUPP9kqb2n+P9ze/D/uwcoPBWd7Ow7H6//vXxbC9KX1h7LAHbG5S5aF8O7p1HgskV1Q/8JYYjQL3BF3mKyMJTaON1a1JAYOJYGfDOaBw0ngSAzkeykOhnxXzt8PhvDB6dSGxhI7YomhJPDJGBhOAiMxMJoElsbAWBJ4eWkeGE8C/xYDYbJxW929NN9WAAAA85HPs7ob74Z0nneoa64MMVDZ2yRD31w1dMyVoTpXhmajiPe/HTN0JyevVAqZutNae5NaShnixfDn3a9ShvDDxpxpwVLT8fyD+vkGlcYM932kqxpaKM3/R9ub//c13matH4nz/5nr/2WBH8TufS2eOj4cAz/+aGMg3zFwJE52b6hXNZ6XyCftN8QSYzEwnAR2xMBYEti4IQ8ceFtjIJ9p1xvfX298Mi9RCAAAAMApF3cQxN00cf5/266v9LcqV5r/j7U3/4/t9Rcbuy7WenRpCPdWZnpTD6wayAJxP8ZA/Hn8OwZCOKOwg6NeYqIvK9GTNBy+35v9Qr0nrep7vdmPD+L9i5546MEba4lbekNYXtj7Um/j2WrWRm8aOKcnC/Slge1dWSDu+akHvtuRBeCE1fcKxhdUfqpL3dDs5Zq8/t4s1wRNh1faBzpLvtl+c7VQSjtc832qdfN72lruv+WkKb09Dnu3LcZ325B3W/GLVP4N5dhMqBo6tkxs3XTl1O74SPGXrCUL9DwXf6XaTvokvA73Hn9v51ZNOzCafHyMzl5u9tdhJVZ302PL7+xc+YlH71m1/MWDH9j/UtvdaCL+UPiha/514EeFzbvQqiF/zS26z5NxnyeL8b+BYU9bCGHDy1+/oVW8NP8fb2/+35XcTvtN3Ji7loXwvsLGfSRu/j9eln0OFgLZp+RbyoHskPt/DTb95AQAAICTrb67o76/YDK/zU4IT+fJ5fzj88wf91eMzZq/ZWcLi3X2/fVnl7fKWpr/b2w9/1+SdNPxf8f/WSCO/8/qdN8VvSR9YO8J7YouVceCcPx/Vqf7u83x/1k5/u/4/2wc/5+D4/+zOt2fttK3pB2+dIUQXvyjB55uFS/N/3e0N/+3/t/si/bV1//b2Gz9vx3N1v/ba/0/AABgQTVZaC6d55VW7ytlSFfvK2WoJBnmv8Sg9f/mvf7fC2c/+9vQQmn+v7e9+X98OfQXW18s6/8Nb2hS1c0xsMPCgAAAAJyOmu0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I113z/8z5ZW8Yd/d8HTz108dtm+9Re/fM0FZz4ewuT045UsXOm7/taxn995/l377lt72z1HL3x/NS/Xnd/+/4bcsdbXB0M4UHhkICZeGazdmQlc9PG79nTVEo8MhvDeYmDbvm1n1BLfGgxhRTHw4GdXvq2W2JeWuP+581+oJT6XBj626szXaonz8kAl7e4/Ls26W0m7e+PSEJYVAvXuXra0sap6G3+aBzrSNv5pIGsjBgZi0W8MZG3EwFQsMbkkhNVdIXSmVT1czarqTKv6l2pWVWda1ZerIZwXQuhKq3quJ6uqKx354z1ZVTFw1nsOvnpOLXGgJ4TVxcCTn7n9g7XEF5JAvfG/6AnhXbWXTNr4t7uzxrvTxm/pDuGdIYSetMQvu7ISPWmJ57tCeEshUG/8810h7Am8KcQPn4ZPtF17rt62aWpqYucCJnrytnrD1smpiZHN26e2VJM+NVMppI9de/xjf+bVL22u3X767g0D7aS78nLd011e291wd93p3vvYr75iJTPPR6n+mL8n9IclV+6a2DnyxU27d+9ck/1tN/va7G9nHs221ZrFsq1WFCtZvfvyHat37bl61eTlmy6duHTiijUfWjt67ui60Q+fu7o2qtHs78kY6u2nfqhndxUqORUfABISEost0dHw6TZ6un+Ql77oz3S0O1SnP6BL04pilsr0KE/GoNcf54iP53vKnCNaU5o4lLKsnTvLutJkYiZLb5Zl+ntdaXJYrKljepPG+x1hZKSz2XYYarxb3Lw/O4HN+1S+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//xKZJY0=") (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x40789440, &(0x7f00000001c0)={"00d0500000000009e51511194d2e45df", 0x0, 0x0, {}, {0x3}}) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) (async) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f0000000000)={0x0, 0xd, 0x10}}) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001080)=@newpolicy={0xb8, 0x13, 0x1, 0x2, 0x0, {{@in6=@mcast2, @in6=@dev, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0xbf6f, 0x0, 0x2000000000000000, 0x6}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x6e6bbe}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local={0xac, 0xb}}, @mcast2}}}}}}}, 0x0) (rerun: 64) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) (async) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SOUND_PCM_READ_BITS(r9, 0x80045005, &(0x7f0000000000)) [ 59.500994][ T5313][ 58.338602][ T5312] ================================================================== [ 58.341463][ T5312] BUG: KASAN: wild-memory-access in acpi_nfit_ctl+0x7c2/0x2530 [ 58.344284][ T5312] Read of size 8 at addr 1fff888031408108 by task syz.0.0/5312 [ 58.347183][ T5312] [ 58.348072][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 58.351779][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.355358][ T5312] Call Trace: [ 58.356424][ T5312] [ 58.357360][ T5312] dump_stack_lvl+0x241/0x360 [ 58.359097][ T5312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.360951][ T5312] ? __pfx__printk+0x10/0x10 [ 58.362549][ T5312] ? _printk+0xd5/0x120 [ 58.364073][ T5312] print_report+0xe8/0x550 [ 58.365584][ T5312] ? __virt_addr_valid+0x58/0x530 [ 58.367429][ T5312] ? acpi_nfit_ctl+0x7c2/0x2530 [ 58.369170][ T5312] kasan_report+0x143/0x180 [ 58.371035][ T5312] ? acpi_nfit_ctl+0x7c2/0x2530 [ 58.372796][ T5312] kasan_check_range+0x282/0x290 [ 58.374498][ T5312] acpi_nfit_ctl+0x7c2/0x2530 [ 58.376160][ T5312] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 58.377964][ T5312] ? nd_ioctl+0x162a/0x1fd0 [ 58.379655][ T5312] ? __pfx___mutex_lock+0x10/0x10 [ 58.381524][ T5312] ? __might_fault+0xc6/0x120 [ 58.383270][ T5312] ? walk_to_nvdimm_bus+0xb0/0x170 [ 58.385106][ T5312] ? acpi_nfit_clear_to_send+0x19e/0x1c0 [ 58.387098][ T5312] nd_ioctl+0x1844/0x1fd0 [ 58.388583][ T5312] ? __pfx_nd_ioctl+0x10/0x10 [ 58.390215][ T5312] ? __fget_files+0x2a/0x410 [ 58.391778][ T5312] ? __pfx_bus_ioctl+0x10/0x10 [ 58.393524][ T5312] __se_sys_ioctl+0xf5/0x170 [ 58.395190][ T5312] do_syscall_64+0xf3/0x230 [ 58.396863][ T5312] ? clear_bhb_loop+0x35/0x90 [ 58.398614][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.400966][ T5312] RIP: 0033:0x7f0239f85d19 [ 58.402599][ T5312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.409380][ T5312] RSP: 002b:00007f023ad03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.412422][ T5312] RAX: ffffffffffffffda RBX: 00007f023a175fa0 RCX: 00007f0239f85d19 [ 58.415325][ T5312] RDX: 0000000020000180 RSI: 00000000c008640a RDI: 0000000000000004 [ 58.418219][ T5312] RBP: 00007f023a001a20 R08: 0000000000000000 R09: 0000000000000000 [ 58.421128][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.424187][ T5312] R13: 0000000000000000 R14: 00007f023a175fa0 R15: 00007fff62f05a58 [ 58.427144][ T5312] [ 58.428240][ T5312] ================================================================== [ 58.449293][ T5312] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.451935][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 58.455801][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.459868][ T5312] Call Trace: [ 58.461164][ T5312] [ 58.462293][ T5312] dump_stack_lvl+0x241/0x360 [ 58.464052][ T5312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.466006][ T5312] ? __pfx__printk+0x10/0x10 [ 58.467742][ T5312] ? preempt_schedule+0xe1/0xf0 [ 58.469593][ T5312] ? vscnprintf+0x5d/0x90 [ 58.471289][ T5312] panic+0x349/0x880 [ 58.472761][ T5312] ? check_panic_on_warn+0x21/0xb0 [ 58.474633][ T5312] ? __pfx_panic+0x10/0x10 [ 58.476282][ T5312] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 58.478520][ T5312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 58.480829][ T5312] ? print_report+0xe8/0x550 [ 58.482407][ T5312] check_panic_on_warn+0x86/0xb0 [ 58.484123][ T5312] ? acpi_nfit_ctl+0x7c2/0x2530 [ 58.485803][ T5312] end_report+0x77/0x160 [ 58.487316][ T5312] kasan_report+0x154/0x180 [ 58.489028][ T5312] ? acpi_nfit_ctl+0x7c2/0x2530 [ 58.490936][ T5312] kasan_check_range+0x282/0x290 [ 58.492746][ T5312] acpi_nfit_ctl+0x7c2/0x2530 [ 58.494566][ T5312] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 58.496407][ T5312] ? nd_ioctl+0x162a/0x1fd0 [ 58.498139][ T5312] ? __pfx___mutex_lock+0x10/0x10 [ 58.500011][ T5312] ? __might_fault+0xc6/0x120 [ 58.501753][ T5312] ? walk_to_nvdimm_bus+0xb0/0x170 [ 58.503656][ T5312] ? acpi_nfit_clear_to_send+0x19e/0x1c0 [ 58.505720][ T5312] nd_ioctl+0x1844/0x1fd0 [ 58.507335][ T5312] ? __pfx_nd_ioctl+0x10/0x10 [ 58.509037][ T5312] ? __fget_files+0x2a/0x410 [ 58.510735][ T5312] ? __pfx_bus_ioctl+0x10/0x10 [ 58.512662][ T5312] __se_sys_ioctl+0xf5/0x170 [ 58.514735][ T5312] do_syscall_64+0xf3/0x230 [ 58.516725][ T5312] ? clear_bhb_loop+0x35/0x90 [ 58.518924][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.521686][ T5312] RIP: 0033:0x7f0239f85d19 [ 58.523854][ T5312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.532274][ T5312] RSP: 002b:00007f023ad03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.535891][ T5312] RAX: ffffffffffffffda RBX: 00007f023a175fa0 RCX: 00007f0239f85d19 [ 58.538731][ T5312] RDX: 0000000020000180 RSI: 00000000c008640a RDI: 0000000000000004 [ 58.541880][ T5312] RBP: 00007f023a001a20 R08: 0000000000000000 R09: 0000000000000000 [ 58.544909][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.548022][ T5312] R13: 0000000000000000 R14: 00007f023a175fa0 R15: 00007fff62f05a58 [ 58.551049][ T5312] [ 58.552506][ T5312] Kernel Offset: disabled [ 58.554176][ T5312] Rebooting in 86400 seconds..