program: r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) r3 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r1, r0, r1, r3, r1, r0], 0x6) bind(r1, &(0x7f0000000280)=@hci={0x1f, 0x4, 0x3}, 0x80) io_setup(0x202, &(0x7f0000000200)=0x0) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2800000, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="1a8655d26e06c6450bdb9303032f6eb1d14d2a1a97778c701e02cb65e93f8c2c55acc8d8b229057658092950d36f5a7708726018c20d7dd7d402982b10679e4caf71ba5b1179e2eecb16786dc112f9601d783f85bbe54dd69cf82090835fa3b2ef465a4f2f8ee5e0c9ebf49280320a5ef65410103aa2435966db15e64dcc69fbfd00fa7a850207d76381abbd17ff6fd174af4c06fd1a6863b81924bba857133e013cfda1f33c6f3454b500cbad2f5823", @ANYRES8, @ANYRES64=0x0], 0xfd, 0x5aa1, &(0x7f0000000940)="$eJzs3X2QHOV5IPC3Z2a1X/pYCRxkMKtFRheCY2vFV/kjFSu5xE6B45KLlIM42bCgFZG9Eip9BJBxLHLgswrsslNOJTipOuLCvrOtuKiyL0ahTMCcxPlLxcVHXWHq7Bz2H74iHKoAOsrl86Z2pt/ZmZ7p7dnZ2UWC36+k7el3ep5+++13evp5u3cnAAAA8Jpw/K59p9577u9+508nX/rY7/39rjvCcLlaPhAXGEmnt75SNWQp9VfWVqfZfvGrH/nyT8du/O1vPzD0hZePbb9gxw9/56wbH/rQlUfv/atHX1zx9V8+UxQ39qeLZ+eT55IQBr558s8/fuy758yUJStnfpYOhbA6WfPo6iSEOxtDjP88hLA9nVlbL766+vNrL126Y2Z6x939TetdlamH/v7aNrOfkxDCwVO3vCn86Le23vn9dV/9274jzx6aXSQZaOhPIay8vvH1fSGEwfT/jNjbYn9M0umWEMJQw+veWlCvN3ZQ7xkbM+Vx/rx0uiydDhfEi8+vz8yXMstl56O+zHSoYH0LlVePbpcrsjwzn/QobpRXz1i+Op1+I51ePM/45XQbykkoJaFSr/5UMttHQsN+S0JS3ZcD9flSfd+GdPsz80lmvpSZL/dltqu63rSjlZOkuTwulymPh+NKWn5B47G6jasbHjcu9/pYlr5RX84ukwk63PKgvl1VsV4n56jLUig1HIPaldd3fLozhtOy4WRNy2um24jPHdt6z4bytm8dH8mpR/JAksZPuop/8Hurl3/wK4cPrM2Lf30pjV/qKv6Przrx/LWHP/+53PifjvHLXcW/5OGh56567K71ue1zMrZPpav4E888/sl1Z99wJLf+98X4A13F33z0RP+KUw8/klv/8dg+g13Ff/od7/rJl5588Nnc+CHGH+oq/rajez7VP3rqotz4j8T2Ge6u/7xw5IqnRkd/NpYX/4kYf0VX8b94qP/t96+6+8rc/bslts9IV/Hfc+FDdy4/9eD5ecfO5L5efXICvDadlZ5jfSKd7zbPXKiGfOEvxyq1c77l6f8VvVxR5uQzmycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC+87k3/7d3/+/0jz1XS+f70wdOl2jSWLwshGQwh7Ns/sXf/zt03jX3o5gN7d09MjU3sH5vcvX/vbWOX/frY3sk9UxO3zTw7/uZLa69bE5LaNDm/Zd3909PTpZHmsri+f3vhkR9teOv/+ecQxl/3g9FKbv033rvr/rPb/MxINk+/c9eB9/7g8r9Jt2skrddIm3pNT09Ph5x6/d9rfnH/n5386UUhjP/KXPV6/Onf/IemClULZuOkSv2hVqH+ZKhtPeq1TusT26uyY+fU5Pjc7Tvz+nLOdvy7jzz78x23fuYXtfYdyN2ODtt3cPP0VOkvtr7n///F7bWConq9Uvt9pr3LOTFn6hW3ItYvtt9A2t4r0+1ambNdlZztuuv7jzz5zXMPv3gojFdeWNe6r4u2qy/tAH3J6ztab1zDULK6qXwgXT7u8fi6jft37dm477aDb965a+KmyZsmd79t02Wbrhi//IrLN1a3fGOPtz+u/990uP1L059W/fGhb8SfnfWn5notm3d7zNSruD0aa5T3/hu6+uOffdu9j723VlB0XIlL148n6XRoZj9vCg39rbWt2m1X0f4JIYy1a4fnX7wynPM/d95ZdBxq3DONPzOSzdPfXf8vf/PWv177G7WCJTnON1aoy+N8vdaz9am210C6P6ZP0/btT4+m/clw23pt+u5jffcc/+eP1uu3bFm4dWL//r2baj+XpzVdnpzXtl7Z0rhd66o/yyFtllDvpm3664y+UKtf9vgZF8+26nD63HCypu12ZcXnjm29Z0N527eO57V08kBtjYNhRW2avCFnyanMC8v1Crdb/+n6/ivqH6Pv/uuvv//rf3dZS/+4pPazaLuSnO366pNf/OwXPvMf/q532/Xu3zwx8i//64821AqW4LgSFnRcKdcqUq91Wp+k8bhySQhF7791of125L7/Su23p+j9l13P7PLt441l5odDuav36yUPDz131WN3rc99v56c6/3auLG3N72uXPB+PV0+l7Lvr6TSXI/Fe381dZRk8/S3P3HWoUc/tuXcWkHR52V96Xb9+tIO8o+c7fqHa58avXns3/+P3h03vvzrX7vuhxOb/6RW0P1+j3XpzX4fSNt3IKd967WOeWdj+77lxpunttfKi9r5lTv/TacF+U88lOy77eCHJ6amJvfu62y7Ov08jevJtnK3n6fx6LamYLtKLdu1WA/Cvk7aq9P3W6z/9q7bq/n9NhySrj4XDn5v9fIPfuXwgZGWV6Urur6Uxi91Ff/HV514/trDn/9cbvxPx/iVruJPPPP4J9edfcOR3Pj3JWn8geL4K0NL/M1HT/SvOPXwI7nxx2P9B7uq/9PveNdPvvTkg8/mxg8x/nB37f/CkSueGh39WW78J5J0PTPnSCF87aVLd9Tmk9CXvt9iPfqa6hWy80lmvpSZLzfOl+IoQrqCcpI0l8fl0vILGurSzh/mlMezsIG1tenLcT5kH8xdfropNRz725XPcZ76Hxe7bgAAp4N4/T+eg8br/5PpiVL+SAPMWmgetjYnbszDZsdzmq+xrk3jx9fHccDRt4TxmekdY7UT/fleR4jvh+w4Z1zPRW9sjtF2fOJo40qq628Z5ywaf1+fmY/1qo2XVxry0FRrXlMJHYy/t65n7vH3zOYXX88a+0RLtcYaxq2y+68vHTFrd79Dpr6VmQh5/SM7Lhbv5xhdGbZU19dh/8jeRxP3Q/Y+mrieczMHzm7vo8nrHyOt7dBUr9g/4nJz9I9qlYuvR7buvzBH+87uv/bRsvtvHvt7YGb5xb4+24Nxw7aHtKUbN1zc62Gnxbhkm/hLPC65vCV++gY73ccNY3lsp0qH44nvzynv1XhiPFzEep2coy5LYQHjiQCntZj/x8+Imfx/5gT8/2WWK8pTsmeNMV7ufUI5N2EX5R2t9+kNdfU5vu3onk/1j566KPc855FO79Pb0zQ3VHDfT1E7bsjMF7ZjzgBNUb6XXU9Ru2fvyxgOK7pq9y8euvft96+6+8rcdt9S+yAtbvfPNs2tKGj3MyBfaB9fvvBqyhda4/foPoai8bP8fKRcr8ei5CPpjU+LlY/8QU75fPORoZYH9e2qOn3zkdkP0qZ8pG9p6wUAnDli/l+/fpbm//8UTyzS84iivPXizHyMl5u35pyf5OWtv59Ob80sP5z+RsV8z5vfc+FDdy4/9eD5uXnLfZ3mof+5aW6kMA9dWN6cm0ds6c394rl5RD3PWliemFv/ep64sDw95zJtQ56+sDw6t33qeXTzOMBnT8xmGnPFj+MAufHr4wA9zHN/ObvQ0uW5BeN1mZXF2U7H65Y6j54p6VvZvJ3NefFQb/Lo9NdnFyuPvjqnfL559HDLg/p2VZ2+eXRzuTwaAHi1ivl/PI2r5v/9ITwWFxiMDxZ2nT03L+jReXv274HU4z+xKHnlbPweXf8tzvsWO29d7Lx+scclzvTrv4s9LjRS/QOeizVO9ord77ooefE/1R91nBenK5UXAwBwOov5f0zz4/X/xzLLLTQ/acnf+mqnkLP5yZmXnzcudwbn59eEpcrP+8/k/PxMH/9a3PtkXl35/6wur4u/PP0qzv+rdZb/AwCckWL+H3/tMf79v/+azmf/bn2Hefp92dt5XUd3HT3I0zvI03s8zhbjN94HcAaPA5QXPg4wuOT3xw/OLv9qGgeo6gsGAwAAzgB91Uyp9ffsP5BOs79nn/d7+dfmLN+pSnp6fMP+vZOT1x3Ys31i/+R1u2/ePrnvulv27ty/f7J+7rywvDE3b0nzxr5QSduj/XLZvG1V+vcQVuX8PYTs8jHsedUHrX8PIbvawYK/IzC7/zqrb97+K82xfLv+kbe/8+L/Yc7yUX3/3/hHl1y3Y991O3fv3L9zYmrnwcnm5Uaqv0nd+fdmxuuU8/q+1MyPFqX5f39n3D0Lq0eppR59aXvkfT97kqnH6rQmq/O+/yCn3t/573/2xxdO/+JLIYy/rvyGBbVfsnn6v1wz+fv7j/9gz0z9S3PWv75kWq+i7yvNLh+3pzJ18779b9px84Hd2W+U7E4czyjV5xfpvob07V/ucHxiW075fH9/v9zy4PTU8fgEAABN4vX/eD4brx9+Jj2BiuWFefru2nILvX6cm6ePd5anZ7+XbDZPH+xo+bi9nebpAwvM07PrL8rT2y3fLk/Py7vz4v9BzvLz1Xk/mf99HlNxga8cPpDbT67vrJ9kv8+gaDwnu/x8+0mywH6SXX9RP2m3fLt+krff8+K/L2f5PEX9oVLvDwu7Lye3P3y6s/7wa5n5ov6QXX6+/aG0wP6QXX9Rf2i3fLv+kLd/W+M3DxD0Zvx3pmNU+8XkdbfcvPfDDct10j/KIb9/FH3/RWi9JaOT+i2bfe3ifv9Htzpv38W972vh9Q9hc7Ukr/7x+sCyedW/0/vKFl7/ovafx31lK0PLfWW59X9iYSNhndd/Xvcl3hGf6/T7XTLyFm99/VKN16bdruj+s6Jx3K055fMdx13W8uD0ZBwXXjkx/49nczH/vzud9voy0Jn/PWld3H8fj8G+xyy//Ts8jznNP88/mq33gj/Ps5fc23yeJ/mX5Zecz3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvRX1lanx+/ad+q95/7ud/508qWP/d7f77rjVz/y5Z+O3fjb335g6AsvH9t+wY4f/s5ZNz70oSuP3vtXj7644uu/fKYw8Ej1Z+XidHYghOS5JISBb578848f++45M2VJCKGcjBwKYXWy5tHVSSbC+M9DCNvr9Wx+8msvXbpjZnrH3f1N5asyQbLbFYbLsT6N9Qzh1sIt4gw0kPazg6dueVP40W9tvfP76776t31Hnj00u0gy0NCfQlh5fePr+0IIg+n/GbG3rY0vTqdbQghDDa97a0G93thh/TfmzJ+XTpel0+GCOPH59Zn5Uma57HzUl5k2bOtgwaq7klePbpcrsjwznz0YLVRePWP56nT6jXR68Tzjl+P/JJSSUKlXfyqZ7SOhYb8lIanuy4H6fKm+b0O6/Zn5JDNfysyX+zLbVV1v2tHKSdJcHpfLlMfDcSUtv6DxWN3G1Tnlr0+nA+kb9eU4H7IPaoZbHtS3qyrW6+QcdUn9p/bFleJXdqDUcAxqV17f8enOGE7LhpM1La+ZbiM+d2zrPRvK2751fCSnHskDSRo/6Sr+we+tXv7Brxw+sDYv/vWlNH6pq/g/vurE89ce/vzncuN/OsYvdxX/koeHnrvqsbvW57bPydg+la7iTzzz+CfXnX3Dkdz63xfjD3QVf/PRE/0rTj38SG79x2P7DHYV/+l3vOsnX3rywWdz44cYf6ir+NuO7vlU/+ipi3LjPxLbZ7i7/vPCkSueGh392Vhe/Cdi/BVdxf/ioXvffv+qu6/M3b9bYvuMdBX/PRc+dOfyUw+en3fsTO7r1ScnwGvTWek51ifS+W7zzIVqyBf+cqxSO+dbnv5f0csVZcysZ+UixgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NXpH2+/7APXvPN9WytJCEnOMtNtxOfKyzZvHutivRPPPP7JdWcPNpWt7SIOAAAAUKyWh99wpFQvGQhrwy3JYDiv7fJxjOC8OJc0l2fHEGKc7BhBt3FKbeKUuohT7lF9Kj2K09ejOMt6FKe/R3EGCuIMhM7iDM4RpzLTAzqsz9Cc9ek8znCP4izvUZwVmRDdxlnZo/qs6lGckTnjdN4PV/cozpoexTmrR3HO7lGc1/Uozq/0KM45PYqTHVOebz9ckS55bl6c6oNyYZxKUq4/0W48/Zx0PecvcD3DBetZUfR53OF6BjtczxszryvNcz0DHa7nsgWuJ+lwPb+2wPWUCtYT++2t2frF9cS5Dvv/bT2Kc7BHcT7Sozi39yjOR3sU5096FOdjofnkdL5xADoV8//ZfG8k9Fd+IwylR5zsKEDMd9dVf7Z+3uUdkGK8N2TKlxXFyybqmXjr5lu/7ABCY7zBENZnyvua4lXq+cgc8QYa67ch8+Rc2/uOze3r1hjv4kx5/xzxmjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJbAP95+2Qeueef7toYkzPxra7qN+Fx52ebNY12s99jWezaUt33reGNZf6WLQAAAAEChmIf31UsGQn9lU+hPljUtN5COAwyk8+WR2nR0ZdgyM03GStX5oWT1nK+rpK/buH/Xno37bjv45p27Jm6avGly99s2XbbpivHLr7h8446dU5PjtZ8h9BfECyFUhx/23XbwwxNTU5N799UKs/Vfm75ubTqfpK8bfUsYn5nekdZ/TcH6Si3rW7wHxXsPAAAAAAAAAAAAAAD4V3btN0TSug4A+PeZmZ0ZVy83/Dce3jmcp1hZ6bWGlrgPBAn+OVyEmLU2OfIkafUOvROzSQ9SU4pAOTgufNGFSZr0xj8pkX84MMwS2usIlfJFvSi0DBVfhDKxu/PMv51xtkluz+vzeTHPM9/f9/f7/n4Px8H3mQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6t+frkbG1qemY8iUgG5DT6yMbyxTStjlD3K09u/0Fp/TtndsZKhREWAgAAAIbK+vCxVqQcpUI+8nHy4rcN0TEQ7b4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/zNfn5ytTU3PHJ1EJANyGn1kY/limlZHqPvqWw9/9qX16//WGauMsA4AAAAwXNaH51qRclTitBhLTl7o/FvR7N3A2p75S3lt2TrrVpjX++5gUN5pK8w7Y4V5HxuSt7l5vTkAAADgwy/r/wutyESUCmuW9cNZ/z+sr8/yTu3Jyzev1c6k91VcSRIAAACwAln/X2pFKlEqVFr9+kr7/Q3t0OJP59n8Yb/bZ/NP78nL5g/7Pf+y5tXv9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4TFfn5ytTU3P5JOIZEBOo49sLF9M0+oIdTc9Nf6PS/bfsaEzViqMsBAAAAAwVNaHt1vvcpQK4zEWRy/2/esvuu/RLz36+GRELLX5xWLcvGXHjhs2LXzGpizvnBf2j33/ude/vSzvnKXPVTsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwgZmvT87WpqZnjkoikgE5jT6ysXwxTasj1H3l81/8y4MHn3itM1YZYR0AAABguKwPb/f+5ahEMYpx4uK3zl5/Qa5n/qB3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCR48Zv3vKNLXNzW29wszo3jXzEYbCN//Em++d0uOznw39TXu1trO7/SwAAwAfv1Eii8V866fLV3jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA4mK9PztampmfKSUQyIKeRKbUD2Vi+mKbVEeqmT75YWvPOU890xiojrAMAAAAMl/Xh7d6/HJUYi7E4YfFbv3cCjYX+f+IQbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4rMzXJ2drU9Mza5KIZEBOo49sLF9M0+oIdR/Ytfdz9x/7vYs7Y6XCCAsBAAAAQ2V9eLEVKUep8PEoxSnN73PdE5J889r/vUB73vauaeMrnlfvmpd/v3lJIaI1766ekxWap1maV87Wm1i6tupV2/NyzXnVjnmVaJWvtuYtPqzdXdXWDDnf8icPAAAAh07W/5dakYkoFUod/f9Pm9ejmtdBfW7u0G4cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjszNcnZ2tT0zNJEpEMyGn0kY3li2laHaHuLb/96DFf/dndOztjlRHWAQAAAIbL+vB271+OSqyLj8S6xb4/Jrrzs7x/1t69/95//fXMiLNPPLC+0Lvsj7KbX79y4dO9HxG57uxcxLHNesmAer/5/b03bWy8+2DE2SfkT1lWL96/XveSaeOx2tbLdjx3YPuQhwMAAABHiKz/H2tFJqJUuH5g/5913kP6/5bFBvzYm3b94vjmZ7Mj75mRm2jWyw2o94WND//59PP+/vpC/7+83idbd5/ee939x3cVXIr0SNLG1HU7Nx84d18uO/VS/XxP/ey5fPlbr/37mpvveXepfjnKzfjanq0sVVv+2VM+0sZcbs/Mpe/tqXfXLww4/x2/e+bgr9be/fZC/bdOHW/VPyP61V86eWFg/TgqbYxfcefu8/fu39xdPyKq/eq/8fbFcdIfr7299/zjcbBr4c4n3/nZ+wDSxgsb3tx33n2VC7rrJz31s+f/84MP7P7JPd99PKuf/a3ImafFCuvneuo/f9dxu5697fK13fVzA87/9JUvrd9W/c4fes9/ddeqhYG7WH7+h8565KqXt6S39g4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcWebrk7O1qemZXBKRDMhp9JGN5YtpWh2h7quXvPjGlXf/+IedscoI6wAAAADDZX14u/cvRyWKUYzxxb7/sdrWy3Y8d2B7TCyNJs1rYW7bjTs+cc22nddfvUo7BwAAAFbq1UuSxf6/0IpMRKmwMcaa/f/UdTs3Hzh3Xy7r/3ML1yQirrl2buvZ0cp7/q7jdj172+VrW+8JIhb/LKC8kPeZdt5FF7448eafvn5637xN7bwXNry577z7KhdkedGZd0603k88dNYjV728Jb21tb/OvE99bdtc8/VEtu74FXfuPn/v/s257D1G8zreXDfLm8vtmbn0vT313ESUFsbzzbxy89wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHLz9cnZ2tT0TOQjkgE5jU7NQDaWL6ZpdYS6l2785e3HvPPEus5YqTDCQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9hBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCvv1ExpH2ccB/Hl2kzebbNIm7QtGxTStilIPLQoielFRkVak4KlSpNragygIIko9mEorlqp4EaxeiqigRilUsLFYWiUV/xUvHlRQqB6EUgxoluJBJZtnNpvJTjduVFA+H1iePM/MfOc3M88+mwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4F+lp2u43p7Y81Dt9gtu/uSJe6cfv/W9B3Zd9tgbP4xuu/Hjg32vnp3cvnrH1zet3Hbkvg0T+186/svAO7+dahv86GyzNnUrIcQzMYTK+1PPPzn56XkzYzGEUI6DYyEMxRXHh2IuYf2vIYTtjTrnbzw0fdWOmXbXvp5548tzIfnrCtVyVs+swfn18t9SSfNsZ+2RK8K3N2ze/fmqt9/qHj89NrdLnNmnnOZTCMu2Nh/fHULoTZ8Z2Wwbzg5O7aYQQl/Tcde0qeviRda/LoRarl93YWr/l9pqm5xs+5pcv5TbL9/PdOfavjbnW6qiOtru19vZ+fpz/fxitFSNOte1Hh9K7bupXfsn88vZJ4ZSDF2N8u+Pc3MkND23GGL9WVYa/VLj2YZ0/bl+zPVLuX65O3dd9fOmiVaOcf54tl9uPFuOu9L46ua1uoU7CsbPT20lfVHPZv2Q/2NWdcEfjeuqy+qaOkct/4RS0xrUarzx4NPDqKaxalyx4JjfW8i2TW5++tLylg9ODBbUEQ/GlB87yt/52VD/XW/ufXi4KH9rKeWXOsr/buPJn+7c+/KLhfnPZfnljvKvPNp3ZuOHe9YU3p+puRVkMfkx9bNtd5/66JlV/79nvNWzrmceyO5/paP6r5842TNQO3qssP712f3p7Sj/m+tu+f71Lw+fLswPWX5fR/lbJh58tmekdnlh/rHZr0K1PkM7mD8/j1/91cjIj6NF+V9k93+gRX5sm//a2P5rX1m+b0Ph/NyU3Z/BlL/wh+1c+bddcmR3f+3wRUVrZzyw2F9YAFpZmf7Heir1271nHpoutXzPXKqm94UXRrtmf4H602fgrzxRzsx5lv2N+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVAAD//1eECw0=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x70000}]) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x7}) [ 84.799810][ T5342] Bluetooth: hci0: command tx timeout [ 84.898653][ T5365] loop0: detected capacity change from 0 to 1024 [ 85.240812][ T25] audit: type=1800 audit(1756710383.536:2): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 85.254171][ T5365] [ 85.255176][ T5365] ====================================================== [ 85.258378][ T5365] WARNING: possible circular locking dependency detected [ 85.261339][ T5365] syzkaller #0 Not tainted [ 85.263287][ T5365] ------------------------------------------------------ [ 85.266119][ T5365] syz.0.0/5365 is trying to acquire lock: [ 85.268565][ T5365] ffff888052eec108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 85.273373][ T5365] [ 85.273373][ T5365] but task is already holding lock: [ 85.276523][ T5365] ffff888032d520b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 85.280610][ T5365] [ 85.280610][ T5365] which lock already depends on the new lock. [ 85.280610][ T5365] [ 85.284792][ T5365] [ 85.284792][ T5365] the existing dependency chain (in reverse order) is: [ 85.288261][ T5365] [ 85.288261][ T5365] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 85.291009][ T5365] lock_acquire+0x120/0x360 [ 85.292856][ T5365] __mutex_lock+0x187/0x1350 [ 85.294974][ T5365] hfsplus_find_init+0x15a/0x1d0 [ 85.297013][ T5365] hfsplus_get_block+0x8dd/0x1530 [ 85.299282][ T5365] block_read_full_folio+0x29f/0x830 [ 85.301929][ T5365] read_pages+0x35a/0x580 [ 85.304019][ T5365] page_cache_ra_unbounded+0x6b0/0x7b0 [ 85.306467][ T5365] filemap_get_pages+0x43c/0x1ea0 [ 85.308789][ T5365] filemap_read+0x3f6/0x11a0 [ 85.310946][ T5365] __kernel_read+0x4cf/0x960 [ 85.312809][ T5365] integrity_kernel_read+0x89/0xd0 [ 85.315353][ T5365] ima_calc_file_hash+0x85e/0x16f0 [ 85.317670][ T5365] ima_collect_measurement+0x428/0x8e0 [ 85.320243][ T5365] process_measurement+0x1121/0x1a40 [ 85.322979][ T5365] ima_file_check+0xd7/0x120 [ 85.325361][ T5365] security_file_post_open+0xbb/0x290 [ 85.328026][ T5365] path_openat+0x2f26/0x3830 [ 85.330273][ T5365] do_filp_open+0x1fa/0x410 [ 85.332476][ T5365] do_sys_openat2+0x121/0x1c0 [ 85.334927][ T5365] __x64_sys_openat+0x138/0x170 [ 85.337466][ T5365] do_syscall_64+0xfa/0x3b0 [ 85.339817][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.342690][ T5365] [ 85.342690][ T5365] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 85.346718][ T5365] validate_chain+0xb9b/0x2140 [ 85.349161][ T5365] __lock_acquire+0xab9/0xd20 [ 85.351471][ T5365] lock_acquire+0x120/0x360 [ 85.353774][ T5365] __mutex_lock+0x187/0x1350 [ 85.356092][ T5365] hfsplus_file_extend+0x1fc/0x1990 [ 85.358724][ T5365] hfsplus_bmap_reserve+0x122/0x500 [ 85.361485][ T5365] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.364461][ T5365] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.367285][ T5365] hfsplus_file_extend+0x444/0x1990 [ 85.369856][ T5365] hfsplus_get_block+0x411/0x1530 [ 85.372202][ T5365] __block_write_begin_int+0x6b5/0x1900 [ 85.374795][ T5365] cont_write_begin+0x789/0xb50 [ 85.377000][ T5365] hfsplus_write_begin+0x66/0xb0 [ 85.379293][ T5365] generic_perform_write+0x2c5/0x900 [ 85.381928][ T5365] generic_file_write_iter+0x117/0x550 [ 85.384602][ T5365] aio_write+0x535/0x7a0 [ 85.386792][ T5365] io_submit_one+0x78b/0x1310 [ 85.389139][ T5365] __se_sys_io_submit+0x185/0x2f0 [ 85.391572][ T5365] do_syscall_64+0xfa/0x3b0 [ 85.393785][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.396501][ T5365] [ 85.396501][ T5365] other info that might help us debug this: [ 85.396501][ T5365] [ 85.400827][ T5365] Possible unsafe locking scenario: [ 85.400827][ T5365] [ 85.403972][ T5365] CPU0 CPU1 [ 85.406199][ T5365] ---- ---- [ 85.408255][ T5365] lock(&tree->tree_lock/1); [ 85.410250][ T5365] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.413497][ T5365] lock(&tree->tree_lock/1); [ 85.416576][ T5365] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.419090][ T5365] [ 85.419090][ T5365] *** DEADLOCK *** [ 85.419090][ T5365] [ 85.422359][ T5365] 3 locks held by syz.0.0/5365: [ 85.424465][ T5365] #0: ffff888052eeeb78 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550 [ 85.429298][ T5365] #1: ffff888052eee988 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1fc/0x1990 [ 85.433464][ T5365] #2: ffff888032d520b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 85.437580][ T5365] [ 85.437580][ T5365] stack backtrace: [ 85.440221][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.440233][ T5365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.440238][ T5365] Call Trace: [ 85.440245][ T5365] [ 85.440249][ T5365] dump_stack_lvl+0x189/0x250 [ 85.440266][ T5365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.440280][ T5365] ? __pfx__printk+0x10/0x10 [ 85.440295][ T5365] ? print_lock_name+0xde/0x100 [ 85.440309][ T5365] print_circular_bug+0x2ee/0x310 [ 85.440323][ T5365] check_noncircular+0x134/0x160 [ 85.440336][ T5365] validate_chain+0xb9b/0x2140 [ 85.440347][ T5365] ? rcu_is_watching+0x15/0xb0 [ 85.440358][ T5365] ? __kasan_check_byte+0x12/0x40 [ 85.440378][ T5365] ? rcu_is_watching+0x15/0xb0 [ 85.440389][ T5365] ? look_up_lock_class+0x74/0x170 [ 85.440407][ T5365] ? register_lock_class+0x51/0x320 [ 85.440424][ T5365] __lock_acquire+0xab9/0xd20 [ 85.440440][ T5365] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.440450][ T5365] lock_acquire+0x120/0x360 [ 85.440465][ T5365] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.440479][ T5365] __mutex_lock+0x187/0x1350 [ 85.440495][ T5365] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.440507][ T5365] ? check_path+0x21/0x40 [ 85.440517][ T5365] ? check_noncircular+0xe0/0x160 [ 85.440530][ T5365] ? hfsplus_file_extend+0x1fc/0x1990 [ 85.440540][ T5365] ? lockdep_unlock+0x89/0x120 [ 85.440554][ T5365] ? __pfx___mutex_lock+0x10/0x10 [ 85.440572][ T5365] hfsplus_file_extend+0x1fc/0x1990 [ 85.440583][ T5365] ? __lock_acquire+0xab9/0xd20 [ 85.440600][ T5365] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 85.440611][ T5365] ? __pfx___mutex_trylock_common+0x10/0x10 [ 85.440621][ T5365] ? __se_sys_io_submit+0x185/0x2f0 [ 85.440634][ T5365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.440645][ T5365] ? rcu_is_watching+0x15/0xb0 [ 85.440655][ T5365] ? trace_contention_end+0x39/0x120 [ 85.440666][ T5365] ? __mutex_lock+0x335/0x1350 [ 85.440681][ T5365] ? hfsplus_brec_find+0x191/0x500 [ 85.440696][ T5365] hfsplus_bmap_reserve+0x122/0x500 [ 85.440711][ T5365] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 85.440724][ T5365] __hfsplus_ext_cache_extent+0x89/0xe30 [ 85.440737][ T5365] hfsplus_file_extend+0x444/0x1990 [ 85.440750][ T5365] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 85.440762][ T5365] ? clean_bdev_aliases+0x5c9/0x6b0 [ 85.440780][ T5365] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 85.440796][ T5365] hfsplus_get_block+0x411/0x1530 [ 85.440810][ T5365] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.440821][ T5365] ? do_raw_spin_unlock+0x4d/0x240 [ 85.440833][ T5365] ? _raw_spin_unlock+0x28/0x50 [ 85.440848][ T5365] __block_write_begin_int+0x6b5/0x1900 [ 85.440860][ T5365] ? folio_add_lru+0x1b2/0x3d0 [ 85.440877][ T5365] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.440888][ T5365] ? __pfx___block_write_begin_int+0x10/0x10 [ 85.440900][ T5365] cont_write_begin+0x789/0xb50 [ 85.440914][ T5365] ? __pfx_cont_write_begin+0x10/0x10 [ 85.440923][ T5365] ? __pfx___might_resched+0x10/0x10 [ 85.440933][ T5365] ? __mark_inode_dirty+0x3d2/0xe10 [ 85.440982][ T5365] ? folio_unlock+0x101/0x160 [ 85.441000][ T5365] hfsplus_write_begin+0x66/0xb0 [ 85.441009][ T5365] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.441022][ T5365] generic_perform_write+0x2c5/0x900 [ 85.441034][ T5365] ? __pfx_generic_perform_write+0x10/0x10 [ 85.441044][ T5365] ? file_update_time+0x2da/0x490 [ 85.441056][ T5365] ? __generic_file_write_iter+0xf9/0x230 [ 85.441067][ T5365] ? generic_file_write_iter+0x103/0x550 [ 85.441079][ T5365] generic_file_write_iter+0x117/0x550 [ 85.441089][ T5365] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.441098][ T5365] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.441113][ T5365] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 85.441127][ T5365] ? __pfx_aa_file_perm+0x10/0x10 [ 85.441146][ T5365] ? __lock_acquire+0xab9/0xd20 [ 85.441166][ T5365] ? aio_write+0x4c4/0x7a0 [ 85.441183][ T5365] aio_write+0x535/0x7a0 [ 85.441202][ T5365] ? __pfx_aio_write+0x10/0x10 [ 85.441220][ T5365] ? __might_fault+0xb0/0x130 [ 85.441236][ T5365] io_submit_one+0x78b/0x1310 [ 85.441254][ T5365] ? __pfx_io_submit_one+0x10/0x10 [ 85.441270][ T5365] ? __might_fault+0xb0/0x130 [ 85.441298][ T5365] ? __might_fault+0xb0/0x130 [ 85.441312][ T5365] __se_sys_io_submit+0x185/0x2f0 [ 85.441328][ T5365] ? __pfx___se_sys_io_submit+0x10/0x10 [ 85.441345][ T5365] ? do_syscall_64+0xbe/0x3b0 [ 85.441362][ T5365] do_syscall_64+0xfa/0x3b0 [ 85.441382][ T5365] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.441397][ T5365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.441409][ T5365] ? clear_bhb_loop+0x60/0xb0 [ 85.441421][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.441433][ T5365] RIP: 0033:0x7fa43bf8ebe9 [ 85.441445][ T5365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.441454][ T5365] RSP: 002b:00007fa43cd83038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 85.441467][ T5365] RAX: ffffffffffffffda RBX: 00007fa43c1c5fa0 RCX: 00007fa43bf8ebe9 [ 85.441475][ T5365] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007fa43cd39000 [ 85.441482][ T5365] RBP: 00007fa43c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.441490][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.441497][ T5365] R13: 00007fa43c1c6038 R14: 00007fa43c1c5fa0 R15: 00007ffcfacee5c8 [ 85.441509][ T5365]