program: syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f636f775f656e61626c65642c6469726563745f696f2c6a6f75726e616c5f747261b637c393becc2fca5f6e616d65732c726561645f6f6e6c792c00"], 0x5, 0x5d91, &(0x7f000000bb80)="$eJzs3X2QHOWZGPDumVntSquPlSzMCgmxGNmOuGALFIjlO0cb5+zYjmxkYQEWp5NkWGEdQhL6QCBdwlcOCCYpVUEdBOJEBxS5Sl0luHQJ4U6pkjHgi6+KQib+gyNfRwXnj/iI6ixxRHK8V7vbvTvd2+/07MysEPbvV7U7273PPO/z9LzTH7O7sxEAAAC/FF75nT3vfuWCz/3g3qFTd33hj269J+qtjq7vSQP6kts73q8KmU7Lf3gm88h21/pHb/Pz4vw/Xvhu331rvvzQqs//cPOfzB9cumzoqu8cufr++178zM9efOyJNWXjpPPp0onl+C/iKFr69pHH7n/5T88fWRePjB/33R3Nnx8v+O78OJdixekoim4arzP7zSOnVm4dub3nW92Z9fNyScz3X249yTw7uOkbTx27ZfDlIwO7Vv7k5JU7754IiXvq5lMUzd1cf/+uKIpmJh8j0tnWn945uV0bRdGsuvt9qqSuS5qs/7LA8pLkdkZy21uSJ/3+xbnlWpN11HK33U3er1WVac6fl99++Z3RdEn7nJvcPp/cXjrFPNX0I44qcVQbL397PDFHorrHLY7i0bndM75cGV2Oxpej/HKcW67klqtdub5Gx002bDWOs+vTuNz6dHdcS9ZfXL+vLrAusH5RctuTPFHfS5ej/Bdjeid9MdFHVFfXibM1MQIqgedeun68vOTB6E3W9cYLJt1nuED6vRPf37LhnTcOPN8XqCN+Lk7yxy3lHxx68tiz1x9d1B/Kv7mS5K+0lP+V6qunnznZPzuY/1Cav9pS/vU///GD916zf2Fw+5xIt0+tpfzLHp598NT+dd0DofyH0/w9LeW/auPSVRee3Hd7sP4V6faZ2VL+Hz2y/MzGQy8cDeaP0vyzWsr/5pNPL6kuevR4MP+xdPv0tpT/2pWPr/7S4vueCG7/19L8c1rKv+H4/Zt3PfXS8uD8XJtun76W8p9e/fpbZ/rWPB3ad8aHz/YRFuAXy4eSc6wHk+VWrzPbVXe98PhAbeycb3byMaeTA+XEddcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCqR1f/+9vqlz/6f25ff/w/LN1WS5a7a1EUR1H0TnVsOV0/I4rimVEU7dm7ZffebTtuHvitnft279iyfWDL3oGhHXt33znwt/7mwO6hXdu33Dny3RWXrRy734LRbFG0IL5wUi3Dw8PDURQN1K9Lx/u9Lz73/9Y/8Zdfj6IV572+tBbs55P/9a3PLSz4nBMPDq/9F1c+cmDG/5o3tqIvqasvVFdfdl1aQe/ga3/22effGKnrw43qeuzV6/5vpqDRFRN5EpXuqDL6RXc8q7CO8aon6hndXrWt27YPrSjfvnFg+378pT88+e/uWP9Px7ZvT7CPJrfvyFatDT/003s/fvdnhz59Dj/uZdu7roXR+tLt15Ns77lJX3MDfVUCfd0+8OaJf/Zv/9Mzd0craj+9aPLYZX11JROgK17U1LjpCLPi+ZnYniQ+fcTT+31y7627PrnnzgOXbbt1y81DNw/tWLnyylWXr7z8ilUrPzna+tjnjvWfjv/xJvufnWSaHS8u3G75tem4F41+rkZJ2elN3RdZXVHv2G1uO6fh+a57k+/1xgsm5RoukH7vxPe3bHjnjQPPh5558XNjI86M5ozdxksCkdtzd6yOF1w0/tl5Xu783Z7t6efmnpdldZXNq5G6yudVfUUN9mOvXvLgT5964J/f0MT+oi50tL60zlkjT5fLo7rn7eRtVdRXE4/PYNF2uPGy3X9457YNh8r25/WPTP3nnHhw+H8uib+8b8+f7R5bcVaOl/UFtXi8HK96op7R7dWTPB7n6vbtjqpJX72Fda2Ln/rMx289+ivj9c2YEd2xZe/e3ZePff6g9vXnM+Yt3HbP4gsn9XXF2Oey/f5FueXS/X6luL+y/X5+nIn44nwDueXeqNrScWL9z3/84L3X7F8YPE6caPY48duZpWqbx4lK4Pn+0F9+e+DdG772btl8unrP4rsWFnzOtzc4/MIf/Orln77ums+PrTgr+6H6glrcD41XndSTbq/R/dAV504f79/jnHkixoPDF33nY9eeOXXbV8dWlG3f8eii7buyfD9fDfR1Q9dH5j/yk8Uf6dz83bPpry75xKzZ59j87Um2b09g+45XndRTrd++n7hx5/abxpbP3fO2Md0l1z/pcWfPnQdu2bJ9+9DuPc311ezxNB0nv5VbPZ6mR48FJX2lj9dEX9P3RTPbq9nnW1r/TbkcrT7fAFITx4UZmfX5/Wf6ut/SudH6TzzwvVfjgbHjZadeb03HuSB3YG719day66SP5Jaz10m1qK7vMZOvk0bvUnadlB+n7Drpktxy+XXMg4WdhB6/ruTIW/S6aa7e2kiG0PzoT/L3J8vp+ebST0RXVp//6BfjwebmR7Pn0+k4fyO3gVo9ny6bH8ui4ro6PT8+lrtT+eN9qLCynsDjUfZ4L8skGh5u97q8L1B1el3eG8Ut5R8cevLYs9cfXRTMv7mS5K+0lP+V6qunnznZPzuY/1Cav9ZS/mUPzz54av+67mD+w+n26Wkp/1Ubl6668OS+24P5V6T1z2wp/48eWX5m46EXjgbzR2n+3pbyX7vy8dVfWnzfE8H8r8XJOCPP3Sg6cmrl1rHlOOpK5n9aR1emrii/HI8vzyjqI6rWx1fSsGSAahxn16dxufVpH7Vk/cV1NRZZH1ifPmt7kif2e+lylP+i8fp095TWdSJw/DlbKnXnHkXry16f7JR33u7/vfrl9Of/6Rzoro09dlfktlfZ8SO/907zBV+HDbyEUXa+MPnnb7Naev69+eTTS6qLHj0efF31WLOvq+7KLM0qeV213XqD+4tj6f60vf1Rfyj/a2n+9o4HwfzJ8aBsnn00t1w6z7qKxyubZ/nzlN5oTkt9bzh+/+ZdT720PDjP1o494cvn2aOZpTml86y9n0sH59lzcUe2RzD/2s6c1wTnWXJeUzbPLs0ttz/PsuejX05u78jF9yavEE+179OrX3/rTN+ap4Pz7HCz8+z3M0t9pfOsvfPb4OM0fn473efnH+zzz46eH44tV3LLxeeHyY9zp+v8cF1g/VTPD3snfTHRR/RBPD8M7GcAoJEfPHTn/65fTq//02N3ev3/vdz92r2uzP8+VKpT15XB/Ic7c70SPE8dv16Z7uut6T7Pnt7rLefxgfzjryNP9+tC03td6TokWY7yX4xxHQIAwPvh4n/97V+vX06v/8d/7y35+/+X0uXc/V3nBvKftevc6X6dxHV0Yf4O/X5F+etg0/061VReB/jP56Xf8zpAMa8DnN26AACYmk1bdw8N7dm15cahTdt2bNs7vr5r9Mpp8u+p/u3kdm0uT9nvTxfFz2oQ/9Vg/mw9nwrEh9RGf+c1ir5x4zev2HTT0O1T7T80Xln/RfGN+s9fX4T6XxWID2m3/9B4Zf0XxTfq/5pg/mw9nw7Eh7Tbf2i8sv6L4hv1/7Vg/mw9vxqID2m3/9B4Zf0XxTfqP//3YKH+fy0QH9Ju/6Hxyvovim/U/7XB/Nl6PhOID2m3/9B4Zf0XxTfq/7pg/mw9fycQH9Ju/6Hxyvovim/U//XB/Nl6VgfiQ9rtPzReWf9F8Y36/3owf7aewUB8SLv9h8Yr678ovlH/G4L5s/X83UB8SLv9h8Yr678ovlH/NwTzZ+v5bCA+pN3+Q+OV9V8U36j/3wjmz9bz9wLxIQ37L6yvufHK+i+Kb9T/xmD+bD2/HogPaffxD41X1n9RfKb/3M8FfjOYP1vP5wLxIe32HxqvrP+i+EaP/6Zg/mw9nw/Eh7Tbf2i8sv6L4hv1vzmYP1vP3w/Eh7Tbf2i8sv6L4hv1vyWYP1vPFwLxIe32HxqvrP+i+Eb9fyOYP1vPFwPxIe32HxqvrP+i+Eb93xjMn63nS4H4kHb7D41X1n9RfKP+8+93GOr/HwTiQ9rtPzReWf9F8Y36Hwrmz9azJhAf0m7/ofHK+i+Kb9T/1mD+4vcNyMeHtNt/aLyy/oviG/V/czB/tp6vBOJD2u0/NF5Z/0Xxjfr/ZjB/tp6rA/Eh7fYfGq+s/6L4Rv1vC+bP1rM2EB/Sbv+h8cr6L4pv1P9vBfNn6/lqID6k3f5D45X1XxTfqP9bgvmz9awLxIe0239ovLL+i+Ib9b89mD9bzzWB+JB2+w+NV9Z/UXyj/m8N5s/W87VAfEi7/Y+M968K8pb1X9RPo/53BPNn61kfiA9pt//QeGX9F8U36n9nMH+2nmsD8SHt9h8ar6z/ovhG/e8K5s/Wc10gPqTd/kPjlfVfFN+o/9uC+bP1XB+ID2m3/9B4Zf0XxTfqf3cwf7aerwfiQ9rtPzReWf9F8Y363xPMn61nQyA+pN3+Q+OV9V8U36j/vcH82XpuCMSHlPXfM6m+5sYr678ovlH/+4L5s/X8RiA+pN3HPzReWf9F8Y36vz2YP1vPxkB8SLv9h8Yr678ovlH/+4P5s/X8ZiA+pN3+Q+OV9V8U36j//PtAhvrfFIgPGe9/7+6hoU37dt20Ze/Qph07bxras2n/7m179w4lJ2rt/l1Z+O+C3uc/ZKGhzPNjbJJs27FnaPfk/ffMhvO3fk5Eoz/enDl2G3+4qfj82163OmvOlfneFdUabq8LcsvzkvejnRd4P9p8fJp28egXk9+PNj9sreR9XMv2T/nxQ/unuEF80f41tD8rO/5Nef9XOr97GvafX92dnDl1x+c1FR81+P9uzc3X9v7uNDhfX2tuvubfd71svubjpzpfe9ucr/nxQ/Op0iC+0flQs/N1QyA+1fz8jIP9Fs2rqf6fwTTtlP7PYO7TJC38L4Pmnw/t/R158PmQFF32fMj/HXfZ8yEfP9Xnw8w2nw/58cueD0Xxja6Pm30+XBeID2l+PrT3vgXB+bCiufmQ/z9WZfMhHz/V+dDT5nzIj182H4riG71e2Ox8+FogvlnNz4/23lckOD82Nzc/8v9Pomx+5OOnOj/iNudHfvyy+VEUH/p5SjSF+fHVQHwqc/zcumf0on7blu3bDuR+AaMvOX6+38fDs3Jc/qtf+/P3xj4ldVQm1VF2PhHn6pifVDI/9H8PA3Xf+F/+zfrv/eyBb0fRivOqS8J1T5Q88SknHhxecNeyZ6//8PHPjtRfaVj/eGT6f4tL/t9xPj7tp7Z95569v7J1574dzf7GVWPp+6FUxpen6f1QkpXVJt/fJPT3BFN9f5OuSV+cm5p+fxOAXxDzDj83p345ff+/9HjUn+z7ZiY7wHR98+fZ7b2/XvA8O3l/va5K1PC8dXm+35Lz7Hx82m+z59mVNs+z8+OXnWcXxTf6vb1mz7O/Eoifquw8GZkgo/NjaNP+nbvrfyduuv9vbefrnd7/49t+fdP7vo2tar7+6X1fyOmvf3r/D/D01z+9/+e5VWfteil5s8iy948su44K/V36VK+jZkz64tzkOgoAzn3/ZPfb/7J+Ob3+T65ix6//v5UsVzs8/nRfR033deV0nyd/8N9/f3qvg1wPNBjsHOB6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDY7//3//jd+uXuWv/o7Su/s+fdr1zwuR/cO3Tqri/80a33nP/HC9/tu2/Nlx9a9fkfbv6T+YNLlw1d9Z0jV99/34uf+dmLjz2xpnSgvrGbS5PFniiK/yKOoqVvH3ns/pf/9PyRdfHI+HHf3dH8+fGC786PcxlWnI6i6KbxOrPfPHJq5daR23u+1Z1ZPy+XJN9X1FtN68nUGd1R2hEfQD3JPDu46RtPHbtl8OUjA7tW/uTklTvvngiJe+rmUxTN3Vx//64oimYmHyPS2daf3jm5XRtF0ay6+32qpK5Lmqz/ssDykuR2RnLbW5In/f7FueVak3XUcrfdTd6vRf+/Mr35J8lvv/zOaLqkfc5Nbp9Pbi+dYp5q+hFHlTiqjZe/PZ6YI1Hd4xZH8ejc7hlfrowuR+PLUX45zi1XcsvVrlxfo+MmG7Yax9n1aVxufbo7riXrL67fVxdYF1i/KLntSZ6o76XLUf6LMb2TvpjoI6qr68TZmhgBlcBzL10/Xl7yYPQm63rjBZPuM1wg/d6J72/Z8M4bB57vC9QRPxcn+eOW8g8OPXns2euPLuoP5d9cSfJXWsr/SvXV08+c7J8dzH8ozV9tKf/6n//4wXuv2b8wuH1OpNun1lL+ZQ/PPnhq/7rugVD+w2n+npbyX7Vx6aoLT+67PVj/inT7zGwp/48eWX5m46EXjgbzR2n+WS3lf/PJp5dUFz16PJj/WLp9elvKf+3Kx1d/afF9TwS3/2tp/jkt5d9w/P7Nu556aXlwfq5Nt09fS/lPr379rTN9a54O7Tvjw2f7CAvwi+VDyTnWg8lyq9eZ7aq7Xnh8oDZ2zjc7+ZjTyYFy4rprFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACNk5XN1Xv/zW0Yeu/ub/2PTfanEUxYH7DBdIv1edMTg40EIdyx6effDU/nXd6fLI2P0t5AEAAAAmW/zmA7fVL6fX4ZVkOY56ov5ofzwzWlx4//Q1gsXpUpxdn38NYeZEZEfyVDqUp9qhPLUO5enqUJ4ZHcrT3aE8PSV5emrN5ZnZME+l6XpmdShPb4fyzO5QnjkdyjO39Ty1+jzzOlRPX8M8zc/D+R3Ks6BDeT7UoTwLO5TnvA7l+XCH8pzfoTz515SnOg/nJJEXhPKMflEtzVOLq+PfKHo9PR3nwjbH6W1ynPxr9lMdZ2aT41zS5jg9TY7zsTbHiZscZ3nufpUpjlMpGSedt3eE+kmXmpz/d3Yoz4EO5TnYoTy/3aE8/7BDef5Rh/Lc1WYegJDfffHSP6hfTq//0+vPOOqLumtXRLOSPU7+VYD0evei0c+Tj3ehHVKab0lufVdZvvwFdi7fRVOtL/8CQi7fRxrmq41fzzbIV6vPt6xD+QAAAGAq/vHpg5kfzU2+/u+PumsLx69fP5q7f+n1ev4H2Yk036UdygcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/Nrr3GyFWWDwB/z87szPyXSxfSlim9bdr+KYTQC02NoMKkiSQYYYvYcmnIWmFhG5YWui3QqimCsc0mGLR44fbBgsQQIpCQNOiaYECJH2xsEMPFdWEl8IUI0htQdMzsnrN7dmaHXUZprf5+IefMc87zvM97DgnJcxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/vP98ft/ezYdD/b1tncNdPSHKFT+GVd5HMm9TK5UamtgH+88t/bKv760dXcSV3rnsw0sBAAAANR4/LwZp6fjZA5PRu8oFEI+uzTko9yYumL8HaAYx02tw+c5i8LyzO7/vzAqNQ3FJ0cnjakrxHWFOM7EdT1btl6/tru7c+Mn+KPSp/o5qvcThTD0+WLOiWHVou3P7Inahp+jZYLnaIrrFm+64cbFPVu2nrXuhrXXdV7XuX7ZsuXnLF229Oxzli2+dl1355LhY8hPsF4IoTT2vUzwLxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6Abb/d/a10PNjX29410NHfEoUQ1akpjyO5l8mVSm0N7OOV+x6clZlx994krvTOZxtYCAAAAKjxq8dnnJ+Okzk8Gb2jUAj5bC5kwoyheN5oajaEcjm5vqDq+pHYOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGTtO9j+53Q82Nfb3jXQ0X9cFEJUp6Y8juReJlcqtTWwj9XLfnT+F2becW8SV3oXG1gHAAAAqPXC6c13pONkDm+K4ygUQjHMD83RjDF1ybeBU6vWq85L1pk9ybzqbwf18uZPMu+0SeadMUHexfH51gAAAADHnitaf7c6HSfzf3McR6E15LPFkInjieb45LvA3Kq8pH6i+T6pn1enfqK5P6mvnvsBAADgf9lZbz7xYTqunf+LIZ8tjMzfE/09/aL47O/kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA9vz544S/S8WBfb3vXQEd/JgohqlNTHkdyL5Mrldoa2Meqf7yx4/ZLb5maxJXe+WwDCwEAAAA1Hs19+pZ0nMzhyegdhULIZ1tCczhuaO5/LTdl6rpvzpwdQigNJeRy4da1mzZtPHv4mOR9Kdr1uYU39J1Zk7d0+HjknxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhXLXtk55p0PNjX29410NH/f1EIUZ2a8jiSe5lcqdTWwD5e2HnG4avueqoviSu9iw2sAwAAANSa1f30X9JxMocns38UCqEYciEXpg/F6Vm/oqlqvXrfDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/Hj1btl6/tru7c6Mffvjhx8iPo/1fJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Gj5+frvvZ2OB/t627sGOvoLUQhRnZryOJJ7mVyp1NbAPj511ZxzZu/ffHMSV3oXG1gHAAAAqLXmrc3703EyhyezfxQKoRiaQ3OYFse1hub/1iOxWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GiaG6JQ/phOWXm0dw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Eg68uOq+dDzY19veNdDRf0IUQlSnpjyO5F4mVyq1NbCPK/d++ys37nr2jCSu9M5nG1gIAAAAqNH85otfTcfJHJ6M3lEohHx2VsiHWfGV7rELRJkkcdzvAqN1Xx9Tlpl03Y6qHQ/vrBB/hyiM7DMMfXYYrbvrI+uK8dWm1sm9JwAAADiWTdtx8TfScTL/N8dxFFpDPjstNVffOKa+ZdJz/N1j6k6YdN1Px9S1TlD3b3glAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECD7lz53CnpeLCvt71roKM/ikKI6tSUx5Hcy+RKpbYG9lHqvO/phy/vm5HEld7FBtYBAAAAal36RuG76TiZw5PZPwqFUAyzw4lh9tDcH1rH1id5x5V+//KK3S9dEcKS6c/Pydbt98M9l70dDn32tfeGD0NhCE1jk5pCmBL3i+r0u/oPj6x65sPtD4SwZFpmVv1+o61GD1WiUvnkbQsevnz63hV1lwEAAIBjWuHBAz9Jx8n8n0zUUWgN+ez6uvN/kvex5v/2npnbpsbH+AtAVUVTa9yvqU6/3ncfaDu45ssHK/P/83MKI/+vwOnzx+anW6WPVd8colJ57hOnrT584KZLhi8k/TN1+q9pnnfSzrdmzkv6F+Lr14TJ9g9V/Xs6Ds1f1HL8BWP7hxDaxuv/4wsff3/Vve9eMdy//vte/KfBz08NG35Q6E6Ow1dq+6+8f/nOrbnXp4ztH9Xpv/DZJ/c/duuqO6uf/9TseP1rj1UqXbPl3n23L7xtRee5qf5Ndfrf3PbKO9/52S8fqvTfN7dlpP/Cj3j+Cfvvmb9j367t96wZ+/5Ltf1vC1eftfHJLeuuvKv6+VuqFk6/+fSx9v2/Oiu6aHPPyxurbwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzbOh774FA6Huzrbe8a6OhvikKI6tSUx5Hcy+RKpbYG9vGbzJ4PHtpfPD6JK72LDawDAAAA1LpkxavXpeNkDk9m/ygUQjHkQi60DM39J29b8PDl0/euCK3x/fic7d7Qs+nMazdsXn/NkX4EAAAAYAK7znt/RTpO5v9sHEehNeSzC0JzPP+vvH/5zq2516ck838IYejP/dlr13V3Lgkj3wl6Og7NX9Ry/AVJXiY+Fyp5i67e0B1/JkjWferRzyw997JLR/Kb0vlnj+bNfeK01YcP3HTJuHnLRvNenRVdtLnn5Y2pfZZG8paO5vXuu33hbSs6z02eI4rPhfh5krw983fs27X9njVJXlN8bonXAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABCOOm9v38tHQ/29bZ3DXT0h0wIUZ2a8jiSe5lcqdTWwD4+OP/5wcOtX3wwiSu989kGFgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf36CY2jiuMA/t7uxmy7tW5qoYnWkGIvLQiFYLEHaS7+QaKWiqKFYhTjRcWCaMUeTBsMRT0UFFraS2nFs5JDUXuIxVZREKt4EE8KelLJISmSikqSeZvNtEPiSEspnw8sb39vdr77m7dvJ1kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCa9sRP99Xa685a99x47o2XLjx0yz1fHhiefv3+j1/Yv+6TtReao4MPvrnt3m+Hvuga6N04vPXD8YfHRs/c/deZw0cHl3yjV+eHzVlZDyH+HkPo/WX88NjZr9bNzsXZ94/NkdDVFdd82hVzCVtmQgjPtPpcfHB8uv/Z2XH/W52L5m/KheSvKzSqqZ95zcX9cn2pZ/ts35NPn5h4buDseN+e/t+m7nxxZOElsd62n0JYPdR+fkcIYUX2mJV2W3c6ORt3hBBWtp131xJ93b7M/u8oqNdn4w3Z2FgiJx3fkKtry+yjlhs7l3leWZUrnJ+XX7/8zehKSde5OhtPZePm/5hTTY8YKjHUWu0/Hxf2SGj73GKIc3u73qorc3Vo1SF0xJH2OuaOV3J1tSN3XXPvmy1sNcbF8+l1ufl0O65l8xva79WXsbNgvicb69kX9c9Uh/yTeY1LnixcR2jra/JqbYwClYLvXppvtZd9GI1srhHXXHLOP5eRjk1+/tSuP3547VSzoI/4QczyY6n8geFjE+8/frqnuyh/qJLlV0rln6t+PfPeVPeqwvxDKb9aKv/Rv389eOCRvWsL12cyrU+tVP7Gt1ftm967s7OvKP94yq+Xyt+6u3fbbVMvv1LY/5a0PitK5X//zqaLuw99dLowP6T8laXyfzx2cn21593zhfkTaX0apfIf6z+y/YFbR48Wrv83Kf/GUvm7zo8N7Tnx2abC/bkjrU+zVP7M9u9+vtgcPFl074zHr/ZfWIDry83Z/1gHs7rs78z/q+33wpG+f9mvQxQAYBgGgAwmt/9/d2ItlOrKO4iOTfbffCdyJ4uaVb4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApBcAAP//W7Zm9Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000003, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000000}]) (fail_nth: 5) [ 80.680694][ T5096] Bluetooth: hci0: command tx timeout [ 81.867517][ T5112] loop0: detected capacity change from 0 to 32768 [ 81.975865][ T5112] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,nojournal_transaction_names [ 82.004395][ T5112] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 82.007563][ T5112] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 82.007563][ T5112] running recovery passes: check_allocations [ 82.064519][ T5112] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 82.064542][ T5112] gen 0 oldest_gen 0 data_type journal [ 82.064551][ T5112] journal_seq 1 [ 82.064558][ T5112] need_discard 1 [ 82.064564][ T5112] need_inc_gen 1 [ 82.064571][ T5112] dirty_sectors 256 [ 82.064577][ T5112] stripe_sectors 0 [ 82.064583][ T5112] cached_sectors 0 [ 82.064590][ T5112] stripe 67108864 [ 82.064596][ T5112] stripe_redundancy 0 [ 82.064603][ T5112] io_time[READ] 1 [ 82.064610][ T5112] io_time[WRITE] 1 [ 82.064618][ T5112] fragmentation 0 [ 82.064624][ T5112] bp_start 8 [ 82.064631][ T5112] [ 82.064638][ T5112] invalid data type (got 2 should be 7): delete?, fixing [ 82.135884][ T5112] bcachefs (loop0): accounting_read... done [ 82.148090][ T5112] bcachefs (loop0): alloc_read... done [ 82.150303][ T5112] bcachefs (loop0): stripes_read... done [ 82.152615][ T5112] bcachefs (loop0): snapshots_read... done [ 82.155159][ T5112] bcachefs (loop0): check_allocations... [ 82.164942][ T5112] btree ptr not marked in member info btree allocated bitmap [ 82.164963][ T5112] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 82.195860][ T5112] btree ptr not marked in member info btree allocated bitmap [ 82.195877][ T5112] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 82.216803][ T5112] btree ptr not marked in member info btree allocated bitmap [ 82.216824][ T5112] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 82.239415][ T5112] btree ptr not marked in member info btree allocated bitmap [ 82.239431][ T5112] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 82.259612][ T5112] btree ptr not marked in member info btree allocated bitmap [ 82.259627][ T5112] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 82.280131][ T5112] btree ptr not marked in member info btree allocated bitmap [ 82.280147][ T5112] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 82.300129][ T5112] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 1032, should be 8, fixing [ 82.304473][ T5112] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 82.307541][ T5112] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 82.322637][ T5112] done [ 82.329970][ T5112] bcachefs (loop0): going read-write [ 82.341525][ T5112] bcachefs (loop0): journal_replay... done [ 82.383067][ T5112] bcachefs (loop0): resume_logged_ops... done [ 82.388899][ T5112] bcachefs (loop0): delete_dead_inodes... done [ 82.397210][ T5112] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 82.406480][ T5112] bcachefs (loop0): resume_logged_ops... done [ 82.416612][ T5112] bcachefs (loop0): delete_dead_inodes... done [ 82.422454][ T5112] bcachefs (loop0): done starting filesystem [ 82.444580][ T24] audit: type=1800 audit(1727034335.133:2): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1073741824 res=0 errno=0 [ 82.476212][ T5112] ================================================================== [ 82.479222][ T5112] BUG: KASAN: slab-use-after-free in bch2_direct_write+0x2a70/0x3160 [ 82.482194][ T5112] Read of size 8 at addr ffff88804d21d0a0 by task syz.0.0/5112 [ 82.485080][ T5112] [ 82.485980][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 82.489877][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.494038][ T5112] Call Trace: [ 82.495324][ T5112] [ 82.496431][ T5112] dump_stack_lvl+0x241/0x360 [ 82.498205][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.500128][ T5112] ? __pfx__printk+0x10/0x10 [ 82.501947][ T5112] ? _printk+0xd5/0x120 [ 82.503584][ T5112] ? __virt_addr_valid+0x183/0x530 [ 82.505501][ T5112] ? __virt_addr_valid+0x183/0x530 [ 82.507368][ T5112] print_report+0x169/0x550 [ 82.509054][ T5112] ? __virt_addr_valid+0x183/0x530 [ 82.510902][ T5112] ? __virt_addr_valid+0x183/0x530 [ 82.512867][ T5112] ? __virt_addr_valid+0x45f/0x530 [ 82.514744][ T5112] ? __phys_addr+0xba/0x170 [ 82.516385][ T5112] ? bch2_direct_write+0x2a70/0x3160 [ 82.518425][ T5112] kasan_report+0x143/0x180 [ 82.520100][ T5112] ? bch2_direct_write+0x2a70/0x3160 [ 82.522069][ T5112] bch2_direct_write+0x2a70/0x3160 [ 82.524032][ T5112] ? __pfx_bch2_direct_write+0x10/0x10 [ 82.526152][ T5112] ? __pfx_lock_release+0x10/0x10 [ 82.528108][ T5112] bch2_write_iter+0x194/0x2480 [ 82.529958][ T5112] ? mark_lock+0x9a/0x360 [ 82.531569][ T5112] ? __lock_acquire+0x1384/0x2050 [ 82.533432][ T5112] ? __pfx_bch2_write_iter+0x10/0x10 [ 82.535339][ T5112] ? aio_write+0x4ff/0x7c0 [ 82.536985][ T5112] ? __pfx_lock_release+0x10/0x10 [ 82.538958][ T5112] ? rcu_read_lock_any_held+0xb7/0x160 [ 82.541115][ T5112] ? rw_verify_area+0x1c3/0x6f0 [ 82.543061][ T5112] aio_write+0x56b/0x7c0 [ 82.544751][ T5112] ? __pfx_aio_write+0x10/0x10 [ 82.546499][ T5112] ? __might_fault+0xaa/0x120 [ 82.548227][ T5112] ? __pfx_lock_release+0x10/0x10 [ 82.550126][ T5112] ? __fget_files+0x3f3/0x470 [ 82.551839][ T5112] ? __might_fault+0xaa/0x120 [ 82.553653][ T5112] io_submit_one+0x8a7/0x18a0 [ 82.555488][ T5112] ? __pfx_io_submit_one+0x10/0x10 [ 82.557479][ T5112] ? __might_fault+0xaa/0x120 [ 82.559350][ T5112] ? __pfx_lock_release+0x10/0x10 [ 82.561322][ T5112] ? __might_fault+0xaa/0x120 [ 82.563224][ T5112] ? __might_fault+0xc6/0x120 [ 82.565019][ T5112] __se_sys_io_submit+0x179/0x2f0 [ 82.566915][ T5112] ? __pfx___se_sys_io_submit+0x10/0x10 [ 82.569018][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.571268][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.573739][ T5112] ? do_syscall_64+0x100/0x230 [ 82.575621][ T5112] ? do_syscall_64+0xb6/0x230 [ 82.577516][ T5112] do_syscall_64+0xf3/0x230 [ 82.579313][ T5112] ? clear_bhb_loop+0x35/0x90 [ 82.581128][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.583273][ T5112] RIP: 0033:0x7f588c17def9 [ 82.585023][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.592466][ T5112] RSP: 002b:00007f588d01c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 82.595753][ T5112] RAX: ffffffffffffffda RBX: 00007f588c335f80 RCX: 00007f588c17def9 [ 82.598862][ T5112] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f588cfd2000 [ 82.601927][ T5112] RBP: 00007f588d01c090 R08: 0000000000000000 R09: 0000000000000000 [ 82.605093][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.608255][ T5112] R13: 0000000000000000 R14: 00007f588c335f80 R15: 00007ffeb9d33878 [ 82.611375][ T5112] [ 82.612629][ T5112] [ 82.613566][ T5112] Allocated by task 5112: [ 82.615202][ T5112] kasan_save_track+0x3f/0x80 [ 82.617016][ T5112] __kasan_mempool_unpoison_object+0x9e/0x160 [ 82.619289][ T5112] remove_element+0x129/0x1a0 [ 82.621210][ T5112] mempool_alloc_noprof+0x54e/0x5a0 [ 82.623296][ T5112] bio_alloc_bioset+0x26f/0x1130 [ 82.625310][ T5112] bch2_direct_write+0x5a3/0x3160 [ 82.627295][ T5112] bch2_write_iter+0x194/0x2480 [ 82.629250][ T5112] aio_write+0x56b/0x7c0 [ 82.630816][ T5112] io_submit_one+0x8a7/0x18a0 [ 82.632632][ T5112] __se_sys_io_submit+0x179/0x2f0 [ 82.634687][ T5112] do_syscall_64+0xf3/0x230 [ 82.636505][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.638856][ T5112] [ 82.639833][ T5112] Freed by task 5112: [ 82.641507][ T5112] kasan_save_track+0x3f/0x80 [ 82.643308][ T5112] kasan_save_free_info+0x40/0x50 [ 82.645362][ T5112] __kasan_mempool_poison_object+0xaa/0x120 [ 82.647727][ T5112] mempool_free+0x1c8/0x390 [ 82.649564][ T5112] bch2_direct_write+0x2a59/0x3160 [ 82.651611][ T5112] bch2_write_iter+0x194/0x2480 [ 82.653561][ T5112] aio_write+0x56b/0x7c0 [ 82.655262][ T5112] io_submit_one+0x8a7/0x18a0 [ 82.657163][ T5112] __se_sys_io_submit+0x179/0x2f0 [ 82.659176][ T5112] do_syscall_64+0xf3/0x230 [ 82.661029][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.663185][ T5112] [ 82.664117][ T5112] The buggy address belongs to the object at ffff88804d21cfc0 [ 82.664117][ T5112] which belongs to the cache bio-119 of size 1192 [ 82.669104][ T5112] The buggy address is located 224 bytes inside of [ 82.669104][ T5112] freed 1192-byte region [ffff88804d21cfc0, ffff88804d21d468) [ 82.674531][ T5112] [ 82.675501][ T5112] The buggy address belongs to the physical page: [ 82.678040][ T5112] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d21c [ 82.681591][ T5112] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 82.684943][ T5112] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 82.687884][ T5112] page_type: f5(slab) [ 82.689440][ T5112] raw: 04fff00000000040 ffff88803daf3c80 dead000000000122 0000000000000000 [ 82.692764][ T5112] raw: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000 [ 82.696092][ T5112] head: 04fff00000000040 ffff88803daf3c80 dead000000000122 0000000000000000 [ 82.699483][ T5112] head: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000 [ 82.702876][ T5112] head: 04fff00000000002 ffffea0001348701 ffffffffffffffff 0000000000000000 [ 82.706158][ T5112] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 82.709513][ T5112] page dumped because: kasan: bad access detected [ 82.712001][ T5112] page_owner tracks the page as allocated [ 82.714219][ T5112] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5112, tgid 5111 (syz.0.0), ts 81945977391, free_ts 0 [ 82.721782][ T5112] post_alloc_hook+0x1f3/0x230 [ 82.723637][ T5112] get_page_from_freelist+0x3045/0x3190 [ 82.725656][ T5112] __alloc_pages_noprof+0x256/0x6c0 [ 82.727506][ T5112] alloc_pages_mpol_noprof+0x3e8/0x680 [ 82.729422][ T5112] alloc_slab_page+0x6a/0x120 [ 82.731158][ T5112] allocate_slab+0x5a/0x2f0 [ 82.732787][ T5112] ___slab_alloc+0xcd1/0x14b0 [ 82.734453][ T5112] __slab_alloc+0x58/0xa0 [ 82.736143][ T5112] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 82.738213][ T5112] mempool_init_node+0x1ee/0x4e0 [ 82.740079][ T5112] mempool_init_noprof+0x3a/0x50 [ 82.742016][ T5112] bioset_init+0x2e8/0x820 [ 82.743760][ T5112] bch2_fs_fs_io_direct_init+0x67/0x90 [ 82.745868][ T5112] bch2_fs_alloc+0x1eab/0x20b0 [ 82.747735][ T5112] bch2_fs_open+0x8cc/0xdf0 [ 82.749510][ T5112] bch2_fs_get_tree+0x731/0x1700 [ 82.751395][ T5112] page_owner free stack trace missing [ 82.753362][ T5112] [ 82.754310][ T5112] Memory state around the buggy address: [ 82.756477][ T5112] ffff88804d21cf80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 82.759545][ T5112] ffff88804d21d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.762541][ T5112] >ffff88804d21d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.765683][ T5112] ^ [ 82.767670][ T5112] ffff88804d21d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.770692][ T5112] ffff88804d21d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.773597][ T5112] ================================================================== [ 82.867829][ T4535] Bluetooth: hci0: command tx timeout [ 83.129978][ T5112] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.132863][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 83.136724][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.140868][ T5112] Call Trace: [ 83.142171][ T5112] [ 83.143317][ T5112] dump_stack_lvl+0x241/0x360 [ 83.145180][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.147210][ T5112] ? __pfx__printk+0x10/0x10 [ 83.149104][ T5112] ? preempt_schedule+0xe1/0xf0 [ 83.151074][ T5112] ? vscnprintf+0x5d/0x90 [ 83.152805][ T5112] panic+0x349/0x880 [ 83.154360][ T5112] ? check_panic_on_warn+0x21/0xb0 [ 83.156329][ T5112] ? __pfx_panic+0x10/0x10 [ 83.158078][ T5112] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 83.160317][ T5112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.162784][ T5112] ? print_report+0x502/0x550 [ 83.164635][ T5112] check_panic_on_warn+0x86/0xb0 [ 83.166567][ T5112] ? bch2_direct_write+0x2a70/0x3160 [ 83.168620][ T5112] end_report+0x77/0x160 [ 83.170277][ T5112] kasan_report+0x154/0x180 [ 83.172059][ T5112] ? bch2_direct_write+0x2a70/0x3160 [ 83.174112][ T5112] bch2_direct_write+0x2a70/0x3160 [ 83.176103][ T5112] ? __pfx_bch2_direct_write+0x10/0x10 [ 83.178257][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.180258][ T5112] bch2_write_iter+0x194/0x2480 [ 83.182147][ T5112] ? mark_lock+0x9a/0x360 [ 83.183862][ T5112] ? __lock_acquire+0x1384/0x2050 [ 83.185839][ T5112] ? __pfx_bch2_write_iter+0x10/0x10 [ 83.187707][ T5112] ? aio_write+0x4ff/0x7c0 [ 83.189363][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.191136][ T5112] ? rcu_read_lock_any_held+0xb7/0x160 [ 83.193172][ T5112] ? rw_verify_area+0x1c3/0x6f0 [ 83.195007][ T5112] aio_write+0x56b/0x7c0 [ 83.196590][ T5112] ? __pfx_aio_write+0x10/0x10 [ 83.198393][ T5112] ? __might_fault+0xaa/0x120 [ 83.200218][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.202066][ T5112] ? __fget_files+0x3f3/0x470 [ 83.203862][ T5112] ? __might_fault+0xaa/0x120 [ 83.205687][ T5112] io_submit_one+0x8a7/0x18a0 [ 83.207501][ T5112] ? __pfx_io_submit_one+0x10/0x10 [ 83.209491][ T5112] ? __might_fault+0xaa/0x120 [ 83.211331][ T5112] ? __pfx_lock_release+0x10/0x10 [ 83.213325][ T5112] ? __might_fault+0xaa/0x120 [ 83.215120][ T5112] ? __might_fault+0xc6/0x120 [ 83.216932][ T5112] __se_sys_io_submit+0x179/0x2f0 [ 83.218798][ T5112] ? __pfx___se_sys_io_submit+0x10/0x10 [ 83.220904][ T5112] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.223256][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.225669][ T5112] ? do_syscall_64+0x100/0x230 [ 83.227455][ T5112] ? do_syscall_64+0xb6/0x230 [ 83.229302][ T5112] do_syscall_64+0xf3/0x230 [ 83.231075][ T5112] ? clear_bhb_loop+0x35/0x90 [ 83.232919][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.235177][ T5112] RIP: 0033:0x7f588c17def9 [ 83.236904][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.244371][ T5112] RSP: 002b:00007f588d01c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 83.247638][ T5112] RAX: ffffffffffffffda RBX: 00007f588c335f80 RCX: 00007f588c17def9 [ 83.250496][ T5112] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f588cfd2000 [ 83.253287][ T5112] RBP: 00007f588d01c090 R08: 0000000000000000 R09: 0000000000000000 [ 83.255994][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.258764][ T5112] R13: 0000000000000000 R14: 00007f588c335f80 R15: 00007ffeb9d33878 [ 83.261531][ T5112] [ 83.262905][ T5112] Kernel Offset: disabled [ 83.264555][ T5112] Rebooting in 86400 seconds..