program: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3e505f89, 0x3, 0x20000000, 0x2, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800800, &(0x7f00000000c0)={[{@btree_node_prefetch}, {@discard}, {@acl}, {@fsck}, {@errors_continue}, {@inline_data}, {@journal_transaction_names}, {@reconstruct_alloc}, {@shared_inode_numbers}, {@fix_errors={'fix_errors', 0x3d, 'ask'}}], [{@dont_measure}]}, 0xfe, 0x596a, &(0x7f000000bcc0)="$eJzs3W2QXFXdIPBzu3syPTN5mQSQCDIZAiiCmglvhS+l0fWtAKlYWEpYFAYywWgSUkkQCCjBBRcKsNDSUtQPaCG1aLSoglUiJYJsYBWlWF1qC6mVXfSDW8iSEshD+fg4T/XMPT09d/rO7enpCQn5/SqZ2+f07f85997Tt+//dM90AAAA4KDwyPVb9559xAd+/cWRl6/58M82Xhv6ymP11bhCf7q84tXqIftSd2Xp2DI7Lt501Q/+PHjx+351d+/3X9m99uh1f3j/IRff/5kzdt327YdeWnDvP58tihvH0wkT5eT5JITqz/d8/Uu7Hzu8VlcbeeWkf0cIi5MlDy1OMiGG/h5CWFvv5+Q773n55HW15bU3dU+qX5QJYrwf3GrHuTawtu+9/MTwx/euue63y378o66dz+2YWCWpNoynEBZe2Pj4rhBCT/q/Jo62pfHB6XJ1CKG34XGnF/TrmBb7vyKnfGS6nJcu+wrixPuXZ8qlzHrZctSVWfYWtDdbef1od70i8zPl7MlotvL6GesXp8ufpssTZhi/XD+fhlISKvXub0gmxkhoOG5JSMaOZbVeLtWPbUi3P1NOMuVSplzuymzXWLvpQCsnyeT6uF6mPp6OK2n90Y3n6ibOyal/fbqspk/UV2I5ZG+M65tyo75dY2K/9kzTl32h1HAOalZfP/DpwehL7+tLlkx5zGgT8b7da27uma4fyd1JGj8Za3Om8bf/ZvH8T/3wxsuW5sW/sJTG/9fRduI/c+bjL5x34/e+lRv/1hi/3Fb/T3qg9/kzH75+eX9e/D1x/1Taij/87KO3LDv0op25/b89xq+2FX/Vrse7F+x94MGc8CEZivunp634T7/zg3+668n7nsvdPyHG720r/vm7Nn+5e2Dv8bnxH4z7p6+t+M+8uPO0pwYG/jKYF/+JGH9BW/Hv3HHbO+5YdNMZucd3ddw//W3FP+vY+6+bv/e+o/LOncntnXrlBDg4HZJeY92QltvNM2erIV/45mBl/Dpwfvp/QScbylx81tpZWLsx2uyqFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADac9iJ//1D//fj/c9X0nJ3euPp0vgy1s8LIekJIWzdNrxl2/pNlwx+5tLLtmwa3jA4vG1wZNO2LVcOnvKWwS0jmzcMX1m7d+itJ4cQukJYEpKxxy9JjprSdvfo6Gipf3JdbO8/HLvzj8ed/v/+GsLQYb8fqOT2f8VtG+84tMnPjGTV6Hs2Xnb270/9brpd/Wm/+pv0a3R0dDTk9Ov/n/uPO76658/HhzD0uun69ejT7/7FpA6NVUzESZW6w3iHupPepv2o9zrtT9xflXXrN4wMTb9/a48v52zHf7zqub+vu+Ir/xjfv9Xc7Whx//asGt1Q+saas/7tG1ePVxT169U67kX7O25F7F/cf9V0fy9Mt2thznZVcrbr+t8++OTPj7jxpR1hqPLisqltF21XVzoAupLXt9RubKE3WTypvpquH494fNyKbRs3r9h65fa3rt84fMnIJSOb3r7ylJWnDZ162qkrxrZ8RYe3P7b/xha3f9+Mp0Wf2/HT+LO18VTUr6L9UetX8f5o7FHe86/3nC997e23PXz2eEXROI9r188n6bK3dpxXhobxNnVfNduuov0QQhhsth9eeOmMcPj/Wn9d0Xmo8cg0/sxIVo0+tvxv3z39O0vfNV6xT87zjR1q8zxf7/VEf8b2VzU9HqP76f7tDuV0u/qa9mvlYw933fzIXz9f79+8eeGK4W3btqwc/zk/7en85Mim/crWxu1aNvazHNLdEurDtMl4DWOXIuP9y54/4+rZvdqX3teXLGm6XVnxvt1rbj6ufP4vH8nb08nd4y32hAXjy+QNOWtuyDywXO9ws/b31+df0fgY+NB37v34vT85Zcr4OGn8Z9F2JTnb9eMn7/za97/yn3/Sue360Lsf7//b//70ceMVB8p5pd7rtD9J43nlpBCKnn/LQvPtyH3+lZpvT9HzL9vOxPrN4w1myn2h3Nbz9aQHep8/8+Hrl+c+X/e0+ny9elKpXPB83V/GT/b5lVQm92Punl+TBkqyavRXNxyy46FrVh8xXlE0rutrNxvXJ7eQf+Rs1y/Oe2rg0sH/9D87d974wVvuueAPw6u+MF7R/nGPfenMca+m+7eas3/rvY55Z+P+fdvFl25YO16//17/psuC/CeeSrZeuf2zwxs2jGzZ2tp2tfp6GtvJ7uV2X0/j2W1JwXaVpmzX3N1oZX+1+nyL/V/b9v6a/HzrC0lbrwvbf7N4/qd+eONl/VMelTZ0YSmNX2or/jNnPv7CeTd+71u58W+N8SttxR9+9tFblh160c7c+LcnafxqW/FX7Xq8e8HeBx7MjT8U+9/TVvyn3/nBP9315H3P5cYPMX5fe/v/xZ2nPTUw8Jfc+E8kaTu1a6QQ7nn55HXj5SR0pc+32I+uSf0K2XKSKZcy5XJjuTQ+11pvoJwkk+vjemn90Q19aeYTOfXxKqy6dHz5SiyH7I3p6/c3pYZzf7P6outUAIDXuvj+f7wGje//j6QXSvkzDTBhtnnY0py4MQ+bmM+ZN+n+pWn8+Pg4DzjwtjBUW147OH6hP9P3EeLzITvPGds5/pjJMdqd5yyaf1+eKcd+jc+XVxry0NTUvKYSWph/n9rO9PPvmc0vnh8fvGFKtwYb5q2yx68rnTFr9nmHTH8rtQh54yM7LxY/zzGwMKwea6/F8ZH9HE08DtnP0cR2jsicONv9HM1sx0fs9jTjY6zLxe9vTD1+YZr9O3H8mkfLHr8ZHO9qbf25fn+2A/OGTU9p+27ecG7fDzMvmRM/fYLt7/OGsT5uR6XF+cSP59R3aj4xni5iv/ZM05d9wXwi8FoV8//4GlHL/2sX4P+SWa/oOjR71Rjj5X5OqNy8P0V5x9TP6fW29Tp+/q7NX+4e2Ht87nXOg61+7mfzpFJvwed+ivbjcZly4X7MmaApyvey7RTt9+znMvrCgrb2+507bnvHHYtuOiN3v68efyEt3u9fm1RaULDfD4B8oXl8+cJBkS/M9fzZq5aPpB98mqt85GM59TPNR3qn3Khv15gDLh/p2rf9AgAOHDH/r79/lub//yeukF5HFOWtJ2TKMV5u3ppzfZKXt34kXV6RWb8v/Y2KmV43n3Xs/dfN33vfUbl5y+2t5qH/ZVKpvzAPzcube6as39Mkb87NI1Z35vPiuXlEPc+aXZ6Y2/96nji7PD03fj1Pb5JHl4vjxzw6d//U8+jZzQPkxq/PAxzoeW7BfF2msVhsdb7uNZtHp78+O1d59Dk59TPNo/um3Khv1xh5NADAqyvm//EyLub/D2fWm+377Ll5QYeu27N/D6Qe/4l9lVfOdd43u/d/i/PWuc7r53pe4kDPi2f3eYrieaG5nSc76PPitNHJefFET+TFAADsD2L+35OW8/P/2eUnzfK3rkn5ify8afyDND+Pvx6y/+TnB/r8136d/38gHOj5fyyH7I1x7ef/+/YvsMj/AQBe22L+H3/tMf79v/+WlrN/t16enhP/IM3T433y9E7l6Z2fZws+B/DqzgP0TKzvcwAAALwausYypam/Z//JdJn9Pfu838s/L2f9VlXSy+OLtm0ZGbngss1rh7eNXLDp0rUjWy+4fMv6bdtGNo2vN9u8MTdvSfPGrlBJ90fz9bJ526L0fblFOX8PIbt+DHvk2I2pfw8h22xPwd8RmDh+rfU37/iVplm/2fjIO9558T+Rs35UP/4Xf/qkC9ZtvWD9pvXb1g9vWL99ZPJ6tay1dwbfmxl3y4y+L/XRp3fUhszYrbFvzcwozfz7O9vsx6QfU/64cKm2v5Pc41/rR5Lpx+K0J4vzvv8gp9+//h9f/dyxo/+4K4Shw8pvmGm/J4dcNfpfzx35yLZHfr+51v/StP2vr5n2q+j7SrPrx+2pbLh067YT11162absN0q2J85nlOrlOZrPSJ/+5RbnJ87PqZ/p5xTKU27sn1qenwAAYJL4/n+8no3vH34lvYCK9a3n6bN7/zg3Tx9qLU/Pfi9ZUZ6eXT9ub6t5enWWeXq2/aI8vdn6zfL0vLw7L/7HctafqdbHyew+55E7Ti5sbZxkv8+gaJxk15/pOElmOU6y7ReNk2brNxsnecc9L/5Hc9bP0/p4mN3ncnLHw62tjYc3Z8pF4yG7/kzHQ2mW4yHbftF4aLZ+s/GQd3zz4p+ds36rJo+P2sAYGxcjF1x+6ZbPNqw3199/Mfv+ze33f7Sr9f7P7ee+5r7/c/u5srnv/+w+V5bb/ydmNxPWev/n9vtd2rXP5mvTD5sVff6saB53TU79TOdx5025sX8yjwuvnpj/x7d7Yv5/U7rs9NtAB/73pPkes6bxO/Q9ZkXXMV7Pp2lsP+D1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA13ZWlY8tHrt+69+wjPvDrL468fM2Hf7bx2jdd9YM/D178vl/d3fv9V3avPXrdH95/yMX3f+aMXbd9+6GXFtz7z2cLA/eP/ayckBarISTPJyFUf77n61/a/djhtbokhFBO+neEsDhZ8tDiJBNh6O8hhLX1fk6+856XT15XW157U/ek+kWZINntCn3l2J/GfoZwReEWcQCqpuNs+97LTwx/fO+a63677Mc/6tr53I6JVZJqw3gKYeGFjY/vCiH0pP9r4mhbGh+cLleHEHobHnd6Qb+OabH/K3LKR6bLeemyryBOvH95plzKrJctR12ZZW9Be7OV14921ysyP1POnoxmK6+fsX5xuvxpujxhhvHL8X8SSkmo1Lu/IZkYI6HhuCUhGTuW1Xq5VD+2Id3+TDnJlEuZcrkrs11j7aYDrZwkk+vjepn6eDqupPVHN56rmzgnp/716bKaPlFfieWQvTGub8qN+naNif3aM01f9oVSwzmoWX39wKcHoy+t60uWTHnMaBPxvt1rbj6ufP4vH+nP6Udyd5LGT9qKv/03i+d/6oc3XrY0L/6FpTR+qa34z5z5+Avn3fi9b+XGvzXGL7cV/6QHep8/8+Hrl+funz1x/1Taij/87KO3LDv0op25/b89xq+2FX/Vrse7F+x94MHc/g/F/dPTVvyn3/nBP9315H3P5cYPMX5vW/HP37X5y90De4/Pjf9g3D997Y2fF3ee9tTAwF8G8+I/EeMvaDn+13sm4t+547Z33LHopjNyj+/quH/62+r/Wcfef938vfcdlXfuTG7v1CsnwMHpkPQa64a03G6eOVsN+cI3Byvj13zz0/8LOtlQRq2dhXMYHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA16bfXX3KJ899z0fXVJIQkpx1RpuI95XnrVo12Ea7w88+esuyQy/a2Vi3tI04AAAAQLGYh5fqNdWwNFye9IQjm64f5wiOjKVkcn12DiHGyc4RtBun1KE45Q7FqXQoTleH4szrUJzuDsWpFsSphtbi9EwTp1IbFS32p3fa/rQep69DceZ3KM6CDsVZ2KE4izoUp3/aOK2Pw8UdirOkQ3EO6VCcQzsU57AOxXldh+Ic3qE42TnlmY7DBemaR+TFGbtRLoxTScr1O5rNpx+etnPULNvpK2hnQdHrcYvt9LTYzjGZx5Vm2E61xXbeOMt2khbbefMs2ykVtBPH7RXZ/sV2YqnF8X9lh+Js71CcqzoU5+oOxfl8h+J8oUNxrpllHIBWxfx/It/rD92Vd4Xe9IyTnQWI+e6ysZ9TX+/yTkgx3hsy9fOK4mUT9Uy8ZTPtX3YCIRNveaa+a1K8Sj0fmSZetTHecZk7C7c3O6GQ6d8JmfruonjZiQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmEO/u/qUT577no+uCUmo/WtqtIl4X3neqlWDbbS7e83Nx5XP/+UjjXXdlTYCAQAAAIViHt5Vr6mG7srK0J3Mm7ReNZ0HqKblcv/4cmBhWF1bJoOlsXJvsnjax1XSx63YtnHziq1Xbn/r+o3Dl4xcMrLp7StPWXna0Kmnnbpi3foNI0PjP0PobhZv0UR5VQhj0w9br9z+2eENG0a2bB2vz/Z/adqPpWk5SR838LYwVFtem/Z/SUH/S1Pam7sbxUcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/p1du4uRqywfAP6emdmZYaF/9h++hoYuk36QqkTbupiihDmJiSTQNt2QmBl0JY20kbilDbSk4ghNBGyjMYE0aWp6YU0lgsQbPoQY+UiTGkSbuLUxQJQLvdCAYgrphZaM6e6c2ZnZOZ11aGipv9/FOWee93nf57xzscnz7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLim6mMT1cp4bTgKIUrJafSQjGXzcVweoO6Xn9/6/cLoieXtsUJugIUAAACAvpI+fKgVKYZCLhuy4crpT4tD20CY7fsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/PVP1sYlqZbx2YRRClJLT6CEZy+bjuDxA3TffffIzr42O/rU9VhpgHQAAAKC/pA/PtCLFUApLwlB0ZUdecjawsGt+d16yzqJ55nWfHaTlLZln3jXzzPtYn7x1zfuOAAAAAB99Sf+fa0VGQiG3ILX/79fXJ3lXd+Vlm/dBfisAAAAAfDBJ/19oRUqhkCu1+vX59vuLu/KS+f3+b5/MX5Yyv9//89c27/5PDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHVP1sYlqZbyWjUKIUnIajUZm9nFGMpbNx3F5gLqrXhj++y2HHlrcHivkBlgIAAAA6Cvpw2db72Io5IbDULhwutkfvWn/0198+tmxEMJMm5/Phx0btm27e9XMNclb+eqhoe8dfvtbc/JWzlzP2gYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAzZqo+NlGtjNcuiEKIUnIaPSRj2Xwclweo+8bnvvDnx48991Z7rDTAOgAAAEB/SR8+2/sXQynkQz5cPv2pvdc/JdM1P+3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/3PON+76+YXJy490ePHg4Mw/FEMI58Bof7OFs/2UCAADOtKtDFBr/pSvWn+23BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzgVT9bGJamW8VoxCiFJyGj0kY9l8HJcHqBs/f6Sw4MQLL7XHSgOsAwAAAPSX9OGzvX8xlMJQGAqXTX/qdSYw3f+PfIgvCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxTpupjE9XKeG1BFEKUktPoIRnL5uO4nLp6MXXksZ37Pnvw4u/e3B4r5AbaAgAAANBH0ofnW5FiKOQ+Hgrhqubnyc4JUbZ5730uMDtva8e04XnPq3fMy8573q6uneWau5mZl5xEZEdm7q155bnzym3zSqFVvtwxL+zpmLWgz3sGAAAAOIuS/r/QioyEQq7Q1uf+pCN/RJ8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSYqo9NVCvjtSgKIUrJafSQjGXzcVweoO59v/n/i77y093b22OlAdYBAAAA+kv68NnevxhKYVH4v7Bouu8PI535Sd4/qicPPvrPvywPYcXlR0dz3cv+MHn41Rs3vth9CSHTmZ0J4eJmvSil3q9/9+i9SxsnHw9hxWXZq+bUC6ev17lk3HimunHttsNHt/b5cgAAAOA8kfT/Q63ISCjk7krt/5POu0//3zLdgF98786fX9q8NjvyrhmZkWa9TEq9zy998k/LVv/t7VP9/+nqfWrf5oOXdhSciXSJ4kZl8/Z1R687kEl2PVM/21U/+V6+9M23/rVpxyMnZ+oXQ7EZX5jrVX/utcsFcWMys7e25v299c76uZT9P/Tbl479cuHu907Vf/fq4Vb9a06z/9PXH7714T3X7zu0rrN+CKHcq/47790crvjDnQ9273+4a+H2b7792iWK/91YfPzA6v2lGzrrR131k+//Z8ce2/PjR77zbFI/+a3I8iXzrZ/prN94ZdclO19+YP3CzvqZlP2/eNtro1vK3/599/7v6Fg1l/oWc/bfeOLap25/fUN8f/cQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+WWqPjZRrYzXMlEIUUpOo4dkLJuP4/IAdd+85cg7t+3+0Q/aY6UB1gEAAAD6S/rw2d6/GEohH/JheLrvf6a6ce22w0e3hpGZ0ah5z01uuWfbJzZt2X7XHWfpzQEAAID5Svr/XCsyEgq5pWGo2f9XNm9fd/S6A5mk/88k/f+mOyc3rgitvFd2XbLz5QfWL2ydE4Qw/bOA4qm8T8/m3XTjkZHjf/zasp55q2bzXl18/MDq/aUbkrzQnrcytM4nnrj2qdtf3xDf33q/9rxPfnXLZPN4Ill3+NaH91y/79C61j6a9+HmukneZGZvbc37e+tJXrZ5Lzb3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMNVUfm6hWxmshG0KUktPoIRnL5uO4PEDdNUt/8eBFJ55b1B4r5AZYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sMOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9usvRKoqjgP4OTO77bizq7satBWtqxWFPSQFEfVSUREaIfRkSFiaD1EQRBT20BoaiRW9BFkvEhVUWwgFuUmixRr9k156qKDAeghEWig36aGNnTl3nL3ObepqQfn5wHD2d+be7/3de8/c2QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5T+npGGuPBbQ/O3HbeTZ88fs+xx2557/4tlzz6+g9jG274eHf/K8enNi7b9PWNSzbsvXfV5M4XD/wy+M7vh7sGP9IcVqSyFkI8GkOovT/93BNTn54zNxdDCNU4NB7CcFx8YDjmElb+FkLY2Opz/ptvH7ty09y4ZUffvPlFuZD8eYV6NeunaWh+v/y/1NI62zzz8GXh2+vXbv186Vtv9k4cGT+xSay1racQFq5v3783hLAgveZkq20k2zmNa0II/W37Xd2lrwv/Yv+XF9Tnp/GsNNa75GTvL8/Vldx2+TrTmxub5/rr7OxslwOXVNRH2e26GcjV+YfRqSrqM5sfTuO7aVzxN/Or2SuGSgw9rfbviyfWSGhbozHExr2stepK696GdP65OubqSq6u9ubOq3HctNCqMc6fz7bLzWeP4540v6z9Wd3B7QXz56axlj6ox7M65P9oqp/0R+u8GrK+pv+kl39Dpe0Z1Gm+dePTzainuXpcfNI+sx1k702tferi6roPDg4V9BF3x5QfS+Vv/mx44M43tj80UpS/vpLyK6Xyv1t96Kc7tr/0QmH+s1l+tVT+Ffv6j67+cNvywusznV2fnlL5dx3+6OmlZ9890eleN/J3Zfm1UvnXTR7qG5zZt7+w/5XZ9VlQKv+ba2/+/rUv9xwpzA9Zfn+p/HWTDzzTNzpzaWH+/uZHod5YoSXWz88TV301OvrjWFH+F9n1H+yQH7vmvzq+85qXF+1YVbg+12TXZ6hU/7detHfrwMyeC4qenXHX6frmBDgzLUn/Yz2Z6rK/M09V2++F58d6mt9AA+k1eDoPlDN3nIX/YD4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzBDhyQAAAAAAj6/7odgQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPBQAA///sZh2j") [ 74.942582][ T48] Bluetooth: hci0: command tx timeout [ 75.275380][ T5326] loop0: detected capacity change from 0 to 32768 [ 75.373446][ T5326] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=ask,reconstruct_alloc [ 75.383585][ T5326] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.386967][ T5326] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size [ 75.386967][ T5326] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 75.402281][ T5326] invalid btree id 251 (max 63), fix? [ 75.405339][ T5326] bcachefs (loop0): dropping and reconstructing all alloc info [ 75.415488][ T5326] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 75.415527][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 75.415545][ T5326] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647 [ 75.432197][ T5326] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 75.437476][ T5326] bcachefs (loop0): flagging btree xattrs lost data [ 75.443014][ T5326] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 75.448610][ T5326] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 75.456641][ T5326] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 75.467623][ T5326] ------------[ cut here ]------------ [ 75.471814][ T5326] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:218:18 [ 75.475104][ T5326] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 75.479946][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 75.479971][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.480000][ T5326] Call Trace: [ 75.480010][ T5326] [ 75.480020][ T5326] dump_stack_lvl+0x241/0x360 [ 75.480146][ T5326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.480165][ T5326] ? __pfx__printk+0x10/0x10 [ 75.480202][ T5326] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 75.480286][ T5326] __bch2_btree_node_hash_insert+0x1b1d/0x1b80 [ 75.480325][ T5326] ? __bch2_btree_node_hash_insert+0x20d/0x1b80 [ 75.480355][ T5326] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 75.480396][ T5326] bch2_btree_node_hash_insert+0x7e/0xc0 [ 75.480426][ T5326] bch2_btree_root_read+0x5c6/0x7a0 [ 75.480456][ T5326] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 75.480492][ T5326] ? bch2_current_has_btree_trans+0x142/0x180 [ 75.480516][ T5326] read_btree_roots+0x3d3/0xa70 [ 75.480558][ T5326] ? __pfx_read_btree_roots+0x10/0x10 [ 75.480577][ T5326] ? bch2_reconstruct_alloc+0x334/0x5d0 [ 75.480616][ T5326] bch2_fs_recovery+0x260f/0x3de0 [ 75.480654][ T5326] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.480711][ T5326] ? __pfx_lock_release+0x10/0x10 [ 75.480735][ T5326] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 75.480756][ T5326] ? __pfx_lock_release+0x10/0x10 [ 75.480790][ T5326] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 75.480812][ T5326] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 75.480830][ T5326] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 75.480865][ T5326] ? llist_reverse_order+0x72/0x90 [ 75.480893][ T5326] bch2_fs_start+0x37c/0x610 [ 75.480928][ T5326] bch2_fs_get_tree+0xd8d/0x1740 [ 75.480978][ T5326] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.481007][ T5326] ? generic_parse_monolithic+0x387/0x400 [ 75.481026][ T5326] ? rcu_is_watching+0x15/0xb0 [ 75.481041][ T5326] ? apparmor_capable+0x13b/0x1b0 [ 75.481061][ T5326] vfs_get_tree+0x90/0x2b0 [ 75.481086][ T5326] do_new_mount+0x2be/0xb40 [ 75.481102][ T5326] ? __pfx_do_new_mount+0x10/0x10 [ 75.481121][ T5326] __se_sys_mount+0x2d6/0x3c0 [ 75.481138][ T5326] ? __pfx___se_sys_mount+0x10/0x10 [ 75.481151][ T5326] ? exc_page_fault+0x590/0x8b0 [ 75.481204][ T5326] ? __x64_sys_mount+0x20/0xc0 [ 75.481218][ T5326] do_syscall_64+0xf3/0x230 [ 75.481238][ T5326] ? clear_bhb_loop+0x35/0x90 [ 75.481255][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.481270][ T5326] RIP: 0033:0x7fb069d8e58a [ 75.481283][ T5326] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.481293][ T5326] RSP: 002b:00007fb06ac8ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.481308][ T5326] RAX: ffffffffffffffda RBX: 00007fb06ac8eef0 RCX: 00007fb069d8e58a [ 75.481315][ T5326] RDX: 0000400000000180 RSI: 0000400000000540 RDI: 00007fb06ac8eeb0 [ 75.481321][ T5326] RBP: 0000400000000180 R08: 00007fb06ac8eef0 R09: 0000000000800800 [ 75.481328][ T5326] R10: 0000000000800800 R11: 0000000000000246 R12: 0000400000000540 [ 75.481336][ T5326] R13: 00007fb06ac8eeb0 R14: 000000000000596a R15: 00004000000000c0 [ 75.481355][ T5326] [ 75.613967][ T5326] ---[ end trace ]--- [ 75.615789][ T5326] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 75.618874][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 75.623000][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.627722][ T5326] Call Trace: [ 75.629288][ T5326] [ 75.630559][ T5326] dump_stack_lvl+0x241/0x360 [ 75.632473][ T5326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.634629][ T5326] ? __pfx__printk+0x10/0x10 [ 75.636561][ T5326] ? lockdep_hardirqs_on+0x99/0x150 [ 75.638682][ T5326] ? vscnprintf+0x5d/0x90 [ 75.640389][ T5326] panic+0x349/0x880 [ 75.641990][ T5326] ? check_panic_on_warn+0x21/0xb0 [ 75.644075][ T5326] ? __pfx_panic+0x10/0x10 [ 75.646189][ T5326] ? _printk+0xd5/0x120 [ 75.648095][ T5326] ? __pfx__printk+0x10/0x10 [ 75.650433][ T5326] check_panic_on_warn+0x86/0xb0 [ 75.652355][ T5326] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 75.654854][ T5326] __bch2_btree_node_hash_insert+0x1b1d/0x1b80 [ 75.657270][ T5326] ? __bch2_btree_node_hash_insert+0x20d/0x1b80 [ 75.659802][ T5326] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 75.662360][ T5326] bch2_btree_node_hash_insert+0x7e/0xc0 [ 75.664787][ T5326] bch2_btree_root_read+0x5c6/0x7a0 [ 75.666796][ T5326] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 75.669081][ T5326] ? bch2_current_has_btree_trans+0x142/0x180 [ 75.671975][ T5326] read_btree_roots+0x3d3/0xa70 [ 75.674325][ T5326] ? __pfx_read_btree_roots+0x10/0x10 [ 75.676582][ T5326] ? bch2_reconstruct_alloc+0x334/0x5d0 [ 75.678867][ T5326] bch2_fs_recovery+0x260f/0x3de0 [ 75.681066][ T5326] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.683346][ T5326] ? __pfx_lock_release+0x10/0x10 [ 75.685438][ T5326] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 75.687816][ T5326] ? __pfx_lock_release+0x10/0x10 [ 75.690221][ T5326] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 75.692449][ T5326] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 75.694540][ T5326] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 75.696518][ T5326] ? llist_reverse_order+0x72/0x90 [ 75.698523][ T5326] bch2_fs_start+0x37c/0x610 [ 75.700357][ T5326] bch2_fs_get_tree+0xd8d/0x1740 [ 75.702430][ T5326] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.704721][ T5326] ? generic_parse_monolithic+0x387/0x400 [ 75.707216][ T5326] ? rcu_is_watching+0x15/0xb0 [ 75.709102][ T5326] ? apparmor_capable+0x13b/0x1b0 [ 75.711088][ T5326] vfs_get_tree+0x90/0x2b0 [ 75.712882][ T5326] do_new_mount+0x2be/0xb40 [ 75.714847][ T5326] ? __pfx_do_new_mount+0x10/0x10 [ 75.717236][ T5326] __se_sys_mount+0x2d6/0x3c0 [ 75.719652][ T5326] ? __pfx___se_sys_mount+0x10/0x10 [ 75.721823][ T5326] ? exc_page_fault+0x590/0x8b0 [ 75.723828][ T5326] ? __x64_sys_mount+0x20/0xc0 [ 75.725697][ T5326] do_syscall_64+0xf3/0x230 [ 75.727560][ T5326] ? clear_bhb_loop+0x35/0x90 [ 75.729617][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.732191][ T5326] RIP: 0033:0x7fb069d8e58a [ 75.734139][ T5326] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.741736][ T5326] RSP: 002b:00007fb06ac8ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.745672][ T5326] RAX: ffffffffffffffda RBX: 00007fb06ac8eef0 RCX: 00007fb069d8e58a [ 75.749480][ T5326] RDX: 0000400000000180 RSI: 0000400000000540 RDI: 00007fb06ac8eeb0 [ 75.752623][ T5326] RBP: 0000400000000180 R08: 00007fb06ac8eef0 R09: 0000000000800800 [ 75.756182][ T5326] R10: 0000000000800800 R11: 0000000000000246 R12: 0000400000000540 [ 75.759949][ T5326] R13: 00007fb06ac8eeb0 R14: 000000000000596a R15: 00004000000000c0 [ 75.763045][ T5326] [ 75.764986][ T5326] Kernel Offset: disabled [ 75.767317][ T5326] Rebooting in 86400 seconds..