program: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r9 = socket(0x2a, 0x2, 0x2) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0xc, 0x1, 0x7f, 0x60, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x6, 0x662}}) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf25000000000c000300030000000000000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="5ce1af56", @ANYRES32=r11, @ANYBLOB="0800090002000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000c00}, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000100)={@local, 0x0, r12}) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x818841, &(0x7f0000000240)=ANY=[@ANYBLOB="7265636fb83fc2dcb6c1c13e16624047766572795f706173735f6c6173743d636865636b5f62747265655f6261636b706f696e746572732c6a6f75726e616c39666c7573685f64697361626c65642c6572726f72733d636f6e74696e75652c696e6c696e655f646174612c7374725f686173683d736970686173682c6e6f6368616e6765732c0f4de126d9da18ba52beb40f9e6e2e936e6f636f772c7265636f6e7374727563745f61", @ANYRES8=r13], 0x1, 0x5990, &(0x7f0000000ac0)="$eJzs3X+QXFW9IPBzu3synZn8mAR4RJDJEMh7PHiSCb8K5dUz7+17+gp4VCxeKWGjMJAJBpOQSoKQgBJccKEACy0tBf0DLaQWjRZVsEqkRH5swipKsbrUFlKru+hWuYUsKYEsZbnO1kzf0+m503duT3cPJPD5VDK37+nb3/O9557uvuf0nekAAADAO8K+m7cduOCYf/rJZ0Zfv+Gff7DpxtBfniivxg0G0uW1b1WGvJl6K0smltl+8VfXfeu3Q5f/w48f6PvmG3vXHb/+l/94xOWPXHnunru++vhr8x/684tFcWN/OvngevJyEkL1h/u/9Nm9Tx89XpaEEMrJwK4QFiWLH1+UZEIM/zGEsC5dWZK588HXT18/vrzxtt5J5Qsz2+nv72zVtJ/tPHDNKeFXf7/mpp8t/e53ena/tOvgJkm1oT+FsODSxsf3hBDmpv/Hxd4W+2PsPqtDCH0Njzu7IK8TWsx/Rc76selyTrrsL4gT71+WWS9ltsuuRz2ZZV9BfZ3Ky6Pd7YrMy6xnX4w6lZdnLF+ULr+fLk+eYfxy/J+EUhIq9fQ3Jgf7SGg4bklIJo5ltb5eqh/bkO5/Zj3JrJcy6+WezH5N1Jt2tHKSTC6P22XK4/OpkpYf3/ha3cSFOeXvSpfV9In6RlwP2Rs1/VNu1PdrQsxr/zS5TLiyaIPOlBpeg5qV1/tZejD6033oTxZPecxYE/G+vWtuX15e+8S+gZw8kgeSNH7SVvydP10072PfvvXq7Pt6Pf6lpTR+qa34vz7vmVcuvvUbdx+dF//OGL/cVvzTHu17+bwnb16W1z6xe/WHSlvxR1586o6lR162O7d97ontX20r/qo9z/TOP/DoY7nHdzi2z9y24r9wzgd+c/9zD7+UGz/E+H1txV+7Z8vnegcPnJQb/7HYPv3t9Z9Xd5/1/ODg74by4j8b489vK/59u+56370Lbzs39/iuju0z0Fb880985KZ5Bx4+Ljf/e7r1zgnwznREeo51S7o+3Tizd5pxZqcaxgtfGarUzvnmpf/nd7OizMnneD0LuhkfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEIIR53ynz/4Pz888HIlXe9Nb7xQqi1j+ZwQkrkhhG3bR7Zu37D5iqErr7p66+aRjUMj24dGN2/fumPojL8Z2jq6ZePIjvF7h99zeu1xi0NSWybHTam7d2xsrDQwuSzW929O3P2r5Wf/79+HMHzULwYrufmvuGvTvUc2+ZmRrBp7/6arL/jFmV9P92sgzWugSV5jY2NjISev/3PRn+79wv7fnhTC8F9Ml9dTL/zdjyYlNFFwME6q1BtqCfUmfU3zqGed5hPbq7J+w8bR4enbd/zx5Zz9+LfXvfTH9dd+/k+19q3m7keL7Tt31djG0pfXnP//vnx9raAor/p+ZPKa7eNe0N4XzA1hYi9ifrH9qml7L0j3a0HOflVy2vvmnz323A+PufW1XWG48urSqXUX7VdP2gF6kne1VG+soS9ZNKm8mm4fj3h83Irtm7as2LZj53s2bBq5YvSK0c3vXXnGyrOGzzzrzBUTe76iy/sf6//LFve/1f6UrXdm/WnhJ3d9P/5srT8V5VXUHuN5FbdHY0Z5z7++Cz/7xffe9eQFtYKi15W4df15mC77xo/zytDQ36a2VbP9KmqHEMJQs3Z45bVzw9H/bcNNRa9DjUem8WdGsmrs6WV/+PrZX1vyt7WCN+V1vjGhNl/n61kfzGeivarp8Rg7RNu3N5TT/epvmtfKp5/suX3f7z9Vz2/OnHDtyPbtW1fWfs5LM52XHNs0r2xp3K+lEz/LIW2WUO+mTfrruJ5Qyy/7+hk3z7Zqf3pff7K46X5lxfv2rrl9eXntE/vyWjp5oFbj3DC/tkzenbPlxswDy/WEm9V/qD7/ivrH4Ae/9tCHH/reGVP6x2m1n0X7leTs13efu++L3/z8v/9e9/brg3/3zMAf/vvHl9cKDpfXlTTr1TGfpPF15bQQip5/S0Pz/ch9/pWa70/R8y9bz8Htm8cbyqz3h3Lx87UapjxfT3u07+Xznrx5We7zdX+rz9frJ62VC56vh0r/yT6/ksrkPGbv+TWpoySrxn58yxG7Hr9h9TG1gqJ+Xd+6Wb8+vYXxR85+/eji5wevGvp3/7V7rxvf+psHL/nlyKpP1wraP+4xl+4c92ravtWc9q1nHcedje176uVXbVxXKz90z3/TZcH4J76UbNux8xMjGzeObt3W2n61+n4a68m2crvvp/HVbXHBfpWm7Nfs3WilvVp9vsX817XdXpOfb/0haek8Lr41xPt2/nTRvI99+9arB6Y8Kq3o0lIav9TWeeKvz3vmlYtv/cbdufHvjPErbcUfefGpO5Yeednu3Pj3JGn8alvxV+15pnf+gUcfy40/HPOf21b8F875wG/uf+7hl3Ljhxi/v732f3X3Wc8PDv4uN/6zSVrP+DlSCA++fvr62noSetLnW8yjZ1JeIbueZNZLmfVy43qpNtdar6CcJJPL43Zp+fENuTTzkZzyeBZWXVJbvhHXQ/bG9OWHmlLDa3+z8qLzVACAt7v4+X88B42f/4+mJ0r5Mw1wUKfjsCU5ceM47OB8zpxJ9y9J48fHx3nAwVPD8PjyxqHaif5MP0eIz4fsPGes56QTJsdod56zaP59WWY95lWbL680jENTU8c1ldDC/PvUeqaff8/sfvH8+NAtU9Iaapi3yh6/nnTGrNn1Dpl8K+MR8vpHdl4sXs8xuCCsnqivxf6RvY4mHofsdTSxnmMyL5ztXkfTaf+IaU/TPyZSLv58Y+rxC9O078Hj1zxa9vjN4HhXx7ef7c9nW503zMZvmDds+pL25s0btvB5WJP4rX4eVp+XXDV1m+niv1PmJWdv3rBec0fzhrE8Rqu0OJ/44ZzyVuYTG+fl8uYT48tFzGv/NLm8GcwnAm9Xcfwf3yPGx//jJ+D/N7Nd0Xlo9qwxxsu9TqjcPJ+iccfU6/T62nofX7tny+d6Bw+clHue81ir1/1smbTWV3DdT1E7Ls+sF7ZjzgRN0XgvW09Ru2evy+gP89tq9/t23fW+exfedm5uu6+uvZEWt/sXJ63NL2j3w2C80Dz+2228MB7/xtbjv1PGC7M9f/aWXceQXvg0W+ORf80pn+n1DX1TbtT3a8JhNx7peXPzAgAOH3H8X//8LB3//4+4QXoeUTRuPTmzHuPljltzzk/yxq3/ki6vzWzfn/5GxUzPm88/8ZGb5h14+Ljcccs9rY5D/8OktYHCcWhn4+bcccTq7lwvnjuOqI+zOhsn5uZfHyd2Nk7PjV8fp3c2js5tn/o4urN5gNz49XmAw32cWzBfl6ksrrY6X/e2HUenvz47W+PoC3PKZzqO7p9yo75fE4yjAQDeWnH8H0/j4vj/ycx2nX7Onjsu6NJ5e+bvgdwdz9/iefvsjytne9w32+PW2R7Xz/a8RHZcvOLUVuIfOuPi2Z4Xmt15snf8uDit1LgYAIBDWRz/z03X88f/nY1Pmo3feiaNT4zPm8Z/247PW4t/6IzPD6v5r4Px6/Nfxv8+Fy9m/A8A8PYWx//x1x7j3//7T+l69u/WG6fnxDdON06frv+0PE7v/jxbcB3AWzsPkE6uJrvMAwAA8NbomRgpTf09+4+my+zv2ef9Xv7FOdu3qpKeHl+2fevo6CVXb1k3sn30ks1XrRvddsk1Wzds3z66ubZdp+PG3HFLOm7sCZW0PZpvlx23LUz/HsLCnL+HkN0+hj124sbUv4eQrXZuwd8ROHj8Wss37/iVptm+Wf/IO9558T+Ss31UP/6Xf/y0S9Zvu2TD5g3bN4xs3LBzdPJ246PWvhl8b2Zslhl9X2rmxxSlmX9/Z3fyKE3Joydtj7zvZ08yeSxKM1mU9/0HOXn/5L984ZMnjv3p/hCGjyq/u6P2S1aN/ceLRv9l+75fbBnPf+60+de3TPMq+r7S7PZxfyobr9q2/ZT1V129OfuNku2J8xml+voszWekT/9yi/MTa3PKZ3qdQnnKjUNTy/MTAABMEj//j+ez8fPDz6cnULG89XF6Z58f547Th1sbp2e/l6xonJ7dPu5vq+P0aofj9Gz9ReP0Zts3G6fnjbvz4v9rzvYz1Xo/6ew6j9x+cmlr/ST7fQZF/SS7/Uz7SdJhP8nWX9RPmm3frJ/kHfe8+B/K2T5P6/2hs+tycvvDna31h7/OrBf1h+z2M+0PpQ77Q7b+5sdrVT2vZts36w95xzevP1yQs32rJveP8Y4x0S9GL7nmqq2faNhutr//ovP8Zvf7P9rVev6ze93X7Oc/u9eVzX7+nV1Xlpv/s53NhLWef2fXJRZ9v0u73rT52vRis6Lrz4rmcdfklM90HnfOlBuHJvO48NaJ4//4cU8c/9+WLrv9MdDh/z1ps/s+d/hffz+75zHez6ep7BDg/RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNb2VJRPLfTdvO3DBMf/0k8+Mvn7DP/9g041/dd23fjt0+T/8+IG+b76xd93x63/5j0dc/siV5+6566uPvzb/oT+/WBh4YOJn5eR0tRpC8nISQvWH+7/02b1PHz1eloQQysnArhAWJYsfX5RkIgz/MYSwrp7n5DsffP309ePLG2/rnVS+MBMku1+hvxzzacwzhGsL94jDUDXtZzsPXHNK+NXfr7npZ0u/+52e3S/tOrhJUm3oTyEsuLTx8T0hhLnp/3Gxty2JD06Xq0MIfQ2PO7sgrxNazH9Fzvqx6XJOuuwviBPvX5ZZL2W2y65HPZllX0F9ncrLo93tiszLrGdfjDqVl2csX5Quv58uT55h/HL8n4RSEir19DcmB/tIaDhuSUgmjmW1vl6qH9uQ7n9mPcmslzLr5Z7Mfk3Um3a0cpJMLo/bZcrjy3ElLT++8bW6iQtzyt+VLqvpE/WNuB6yN2r6p9yo79eEmNf+aXJ5M5QaXoOaldcPfHow+tOy/mTxlMeMNRHv27vm9uXltU/sG8jJI3kgSeMnbcXf+dNF8z727VuvXpIX/9JSGr/UVvxfn/fMKxff+o27c+PfGeOX24p/2qN9L5/35M3Lcttnf2yfSlvxR1586o6lR162Ozf/e2L8am78ZlXEO1bteaZ3/oFHH8vNfzi2z9y28n/hnA/85v7nHn4pN36I8fvair92z5bP9Q4eOCk3/mOxffrb6z+v7j7r+cHB3w3lxX82xp/fVvz7dt31vnsX3nZu7vFdHdtnoK3455/4yE3zDjx8XN5rZ3JPt945Ad6ZjkjPsW5J19sdZ3aqYbzwlaFK7ZxvXvp/fjcryhivZ8EsxgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O3p59ef8dGL3v+hNZUkhCRnm7Em4n3lOatWDbVR78iLT92x9MjLdjeWLWkjDgAAAFAsjsNL9ZJqWBKuSeaGY5tuH+cIjo1ryeTy7BxCjJOdI2g3TqlLccpdilPpUpyeLsWZ06U4vV2KUy2IUw2txZk7TZzKeK9oMZ++afNpPU5/l+LM61Kc+XO6E2dBl/JZ2KU4A9PGab0fLupSnMVdinNEl+Ic2aU4R3Upzl90Kc7RXYqTnVOeaT+cn255TF6ciRvlwjiVpFy/o9l8+tFpPcd1WE9/QT3zi96PW6xnbov1nJB5XGmG9VRbrOcvO6wnabGev+6wnlJBPbHfXpvNL9YT11rs/zu6FKfD867/Fc+3rutSPtd3Kc6nuhTn012Kc0OHcQBaFcf/B8d7A6G38rehL33Fyc4CxPHu0omfU9/v8l6QYrx3Z8rnFMXLDtQz8ZbONL/sG1km3rJMec+keJX6eGSaeNVavFriyzN3Fu5vdkIhk9/JmfLeonjZiQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmEU/v/6Mj170/g+tCUkY/9fUWBPxvvKcVauG2qh375rbl5fXPrGvsay30kYgAAAAoFAch/fUS6qht7Iy9CZzJm1XTecBqul6eaC2HFwQVo8vk6HSxHpfsmjax1XSx63YvmnLim07dr5nw6aRK0avGN383pVnrDxr+MyzzlyxfsPG0eHazxB6C+KFECamH7bt2PmJkY0bR7duqxVm81+SPm5Jup6kjxs8NQyPL29M819cUF9pSn07nj+ndtfBki7dKDh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx/du0vRK6rjgP4uTOzM9NtY1f6bxqazZA/JWrRJG4l1dK9IFhok5ClILPVtQSbYHHThDYpsY5twLYmKEJLIETyYCQWW4sv/WOL2D8EIjUacGOQtmgf9EFptZKWPEjKSHbnzM5MZjKbsTRp/Hwe7p0553fO7555CHxvFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAP3VR1ZKIyOjY+mISQdKmpdRDnsvk0LffR96svbPlhYfjEsuaxQq6PjQAAAICeYg4faIwUQyGXDdlw9fS3Racu+fpEmM39AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/5+p6shEZXRs/OIkhKRLTa2DOJfNp2m5j75vvvvU514bHv5781ipj30AAACA3mIOzzRGiqEUFoeB5OqWuvhuYH7b+va6uM+COda1vzvoVrd4jnXXzrHuE53qirPf19bv2wMAAAB89MX8n2uMDIVCbl7X/N8r18e6hW112fq9n78VAAAAAP43Mf8XGiOlUMiVGnl9rnl/UVtdXN/r/+3j+qVd1vf6//w19bv/pwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj46p6shEZXRsPJuEkHSpqXUQ57L5NC331/qftx58eFHzQCHX30YAAADAma18cXA6h89G72Io5AbDQLh4OvcP37zvmS8/89xICGEm5ufzYfv6rVvvWTlzjXUrDh8c+MGht7/T2CbWrZi5npPDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6ip6shEZXRs/KIkhKRLTa2DOJfNp2m5j75vfOFLf33i2PNvNY+V+tgHAAAA6C3m8NnsXwylkA/5cOX0t+asf0qmbX23dwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhePeb93/zfWTkxvuubA/ZMN58Rg9P2zec148hg8+nOt/mQAAgA/awpCE2lm6at25fmoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8MFUdmaiMjo0XkxCSLjW1DuJcNp+m5T76pi8cKcw78eLLzWOlPvYBAAAAeos5fDb7F0MpDISBcMX0t07vBKbz/9CH+JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAeWWqOjJRGR0bn5eEkHSpqXUQ57L5NC330ffxHXs/f+DS79/SPFbI9bERAAAA0FPM4fnGSDEUcp8MhXBN/ftk64IkW793fi8wu25Ly7LBOa+rtqzLznndzraT5eqnmVlXjPsNzdwb68qnrys3rSuFRvtyy7qwu2XVvB7PGQAAAOAcivm/0BgZCoVcoSnn/qylfkjOBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6mKqOTFRGx8aTJISkS02tgziXzadpsuPs+97/u49f8rWf79rWPFY6+20AAACAOYg5fDb7F0MpLAgfCwumc38Yaq2Pdf+qnDzw2L//tiyE5VceHc61b/vj+OE3b9z0UvslhExrdSaES+v9ki79fvuHx+5bUjv5RAjLr8hec1q/cOZ+rVumtWcrG9ZsPXR0S48fBwAAAC4QMf8PNEaGQiF3d9f8H5N3j/zfMB3AL71vxy8vr1/ribxtRWao3i/Tpd8Xlzz1l6Wr/vH2qfx/pn6f2bvpwOUtDWdG2iRpbXTTtrVHr9+fiaee6Z9t6x9/l698+63/bNz+6MmZ/sVQrI/Pz3Xqf/q1zUVpbTKzZ3z1+3uqrf1zXc7/8O9fPvbr+bveO9X/3YWDjf7XnuH8Z+4/eNsju2/Ye3Bta/8QQrlT/3feuyVc9ae7Hmo//2Dbxs2/fPO1TZLWDi86vn/VvtKNrf2Ttv7x9//Fscd3//TR7z0X+8e/FVm2eK79M239X9152Y5XHlw3v7V/psv5X7r9teHN5e/+sf38d7bsmuv6FKef/8nrnr7j9fXpA+1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5ap6shEZXRsPJOEkHSpqXUQ57L5NC330ffNW4+8c/uun/yoeazUxz4AAABAbzGHz2b/YiiFfMiHwenc/2xlw5qth45uCUMzs0n9npvcfO/WT23cvO3uO8/RkwMAAABzFfN/rjEyFAq5JWGgnv9HN21be/T6/ZmY/zMx/2+8a3LD8tCoe3XnZTteeXDd/MZ7ghCm/yygeKrus7N1N990ZOj4n7+xtGPdytm6w4uO71+1r3RjrAvNdStC4/3Ek9c9fcfr69MHGs/XXPfpr2+erL+eiPsO3vbI7hv2HlzbOEf9PljfN9ZNZvaMr35/TzXWZev3Yv3cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDppqojE5XRsfGQDSHpUlPrIM5l82la7qPv6iW/euiSE88vaB4r5PrYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWG/fkLjKPs4gD/PbvJmm03apH3BqJimVVHqwaIgohcVFWlFCp4qRaqtPYiCIKLUg6m0YqmKF8HqpYgKapSCgo3F0iqp+K948aCCQvUglGJAuxQPKtl9ZruZ7rg6qYL6+cDw5Hlm5ju/mefZ2SwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ygDfWPN9vCO+xu3nHPDR4/edeKRm965d9tFD7/63cSm6z7cO/jSyZnNK7Z8ef2yTfvvXjO9+/lDPw2/9cvRnsEPtZpVqVsLIR6PIdTenX3msZmPz5obiyGEahyZDGE0Lj00GnMJq38OIWxu1zl/55snLt8y127bNTBvfEkuJH9foV7N6mkZmV8v/y61tM62Nh68JHx97frtny5/4/X+qWOTpw6JtY71FMLijZ3n94cQFqVtTrbaxrKTU7suhDDYcd6VPeo6/w/Wf2lB/9zU/i+19R452f6VuX4ld1y+n+nPtYM9rrdQRXWUPa6XoVw//zJaqKI6s/HR1L6d2lV/Mr+abTFUYuhrl39PPLVGQse8xRCbc1lr9yvtuQ3p/nP9mOtXcv1qf+6+mtdNC60a4/zx7LjcePY67kvjKzrf1V3cWjB+dmpr6YN6MuuH/B8t9dP+aN9XU1bX7O/U8neodLyDuo23Jz5NRj2N1ePS0875tYts38z6Jy6sbnjv8EhBHXFvTPmxVP7WT0aHbn9t5wNjRfkbKym/Uir/m7VHfrht5wvPFeY/neVXS+VfdmDw+Nr3d6wsfD6z2fPpK5V/x9EPnlz+/zunus11M39Pll8rlX/N9JGB4caBg4X1r86ez6JS+V9dfeO3r3y+71hhfsjyB0vlb5i+76mB8cbFhfkHWx+FenOFllg/P05d8cX4+PcTRfmfZc9/uEt+7Jn/8uTuq15csmtN4fpclz2fkVL133zB/u1DjX3nFb07454z9c0J8N+0LP2P9Xjql/2duVAdvxeenehrfQMNpW34TF4oZ+46i//CfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA39iBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD//8FUHq8=") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r14 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r14, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r15, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@rnullb, r15, &(0x7f00000001c0)) [ 73.207885][ T4677] Bluetooth: hci0: command tx timeout [ 73.258324][ T5328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.0'. [ 73.602939][ T5328] loop0: detected capacity change from 0 to 32768 [ 73.612199][ T5328] ======================================================= [ 73.612199][ T5328] WARNING: The mand mount option has been deprecated and [ 73.612199][ T5328] and is ignored by this kernel. Remove the mand [ 73.612199][ T5328] option from the mount to silence this warning. [ 73.612199][ T5328] ======================================================= [ 73.786565][ T5328] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,read_only [ 73.786565][ T5328] allowing incompatible features above 0.0: (unknown version) [ 73.786565][ T5328] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 73.805451][ T5328] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 73.812341][ T5328] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 73.819708][ T5328] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b compress none [ 73.819730][ T5328] has non ptr field, deleting [ 73.835252][ T5328] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 73.839413][ T5328] bcachefs (loop0): Version upgrade required: [ 73.839413][ T5328] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 73.839413][ T5328] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 73.839413][ T5328] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 73.937867][ T5328] bcachefs (loop0): btree node read error at btree inodes level 0/0 [ 73.937892][ T5328] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 73.937903][ T5328] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 3 too large: 18446744073709551615 + 0 > 4294967295 [ 73.937913][ T5328] u64s 3 fields 64:0, 64:0, 1:0, 128:0, 0:0, 0:0 [ 73.937920][ T5328] flagging btree inodes lost data [ 73.937928][ T5328] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 73.937936][ T5328] ret btree_node_read_validate_error [ 73.970394][ T5328] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 73.976956][ T5328] bcachefs (loop0): btree node read error at btree dirents level 0/0 [ 73.976968][ T5328] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 23 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 73.976979][ T5328] loop0 node offset 16/23 bset u64s 36: bset past end of btree node (offset 16 len 8 but written 23) [ 73.976987][ T5328] flagging btree dirents lost data [ 73.976993][ T5328] ret fsck_errors_not_fixed [ 73.999374][ T5328] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 74.017339][ T5328] bcachefs (loop0): btree node read error at btree deleted_inodes level 0/0 [ 74.017356][ T5328] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 32 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 74.017366][ T5328] loop0 node offset 8/32: btree node data missing: expected 32 sectors, found 8 [ 74.017373][ T5328] repair success (rewriting node) [ 74.037321][ T5328] bcachefs (loop0): scan_for_btree_nodes... [ 74.045528][ T5331] ------------[ cut here ]------------ [ 74.052552][ T5331] UBSAN: shift-out-of-bounds in fs/bcachefs/bkey.c:163:16 [ 74.055545][ T5331] shift exponent 4294967232 is too large for 64-bit type 'u64' (aka 'unsigned long long') [ 74.060399][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: read_btree_node Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 74.060417][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.060425][ T5331] Call Trace: [ 74.060431][ T5331] [ 74.060437][ T5331] dump_stack_lvl+0x189/0x250 [ 74.060568][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.060587][ T5331] ? __pfx__printk+0x10/0x10 [ 74.060605][ T5331] ? unwind_next_frame+0xa5/0x2390 [ 74.060629][ T5331] ubsan_epilogue+0xa/0x40 [ 74.060643][ T5331] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.060710][ T5331] __bch2_bkey_unpack_key+0xda8/0xe10 [ 74.060731][ T5331] __bch2_bkey_compat+0x4db/0xbd0 [ 74.060759][ T5331] ? __pfx___bch2_bkey_compat+0x10/0x10 [ 74.060774][ T5331] ? kasan_save_track+0x4f/0x80 [ 74.060793][ T5331] ? validate_bset+0x2d8/0x1e70 [ 74.060811][ T5331] ? bch2_btree_node_read_done+0x1a4a/0x5150 [ 74.060826][ T5331] ? btree_node_read_work+0x426/0xe30 [ 74.060841][ T5331] ? bch2_btree_node_read+0x887/0x2a00 [ 74.060854][ T5331] ? bch2_btree_node_fill+0xd12/0x14f0 [ 74.060865][ T5331] ? bch2_btree_node_get_noiter+0xa2c/0x1000 [ 74.060875][ T5331] ? read_btree_nodes_worker+0x1319/0x1e20 [ 74.060889][ T5331] ? kthread+0x70e/0x8a0 [ 74.060902][ T5331] ? ret_from_fork+0x3fc/0x770 [ 74.060918][ T5331] ? ret_from_fork_asm+0x1a/0x30 [ 74.060941][ T5331] ? bch2_checksum_update+0x91/0x160 [ 74.060960][ T5331] ? bch2_checksum+0x36f/0x490 [ 74.060984][ T5331] validate_bset_keys+0x5b7/0x1480 [ 74.061046][ T5331] ? validate_bset+0x2d8/0x1e70 [ 74.061067][ T5331] ? __pfx_validate_bset_keys+0x10/0x10 [ 74.061086][ T5331] ? krealloc_noprof+0x1cd/0x340 [ 74.061115][ T5331] ? prt_str+0x439/0x760 [ 74.061129][ T5331] ? bch2_btree_node_read_done+0x1c07/0x5150 [ 74.061148][ T5331] bch2_btree_node_read_done+0x1d3c/0x5150 [ 74.061165][ T5331] ? __pfx_number+0x10/0x10 [ 74.061245][ T5331] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 74.061269][ T5331] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 74.061294][ T5331] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 74.061307][ T5331] ? bch2_printbuf_make_room+0xdb/0x360 [ 74.061328][ T5331] ? enumerated_ref_put+0xbe/0x270 [ 74.061347][ T5331] btree_node_read_work+0x426/0xe30 [ 74.061377][ T5331] ? __pfx_btree_node_read_work+0x10/0x10 [ 74.061395][ T5331] ? bch2_latency_acct+0x436/0x520 [ 74.061411][ T5331] ? __pfx_bch2_latency_acct+0x10/0x10 [ 74.061431][ T5331] ? bio_associate_blkg+0x6d/0x230 [ 74.061462][ T5331] bch2_btree_node_read+0x887/0x2a00 [ 74.061494][ T5331] ? bch2_btree_node_fill+0x954/0x14f0 [ 74.061510][ T5331] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 74.061526][ T5331] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 74.061545][ T5331] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.061558][ T5331] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 74.061570][ T5331] ? bch2_btree_node_mem_alloc+0xcdf/0x1820 [ 74.061581][ T5331] ? six_unlock_ip+0x302/0x430 [ 74.061589][ T5331] ? bch2_btree_node_fill+0xb47/0x14f0 [ 74.061597][ T5331] bch2_btree_node_fill+0xd12/0x14f0 [ 74.061605][ T5331] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 74.061624][ T5331] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 74.061638][ T5331] ? btree_cache_find+0xf4/0x2d0 [ 74.061652][ T5331] ? btree_cache_find+0xf4/0x2d0 [ 74.061662][ T5331] ? btree_cache_find+0x26f/0x2d0 [ 74.061674][ T5331] ? __pfx_btree_cache_find+0x10/0x10 [ 74.061697][ T5331] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 74.061718][ T5331] read_btree_nodes_worker+0x1319/0x1e20 [ 74.061739][ T5331] ? read_btree_nodes_worker+0xcef/0x1e20 [ 74.061758][ T5331] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 74.061783][ T5331] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 74.061801][ T5331] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.061821][ T5331] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 74.061846][ T5331] ? __kthread_parkme+0x7b/0x200 [ 74.061860][ T5331] ? __kthread_parkme+0x1a1/0x200 [ 74.061877][ T5331] kthread+0x70e/0x8a0 [ 74.061896][ T5331] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 74.061910][ T5331] ? __pfx_kthread+0x10/0x10 [ 74.061925][ T5331] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.061942][ T5331] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.061958][ T5331] ? __pfx_kthread+0x10/0x10 [ 74.061973][ T5331] ret_from_fork+0x3fc/0x770 [ 74.061994][ T5331] ? __pfx_ret_from_fork+0x10/0x10 [ 74.062017][ T5331] ? __pfx_kthread+0x10/0x10 [ 74.062032][ T5331] ret_from_fork_asm+0x1a/0x30 [ 74.062061][ T5331] [ 74.062066][ T5331] ---[ end trace ]--- [ 74.305168][ T5331] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 74.308165][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: read_btree_node Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 74.314163][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.319601][ T5331] Call Trace: [ 74.321164][ T5331] [ 74.322539][ T5331] dump_stack_lvl+0x99/0x250 [ 74.324577][ T5331] ? __asan_memcpy+0x40/0x70 [ 74.326577][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.329136][ T5331] ? __pfx__printk+0x10/0x10 [ 74.331509][ T5331] panic+0x2db/0x790 [ 74.333581][ T5331] ? __pfx_panic+0x10/0x10 [ 74.335767][ T5331] ? _printk+0xcf/0x120 [ 74.337772][ T5331] ? __pfx__printk+0x10/0x10 [ 74.339970][ T5331] check_panic_on_warn+0x89/0xb0 [ 74.342341][ T5331] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 74.345335][ T5331] __bch2_bkey_unpack_key+0xda8/0xe10 [ 74.347810][ T5331] __bch2_bkey_compat+0x4db/0xbd0 [ 74.350172][ T5331] ? __pfx___bch2_bkey_compat+0x10/0x10 [ 74.352734][ T5331] ? kasan_save_track+0x4f/0x80 [ 74.355160][ T5331] ? validate_bset+0x2d8/0x1e70 [ 74.358272][ T5331] ? bch2_btree_node_read_done+0x1a4a/0x5150 [ 74.361733][ T5331] ? btree_node_read_work+0x426/0xe30 [ 74.364234][ T5331] ? bch2_btree_node_read+0x887/0x2a00 [ 74.366783][ T5331] ? bch2_btree_node_fill+0xd12/0x14f0 [ 74.369224][ T5331] ? bch2_btree_node_get_noiter+0xa2c/0x1000 [ 74.371870][ T5331] ? read_btree_nodes_worker+0x1319/0x1e20 [ 74.374994][ T5331] ? kthread+0x70e/0x8a0 [ 74.377121][ T5331] ? ret_from_fork+0x3fc/0x770 [ 74.379279][ T5331] ? ret_from_fork_asm+0x1a/0x30 [ 74.381877][ T5331] ? bch2_checksum_update+0x91/0x160 [ 74.384339][ T5331] ? bch2_checksum+0x36f/0x490 [ 74.386480][ T5331] validate_bset_keys+0x5b7/0x1480 [ 74.388762][ T5331] ? validate_bset+0x2d8/0x1e70 [ 74.391155][ T5331] ? __pfx_validate_bset_keys+0x10/0x10 [ 74.393986][ T5331] ? krealloc_noprof+0x1cd/0x340 [ 74.396652][ T5331] ? prt_str+0x439/0x760 [ 74.399022][ T5331] ? bch2_btree_node_read_done+0x1c07/0x5150 [ 74.401910][ T5331] bch2_btree_node_read_done+0x1d3c/0x5150 [ 74.404680][ T5331] ? __pfx_number+0x10/0x10 [ 74.407011][ T5331] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 74.410561][ T5331] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 74.413613][ T5331] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 74.416015][ T5331] ? bch2_printbuf_make_room+0xdb/0x360 [ 74.418384][ T5331] ? enumerated_ref_put+0xbe/0x270 [ 74.420518][ T5331] btree_node_read_work+0x426/0xe30 [ 74.422735][ T5331] ? __pfx_btree_node_read_work+0x10/0x10 [ 74.425449][ T5331] ? bch2_latency_acct+0x436/0x520 [ 74.428131][ T5331] ? __pfx_bch2_latency_acct+0x10/0x10 [ 74.431167][ T5331] ? bio_associate_blkg+0x6d/0x230 [ 74.434012][ T5331] bch2_btree_node_read+0x887/0x2a00 [ 74.436879][ T5331] ? bch2_btree_node_fill+0x954/0x14f0 [ 74.439452][ T5331] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 74.441887][ T5331] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 74.444469][ T5331] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.447288][ T5331] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 74.450242][ T5331] ? bch2_btree_node_mem_alloc+0xcdf/0x1820 [ 74.452951][ T5331] ? six_unlock_ip+0x302/0x430 [ 74.455629][ T5331] ? bch2_btree_node_fill+0xb47/0x14f0 [ 74.458622][ T5331] bch2_btree_node_fill+0xd12/0x14f0 [ 74.461270][ T5331] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 74.464191][ T5331] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 74.466896][ T5331] ? btree_cache_find+0xf4/0x2d0 [ 74.469231][ T5331] ? btree_cache_find+0xf4/0x2d0 [ 74.471522][ T5331] ? btree_cache_find+0x26f/0x2d0 [ 74.474122][ T5331] ? __pfx_btree_cache_find+0x10/0x10 [ 74.477477][ T5331] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 74.480668][ T5331] read_btree_nodes_worker+0x1319/0x1e20 [ 74.483625][ T5331] ? read_btree_nodes_worker+0xcef/0x1e20 [ 74.486303][ T5331] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 74.489055][ T5331] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 74.491684][ T5331] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.494040][ T5331] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 74.496981][ T5331] ? __kthread_parkme+0x7b/0x200 [ 74.499673][ T5331] ? __kthread_parkme+0x1a1/0x200 [ 74.502319][ T5331] kthread+0x70e/0x8a0 [ 74.504375][ T5331] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 74.507114][ T5331] ? __pfx_kthread+0x10/0x10 [ 74.509300][ T5331] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.511510][ T5331] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.514258][ T5331] ? __pfx_kthread+0x10/0x10 [ 74.516487][ T5331] ret_from_fork+0x3fc/0x770 [ 74.518668][ T5331] ? __pfx_ret_from_fork+0x10/0x10 [ 74.521036][ T5331] ? __pfx_kthread+0x10/0x10 [ 74.523181][ T5331] ret_from_fork_asm+0x1a/0x30 [ 74.525215][ T5331] [ 74.527082][ T5331] Kernel Offset: disabled [ 74.529220][ T5331] Rebooting in 86400 seconds..