program: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005e00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000063110e00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='metadata_checksum=none,data_checksum=xxhash,metkdata_checksum=crc64,str_hash=crc32c,version_upgrade=none,subj_type=/(/{,obj_user=\x00,smackfshat=crc32c,\x00'], 0x1, 0x5b2b, &(0x7f000000b6c0)="$eJzs3Q+MXVWdOPB735tp33TaMkWBWv50gNJf4ScwpfgDGowDvwi4WkTQooK0lU7LYP9Ap7VQxRYS0SDLNtmNsiYSQjRhQwjuknX9s6aYRczKGpu4bHF3XQxoVnaDNQjapcRuZt69b+bduefdN++9KS1+PoG579533vec77ln7tx73u17EQAAAH8UnvrsyO+uXPDuH9419OrOK7698c6otzy2vZIW6EuWt71RLeRwmtk1f2yZHRe7B2c89a573/fsVz72tedfmLdk6VdvvuzgrbNX3HPP4E8uOPijP9xRFDcdT2eOr8cvxVF08o+XfPHu7z99wui2OIqicty3K4rmxaXvzYszIQZei6Joba2d9U8+/uqydaPLXV+YWbf9mEyQ0HiP0tqM9ze1SrKrP/fdzSf96pzLnt3z00tfHai8tmXXeJG4MmE8RdHc1RNf3x1FUU80PjTT0TY/fXGyvCqKolkTXndhQbtOa7L9ZwfWFyTLGcmytyBO+vypmfXuJtvRlVlWmnxdq0rTHD+V7r/Z01x/9uCWrWdesvxGsjxzivHL6f9xVIqjrlp1G+LxMRJN2G9xFI/t+/H1Ut1YiDNjI46iOLNeyqyXuzN5jdWbDLRyHNdvT8tltvcn27uS7acWjLVrAtvfluab/KIeyOSfDdo76UEtrzFpu37eoC2HQ2nCMShve9reSrIzepNtvfGxk15zKEf63MoX7nvs+R0PLOoLtCP+epzEj1uK/8zGi/Yt3vGz/fND8VeXkvilluKPnPPyoy9e/YMTgvF3p/HLLcV/7vzFX/rOzu0Hgv3zm7R/ulqKX15+1sGldw2sDLb/wTR+paX4D136yJfnvuPJR4PtH0j7p6e1/hne9vp1Dx+3Pxg/SuPPain+Ja8cf8byzY+sD8Z/Iu2f3pbiPz0yvOLumxZu7w/F35vGn9NS/NN+cf11e/YNPRds/2DaP30txX/nokuuWrF/072hY2e863D9hQV4c3pLco71+WS91evMdk24Xri/L66e881O/h/sZEUZo/XMTR53TWM9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxxeahv7dAfvnXK613J+szkwSnl6jLdPiOK4p4oika2rtmydXjT+v6bN2/bsmnNhv41W/uHNm3dcnv/+W/v3zJ0y4Y1t48+O3D2surrjo3i6jI+eVLdhw4dOlTqq9+W1veJC/788f5T9v1rFA0c95NTuoLtf/8dC/7/vJyfGfHgoQ1/dsYNL87+x23VDX1Ju/oC7YoC7br44ZeW/+rbPX8aRQPHN2rXfy65/Pt1DRrbMB4nUZoZlcYezIxn5baj1uqkPWl/da0b3jA0UNy/5UAevzzwNx/aPnLjrmr/VoJ5NNm/PYOHfr/pm0/cePGOq6objtT9XtTfaRZp+9L+qyT9PTfJa24gr65AXnefcep//MtfbnxpVzTQ9duFk+suyqs7GQDd8duaqjetYVZc3yeVpHy6x9PXnbt14y3njty+4+zhjWvWD60f2rRs2bILz1923gXn/b9zx1Kv/uxY/mn9/6fJ/A/PeNp8weBw+rO58VTUrqL+GG1XcX9MbFHo9++tH7z83+78291XVzcUjfO0dO14kixnje7mpdGE8Ta5r/LyKuqH7kA/rL+m969e6d/8P0XHoYl7ZuLPjHjw0G+H/+lds/ecfkN1w2E5zk9sUIvH+Vqrk/Z0TzzuLD1y+3dmVE7y6s1t1+l3vfzhf/5W3F9r34wZ0W1rtm7dsrT68zDl9dZrPt3ZvC5c/N+37lh957xJeZ1X/Tk7aens+MTcdmW3pnktHPtZjpJuSRdRpZSfX3dUbV/270L6umyv9ibP9cbH5uaVlT638oX7Hnt+xwOLQj0df71aY080p7qMTwqU3JB5YbnW4Lz6i8ZHFEWrJ25L+/GJb/5F/54fzttYOD6qI2PSz2x6g4c+c9HsX45cu3dFdcPhOa5MaFCLx5Vaq8fbM9ZfY8eV846cPN64/Vz3ixUPHtpz0tvXL/v7rcmvfVH/1krn9e+yKCo6DizMrE/XcSBbz3j5/Hj9mfXeqNzSceO58xd/6Ts7tx8IHjd+0+xx49N1a+U2jxtxYDzt+8xf//5T+555T+eOG+9ZXP7ovy9clnTokfL7VknGdSUwrmutTtoTTxzX59y4ecPa6vYj9/w3WRZc/6R/v0du3/GJNRs2DG0ZaS6vZs9L0nqyvdzqeUn623dsQV7p/hrPa/oeNNNfzf6+pe1fm+2vFn/fIE9vFLf09+yZjRftW7zjZ/v7AnHj1aUkfqml+CPnvPzoi1f/4IRg/N1p/K6W4peXn3Vw6V0DK4PxH4yT+JWW4j906SNfnvuOJx8Nxh9I29/T2vnE8LbXr3v4uHD/R2n83pbiPz0yvOLumxZuD8bfGyf1jJ7bRdHjry5bV12Po+7kOJy2o7uuXVF2Pc6slzLr5YnrpeocfK2CchzXb0/LJdtPndCWPNcGtqdnj5X51eWBdD3KPmi8/UhTmnBOkLe96PwaAN5M0vf/03ON9P3/hckfxAnv/1eX8Yy6189Pzqfmj28au867s7/6h3Sq83ppO7Lzemn8JafXx2h1Xq9oXu60zHraroVJr6TtaXDeMDtqYl5ucj2N5+Uy6RfPm/V/PrOha2xuL7TfupOZirz3mTPtnT0aod3z7Pn5ra6dZ4fGXXa+I32fPm5y3GXvi0j3b/a+iDT+gswEWqv3RbQ77tJpjQbjbiyz4vnUyeMiatCv4+MiP1p2XExhHPVVx9H0vi919F/vT+/8u/mEQPzk78iRfr2fbk+PD11NzgOsDGzv1DxAerhI2/XzBm05HMwDAMD49X96TjF6/T/6t7o/c55fdN2SvcpI4wXvYynnt6fo+nfy/WyzWjrvu+SV489YvvmR9cHz4ieavS/llrq1WQX3pRT146LMemE/Bm4FKZp3WJwp3xvNaakfT/vF9dft2Tf0XLAfB6snUsX9uLtubU6b/bgks17Yj935rSrqx2w9ReP3zMx6b3JH0FT7/Z2LLrlqxf5N9wb7fVez/f5g3VpfQb+7Tg/EP9qv078WJfGP7uv06Z6PfMPmAZJ56+maB7gmsH2q8wC9kx7U8hpz1M0DBP4uAMDRLL3+r90vn1z//0OmXLvXh8HztsHO3M8aPG+rvf/U3nl5sP218/L2rouC8WvXRe1dtwT7p3bd0t51VzB+7bqrvXmaYP88kfZPe+f9oX8ukJ73H/3XRdM7z+C6KFmPsg+qXBcBAHAkSK//09PV9P7/J5P17Lnx9F/nTvd16HRfR0/3PMN0z5Mc7de5R/s8w3TPs71R8wAzkufNA9Q/qOU1xjwAAACd9O5keUOT5bvG7iGOoo/feNN5q9YOfXLVui1DQyO3rLlxaNXwpuGttXLdY1dek++TDtVXdJ90XvlZDcqvCsavb89lgfIh7eYfqq8o/7zyjfJfHYxf357LA+VD2s0/VF9R/nnlG+W/Jhi/vj1XBMqHtJt/qL6i/PPKN8r/48H49e15T6B8SLv5h+oryj+vfKP8bwzGr2/PnwTKh7Sbf6i+ovzzyjfKP/t5maH83xsoH9Ju/qH6ivLPK98o/6Fg/Pr2vC9QPqTd/EP1FeWfV75R/uuC8evbsyJQPqTd/EP1FeWfV75R/uuD8evbc2WgfEi7+YfqK8o/r3yj/G8Kxq9vz/sD5UPazT9UX1H+eeUb5T8cjF/fnqsC5UPazT9UX1H+eeXr8u+pf/7mYPz69nwgUD6k3fxD9RXln1e+0f7/RDB+fXuuDpQPaTf/UH1F+eeVb5T/hmD8+vZcEygf0m7+ofqK8s8r3yj/jcH49e35YKB8SLv5h+oryj+vfKP8NwXj17fnQ4HyIe3mH6qvKP+88o3y3xyMX9+elYHyIZn84+T2iKbzD9VXlH9e+Ub53xKMX9+eawPlQ9rd/6H6ivLPK98o/1uD8evb8+FA+ZC8/NO3PJvJP1RfUf555RvlvyUYv749HwmUD2l3/4fqK8o/r3yj/EeC8evb89FA+ZB28w/VV5R/XvlG+W8Nxq9vz3WB8iHt5h+qryj/vPKN8t8WjF/fnusD5UPazT9UX1H+eeUb5f/JYPz69nwsUD6k3fxD9RXln1e+Uf7bg/Hr23NDoHxIu/mH6ivKP698o/xvC8avb8+qQPmQWv5btwwNrdp2y9o1W4dWbdq8dmhk1fYtw1u3DiUnau3elxi8ryy5L7E76mqY/4LM+jHJ5wMdE/h8oGz5NOyJYw8mfz5Qttqugs/JKdpf2fqLPmcor3zeeAvt36LjQbPjIavu96M6SIY3jQxtmXz87mnYHxPHRDR221x1gqMSH99U+ezHdQaqKdR8PpWG+WQ3z0xuBJwZH9dU+SjwfXBT1Xw+cTCfvHZM9Xvs0rBT+h67zI9Jcj6jtS7fdSNjB+nhNRuGdwxNbv+sI6D9b0w/lia1o2j/x5l2zEtaMi/0fW+Bdm//xn899Otf/917o2jguPJJbfVfPHho9YHjP/7ji2eeO9r+UsP210qm36tc8P2H2fJpPl0bNo9s/b/rNm/blP8OWnq/c6m2Pk33Oyd5lpu8fzl0v8dU71+OJz04MjV7/zIAAMAfi/Tf/6fXq/OTf4M6LzNF0Pw8cHv/Pjo4D7y3uXng7GxE0TxwtnyadrPzwL1tzgNn6w/N05YalG/0vkuz88AfDZSfqubHSXufAxAcJ0lPFY2T7L/DLxon2fJTHSc9bY6TbP1F4ySvfKP3p5sdJ9cGyoc0Px7a+9yJ4HgYaG48ZL9Xs2g8ZMtPdTxU2hwP2fqLxkNe+Ub36zQ7Hj4YKN+s5sdHe58LExwfq5sbH9nvSykaH9nyUx0fcZvjI1t/0fjIK9/ofsZmx8cHAuVTze//9j63J7j/dze3/7Pf21K0/7Plp7r/S23u/2z9Rfs/r3yj+7mb3f9XBsqn6vf/6I4f2+9Dq7Zv3jLxHugm9/+M0P4v+t6WkObbN73fW9Oq5ts/vZ/7NP3tn97PlZr+9rd33RRs/9723ulqvv3T+/3BrTps78cmHzZV9PlTRe/TfiSwfarv086Y9ODI5H1aAAAAmH7p+//p1/Gnnw//hWQZ+Jr+lh393+89vfNcR//n70/vPKb5vAaVHQHM5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGzK75Y8unPjvyuysXvPuHdw29uvOKb2+8c/fgjKfede/7nv3Kx772/Avzliz96s2XHbx19op77hn8yQUHf/SHOwoD91UXZyarlSiKX4qj6OQfL/ni3d9/+oTRbXEUReW4b1cUzYtL35sXZyIMvBZF0dpaO+uffPzVZetGl7u+MLNu+zGZINm8ot5y2p66dka3FWbEUaiSjLPPfXfzSb8657Jn9/z00lcHKq9t2TVeJK5MGE9RNHf1xNd3R1HUk/w/Kh1t89MXJ8uroiiaNeF1Fxa067Qm2392YH1BspyRLHsL4qTPn5pZ726yHV2ZZaXJ17WqNM3xU+n+mz3N9WcPbtl65iXLbyTLM6cYv5z+H0elOOqqVbchHh8j0YT9Fkfx2L4fXy/VjYU4MzbiKIoz66XMerk7k9dYvclAK8dx/fa0XGZ7f7K9K9l+asFYuyaw/W1pvskv6oFM/tmgvZMe1PIak7br5w3acjiUJhyD8ran7a0kO6M32dYbHzvpNYdypM+tfOG+x57f8cCivkA74q/HSfy4pfjPbLxo3+IdP9s/PxR/dSmJX2op/sg5Lz/64tU/OCEYf3cav9xS/OfOX/yl7+zcfiDYP79J+6erpfjl5WcdXHrXwMpg+x9M41daiv/QpY98ee47nnw02P6BtH96Wuuf4W2vX/fwcfuD8aM0/qyW4l/yyvFnLN/8yPpg/CfS/ultKf7TI8Mr7r5p4fb+UPy9afw5LcU/7RfXX7dn39BzwfYPpv3T11L8dy665KoV+zfdGzp2xrsO119YgDentyTnWJ9P1lu9zmzXhOuF+/vi6jnf7OT/OZ2sKGO0nrnTGB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDenocvv33n53lVXdMVRFAfKHMqRPleeMTjY30K95eVnHVx618DKidvmtxAHAAAAKJZeh5dqWyrR/Gh73BOdmFs+nSM4MV2L67dn5xB6xkt2JE6pQ3HKHYrT1aE43R2KM6NDcWZ2KE6lIE4lai5OT8M4pabbM6tDcXo7FGd2h+LM6VCcuYVx6mcAQ3GO6VB7+hrGaX4czutQnGM7FOctHYrz1g7FOa5DcY7vUJwTOhQnO6c81XE4Jym5IBRn7EG5ME5XXK49kTefntZzcuZ1pSnW09tkPdk5+6nW09NkPae3WU+lyXoWt1lP3GQ9Z7ZZT6mgnnTc3pZtX1pPutbk+L+9Q3F2dCjOpzoU59MdinNHh+J8pkNxdrYZB6BZ6fX/+HVjXzSz6+JoVnLEyc4CpNe7C6uvnnQ8qmQv0BNpvJMy22cUxcteqGfiLexw+07LbO+ui9dVO29qEK9vYrxFmScL881OKGTat2Sq8bITCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwjYYuv3/n5XtXXRHF0eh/uQ7lSJ8rzxgc7G+h3pUv3PfY8zseWDRx28yuFgIBAAAAhdLr8O7alko0s+vc/2XX/mLkqsoAgJ+7MzszbAtODdSBFDpSumJEWroof1LDRR9miUEJYDRgulvKsG7Y7iK7TWFF1vpAfNBAoomrT4YnDOFBDYpKsjxoDErCJopNBOVFomiABEioicmY3bl3/nVmZx3RFvz9Hs6995zvnO+e2abJd2ZCLsq1xRWSc4BC8pwp1q9ReWj9OhJt2zA+m8TvWTh81575exc/PH344FR1qjo7NjZ25eVj+67Y99E9d0zPVPfW25Dvs95wst78vYt3HpyZqd49X3/ufO9SMq/U7Jpca44l7/3ePnmiJL6Z57930/+vBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1a1srxUWZ0YH4lCiHrE1LpIxzK5OC4PkPfaN7fvvnru0anWvnx2gIUAAACAvtI6fLjRUwj5bCZkwrnrTxc2Q4shNOt+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/0+1srxUWZ0Y3xKFEPWIqXWRjmVycVweIO9v5qevf+ALO4+29pUGWAcAAADoL63Dhxo9hVAKu8JwdG5bXHo2cF7H/M64dJ3zNxnXeXbQK27XJuNGNxn3wT5xn0qu9wQAAAB450vr/2yjpxjy2TN71v/96vo0bmdHXCa5DvJbAQAAAOA/k9b/uUZPKeSzpUa9vtl6/8KOuHR+v+/t0/n9vrdP4y7ukafz+3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PRVrSwvVVYnxjNRCFGPmFoX6VgmF8flAfK+ePnot3++dPREa18+O8BCAAAAQF9pHd4svQshnx0Jw2HLet1/5ejfv7g4eWzbcDEZzuXCPQcXFu7eV2/TuF1fff1zv/tpVD4p7rJ6e0o2BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvK2qleWlyurE+BlRCFGPmFoX6VgmF8flAfK+OH3kn7c+cs5rrX2lAdYBAAAA+kvr8GbtXwilkAu5sH39qbXWXzPUMb/XmQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7jF/7+KdB2dmqne7cePGTePmVP/PBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnC6qleWlyurEeCEKIeoRU+siHcvk4rg8QN6HP/7od8/6yC8ea+0rDbAOAAAA0F9ahzdr/0IoheEwHM5Zf+p2JrBe/xf/hy8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFqqV5aXK6sT4mVEIUY+YWhfpWCYXx+UB8l7458/funK8+mJrXz47wEIAAABAX2kdnmv0FEI+e1nIhx3J80z7hCiTXLufCzTn3dU2bWTT8+5rm5fZ9Lyvdewsm+ymPq+QrlesXxvzyifPK4cQSsm8UnNgsm1eeKht1pmbfs/vtc0r9pkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DRUrSwvVVYnxqMohKhHTK2LdCyTi+PyAHmfO3zV8dHFP77W2lcaYB0AAACgv7QOb9b+hVAK54ezwvnrdX8otsencfsfeeXqv/7sjG+EsHf7by/I9lz/LxdXftnZhDDUHjQUwnuSfFGPfEd//LeHX331J58MYe85mR3/br72JePa5Inttz27P79ngw8GAAAA3kXS+n+40VMM+exsz/o/rbw3rv+bpwnrBfjc2Tfdty1pk4q8Y8ZQMck31CPfnVd880flC47/Ya3+3+i84dNfPu8T28LcFfF02tZ7Ol8wrs08uPvAy1ufPpLuup4/05E//VxeOvHDzxydP/SVev5CKCT952W75T+57XBGXHtr9omnDu1fvKE9f7bH/h/Y/f4//f47h19Zy//GzpFG/g9ssP+N8599c+X5Y48/dGN7/uEe+adu2vL9N8tz/+jc/0jHwsknX/+Dt/wVOkRx7Y3pZ67ZurLrQHv+EMJka2D6+T/1xLfKK7/edjjNn/5W5OJdHflb/qm1th1nTlFcW9lxydTYkwtb2vNHHfnT/R+//wdvfen4c9d17v/2zv33zN+5/+tGM7e8sHNskB/PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8A1Qry0uV1YnxkAkh6hFT6yIdy+TiuDxA3o9ddO0N1782+/XWvnx2gIUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAt021srxUWZ0YH4pCiHrE1LpIxzK5OC4PkHf+0tcfe/nGX72vta80wDoAAABAf2kd3qz9C6EUciEXRtbr/skT2297dn9+TyjWR6Pkmp2Zm1/40B1zR2ZvP0VvDgAAAGxWWv9nGz3FkM9eFIaT+n9lxyVTY08ubEnr/xDC5FpTuGN6pjoWGucE141mbnlh51i5cU7QGnfpobmZ5JggXff+q7a+NP/Z1eu7rruvGffG9DPXbF3ZdSCNG06u63GXNeNmHtx94OWtTx9J44bSc4q1uL3NuLdmn3jq0P7FG9LxTOt6LXFn31x5/tjjD93YWCe5jiR5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sUOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9usoxKoijgPwzL27evWu225RblKkYqJBslJRCdEqJD20IQW+WOBDVkYmtYQhhJuQhUn4VBEUEQWBSEHQQxEWlEESBRHaQxjaQz3ERrQhblTs7szu3aOn3U6tgnwfHMaZc89v/mfOePZeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6vuW09Y+3hpwd+v3PRbZ/v3jK86/b3tz21v2/O4Vv33XHslXvfPHGye8XqNx5aP/JoR//evX1f3zjyxZ9PThv8xHizMnUbIcSfYwhXfrnihT2fHlk4OhZDCPXYNRhCd6x93B0LCb2nQwj3TdQ59eS7w9fdP9oOPjd3yvhFhZDifYVmPdczrmtqvVxYGmmfPfPh9it+XLX+2KFv1w33Nk4/Njj5kdho2U8hdG5uvb49hDAvHaPybuvJF6d2Qwhhfst1N01T19IZ1n9tSX9RauektjlNTj6/pNBvn2EdbYW2McPrqqrNcn6Wn1/HLM9ffLkV5+lO7XupXfkv8+v5iKEWQ9vEdA/HyT0SWp5bDHHs2U/2a1P2QizsjRhCLPRrhX69vXBfY/OmjVaPcep4/lxhfHEab0vjS6bZa3eXjF+e7zf9Rz1VuP9iaPOMf0zc15hc1/f/UMu5UGt5B51tPNfbSA+jmcaa8eIzrvnrLPK5jSeff/vEzleXdZXUEd+JKT9Wyv9m281Hl+/8bqinLH9zLeXXKuUPrPr14E93fbawNH9/zq9Xyj9+/fIXP9i141Tp+vyS16etUn59zTUjq3f3biyt/7Wc36iU//q6Ay933vDJwdL6e/P6zKu2Plsf/2PTW5cOleaHnD+/Uv7a3y67es32Aw+U5n+U16dZKf/IwNb+PQ9etWNxWf5XOX9BpfylP9yz6dDRLcdL6+/L69NVKf+WZWs39A89sq/s3RkHz9VfWIAL0yXpO9azqV/1d+Z/1fJ74aWuOP6dryMdC/7PiQpG5+mcxXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeCgAA//8BWVdS") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket(0x23, 0xa, 0x1) ioctl$TIOCGETD(r8, 0x5424, &(0x7f0000000080)) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x10012, r7, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) [ 70.294572][ T4528] Bluetooth: hci0: command tx timeout [ 71.351533][ T5114] loop0: detected capacity change from 0 to 32768 [ 71.488515][ T5114] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,version_upgrade=none [ 71.493818][ T5114] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 71.496601][ T5114] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 71.496601][ T5114] rw journal devs: loop0 [ 71.527805][ T5114] bcachefs (loop0): accounting_read... done [ 71.530169][ T5114] bcachefs (loop0): alloc_read... done [ 71.532300][ T5114] bcachefs (loop0): stripes_read... done [ 71.534869][ T5114] bcachefs (loop0): snapshots_read... done [ 71.539265][ T5114] bcachefs (loop0): going read-write [ 71.543865][ T5114] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 41) [ 71.548972][ T5114] bcachefs (loop0): fatal error - emergency read only [ 71.551882][ T5114] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 71.555235][ T5114] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 71.559320][ T5114] bcachefs (loop0): unshutdown complete, journal seq 8 [ 71.562926][ T5114] bcachefs (loop0): bch2_fs_recovery(): error erofs_sb_err [ 71.565894][ T5114] bcachefs (loop0): bch2_fs_start(): error starting filesystem erofs_sb_err [ 71.569194][ T5114] bcachefs (loop0): shutting down [ 71.581971][ T5114] bcachefs (loop0): shutdown complete [ 71.587906][ T1034] ================================================================== [ 71.591321][ T1034] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 71.594228][ T1034] Read of size 8 at addr ffff88801fa080b0 by task kworker/u4:8/1034 [ 71.597334][ T1034] [ 71.598232][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: kworker/u4:8 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 71.601898][ T1034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.605892][ T1034] Workqueue: loop0 loop_rootcg_workfn [ 71.608002][ T1034] Call Trace: [ 71.609330][ T1034] [ 71.610527][ T1034] dump_stack_lvl+0x241/0x360 [ 71.612412][ T1034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.614498][ T1034] ? __pfx__printk+0x10/0x10 [ 71.616322][ T1034] ? _printk+0xd5/0x120 [ 71.617947][ T1034] ? __virt_addr_valid+0x183/0x530 [ 71.619974][ T1034] ? __virt_addr_valid+0x183/0x530 [ 71.622015][ T1034] print_report+0x169/0x550 [ 71.623737][ T1034] ? __virt_addr_valid+0x183/0x530 [ 71.625610][ T1034] ? __virt_addr_valid+0x183/0x530 [ 71.627779][ T1034] ? __virt_addr_valid+0x45f/0x530 [ 71.629782][ T1034] ? __phys_addr+0xba/0x170 [ 71.631612][ T1034] ? percpu_ref_put+0xda/0x250 [ 71.633459][ T1034] kasan_report+0x143/0x180 [ 71.635260][ T1034] ? percpu_ref_put+0xda/0x250 [ 71.637143][ T1034] ? percpu_ref_put+0x1f/0x250 [ 71.639041][ T1034] percpu_ref_put+0xda/0x250 [ 71.640420][ T1034] blk_update_request+0x5e5/0x1160 [ 71.642171][ T1034] blk_mq_end_request+0x3e/0x70 [ 71.644005][ T1034] loop_process_work+0x1c10/0x2170 [ 71.645794][ T1034] ? __pfx_loop_process_work+0x10/0x10 [ 71.647838][ T1034] ? register_lock_class+0x102/0x980 [ 71.649856][ T1034] ? __pfx_register_lock_class+0x10/0x10 [ 71.651878][ T1034] ? mark_lock+0x9a/0x360 [ 71.653536][ T1034] ? debug_object_deactivate+0x2d5/0x390 [ 71.655532][ T1034] ? __lock_acquire+0x1384/0x2050 [ 71.657714][ T1034] ? __pfx_lock_acquire+0x10/0x10 [ 71.659801][ T1034] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.662201][ T1034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.664621][ T1034] ? process_scheduled_works+0x976/0x1850 [ 71.666855][ T1034] process_scheduled_works+0xa63/0x1850 [ 71.668781][ T1034] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.670866][ T1034] ? assign_work+0x364/0x3d0 [ 71.672630][ T1034] worker_thread+0x870/0xd30 [ 71.674443][ T1034] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.676645][ T1034] ? __kthread_parkme+0x169/0x1d0 [ 71.678640][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 71.680492][ T1034] kthread+0x2f0/0x390 [ 71.682013][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 71.684018][ T1034] ? __pfx_kthread+0x10/0x10 [ 71.685760][ T1034] ret_from_fork+0x4b/0x80 [ 71.687425][ T1034] ? __pfx_kthread+0x10/0x10 [ 71.689298][ T1034] ret_from_fork_asm+0x1a/0x30 [ 71.691106][ T1034] [ 71.692273][ T1034] [ 71.693207][ T1034] Allocated by task 5114: [ 71.694858][ T1034] kasan_save_track+0x3f/0x80 [ 71.696668][ T1034] __kasan_kmalloc+0x98/0xb0 [ 71.698334][ T1034] __kmalloc_cache_noprof+0x19c/0x2c0 [ 71.700359][ T1034] __bch2_dev_alloc+0x57/0xa60 [ 71.702250][ T1034] bch2_dev_alloc+0xd4/0x170 [ 71.704073][ T1034] bch2_fs_open+0x2e3f/0x2f80 [ 71.705801][ T1034] bch2_fs_get_tree+0x738/0x1710 [ 71.707698][ T1034] vfs_get_tree+0x90/0x2b0 [ 71.709365][ T1034] do_new_mount+0x2be/0xb40 [ 71.711120][ T1034] __se_sys_mount+0x2d6/0x3c0 [ 71.712833][ T1034] do_syscall_64+0xf3/0x230 [ 71.714514][ T1034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.716491][ T1034] [ 71.717279][ T1034] Freed by task 5114: [ 71.718507][ T1034] kasan_save_track+0x3f/0x80 [ 71.719925][ T1034] kasan_save_free_info+0x40/0x50 [ 71.721697][ T1034] __kasan_slab_free+0x59/0x70 [ 71.723408][ T1034] kfree+0x1a0/0x440 [ 71.724878][ T1034] kobject_put+0x22f/0x480 [ 71.726539][ T1034] bch2_fs_free+0x27b/0x3c0 [ 71.728253][ T1034] bch2_fs_get_tree+0xd9f/0x1710 [ 71.730060][ T1034] vfs_get_tree+0x90/0x2b0 [ 71.731679][ T1034] do_new_mount+0x2be/0xb40 [ 71.733345][ T1034] __se_sys_mount+0x2d6/0x3c0 [ 71.735169][ T1034] do_syscall_64+0xf3/0x230 [ 71.736929][ T1034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.739149][ T1034] [ 71.740072][ T1034] The buggy address belongs to the object at ffff88801fa08000 [ 71.740072][ T1034] which belongs to the cache kmalloc-4k of size 4096 [ 71.745254][ T1034] The buggy address is located 176 bytes inside of [ 71.745254][ T1034] freed 4096-byte region [ffff88801fa08000, ffff88801fa09000) [ 71.750256][ T1034] [ 71.751145][ T1034] The buggy address belongs to the physical page: [ 71.753388][ T1034] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fa08 [ 71.756476][ T1034] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 71.759599][ T1034] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 71.762575][ T1034] page_type: f5(slab) [ 71.764417][ T1034] raw: 00fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 71.767494][ T1034] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 71.770635][ T1034] head: 00fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 71.773773][ T1034] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 71.776949][ T1034] head: 00fff00000000003 ffffea00007e8201 ffffffffffffffff 0000000000000000 [ 71.780204][ T1034] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 71.783446][ T1034] page dumped because: kasan: bad access detected [ 71.785938][ T1034] page_owner tracks the page as allocated [ 71.788148][ T1034] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13888054809, free_ts 13422850362 [ 71.795213][ T1034] post_alloc_hook+0x1f3/0x230 [ 71.796748][ T1034] get_page_from_freelist+0x3045/0x3190 [ 71.798618][ T1034] __alloc_pages_noprof+0x256/0x6c0 [ 71.800468][ T1034] alloc_pages_mpol_noprof+0x3e8/0x680 [ 71.802296][ T1034] alloc_slab_page+0x6a/0x120 [ 71.803946][ T1034] allocate_slab+0x5a/0x2f0 [ 71.805564][ T1034] ___slab_alloc+0xcd1/0x14b0 [ 71.807284][ T1034] __slab_alloc+0x58/0xa0 [ 71.809002][ T1034] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 71.811105][ T1034] kobject_uevent_env+0x28b/0x8e0 [ 71.813163][ T1034] driver_register+0x2d6/0x320 [ 71.815026][ T1034] usb_serial_register_drivers+0x707/0xe70 [ 71.817201][ T1034] do_one_initcall+0x248/0x880 [ 71.818968][ T1034] do_initcall_level+0x157/0x210 [ 71.820779][ T1034] do_initcalls+0x3f/0x80 [ 71.822491][ T1034] kernel_init_freeable+0x435/0x5d0 [ 71.824524][ T1034] page last free pid 1 tgid 1 stack trace: [ 71.826753][ T1034] free_unref_page+0xcfb/0xf20 [ 71.828467][ T1034] __put_partials+0xeb/0x130 [ 71.830140][ T1034] put_cpu_partial+0x17c/0x250 [ 71.831856][ T1034] __slab_free+0x2ea/0x3d0 [ 71.833483][ T1034] qlist_free_all+0x9a/0x140 [ 71.835188][ T1034] kasan_quarantine_reduce+0x14f/0x170 [ 71.837180][ T1034] __kasan_slab_alloc+0x23/0x80 [ 71.838997][ T1034] __kmalloc_cache_noprof+0x132/0x2c0 [ 71.840951][ T1034] bus_add_driver+0x163/0x670 [ 71.842610][ T1034] driver_register+0x23a/0x320 [ 71.844354][ T1034] usb_serial_register_drivers+0x707/0xe70 [ 71.846440][ T1034] usb_serial_init+0x1cd/0x330 [ 71.848194][ T1034] do_one_initcall+0x248/0x880 [ 71.850037][ T1034] do_initcall_level+0x157/0x210 [ 71.851875][ T1034] do_initcalls+0x3f/0x80 [ 71.853574][ T1034] kernel_init_freeable+0x435/0x5d0 [ 71.855551][ T1034] [ 71.856382][ T1034] Memory state around the buggy address: [ 71.858455][ T1034] ffff88801fa07f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.861301][ T1034] ffff88801fa08000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.864340][ T1034] >ffff88801fa08080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.867300][ T1034] ^ [ 71.869346][ T1034] ffff88801fa08100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.872377][ T1034] ffff88801fa08180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.875566][ T1034] ================================================================== [ 72.253948][ T1034] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.256794][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: kworker/u4:8 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 72.260695][ T1034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.264587][ T1034] Workqueue: loop0 loop_rootcg_workfn [ 72.266435][ T1034] Call Trace: [ 72.267658][ T1034] [ 72.268718][ T1034] dump_stack_lvl+0x241/0x360 [ 72.270369][ T1034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.272224][ T1034] ? __pfx__printk+0x10/0x10 [ 72.273878][ T1034] ? preempt_schedule+0xe1/0xf0 [ 72.275621][ T1034] ? vscnprintf+0x5d/0x90 [ 72.277185][ T1034] panic+0x349/0x880 [ 72.278629][ T1034] ? check_panic_on_warn+0x21/0xb0 [ 72.280431][ T1034] ? __pfx_panic+0x10/0x10 [ 72.282106][ T1034] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 72.284198][ T1034] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 72.286424][ T1034] ? print_report+0x502/0x550 [ 72.288216][ T1034] check_panic_on_warn+0x86/0xb0 [ 72.289998][ T1034] ? percpu_ref_put+0xda/0x250 [ 72.291806][ T1034] end_report+0x77/0x160 [ 72.293389][ T1034] kasan_report+0x154/0x180 [ 72.295070][ T1034] ? percpu_ref_put+0xda/0x250 [ 72.296867][ T1034] ? percpu_ref_put+0x1f/0x250 [ 72.298697][ T1034] percpu_ref_put+0xda/0x250 [ 72.300502][ T1034] blk_update_request+0x5e5/0x1160 [ 72.302468][ T1034] blk_mq_end_request+0x3e/0x70 [ 72.304432][ T1034] loop_process_work+0x1c10/0x2170 [ 72.306457][ T1034] ? __pfx_loop_process_work+0x10/0x10 [ 72.308527][ T1034] ? register_lock_class+0x102/0x980 [ 72.310478][ T1034] ? __pfx_register_lock_class+0x10/0x10 [ 72.312668][ T1034] ? mark_lock+0x9a/0x360 [ 72.314367][ T1034] ? debug_object_deactivate+0x2d5/0x390 [ 72.316768][ T1034] ? __lock_acquire+0x1384/0x2050 [ 72.318719][ T1034] ? __pfx_lock_acquire+0x10/0x10 [ 72.320639][ T1034] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.322874][ T1034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.325301][ T1034] ? process_scheduled_works+0x976/0x1850 [ 72.327501][ T1034] process_scheduled_works+0xa63/0x1850 [ 72.329587][ T1034] ? __pfx_process_scheduled_works+0x10/0x10 [ 72.331930][ T1034] ? assign_work+0x364/0x3d0 [ 72.333752][ T1034] worker_thread+0x870/0xd30 [ 72.335567][ T1034] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 72.337680][ T1034] ? __kthread_parkme+0x169/0x1d0 [ 72.339335][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 72.341012][ T1034] kthread+0x2f0/0x390 [ 72.342428][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 72.344122][ T1034] ? __pfx_kthread+0x10/0x10 [ 72.345692][ T1034] ret_from_fork+0x4b/0x80 [ 72.347263][ T1034] ? __pfx_kthread+0x10/0x10 [ 72.348887][ T1034] ret_from_fork_asm+0x1a/0x30 [ 72.350640][ T1034] [ 72.352074][ T1034] Kernel Offset: disabled [ 72.353778][ T1034] Rebooting in 86400 seconds..