program: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000003c0)="02", 0x1, 0x7, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r7 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x40}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'macinuit'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x2000, 0x12) getdents64(r8, &(0x7f0000000100)=""/154, 0x9a) unlinkat(r7, &(0x7f00000003c0)='./file1\x00', 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x200, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r9, 0xe3, 0x0, 0xc397, 0x7}) mbind(&(0x7f00009a6000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000001c0)=0x1f, 0xa7, 0x0) set_mempolicy_home_node(&(0x7f00009a9000/0x3000)=nil, 0x3000, 0x0, 0x0) mlock(&(0x7f00009a9000/0x2000)=nil, 0x2000) syz_mount_image$bcachefs(&(0x7f00000059c0), &(0x7f0000005a00)='./file1\x00', 0x1408c8a, &(0x7f0000000280)=ANY=[], 0x2, 0x59df, &(0x7f0000009a40)="$eJzs3QtwXNXdGPBzVytLlvyQ7ASEnWDxGGKmWNi4CU4hxQNlJk3BOA2BQGiME2TiIGxiK9iGFEwghAyEMJC2zDAl7rQTOzRhnEebKXlghkKGuBA8JJ0xGcpjwtBSAmkz8BE+gr6R9p7V6mqvdrVaGdv8foO1e87e+z//c+7d3XuOllUAAADgPeHRr29+Y9WCs3/ztf7Xr//4A1feEDpbRurb4wZd6e3WdytDptPG33/7vMpyW7Fn5DZ7Xnzmwm2vXTL/rEduWn3GY6/d/YNn33751AUPnvuJe247e++d37rzzItrtRPPpxNHy8mfkhC+9/bgd25+ZO+Rw3XJcPtJ1/bQ3Z0UHupOMiGWvhVCuKyc59gHf/L68nXDt9tvbRtTPzcTxPn+3taenmc33bvr+1dft6rv5t9ffNfqM3/6xPbRTZLhbX6cnk8hzLm0cv/WEMLM9N+weLb1xJ3T29UhhI6K/VbUyOvYOvNfklNemN7OSG87c/ZPMo8fkykX6syjmLntqHO/RtWbV7PMypSzL0bTJfYzvm79LL09cZJxWuK/JBSSUCynP5CMniOh4rglIRk5t9vL5cJIOZTLIVtOMuVCptzSmunXSLvpidaSJGPr43aZ+t60vpjWH1P5Wl3Fp3Lqj0pv29Mn6puxHLJ3SjrH3Sn3a0TM67kJcjkQChWvQdXqY74r0oPRmdZ1JvPG7TNURXxs8dF7+oorFj/alZNHsjtJ4ycNxd+/a+u6jv1bNvbkxb+0kMYvNBT/6qGBrt3nvrAwN/4dMX5LQ/Hv/dU9v96y5Kyf547Pn+P4FBuK/+K+nTteuf/Zx3Pz3xHjtzcU/7EXTtu1Z/FJF+XmvzSOz8yG4t/3xl+v++POGxfkxg8xfkdD8fd99onbfjnr4fm58ffE8elsKP75r55z81Nznu7uzYv/ZIw/u6H4z7Tfvua7zz+9J/f4rozj09VQ/HN6Tu94cO8ZH8177Uy2H+h3WIDDy/z0GuuWtNzoPHOqKuYLd3clpWu+Wem/2c1sKGO4nTnTGB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA94bjHv8vn68sf6lt4Tn//oTu54tpua0YQhJC+EOhVI71M0JIZoYQNg+u3TS4fsPlvV/a+JVNG9YO9K4d7O3fMLhpW+8/Pql3U/9VA2u3DT+6dMny0n7zRqKFMC/54LhchoaGhkIIKyvrYnv/Zu+2zrdefvG3ISx9/1NHF3P789r/P2vRnCo/M5KVQ//7ksKPvv5A+3Gliq40r668vLrG1sUMdp/XccKNZ/yLD4Ww9IiJ8tqy+cuPj0lopGI0TqrQFkoD3ZZ0VM2jnPVoPiPjVVy3fqB/ae3xTXLG99/NeufbvcWeeaXxbc/tR53jOzeE0D5015y/G3jg2FM+dhAf91rjXdGFkfzi+LWn4z0n7decnH4Vcvp1xfVfeOHtay+4antYWvzLovFt1+pXa3oCtCZH1dVubKEj6R6zbXu6fTzicb+TB6+86uTN265Zsv7KtZf3X96/YfmKZcs/fOryj6xYevJI10s/m9b/2P6H6uz/wXo+1cqr1ngM59XIeGSUnn9dX/7Pd/3Hzc8dWcd5XrHpSH4xz47hw7wsVJxv48eqWr9qjUNLzjhs/MU7cx9/5qhrmvQ6NHx8+v6w6nfL/vKRUsUh8zofs07zaal83Vl28I5v23CmI/3qrJrX/T894t5b/9PL5f6EGTPC1rWDg5uWlX4emH799gfrz25uv7742quL3nno2vnj+nVK6WetfhVz+tW1bs/O0/7rj/pq9avUo/E/x/frk6ftP3LVP115SRr/QDwfKhNq8PlQzrqrnMfo8+GUg6cf795xLlRulqwcOntZy4L9/+yWvlJFrfEtb11tfJeHMCvNdFaysGpe2drYr0UjP1tCOizxJrQXqvevNZSeX9nrmrhfdlQ708c6k3lV+5UVH1t89J6+4orFj+aNdLK71OLMMLt0m3wgZ8uBzI4t5YSrtV/r/GjNOT8+tnvPfa+9tOXa5r0OLO58540vf/PIM0sVzX3+DLVlY9T7/GlPz9P2nPO0nHWaT2vledr3hY0Dl5Xqa52vi0L1/jT7fM22M7p99Xi9mXJnaGno/L73V/f8esuSs36ee37/ud7z+6tjSi1TPL/fvevfkrYa85/4/r152zVXrB0Y6N+0uVTfrOuS2E727G70uiSeFfNq9Kt1XL/quDMzTGLjsSPWrNe5mP9lmRiNvs51hqSh59P+XVvXdezfsrFr3F5pQ5cW0viFhuJfPTTQtfvcFxbmxr8jxi82FP/FfTt3vHL/s4/nxt+RpPHjiE8u/mMvnLZrz+KTLsqNvzTmP7Oh/O9746/X/XHnjQty44cYv7Oh+Oe/es7NT815ujs3/pNJ2s7we0sIP359+bpSORl+bpVHbTiP1jF5hWw5yZQLmXJLZblQWmstN9CSJGPr43Zp/TEVuVRzYU59fPdq7yndvhnLIXtn4vqDTaHitb9afa33dwCAw82+q3+zqrIcf/8fr0Hj7//70wul/BVSGDXVeVhPTtw4Dxtdz5kx5vGeNH7cP65jf66vNA27obd0oT/Zdfr4fMiu08d2Fh83Nkaj6/S11i2PzZRjXovS3sZ8JpjXzAp1rFuOb2fidctM92uvK/bekqkojqx95h2/1nTFrNrnHTL5zhqOkHd+ZNfF4uc5jp4TWvu+8fATSZ3nR/ZzNPE4ZD9HE9tZkHnhbPRzNFM9P3pH+10aj/Hnx8gSSO114fHHL0wwvqPHr3q07PGbxPHuGt5+un8PdOivG07v7xEOxLpkI/EPlnXJg33dMNbH14dineuJF+TUN2s9Mb5cxLyemyCXA8F6InC4uP2Wvtcry3H+H98jhuf/w+8BvZnrtlrXodmrxhgv7/MVK1qq51dr3jH+80AdDb2P7/vsE7f9ctbD83Ovc/bU+3mJq8aUOmp8XqLWOB6fKdccx5wFmlrzvRMy23eG2Q2N4zPtt6/57vNP78kdx5WlN8ba43jHmNLsKY7j4ky55ji2Vs+q1jhm26l1/p6YKXemn8Sa7Lif03N6x4N7z/ho7rhvr3fcd4wpddUYd/OunPjmXQfFvGu61yHftXld+jH06ZrXfSqnfrLzus5xd8r9GnGozevy3hcA4FByxP/ccWNlOc7/y78/S+f/D2f2c92fE991/0Fy3T+960DTPa+Y7vWX6V5nMC9KyyF7p+S9MC9Ktk93dgAATNY/+d0//2+V5Tj/j5er+fP/qc1PcudvK5vz/znnzq/K89upzc9z8y/Pz6e2PpIbv7w+MrX1i9zxKa9fTG39JTf+pc2Zn+eOT5Pm59nv4SjHf/JwWR85MPP/n5j/Z+6UvBfm/wAAHHyefOitMZ+8j/P/mWl5uub/ufPD8vx/uufP0z2/ne75+XSvX0z3+suhPn8+1NcvzP/N/2sz/wcAOLz8y8/M+l1lOc7/4/fTx+//++9pOfu99ebpOfHN083TJ4hf/zx9utfZrANYB6jNOgAAwOEh+z1m8WtLs9+r1zoykxq//b9Kb7dW2b5a/Itzto+KI99RFsLnBzf196/5ylWXrR3sX7Nh42X9m9ds2bR+cLB/Q2m7qc4bc+ct6Qi0hmLa3+rbZedtc9Pvn5ub8/1z2e1j2IUjd8Z//1y22Zk1vodt9PjUl2/e8SlMsH214593PPPiX5izfVT/8Z/aukTu8V9a3/HPft99reOf3X6yx799isc/236t419t+2rHP+945sU/P2f7qP7jP7V1wdzjf2l9xz/7fZm1jn92+8ke/2SKxz/bfq3jX237asc/73jmxf9kzvZR+fh/4YunrFm3ec36DesH168dWH9N/9jtukIykk+9f684Dsuk/t535sc4hcn/3eTm5FEYl0drOh7Vjv9wHkkmj+40k+68v2+Rk/f73vy/y9Z/7z/8LYSl72/5wJTGL1k59Iuruncs+urzc4fzL0yYf3nLNK9afyc6u33sT3Fg4+bBf7Ru41c2ZP+ibGPiemahXJ6m9cy0sqXO9cmLc+onuz7ZOu7Owane9UkASm75t1vHfBF4/P1/fD/rSV87Z6YvoLG+/uv0qf1+Pfc6/Y76rtOz369e6zo9u33sb73X6YUpXqdn2691nV5t+2rX6XnX3XnxV+VsP1ljz5PhE2Tk/Ohfs2Xjpisqtpvu72Nsfr7T+/2UU8+vkfWR+Gyr/bmNRtWf//R+LmT685/a50Jy839yaley9ec/vd8v2qgDNt9KPyxS6/MjteZhF+XUT3YeNmPcnYOTeRgAHPx+1Pf//k9lOc7/45cCxPn/rWk558/0NezQ/55/38NfNX6T/v5WrXmQ+cAEjR0EzAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqnt1//94o7LcVuwZuX3065vfWLXg7N98rf/16z/+wJU3fObCba9dMv+sR25afcZjr939g2fffvnUBQ+e+4l7bjt7753fuvPMi2s21FW6OTEttoeQ/CkJ4XtvD37n5kf2Hjlclwy3n3RtD93dSeGh7iQTYelbIYTLynmG8O3C6IM/eX35uuHb7be2jdlpbiZItl+hsyXmMybPsLVmjzgEtafn2U337vr+1det6rv59xfftfrMnz6xfXSTZHibH6fnUwhzLq3cvzWEMDP9NyyebT1x5/R2dQiho2K/FTXyOrbO/JfklBemtzPS284aceLjx2TKhTrzKGZuO+rcr1H15tUsszLl7IvRdIn9jK9bP0tvT5xknJb4LwmFJBTL6Q8ko+dIqDhuSUhGzu32crkwUg7lcsiWk0y5kCm3tGb6NdJueqK1JMnY+rhdpr43rS+m9cdUvlZX8amc+qPS2/b0ifpmLIfsnZLOcXfK/RoR83puglwOhELFa1C1+pjvivRgdKZ1ncm8cfsMVREfW3z0nr7iisWPduXkkexO0vhJQ/H379q6rmP/lo09efEvLaTxCw3Fv3pooGv3uS8szI1/R4zf0lD8e391z6+3LDnr57nj8+c4PsWG4r+4b+eOV+5/9vHc/HfE+O0NxX/shdN27Vl80kW5+S+N4zOzofj3vfHX6/6488YFufFDjN/RUPx9n33itl/Oenh+bvw9cXw6G4p//qvn3PzUnKe7e/PiPxnjz24o/jPtt6/57vNP78k9vivj+HQ1FP+cntM7Htx7xkfzXjuT7Qf6HRbg8DI/vca6JS03Os+cqor5wt1dSemab1b6b3YzG8oYbmfONMYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODw8L8+/uq2yvIPV790wfHnrf50MQkhydlnqIr4WMuMlSt7G8jjxX07d7xy/7OPx/Jw2z0NxAEAAADGe+u8v51dWY7z8EJaTkJ76AlbkplhYdX94xrBwlhKxtZn1xBmjm7ZlDiFJsVpaVKcYpPitDYpzowmxWlrUpz2GnHaQ31xZk4Yp1B3Ph1NitPZpDizmhRndpPizGlSnLlNitM1YZz6z8PuJsWZ16Q485sU531NivP+JsU5oklxjmxSnOya8mTPw9nplgvy4ozcaakZp5i0lB+otp4e2/ngFNvprLOd7Jr9ZNuZWWc7x02xnfY62zlhiu0kdbZzYma/wiTbKdRoJ563W/P6E0t1nv/bmhTnmibFubZJcb7apDj/uklxrmtSnOunGAcgz3W9f/+hynKc/8d5YxK6Qlvx9NCRvuJkVwHifHfRyM/x73ft2Ql6Ksb7QKZ+Ro14K7IT9Uy8RU3O79hMfeuYeMXyddME8boq4x2febBmf7MLCpn8Fk82XnZhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACaqOeZM75RWf7h6pcuOP681Z8OSRj+r6qhKuJjLTNWruxtII/FR+/pK65Y/GgsD7fdVmwgEAAAADDOS0998+TKcpyHt6blJLSHtuKy0JbMGLNfe7oO0F7eLqwcvj16Tmjt+8bDTyS9hZH6jqR7wv0K6X4nD1551cmbt12zZP2Vay/vv7x/w/IVy5Z/+NTlH1mx9OR16wf605+hrUa8ljTe5m3XXLF2YKB/0+ZSfTb/nnS/nvThWP+5vjDS9RvS/OfVaK91XHvTd6fWsQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B/YtfsYuaoqAOD37czODFu6HUTotBS6aTdQg2661UAMXy98/CV2h8TdaCQSAjQCG9pStOVDDSEQiEZMijGGhI9gAIE1JSEaK2KNfxhsEA1gUpAEiLoEk5JILGqkY2b33d03szN2GYRa8vv98WbO3HPuuW+2aXLeLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+3Z089YX0+nqpPTwyP1ccHkhCSLjWNDuJaoZSmQz2c4/df/O23fn70r46NcbN3udjDRgAAAMACf3hscFM+jnN4fxYnoRLKxUIohBUz8Zr51GoI83M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4XfmCyMT+XiqPj0xPFYfX5KEkHSpaXQQ1wqlNB3q4Ryf23/hbc8NvnhMjJu9az3sAwAAACy0f0Xl7Hwc5/C+LE5CJdTC2tCfrGipi88GVrbt154X9zlxkXntzw665a1dZN7Ji8z72CHyNmavOwIAAAAceZ5aWvl+Po7zfzGLk1AN5eLSrvP/oeb6mLe6La+QvfbytwIAAADAu3P/9p/8PR/H+b+UxUmohXKxNjevL3beX9OWF+sri6w/1O/tY966Ln3af58PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPz/WHVgS0s8VZ+eGB6rjxeSEJIuNY0O4lqhlKZDPZzjnqfufie/VbN3udjDRgAAAMAC73zpkqvy8T1P3f3r7Z8472dx9E5CJZSLA6E/LJmZ+3/0xPH3fPMHb4RCCOlMQqkUdlx63XXXjs5eY96X39y/+uAvbzx2Qd6G2esHf6cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB7dfOu3Uk+nqpPTwyP1cePSkJIutQ0OohrhVKaDi2m8bJkviiE8MiBf379Tw/dsjLGzd61Hu4HAAAAWOjBi5b/Jh/HOTzO/kmohFoohVI4fibOz/pNfW37dXtmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx4bLv+hqsvnZy84lpvvPHGm7k3h/t/JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HBZedcTT+fjqfr0xPBYfbyShJB0qWl0ENcKpTQd6uEcT792xsN71n38CzFu9q71sA8AAACw0LbiaWfn4ziHx9k/CZVQC/2hPxyXxQvNzP/VD+K0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4fSX+6+5OR9P1acnhsfq40uTEJIuNY0O4lqhlKZDPZzj5cq3L7n31Rf3xLjZu1zsYSMAAABggav27/1UPo5zeH8WJ6ESysVVoRxWZZ9Mtm6QFGJix+cC83U3tZQVFl13e9uJZx8KVLLnEJW5c4a0+TpXN7SwbiiEUMvqavO7pYv+sgAAAOAIdc4Pzz0pH8f5v5TFSaiGcvG43Py/paV+YNFz/Hda6pYuuu6+lrrqIer+B18JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwHp1+74N78/FUfXpieKw+niQhJF1qGh3EtUIpTYd6OMe+h3dsGti3fXOMm71rPewDAAAALHTn+O/Oz8dxDo+zfxIqoRZODIPhxJm5P1Rb62PerrGBk2855zOnhLD++OdOKnbtt33b1mfaLyH0tSb1hbAs65d06ffRf/x19MoH738nhPXHFVa9236tW6aNJ7ccc9/qm15d1nUbAAAAOKL98bJTjsrHcf7vz+IkVEO5eE3X+T9O3u9q/n/2sSsvGMyu2UTeVtFXjf1CSDv1++7e65f8640/P9uc//9bvzf/dt7qwQ7XNknaeP3ivsdv3V1ZO/tB7J+09Y/fy/eOPnjnULH2kdn+lVDJPl9Z7Kn/shBCpbFz8O3J3Ws2nJXr39fl/q/+xmWv/fvGiS3N/m+tHpjrf0pv9z/bv7r10Z0PbHtlea5/oUv/zU8eXPbMyytuaL//gY79Z3/Uh/j+R17a+PzoW6e1fv/FLt9/ddOeh8748eMjsX/8W5F1a1s3zv9Ty1/bnjklaeOC0cLKfeffPtLav7/L/Z+1a88jb05vv7H9/i8Pi+3ffv/rlhw8sPWO5ee2LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHJk+f9vVL+Tjqfr0xPBYfTwUQki61DQ6iGuFUpoO9XCOC2tnDvxi7zmfjnGzd7nYw0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAzx7dMbgmH0/VpyeGx+rjfUkISZeaRgdxrVBK06EezvHVxmR112dfOyHGzd61HvYBAAAAFjpveO8T+TjO4XH2T0Il1EIplMLAzNz/5JZj7lt906vLQjVbz16Lk5u3XXfqps1fuebyD/oWAAAAgEM4/ad3fS0fx/m/mMVJqIZycTj0Z/P/6xf3PX7r7sraOP+HENLmpbjpyskr1oe5vAtGCyv3nX/7SMwrZnmVZt4n5/NeH3lp4/Ojb50W8wr5vNEw99xh3ZKDB7besfzcmNefzxu5bPPk5fHz2fyLzti3fOPZ6cUd+2+Yz6tufXTnA9teWR7voy97Hcj6x7ydg29P7l6z4ayYl+T3W/9+/XQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhv35CrKriOICf8+aZz3nj9KZZNI1Q2mqEFGEWTRQYihChMlBQWZCLcmW0KNQ2NpUNQRZhLQTBXOUUEVJBUJQToWFDkkQLhbCkWkRlG6VCMN7MPc8317nNdP2zkM8HHuf9zrv3e3/33jN33gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK3PLL4GB7Pb/aNzkefvGps+v713z1/ONnnr3n4yeee/CBZ04/0rv60I7hlUdO73735Llfb+8/uO7ePTvXTOx6ZdeqDbMeaNvUsDQrayHE32MIb517+o3RQxM3Nudi8/ixMRJ6emLl856YS1jxTwjhsVaf0z/84MzgpuY48vL8afPX50Ly5xXqHamfKY3p/XJtqWXrbMfesbe3bF+/fPS7Da8Pr/rw6MiFTWJzm/ez9RRC98b2/eeFEBZkr6a02vrSztk4HELobNtvaJa+bp1j/8sK6kXZeF021mfJSZ8vydWVOfZRzY2dc9yvrLn2dbl05er8w+hKSeeZnlsfZePS/5nTkV4xVGKottrfHC+skdB232KIk2u71qork3Vo1SFfx1xdydUd83LnNXncbKF1xDh9Pm2Xm1+czVez+SXtz+oZ3Fcwf1M21rI/1L9SHfJvptQvetM6r0mprx/+o5erodL2DJppPvU7lN2MejZXjzdctM/5GaTPBm4eX14dGjjcKOgjHohZfiyVf3xs26bO41uf7CvK31jJ8iul8rec39w4sO7UosL811J+R6n8vZ/t+XLrstWfFF6fP9P1qZbK//nY/n2/vXfy68L+96X8Wqn8I6fuHBsfuO2hwv5XpOuzoFT+O2f/3v7T/hf6C/NDyu8slX/s4aM7P+36orcwfzxdn3qp/Pv/WDv6bfeJnsVF+d+k/IWl8r+vvfromz+eGC+8v3en69Molb+2767OgxMr7yh6dsaRq/0fFuDa0pt9x3opq8v+zrxUbb8Xdjfi1He+ruy18HIeKKd5nO4rmA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAvO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBTAQAA//9lpH9d") creat(&(0x7f0000009a00)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84201, 0x12) [ 85.310652][ T5306] Bluetooth: hci0: command tx timeout [ 85.396726][ T5330] loop0: detected capacity change from 0 to 1024 [ 85.826679][ T5330] [ 85.827848][ T5330] ============================================ [ 85.830586][ T5330] WARNING: possible recursive locking detected [ 85.833302][ T5330] 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 Not tainted [ 85.836567][ T5330] -------------------------------------------- [ 85.839330][ T5330] syz.0.0/5330 is trying to acquire lock: [ 85.841940][ T5330] ffff888052b09548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 85.846834][ T5330] [ 85.846834][ T5330] but task is already holding lock: [ 85.849989][ T5330] ffff888052b0a988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x294/0xb40 [ 85.854652][ T5330] [ 85.854652][ T5330] other info that might help us debug this: [ 85.858105][ T5330] Possible unsafe locking scenario: [ 85.858105][ T5330] [ 85.861305][ T5330] CPU0 [ 85.862760][ T5330] ---- [ 85.864191][ T5330] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.866672][ T5330] lock(&HFSPLUS_I(inode)->extents_lock); [ 85.869192][ T5330] [ 85.869192][ T5330] *** DEADLOCK *** [ 85.869192][ T5330] [ 85.872744][ T5330] May be due to missing lock nesting notation [ 85.872744][ T5330] [ 85.876296][ T5330] 4 locks held by syz.0.0/5330: [ 85.878403][ T5330] #0: ffff8880119ac428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 85.882339][ T5330] #1: ffff888052b0ab78 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 85.886920][ T5330] #2: ffff888052b0a988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x294/0xb40 [ 85.891929][ T5330] #3: ffff8880440ec0f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xbe/0x550 [ 85.896189][ T5330] [ 85.896189][ T5330] stack backtrace: [ 85.898748][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 85.898764][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.898771][ T5330] Call Trace: [ 85.898779][ T5330] [ 85.898785][ T5330] dump_stack_lvl+0x189/0x250 [ 85.898808][ T5330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.898824][ T5330] ? __pfx__printk+0x10/0x10 [ 85.898834][ T5330] ? __kasan_check_byte+0x12/0x40 [ 85.898845][ T5330] ? print_lock_name+0xde/0x100 [ 85.898855][ T5330] print_deadlock_bug+0x28b/0x2a0 [ 85.898865][ T5330] validate_chain+0x1a3f/0x2140 [ 85.898877][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 85.898891][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 85.898904][ T5330] ? look_up_lock_class+0x74/0x170 [ 85.898967][ T5330] ? register_lock_class+0x51/0x320 [ 85.898984][ T5330] __lock_acquire+0xab9/0xd20 [ 85.899000][ T5330] ? hfsplus_get_block+0x39e/0x1530 [ 85.899012][ T5330] lock_acquire+0x120/0x360 [ 85.899024][ T5330] ? hfsplus_get_block+0x39e/0x1530 [ 85.899036][ T5330] ? __pfx_hlock_conflict+0x10/0x10 [ 85.899046][ T5330] __mutex_lock+0x182/0xe80 [ 85.899060][ T5330] ? hfsplus_get_block+0x39e/0x1530 [ 85.899072][ T5330] ? lockdep_unlock+0x89/0x120 [ 85.899084][ T5330] ? validate_chain+0x897/0x2140 [ 85.899093][ T5330] ? hfsplus_get_block+0x39e/0x1530 [ 85.899105][ T5330] ? __pfx___mutex_lock+0x10/0x10 [ 85.899124][ T5330] hfsplus_get_block+0x39e/0x1530 [ 85.899138][ T5330] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.899149][ T5330] ? do_raw_spin_unlock+0x4d/0x240 [ 85.899161][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 85.899175][ T5330] block_read_full_folio+0x29f/0x830 [ 85.899189][ T5330] ? __pfx_hfsplus_get_block+0x10/0x10 [ 85.899201][ T5330] filemap_read_folio+0x117/0x380 [ 85.899215][ T5330] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 85.899225][ T5330] ? __pfx_filemap_read_folio+0x10/0x10 [ 85.899238][ T5330] ? filemap_add_folio+0x1af/0x270 [ 85.899249][ T5330] do_read_cache_folio+0x350/0x590 [ 85.899262][ T5330] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 85.899275][ T5330] read_cache_page+0x5d/0x170 [ 85.899288][ T5330] hfsplus_block_free+0x121/0x550 [ 85.899310][ T5330] hfsplus_free_extents+0x176/0xae0 [ 85.899325][ T5330] hfsplus_file_truncate+0x736/0xb40 [ 85.899342][ T5330] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 85.899353][ T5330] ? unmap_mapping_range+0xde/0x170 [ 85.899373][ T5330] ? __pfx_unmap_mapping_range+0x10/0x10 [ 85.899389][ T5330] ? truncate_setsize+0xcf/0xf0 [ 85.899406][ T5330] hfsplus_setattr+0x1c4/0x270 [ 85.899419][ T5330] ? __pfx_hfsplus_setattr+0x10/0x10 [ 85.899430][ T5330] notify_change+0xb33/0xe40 [ 85.899447][ T5330] do_truncate+0x1a4/0x220 [ 85.899457][ T5330] ? __pfx_do_truncate+0x10/0x10 [ 85.899465][ T5330] ? apparmor_file_truncate+0x23e/0x2d0 [ 85.899480][ T5330] path_openat+0x306c/0x3830 [ 85.899500][ T5330] ? __pfx_path_openat+0x10/0x10 [ 85.899513][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.899527][ T5330] do_filp_open+0x1fa/0x410 [ 85.899540][ T5330] ? __lock_acquire+0xab9/0xd20 [ 85.899554][ T5330] ? __pfx_do_filp_open+0x10/0x10 [ 85.899574][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 85.899586][ T5330] ? alloc_fd+0x64c/0x6c0 [ 85.899599][ T5330] do_sys_openat2+0x121/0x1c0 [ 85.899609][ T5330] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.899621][ T5330] ? rcu_is_watching+0x15/0xb0 [ 85.899637][ T5330] __x64_sys_creat+0x8f/0xc0 [ 85.899648][ T5330] do_syscall_64+0xfa/0x3b0 [ 85.899655][ T5330] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.899666][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.899673][ T5330] ? clear_bhb_loop+0x60/0xb0 [ 85.899681][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.899689][ T5330] RIP: 0033:0x7f24fed8e929 [ 85.899698][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.899704][ T5330] RSP: 002b:00007f24ffb81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 85.899715][ T5330] RAX: ffffffffffffffda RBX: 00007f24fefb5fa0 RCX: 00007f24fed8e929 [ 85.899722][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000009a00 [ 85.899727][ T5330] RBP: 00007f24fee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.899732][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.899737][ T5330] R13: 0000000000000000 R14: 00007f24fefb5fa0 R15: 00007ffea2f6cf38 [ 85.899744][ T5330] [ 86.094301][ T5330] hfsplus: unable to mark blocks free: error -5 [ 86.097540][ T5330] hfsplus: can't free extent