program: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x1000000, &(0x7f0000000500)={[{@errors_continue}], [{@fowner_lt={'fowner<', 0xee01}}, {@obj_type={'obj_type', 0x3d, '(\xaanWe\xd42\xc3\xafW'}}, {@fowner_lt}, {@euid_eq}, {@flag='dirsync'}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x2d8f2b174a1cdec0, 0x63, 0x39, 0x0, 0x38, 0x0, 0x34], 0x2d, [0x62, 0x35, 0x38, 0x61], 0x2d, [0x36, 0x38, 0x62], 0x2d, [0x38, 0x0, 0x30, 0x37], 0x2d, [0x39, 0x30, 0x37, 0x31, 0x61, 0x65, 0x66, 0x30]}}}, {@dont_measure}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x193\xc0\x87,\xd8\x80\xa8\xd1\x05u\xbd\xaeY\xadeh\x17\t\xdf\xbc\xe7\xe26m\xfc\x02\b\x9a\x85\x17\xb3v\xadbb\x96\xdd\xceu\xcc\x8c\xe8d\x12\xc3H\x01\xf5\xa6!\xa0'}}]}, 0x1, 0x593f, &(0x7f0000005940)="$eJzs3X2QHGWdOPCnZ2azk928bALICrJZAlEENRveCl9Koz/fCpCKhaUEo7DABqObkEoWgYAS/IEHBVhoaWnUP9BC6tBoUQWnRErk5RJOUYrTo66QOr1D//AKkZRAjrI892pnumdne6fTszOzYQOfTyXb8zzT8+2nn36mt7/P9O4GAAAAXhH2XLd131lHvOfnnxt54er3/3jjNaG3WKkvJyv0xcvLX6oWciB1l/ory/S4eN2V3/3D4IXv+tmdPd95cfdFR6//zbsPufDeT56+a8c3Hnh+4d1/fyovbjKejp8sR89EIZR/svcrn9/9yOETdVEIoRj1bQ9hSbT0gSVRKsTQX0MIhbhwSOrJu144af3E8pobu6fUL06tZ7y/IiXDpnKcJwbWtn2XnRB++8611/5y2Q++37Xz6e2T60bluvEUwqLz6wN1hRDmx/8nJKOtP3lxvFwTQuipe91pOQ08pskdWZlRPjJezouXvTlxkueXp8qF1HrpcqIrtezJ2V67strR6np5FqTK6ZNRu7LamdQviZc/ipfHzzB+MfkfhUIUSrXmj0aTYyTUHbcoRJVjWa6VC6H+TBrVHeu4HKXKhVS52JXar8p244FWjKKp9cl6qfrkdFyK64+eaONI9n6fnVH/6nhZjt+oLyblkH5Q1TvtQW2/KpJ27c1uygFRqDsHNaqvHfj4YPTGdb3R0mmvGW8ghPClP4cQdq+9aUVx3YN7+jLaEd0ZxfGjmcav2PaLJQs+/r0bLu3Pin9+IY5faCn+78549Nlzb/j21zPj35LEL7YU/8T7ep4546Hrlmf2z96kf0otxR9+6uGblx16wc7M9t+axC+3FH/1rke7F+677/7M9g8l/TO/pfhPvvW9v7/j8Xuezowfkvg9LcVft2vzF7oH9h2XGf/+pH96Wxs/z+089YmBgT8OZsV/LIm/sKX4t2/f8ZbbFt94en/4aF1tXfw1Sf/0tRT/zGPvvXbBvnuOKme1/9ZOfecEeGU6JL7Guj4uZ+WZXTl5Zrvq8oWvDZaq13wL4v8LO7mhlIntLJrF+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8Mh12wr+8778+3PdMKS53xw+eLFSXSf28EKL5IYStY8NbxjZsunjwk5dcumXT8Ojg8NjgyKaxLVcMnvyGwS0jm0eHr5h4duiNJ1VftzRE1WV01LRtj4+Pjxf6ptYl2/t/x+787YrT/vtPIQwd9uuBUmb7V+7YeNuhDb6mRKvH37Hx0rN+fcq34v3qi9vVl9GukNGuP5/zt9u+tPcPx4Uw9Kr9tevhJ9/+0ykNqlRMxokVukO1Qd1RT8N21Fodtyfpr9L6DaMjQ/n9W8zYj49e+fRf11/+xb9V+7ecuR9N9u/81eOjha+uPfN/v3pVtWKuHve8/k72Imlf0n/luL8Xxfu1KGO/Shn7dd0v73/8J0fc8Pz2MFR6btn0beftV1c8ALqiVze13WQLPdGSKfXleP3kiCevWzm2cfPKrVdse+OGjcMXj1w8sunNq05ederQKaeesrKy5ys7vP/J9l/b5P4fmPG0+NPbf5R8bW485bUrrz8m2pXfH/Utynr/9Zz9+S+/ecdDZ1Ur8sZ5snbtfBIve9b3hpFVoW68Te+rRvuV1w8hhMFG/fDs86eHw/99w7V556H6I1P/NSVaPf7I8r9867Rv9r+tWnFAzvP1DWrxPF9r9WR7Kv1VOe+smrv92x2K8X71NmzXqkce6rppz58+U2vfvHnh8uGxsS2rql8XxC1dEB3ZsF3p2mS/llW+FkPcLaE2TBuM1wldodq+9PkzWT3dq73xc73R0ob7lZY8t3vtTSu6Gzehur07q1ucHxZWl9FrMtYcTb2wWGtwo+0frONj4H3fvPvDd//w5Gnj48Tq17z9ijL26weP3/7l73zxH37Yuf1639sf7fvLf3xiRbXiYDmv1FodtyeqP6+cGELe+29ZaLwfme+/QuP9yXv/pbczuX7jeIOpcm8otvR+PfG+nmfOeOi65VkjJNrb7Pv1qimlYs77da6Mn3bfX9e3/P6aMlCi1eM/u/6Q7Q9cveaIakXeuK6t3Whcn9RE/pGxXz8994mBSwb//7917rzx3Tfcdd5vhld/tloxV457Oe7fckb/1lqd5J31/fumCy8ZvahaP3evf+NlTv6TnEq2XrHtU8OjoyNbtja3X81+P022k+7lzPFzy5TVpn0/Tc5uS3P2qyteTu7X7D1opr+afb8l7b+o2f4K6f6a+n7rDVFL3xe2/WLJgo9/74ZL+6a9Kt7Q+YU4fqGl+L8749Fnz73h21/PjH9LEr/UUvzhpx6+edmhF+zMjH9rFMcvtxR/9a5Huxfuu+/+vhCi7Y3iDyXtn99S/Cff+t7f3/H4PU9ntj8k8Xtb6//ndp76xMDAHzPjPxbF25m4RgrhrhdOWl8tR5X3VrmuHV1T2hXS5ShVLqTKxfpyoTrXWttAMYqm1ifrxfVH17WlkY9k1CdXYeX+6vLFpBzSD/ZfP9cU6s79jerzrlMBAF7uks//k2vQ5PP/kfhCKXumASa1m4f1Z8RN8rDJ+Zx5U57vj+Mnr0/mAQfeFIYmltcMVi/0ZzrPmbwf0p8jJNs57pipMVqd58ybf1+eKiftqs6Xl+ry0Nj0vKYUmph/n76d/c+/p3Y/f3588PppzRqsm7dKH7+ueMas0f0OqfaWJiJkjY/0vFhyP8fAorCmsr0mx0f6PprkOKTvo0m2c0TqxNnqfTTtjo+k2fsZH5Um53++Mf34hf307+TxaxwtffxmcLzLE+u38/lscd2DezI/77kzmRerzhumP2fKiz935g1n9/Ow2ZuXTNrf9rxk4/gHaF5yrs8bJvXJfpSanE/8cEZ9p+YTk9NF0q69+2nLgWA+EXi5SvL/5HvERP4/cc3zP6n18q5D01eNSbzM+4SKjduTl3dMv0+vp6Xv4+t2bf5C98C+4zKvc+5v9r6fzVNKPTn3/eT144pUObcfMyZo8vK99Hby+r1yX8aOyXJvWNhSv9++fcdbblt84+mZ/b6m+o00v9+/PKW0MKffD1S+cPDeZ3Cw5gsdu4+hcfyD5D6GvPmzlywfiW98mq185EMZ9TPNR3qmPajtV8VBl490Hdh2AQBz2pTLhyT/r31+Fuf//5l6UV7eenzGRjLz1ozrk6y89QPx8vLU+r3xT1TM9Lr5zGPvvXbBvnuOysxbbm02D/3HKaW+3Dy0vbw5M49Y05n7xTPziFqe1V6emNn+Wp7YXp6eGb+Wp7eXR2f2Ty2Pbm8eIDP++S+Pz8Vme77uZZtHxz8+O1t59NkZ9TPNo3unPajtV4U8GgDgpZXk/8llXJL/P5Rar93r9sy8oEPX7Y3u0wx11+2zn1fOdt4323nrbOf1sz0vcbDnxbM9LzS782Ty4rgc0g+q5MUAAMwFSf4/Py5n5//t5SeZ+VstP5GfN4wvP58j+fnBPv8l/5f/55P/AwC8vCX5f/Jjj8nv//vnuJz+vfXy9Iz48nR5+v7GT9N5+mzPs7385gG6g3mATtvfPEAwDwAAcNDpqmRK03/O/mPxMv1z9lk/l39uxvrNKlV+xj6EC8a2jIycd+nmi4bHRs7bdMlFI1vPu2zLhrGxkU3V9drNGzPzlviKtiuU4v5ovF46b1sc/z6ExRm/DyG9fhL2yMqD6b8PIb3Z+Tm/R2Dy+DXX3qzjV9jP+o3GR9bxzor/kYz1E7Xjf+EnTjxv/dbzNmzaMLZheHTDtpGp601krT0z+LuZSbfM6O9mpr5MU5j53+/sTDsK09rRFfdH/fEv1bUjSrVjSdySJVl//yCj3T//1y99+tjxv90RwtBhxde01X/R6vF/OmfkA2N7fr15ov2FzPE70Z7amnG78v5eaXr9ZH9Ko5dsHTth/SWXbkr/RcnWJPMZk3nwLN3XEL/9i03OT6zLqJ/p/ERx2oO5qen7FAAAmCL5/D+5nk0+P/xifAGV1Defp7f3+XFmnj7UXJ6e/rtkeXl6ev1kf5vN08tt5unp7efl6Y3Wb5SnZ+XdWfE/lLH+TDU/Ttq7zyNznJzf3Dh5baqcN04m1h+/erI803EStTlO0u3NGyeN1m80TrKOe1b8D2asn6X58dDefTmZ4+GW5sbD61PlvPGQXn+m46HQ5nhIbz9vPDRav9F4yDq+WfHPyli/WVPHx8TAqIyLkfMuu2TLp+rWm+2/f9F++2b373+0qvn2z+59X7Pf/tm9r2z229/efWWZ7X+svZmw5ts/u3/fpVUHbL42vtks7/6za3Lmcddm1M90HnfetAdzk3lceOkk+X/ycU+S/98YLzv9MVB710nFOfB30g7I3zGLXuL77xe0ep0029cxc+37ed7nsr6fT633/RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgqrvUX1nuuW7rvrOOeM/PPzfywtXv//HGa1535Xf/MHjhu352Z893Xtx90dHrf/PuQy6895On79rxjQeeX3j335/KDdxXXRwfF8shRM9EIZR/svcrn9/9yOETdVEIoRj1bQ9hSbT0gSVRKsLQX0MIF9XaOfXJu144af3E8pobu6fUL04Fqe1XFCr7FXqLSXumtDNcnrtHHITK8Tjbtu+yE8Jv37n22l8u+8H3u3Y+vX1ylahcN55CWHR+/eu7Qgjz4/8TktHWn7w4Xq4JIfTUve602isaO6bJ9q/MKB8ZL+fFy96cOMnzy1PlQmq9dDnRlVr25GyvXVntaHW9PAtS5fTJqF1Z7Uzql8TLH8XL42cYv5j8j0IhCqVa80ejyTES6o5bFKLKsSzXyoXasQ3x/qfKUapcSJWLXan9qmw3HmjFKKrV178zCnX18+pOx6W4/uj6c3UDZ2fUvzpeluM36otJOaQfVPVOe1Dbr4qkXXv305YDoVB3DmpUXzvw8cHojet6o6XTXjPeQPLc7rU3rSiue3BPX0Y7ojujOH7UUvxtv1iy4OPfu+HS/qz45xfi+IWW4v/ujEefPfeGb389M/4tSfxiS/FPvK/nmTMeum55Zv/sTfqn1FL84acevnnZoRfszGz/rUn8ckvxV+96tHvhvvvuz2z/UNI/81uK/+Rb3/v7Ox6/5+nM+CGJ39NS/HW7Nn+he2DfcZnx70/6p7e18fPczlOfGBj442BW/MeS+Atbin/79h1vuW3xjadnHt81Sf/0tRT/zGPvvXbBvnuOyjp3Rrd26jsnwCvTIfE11vVxudU8s111+cLXBkvVa74F8f+FndxQysR2Fs1ifAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXp5+ddXJHzvnHR9cW4pCiDLWGW8gea44b/XqwRa2O/zUwzcvO/SCnfV1/S3EAQAAAPIleXihVlMO/eGyaH44suH6yRzBkUkpmlqfnkOYP7lmR+IUOhSn2KE4pQ7F6cqMM39GceZ1qD3dHYpTzolTDs3Fmb/fOIWm29PToTi9HYqzoENxFnYozqIOxVncoTh9+43T/Dhc0qE4SzsU55AOxTm0Q3EO61CcV3UozuEdipOeU57pOFwYr3lEVpzKg2JunFJUrD3RaD492c5RbW6nt8ntpOfsZ7qd+U1u55jU6woz3E65ye28ts3tRE1u5/VtbqeQs51k3F6ebl+ynaTU5Pi/okNxtnUozpUdinNVh+J8pkNxPtuhOFe3GQegWUn+P5nv9YXu0ttCT3zGSc8CJPnussrX6d/vsk5ISbzXpOrn5cVLJ+qpeMtm2r70BEIq3vJUfdeUeKVaPrKfeOX6eCtST+bub3pCIdW+41P13Xnx0hMLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCLfnXVyR875x0fXBuiMPGvofEGkueK81avHmxhu7vX3rSiuO7BPfV13aUWAgEAAAC5kjy8q1ZTDt2lVSGdipfjeYByXC72VZcDi8KaiWU0WKiUe6Il+31dKX7dyrGNm1duvWLbGzdsHL545OKRTW9edfKqU4dOOfWUles3jI4MVb+G0J0TL4RQmX7YesW2Tw2Pjo5s2Vqt7I7mTXldf/y6/rgcxa8beFMYmlheE7d/ac72CtO2N3sP8o4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+xa3chcp3lA8DfMzM7M9k2/8yffk1DsxnyUaIWTeJWopbOAcFC80EWQWaqawk2weKmCW1SYh3bgK0mKEIlECK5icRia/GmH7aI/SAQKdFcbAzSFs2FXiitVtKSC0kZye6c2ZnZmcxmWtw0/n4X5z3zvM/7Puedi4Xn7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9tkbXS8Uh6rDkchRD1y6l0kc+lsHJcGqPvVF3f+KDdyblVrLJcZYCMAAACgr6QPH2pG8iGXSYd0uHHq07LQMhFm+n4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/z2RtdLxSHqteFYUQ9cipd5HMpbNxXBqg7pl3n/7M6yMjf2uNFQfYBwAAAOgv6cNTzUg+FMPyMBTd2JaXvBtY3LG+My/ZZ8kc8zrfHfTKWz7HvJvnmPexPnmbGuOeAAAAAB99Sf+faUYKIZdZ2LP/79fXJ3lLO/LSjXGQ3woAAAAAH0zS/+eakWLIZYrNfn2u/f6yjrxkfb//2yfrV/ZY3+//+Rsbo//TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBHx2RtdLxSHqumoxCiHjn1LpK5dDaOSwPUXfvS8D/WH3tsWWsslxlgIwAAAKCvpA+fab3zIZcZDkPhqqm+f+SOw89++dnnR0MI021+Nhv2bNm16/6109ckb82JY0M/PP72d2blrZm+ztsBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAD81kbXS8Uh6rLohCiHrk1LtI5tLZOC4NUPfNz3/xL0+efuGt1lhxgH0AAACA/pI+fKb3z4diyIZsuH7qU2uvf0GqY32vdwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAleOBbz30zS0TE1vvdzNfN9kQwmXwGG7ctN7M918mAADgw7Y0RKF+iW7YPN9PDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXA4ma6PjlfJYNR+FEE1FMrNy6l0kc+lsHJcGqBu/eDK38NxLr7TGigOdAAAAAOgn6cOjZiQfimEoDIXrpj5FXdZM9f+FSy6V/kAPCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFw2Jmuj45XyWHVhFELUI6feRTKXzsZxaYC6T+w99Lmji35wZ2sslxlgIwAAAKCvpA/PNiP5kMt8POTCTY3PE+0LonRj7P5eYGbdzrZlw+m5rqu1rUvPud6+jpNlGqeZXpdP9itMj811pdnrSi3riqFZvtS2LhxoW7Wwz3MGAAAAmEdJ/59rRgohl8m19Lk/b8sv6HMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB4ma6PjlfJYNYpCiHrk1LtI5tLZOC4NUPeh3/3/1V/7xf7drbHiAPsAAAAA/SV9+Ezvnw/FsCT8X1gy1feHQnt+kvfPyvmjP/7XX1eFsPr6UyOZnvv/9s3bX+68hJBqT0qFsKhRL5pdb0Hj9sEV9fNPhrD6uvRNl1qvfcu4/lxl68Zdx0/tvMgXAwAAAFeQpP8fakYKIZe5r2f/n3Tel9T/L3pw76+ubVwbHXnHilShUS/Vo94XVjz955Xr/v72hf7/YvU+dWj70WvbCk5HOkRxvbx996ZTtx5JJaeerp/uqJ98L1/59lv/3rbn8fPT9fMh34gvznSrP/vaYUFcn0gdrG54/2CtvX6mx/kf+/0rp3+zeP97F+q/u3S4Wf/mi5z/4vWHv/S9A589dGxTe/0QQqlb/XfeuzPc8Md7H+08/3DHxq3ffOu1QxTXTyw7e2Td4eJt7fWjjvrJ9//L008c+Nnj338+qZ/8VmTV8rnWT3XUf23fNXtffWTz4vb6qR7nf/mu10d2lL77h87z3zPw+Z+65Zm739gSP9w5BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGWZrI2OV8pj1VQUQtQjp95FMpfOxnFpgLpn1ufDXft/+pPWWHGAfQAAAID+zqw/+c6FPnym98+HYsiGbBie6vufq2zduOv4qZ2hMD0bNcbMxI4Hdn1i247d990zT08OAAAAzFXS/2eakULIZVaEoUb/X96+e9OpW4+kkv4/lfT/2+6d2Lo6NPNe23fN3lcf2by4+Z4ghKmfBeQv5H16Ju+O208Wzv7pGyu75q2dyTux7OyRdYeLtyV5oTVvTWi+n3jqlmfufmNL/HDz+VrzPvn1HRON1xPJvsP55jGnz9EYhxv7JnkTqYPVDe8frCXnTTfGfOPcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBsk7XR8Up5rBrSIUT57jn1LpK5dDaOSwPU3bDi149efe6FJa2xXGaAjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+wAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf36C5GqiuMAfs7MbDvO7OquBm1F62pFYQ9JQUS9VFSERgg9GRKW5kMUBBGFPbSGRmJFL0HWi0QF1RZCQW6SaLFG/6SXHioosB4CkRbKQXqo2N1zx9m7e133rkTh5wPDmXNm7vf+7jln794BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/le7awGR7eMejrbsuuu2Lpx848dQdHz287Yon3/5laNMtn+9tvHFybPOKLd/fumzT/gfXjO5+9dAfvR/8dXTO4CemmlWpWw8hHo8h1D8ef+mZsS8vmBiLIYRq7BsOoT8uPdQfcwmr/wwhbG7XOf3D909cu2Wi3bare9r4klxI/rpCs5rVM6Vver3891Xm8d162mdbW49fFX68ef32r5e/927XyLHhU1+J9Y79FMLijZ3Hd4UQFqXXhGy3DWQHp3ZdCKHRcdz1c9R16RnWf3VB/+LUnpfa5hw52ecrc/38XBbNbVeubcxxvoU60zWez144nZ5cP38zWqiiOrPx/tR+mNpV88yvZq8YKjHU2uU/FE/tkdCxbjHEybWst/uV9tqGdP25fsz1K7l+tSt3XZPnTRutGuP08ex7ufHsdlxL4ys679WzuLtg/MLU1tMf6smsH/JvpjRnvGlf16SsrvHT1PJvqHTcg2Ybby98WoxmGmvGpTOO+XsW2Wdj65+7vLrhk8N9BXXEvTHlx1L5W7/q77n3nZ2PDRTlb6yk/Eqp/J/WHvntnp2vvZLyF8/IfzHLr5bKv+ZA4/jaT3esLJyf8Wx+aqXy7zv62fPLz79/pHB+9mT59VL5N40e6e5tHThYWP/qbH4Wlcr/4cbbf37r233HCvNDlt8olb9h9JEXugdbVxbmH8zmp1lu//w+ct13g4O/DhXlf5Pl95bKf3N49w2vL9m1pnB912Xz01cq/87L9m/vae27pOjeGfecrf+cAOemZekZ69nUL/s7c6E6fi+8PFSbeubrSa/es3minDjbwxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MMOHAgAAAAACPK3HuQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPYKAAD//5e0L9A=") r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x480b1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='erofs_lookup\x00', r7}, 0x18) syz_mount_image$erofs(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x1, 0x177, &(0x7f0000000240)="$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") openat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x80000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448ca, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001300)) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r11}, 0x10) [ 68.713378][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.717181][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.785949][ T45] Bluetooth: hci0: command tx timeout [ 68.866572][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.886261][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.041577][ T14] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.048774][ T14] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.052589][ T14] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.066144][ T14] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.213785][ T5356] loop0: detected capacity change from 0 to 32768 [ 69.502812][ T5356] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_reclaim_delay=2,nojournal_transaction_names [ 69.502831][ T5356] allowing incompatible features above 0.0: (unknown version) [ 69.502838][ T5356] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 69.521390][ T5356] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 69.525697][ T5356] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad size, fixing [ 69.530786][ T5356] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 69.534166][ T5356] bcachefs (loop0): Version upgrade required: [ 69.534166][ T5356] Version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap incomplete [ 69.534166][ T5356] Doing incompatible version upgrade from 0.19: freespace to 1.28: inode_has_case_insensitive [ 69.534166][ T5356] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 69.631959][ T5356] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 6 type deleted 18446744069414584328:0:0 len 0 ver 0: [ 69.632008][ T5356] snapshot == 0, deleting [ 69.640468][ T5356] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 10 type deleted 8825211592396076079:4100:0 len 0 ver 0: [ 69.640484][ T5356] snapshot == 0, deleting [ 69.657832][ T5356] bcachefs (loop0): btree node read error at btree dirents level 0/0 [ 69.657867][ T5356] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 69.657877][ T5356] loop0 node offset 0/24: got wrong btree node: got [ 69.657884][ T5356] btree=dirents level=0 seq 9aa2895a00084bdf 1 [ 69.657889][ T5356] min: POS_MIN [ 69.657895][ T5356] max: SPOS_MAX [ 69.657899][ T5356] loop0 btree validate error [ 69.657905][ T5356] flagging btree dirents lost data [ 69.657911][ T5356] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 69.657918][ T5356] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 69.657925][ T5356] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 69.657932][ T5356] ret btree_node_read_err_bad_node [ 69.705802][ T5356] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 69.719046][ T5356] bcachefs (loop0): btree node read error at btree subvolumes level 0/0 [ 69.719060][ T5356] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 69.719069][ T5356] loop0 node offset 0/16: incorrect min_key: got 0:0:262144 should be POS_MIN [ 69.719077][ T5356] loop0 btree validate error [ 69.719083][ T5356] flagging btree subvolumes lost data [ 69.719090][ T5356] ret btree_node_read_err_bad_node [ 69.740718][ T5356] bcachefs (loop0): error reading btree root btree=subvolumes level=0: btree_node_read_error, fixing [ 69.760298][ T5356] bcachefs (loop0): check_topology... [ 69.760445][ T5356] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 69.767918][ T5356] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 69.772926][ T5356] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 69.776780][ T5356] bcachefs (loop0): scan_for_btree_nodes... [ 69.780847][ T5364] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 6 type deleted 18446744069414584328:0:0 len 0 ver 0: [ 69.780859][ T5364] snapshot == 0, deleting [ 69.792078][ T5364] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 10 type deleted 8825211592396076079:4100:0 len 0 ver 0: [ 69.792092][ T5364] snapshot == 0, deleting [ 69.811845][ T5356] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 69.816892][ T5356] done [ 69.818210][ T5356] bcachefs (loop0): check_topology... [ 69.818431][ T5356] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 69.824936][ T5356] bcachefs (loop0): no nodes found for btree dirents, continuing [ 69.830172][ T5356] bcachefs (loop0): btree root subvolumes unreadable, must recover from scan [ 69.834053][ T5356] bcachefs (loop0): no nodes found for btree subvolumes, continuing [ 69.839131][ T5356] done [ 69.840370][ T5356] bcachefs (loop0): accounting_read... done [ 69.844188][ T5356] bcachefs (loop0): alloc_read... done [ 69.848572][ T5356] bcachefs (loop0): snapshots_read... done [ 69.851887][ T5356] bcachefs (loop0): check_allocations... [ 69.853083][ T5356] bcachefs (loop0): reference to invalid bucket on device 0 when marking metadata type sb [ 69.861394][ T5356] bcachefs (loop0): bch2_trans_mark_dev_sb(): error metadata_bucket_inconsistency [ 69.866771][ T5356] bcachefs (loop0): bch2_check_allocations(): error marking superblocks metadata_bucket_inconsistency [ 69.873137][ T5356] bcachefs (loop0): bch2_check_allocations(): error metadata_bucket_inconsistency [ 69.877989][ T5356] bcachefs (loop0): error in recovery: metadata_bucket_inconsistency [ 69.878002][ T5356] emergency read only at seq 10 [ 69.884006][ T5356] bcachefs (loop0): bch2_fs_start(): error starting filesystem metadata_bucket_inconsistency [ 69.889297][ T5356] bcachefs (loop0): shutting down [ 69.910689][ T5356] bcachefs (loop0): shutdown complete [ 70.497590][ T5356] bcachefs: bch2_fs_get_tree() error: metadata_bucket_inconsistency [ 70.649733][ T5348] IPVS: starting estimator thread 0... [ 70.659379][ T5355] loop0: detected capacity change from 0 to 16 [ 70.676053][ T5355] ======================================================= [ 70.676053][ T5355] WARNING: The mand mount option has been deprecated and [ 70.676053][ T5355] and is ignored by this kernel. Remove the mand [ 70.676053][ T5355] option from the mount to silence this warning. [ 70.676053][ T5355] ======================================================= [ 70.692210][ T5355] erofs: Unknown parameter '00000000000000000000003' [ 70.730085][ T5355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 70.736454][ T5365] IPVS: using max 60 ests per chain, 144000 per kthread [ 70.790259][ T5355] [ 70.791353][ T5355] ====================================================== [ 70.797791][ T5355] WARNING: possible circular locking dependency detected [ 70.800560][ T5355] syzkaller #0 Not tainted [ 70.802336][ T5355] ------------------------------------------------------ [ 70.805603][ T5355] syz.0.0/5355 is trying to acquire lock: [ 70.808011][ T5355] ffff88803fba7040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 70.813205][ T5355] [ 70.813205][ T5355] but task is already holding lock: [ 70.816391][ T5355] ffff88803fba7338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 70.820330][ T5355] [ 70.820330][ T5355] which lock already depends on the new lock. [ 70.820330][ T5355] [ 70.824778][ T5355] [ 70.824778][ T5355] the existing dependency chain (in reverse order) is: [ 70.828579][ T5355] [ 70.828579][ T5355] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 70.831731][ T5355] lock_acquire+0x120/0x360 [ 70.833762][ T5355] __mutex_lock+0x187/0x1350 [ 70.835893][ T5355] l2cap_info_timeout+0x60/0xa0 [ 70.838078][ T5355] process_scheduled_works+0xae1/0x17b0 [ 70.840585][ T5355] worker_thread+0x8a0/0xda0 [ 70.842956][ T5355] kthread+0x70e/0x8a0 [ 70.845085][ T5355] ret_from_fork+0x439/0x7d0 [ 70.847329][ T5355] ret_from_fork_asm+0x1a/0x30 [ 70.849697][ T5355] [ 70.849697][ T5355] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 70.853485][ T5355] validate_chain+0xb9b/0x2140 [ 70.855726][ T5355] __lock_acquire+0xab9/0xd20 [ 70.858029][ T5355] lock_acquire+0x120/0x360 [ 70.860270][ T5355] __flush_work+0x6b8/0xbc0 [ 70.862420][ T5355] __cancel_work_sync+0xbe/0x110 [ 70.864692][ T5355] l2cap_conn_del+0x4f0/0x680 [ 70.866869][ T5355] hci_conn_hash_flush+0x10a/0x230 [ 70.869230][ T5355] hci_dev_close_sync+0xaef/0x1330 [ 70.871501][ T5355] hci_dev_close+0x108/0x200 [ 70.873671][ T5355] sock_do_ioctl+0xd9/0x300 [ 70.875881][ T5355] sock_ioctl+0x576/0x790 [ 70.877937][ T5355] __se_sys_ioctl+0xf9/0x170 [ 70.880020][ T5355] do_syscall_64+0xfa/0x3b0 [ 70.882235][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.884919][ T5355] [ 70.884919][ T5355] other info that might help us debug this: [ 70.884919][ T5355] [ 70.889023][ T5355] Possible unsafe locking scenario: [ 70.889023][ T5355] [ 70.891954][ T5355] CPU0 CPU1 [ 70.894174][ T5355] ---- ---- [ 70.896280][ T5355] lock(&conn->lock#2); [ 70.897963][ T5355] lock((work_completion)(&(&conn->info_timer)->work)); [ 70.901874][ T5355] lock(&conn->lock#2); [ 70.904877][ T5355] lock((work_completion)(&(&conn->info_timer)->work)); [ 70.907712][ T5355] [ 70.907712][ T5355] *** DEADLOCK *** [ 70.907712][ T5355] [ 70.910976][ T5355] 5 locks held by syz.0.0/5355: [ 70.913068][ T5355] #0: ffff8880329f0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_close+0x100/0x200 [ 70.916989][ T5355] #1: ffff8880329f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 70.921049][ T5355] #2: ffffffff8f8a1168 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 70.925072][ T5355] #3: ffff88803fba7338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 70.928843][ T5355] #4: ffffffff8e33a0e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 70.932617][ T5355] [ 70.932617][ T5355] stack backtrace: [ 70.935126][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 70.935142][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.935151][ T5355] Call Trace: [ 70.935159][ T5355] [ 70.935165][ T5355] dump_stack_lvl+0x189/0x250 [ 70.935185][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.935199][ T5355] ? __pfx__printk+0x10/0x10 [ 70.935213][ T5355] ? print_lock_name+0xde/0x100 [ 70.935227][ T5355] print_circular_bug+0x2ee/0x310 [ 70.935249][ T5355] check_noncircular+0x134/0x160 [ 70.935263][ T5355] validate_chain+0xb9b/0x2140 [ 70.935276][ T5355] ? do_raw_spin_lock+0x121/0x290 [ 70.935292][ T5355] ? look_up_lock_class+0x74/0x170 [ 70.935304][ T5355] ? register_lock_class+0x51/0x320 [ 70.935321][ T5355] __lock_acquire+0xab9/0xd20 [ 70.935339][ T5355] ? __flush_work+0xd2/0xbc0 [ 70.935350][ T5355] lock_acquire+0x120/0x360 [ 70.935365][ T5355] ? __flush_work+0xd2/0xbc0 [ 70.935378][ T5355] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.935394][ T5355] ? __flush_work+0xd2/0xbc0 [ 70.935406][ T5355] __flush_work+0x6b8/0xbc0 [ 70.935417][ T5355] ? __flush_work+0xd2/0xbc0 [ 70.935429][ T5355] ? __flush_work+0xd2/0xbc0 [ 70.935441][ T5355] ? __pfx___flush_work+0x10/0x10 [ 70.935454][ T5355] ? __pfx_wq_barrier_func+0x10/0x10 [ 70.935466][ T5355] ? __pfx___cancel_work+0x10/0x10 [ 70.935478][ T5355] ? hci_conn_drop+0x14d/0x280 [ 70.935493][ T5355] __cancel_work_sync+0xbe/0x110 [ 70.935506][ T5355] l2cap_conn_del+0x4f0/0x680 [ 70.935519][ T5355] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 70.935530][ T5355] hci_conn_hash_flush+0x10a/0x230 [ 70.935545][ T5355] hci_dev_close_sync+0xaef/0x1330 [ 70.935558][ T5355] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 70.935569][ T5355] ? do_raw_read_unlock+0x3d/0x80 [ 70.935583][ T5355] hci_dev_close+0x108/0x200 [ 70.935595][ T5355] sock_do_ioctl+0xd9/0x300 [ 70.935609][ T5355] ? __pfx_sock_do_ioctl+0x10/0x10 [ 70.935621][ T5355] ? __lock_acquire+0xab9/0xd20 [ 70.935646][ T5355] sock_ioctl+0x576/0x790 [ 70.935663][ T5355] ? __pfx_sock_ioctl+0x10/0x10 [ 70.935676][ T5355] ? __fget_files+0x2a/0x420 [ 70.935692][ T5355] ? __fget_files+0x3a0/0x420 [ 70.935705][ T5355] ? __fget_files+0x2a/0x420 [ 70.935720][ T5355] ? bpf_lsm_file_ioctl+0x9/0x20 [ 70.935734][ T5355] ? __pfx_sock_ioctl+0x10/0x10 [ 70.935746][ T5355] __se_sys_ioctl+0xf9/0x170 [ 70.935758][ T5355] do_syscall_64+0xfa/0x3b0 [ 70.935770][ T5355] ? lockdep_hardirqs_on+0x9c/0x150 [ 70.935780][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.935791][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 70.935803][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.935813][ T5355] RIP: 0033:0x7f9e7818eec9 [ 70.935838][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.935849][ T5355] RSP: 002b:00007f9e78fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.935861][ T5355] RAX: ffffffffffffffda RBX: 00007f9e783e5fa0 RCX: 00007f9e7818eec9 [ 70.935870][ T5355] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000f [ 70.935878][ T5355] RBP: 00007f9e78211f91 R08: 0000000000000000 R09: 0000000000000000 [ 70.935884][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.935890][ T5355] R13: 00007f9e783e6038 R14: 00007f9e783e5fa0 R15: 00007ffe5db53698 [ 70.935902][ T5355] [ 71.077405][ T4703] Bluetooth: hci0: command tx timeout [ 73.105154][ T4703] Bluetooth: hci0: command tx timeout [ 75.185172][ T4703] Bluetooth: hci0: command tx timeout