program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x6c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1e, &(0x7f0000005f00)=ANY=[@ANYBLOB="6e6f7265636f76657279756a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6572726f72733d636f6e74696e75652c0038baa90d8fc546fa8ee50c6fb16498e9763e26b893c24aad2a61a721d9443aaee48d57dd4ebb183d0150fcdb89053bd0ffcb036ea9e67e047094e84583661b07a518e3d4fc784158ba05a8217dfd9244501ae6c883a74cf14fb8eefe9295351a710152fd8eab824f9016"], 0x9, 0x5a27, &(0x7f0000000140)="$eJzs3X+QHNV9IPDXM7O7o12ttBI4yGCkRaCEQGyt+FXYTsVKLrFTQCi5SDmIkw0LWhHZK6GShAFBgsiBDwpw4ZRTCU7+IBSmDltxUQUXUCgTfpzE2dgUFx91hakzd9h/+IpwqALoKJcvm9qdfrMzvdPbs7OzQoLPp2B735ueb3/79Zuefm96NQEAAIAPhIO37Tp88Ym/9/0/G3vn5t//h223hIHyVH01rjCULq9/rzLkSOrrXTG1zPaLX7vxWz8bvup3vvdw/zffPbD5lC0//t3jrnriixfsv/evn3578NF/fa0obuxPZ0yXkzeSEKrfPfQXXznw/AmTdUkIoZwM7Q1hWbL86WVJJsTIL0IIm9PCilBuevCRd87eMrm85c6+pvqlmSD6+wdbNe1new5fd2b4yW9vvPWHq77zdz37Xt87vUpSbehPISy5ovH5PSGERSGE4bQce9uK+OR0uSGE0N/wvPML8jq1zfzX5pRPSpe96XKgIE58fHWmXMqsly1HPZllf8H25isvj07XK7I4U86ejOYrL89YvyxdPpYuz5hj/HL8PwmlJFTq6Y8n030kNBy3JCRTx7JaL5fqxzak+58pJ5lyKVMu92T2a2q7aUcrJ0lzfVwvUx9Px5W0/pTGc3ULl+TUfzhdVtMX6ruxHLK/1AzM+KW+X1NiXodmyeVIKDWcg1rV1w98ejAG0rqBZPmM50y0EB87sPGuNeVNzxwcap1GT3g4SeMnHcXf84Nli7/w7TuuXZGzn8kVpTR+KRM/aSv+qxe+8OZld9z/jdz498T45anz+1zzP+vJ/jcufPa21TntE5JDsX0qHbXP6GvP3b3q+Cv35eZ/X4xf7Sj++v0v9A0efvKp3PxHYvss6ij+K5/89E8feunx16fjV5rjhxi/v6P4m/bv+GrfysOn5+b/VGyfgY7iv/rWvvNeXrny54114fTB6fgvxviDHcV/cO+9n3hg6Z0X5B7fDbF9hjqKf9FpT9y6+PDjJ+edO5P7uvXOCfDBdFx6jXV7Wu50nDlfDeOFvxqu1K6S+tJxzWA3N5S5+JzczpJuxgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMKHzvyvn/nfnxt6o5KW+9Jfqmk51veGkCwKIezaPbpz99btVw9/8Zprd24fHR8e3T08tn33zhuGz/mN4Z1jO8ZHb5h8dOSjZ9eetzwktWVy8oxt901MTJSGmuvi9v7daft+sub8//PPIYx86EcrK7n5r7132wPHt/iZkayf+NS2ay/+0bl/W6pVDKV5DbXIa2JiYiLk5PV/L/3lA39+6GenhzDyK7Pl9dwrv/WPTQlNVUzHSZX6Qi2hvqS/ZR71rNN8YntVtmwdHxuZvX0nn1/O2Y9/f+Prv9hy/dd+WWvfau5+tNm+i9ZPjJf+cuNF//8vb6pVzJJX78R7eNzT9i7ntXfci5hfbL9q2t6D6X4tyWnvSs5+3fbDp1767ol3vL03jFTeWjVz20X71ZN2gJ7kw21tN26hP1nWVF9N16+/vtPnrd29bcfaXTfs+ejWbaNXj109tv3j685Zd97Iueedu7Y/jI+NrE33f0mX9j9u/1fb3P+ift6d/rT0y3sfiz/b609FeRW1x2Rexe3RmFHe66//kq98/eP3PntxraLovBLXrp9P0mX/5HFeFxr628y2arVfRe0QQhhu1Q5vvn1BOOF/bL216DzUeGQaf2Yk6yeeX/0vf3v+36z4zVrFETnPNyY05/N831Qe9ayn85lqr2p6PCaO0vbtC+V0vwZa5rXu+Wd77jr4z39Sz6+3N1w/unv3znW1n4vTTBcnJ7XMK1sb92vV1M9ySJsl1Ltpi/46qSfU8sueP+Pq2VYdSB8bSJa33K+s+NiBjXetKW965mBeSycP17a4KAzWlslHctYczzyxXE+41faP1tdfUf9Y+Zm/efRzj/79OTP6x1m1n0X7leTs13deevDr3/zaf/z77u3XZ37rhaF/+Z9/vKZWcaTOKz0dn1dqedSzTvNJGs8rZ4VQ9PpbFVrvR+7rr9R6f2Z7/SUttjO9fut4w5nyQCh39Ho968n+Ny589rbVua/XQ+2+Xm9qKpULXq9Hy/tS9vWVVJrzWLjXV1NHSdZPfO/24/Y+ffOGE2sVRf26vnarfn128fVIKWe//vGyl1deM/wf/nv3zhvf+o1HLv/x6Po/rVV0ftxjLt057tW0fas57VvPOo47G9v3Y1ddM765Vj/f69/Kgl3/psuC8U88ley6Yc+XRsfHx3buam+/2n0/jdvJtnKn76fx7La8YL9KM/Zr4X5pp73afb3F/Dd33F7Nr7eBkHT0vrDnB8sWf+Hbd1w7NONZ6YauKKXxSx3Ff/XCF9687I77v5Eb/54Yv9JR/NHXnrt71fFX7suNf1+Sxq92FH/9/hf6Bg8/+VRu/JGY/6KO4r/yyU//9KGXHn89N36I8Qc6a/+39p338sqVP8+N/2KSbmfyGimER945e0utnISehvnRyTx6mvIK2XKSKZcy5XJjuVSba61voJwkzfVxvbT+lIZcWvmjnPp4FVZdUVu+G8sh+8vs9UebUsO5v1V90XUqAMD7Xfz8P16Dxs//x9ILpfyZBpg233HYipy4cRw2PZ/T2/T4ijR+fH6cB1z5sTAyubxluHahP9fPEeLrITvPGbdz+qnNMTqd5yyaf1+dKce8avPllYZxaGrmuKYS2vj8a+Z2Zp9/z+x+8fz48O0z0hpumLfKHr+edMas1f0OmXwrkxHy+kd2Xizez7FySdgwtb02+0f2Ppp4HLL30cTtnJg5cbZ3v0pPyN5HM9/+EdOepX9MpVz8+cbM4xdmad/p49c6Wvb4zeF4VyfXX+jPZ7swb9jylNbOvOGLS2Y5X7Y9b7iwn4eZl8yJn77AjvZ5w1gf96PS5nzi53Lqa6/avfVyp/OJ8XQR8zo0Sy5HQs58YsV8InCsi+P/+B4xOf6fvAD/f5n1iq5Ds1eNMV7ufULl1vkUjTtm3qfX39H7+Kb9O77at/Lw6bnXOU+1e9/PjqZSf8F9P0XtuCZTTttxee22hBbtmDNBUzTey26nqN2z92UMpHfCz7XdH9x77yceWHrnBbntvqH2Rlrc7l9vKg0WtPsxMF5oHf9I3WfQd8yPF6ZeCe/NeGHRjK3Ex47UfQxF82fv2XgkvfGpG+OR61u8Z/xhzn7P9f6G/hm/1PdrylE+Hpl5f0Pjwch7swUAPpDi+L/++Vk6/v9fcYX0OqJo3HpGphzj5Y7/e1rnkzdu/YN0eX1m/YH0Lyrmet180WlP3Lr48OMn545b7mt3HPqfmkpDhePQ+Y2bc8cRG7pzv3juOKI+zprfODE3//o4cX7j9Nz49XH6/MbRue1T/9xtfvMAufHr8wBH4nOxgYa/NGkvfvvj3IL5uszGYrHd+br37Tg6/fPZhfpc75Kc+rmOowdm/FLfrynH9jgaAODYF8f/8TIujv+fzaw338/Zc8cFXbpuz/57IPX4Lx6pceVCj/sWety60OP6WeYlWmwhPtb+vMSxfb/ows8LLew82Qd+XJxu1LgYAICjWRz/L0rL+eP/2vgk2dvZ+KTV+K2naXxyxMfnpXbiG593676BY318njf/1dtyK/HRo2f+y/jf5+LFjP8BAN7f4vg//tlj/Pf//ktazv679Uf/5+itrl6N098/4/TWo7XicXrlGLlPZX73AeQeX/cBNNUf0XmARdPrmwcAAOC90DM1Upr5d/afT5fZv7PP+7v8y3LWb1clvTy+cvfOsbHLr92xeXT32OXbr9k8tuvy63Zu3b17bHttvbbGjY/d/5EvpxXxsThuzB23pOPGnlBJ26P1etlx29LwWG2Z8+8hZNePYU+a+mXmv4eQ3eyign9HYPr4tZdv3vErzbJ+q/6Rd7zz4v9RzvpR/fhf9cdnXb5l1+Vbt2/dvXV0fOueseb1Jket/XP43szYLHP6vtTMjxlKc//+zu7kUZqRR0/aHnnfz55k8liWZrIs7/sPcvL+/n/78y+fNvHLh0IY+VD5I/Nqv2T9xH++dOwPdh/80Y7J/Euz5l9fM82r6PtKs+vH/amMX7Nr95lbrrl2e/YbJTsT5zNK9fICzWekL/9ym/MTm3Lq53qfQnnGL0entucnAABoEj//j9ez8fPDr6UXULG+/XH6/D4/zh2nj7Q3Tm/4XrIHGq8P88bp2e8xi/vb7ji9Os9xenb7ReP02vrrmtZvNU7PG3fnxf/DnPXnqv1+koTkrs7v88jtJ1e010+y32ewNP33LfP6SXb9ufaTpN1+0ttevkX9pNX6rfpJetyTdvvJZ9Nlu/2ksD+kCc/3vpzc/nBPe/3h1zPlov6QXX+u/aE0z/NGdvtF/aHV+q36Q97xzYt/cc767WruH5MdY6pfjF1+3TU7v9Sw3kJ//8X881vY7//oVPv5L+x9Xwuf/8L+/dfC5z+/+8py839xfjNh7ee/sN/v0qkjNl+bvm8X3X9WNI+7Mae+aR63IXDePG7vjF+OTuZx4b0Tx//x4544/r8zXXb7Y6Bj/nvSfO9x6/hd+h6zouuY9+X7eRufy854P2/9Zy7vOe/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3pq6yYWh68bdfhi0/8ve//2dg7N//+P2y75ddu/NbPhq/6ne893P/Ndw9sPmXLj3/3uKue+OIF++/966ffHnz0X18rDDw09bNyRlqshpC8kYRQ/e6hv/jKgedPmKxLQgjlZGhvCMuS5U8vSzIRRn4RQthcz7P5wUfeOXvL5PKWO/ua6pdmgmT3KwyUYz6NeYZwfeEecQyqpv1sz+Hrzgw/+e2Nt/5w1Xf+rmff63unV0mae9CSKxpLPSGERen/k+K6K+KT0+WGEEJ/w/POL8jr1DbzX5tTPild9qbLgYI48fHVmXIps162HPVklv0F25uvvDw6Xa/I4kw5ezKqqXQcPy/PWL8sXT6WLs+YY/xy/D8JpSRU6umPJ9N9JDQctyQkU8eyWi+X6sc2pPufKSeZcilTLvdk9mtqu2lHKydJc31cL1MfT8eVtP6UqRzLuft9SU79h9NlNX2hvhvLIftLzcCMX+r7NSXmdSg3kyOj1HAOalVfP/DpwRhI6waS5TOeM9FCfOzAxrvWlDc9c3AoJ4/k4SSNn3QUf88Pli3+wrfvuHZFXvwrSmn8UkfxX73whTcvu+P+b+TGvyfGL3cU/6wn+9+48NnbVue2z6HYPpWO4o++9tzdq46/cl9u/vfV4r8Uqh3FX7//hb7Bw08+lZv/SGyfRR3Ff+WTn/7pQy89/npu/BDj93cUf9P+HV/tW3n49Nz4T8X2H+is/7y177yXV678+XBe/Bdj/MGO4j+4995PPLD0zgtyj++G2D5DHcW/6LQnbl18+PGTq3nx7+vWOyfAB9Nx6TXW7Wl5tnFmtWHeIjvOnK+G8cJfDVdq13yL0/8Hu7mhRn217SxZqPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxv/dNN53z+0k99dmMlCSHJWWeihfhYuXf9+uEOtjv62nN3rzr+yn2NdSs6iAMAAAAUi+PwUr2mGlaE65JF4aSW68c5gpNiKWmuz84hxDjZOYJO45S6FKfcpTiVLsXpmRlnopM4vV3Kp69LcaoFcaqhvTiLZolTmewVbebTP2s+7ccZ6FKcxV2KM9ilOEu6FGdpl+IMzRqn/X64rEtxlncpznFdinN8UZxKe3E+1KV8fqWDOL0t4pzQpXyyc8pz7YeD6Zon5sWZ+qVcGKeSlOsPtJpPPyHdzsnz3M5AwXYGi96P29zOoja3c2rmeaU5bqfa5nZ+dZ7bSdrczq/Pczulgu3Efnt9Nr+4nVhqs//fMIc4923Oj7OnS/nc2KU4N3Upzp90Kc6fdinOzfOMA9CuOP6fHu8Nhb7Kb4b+9IyTnQWI491VUz9r73elxvNQzgkpxvtIpr63RbymMNmBeibeqjbya4qXnUDIxFudqe9pilepj0dmiVdtjLcm82Dh/mYnFDL5nZGp7yuKl51YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAF9E83nfP5Sz/12Y0hCZP/tTTRQnys3Lt+/XAH2z2w8a415U3PHGys66t0EAgAAAAoFMfhPfWaauirrAt9SW/TetV0HqCalstDteXwkjBxcwghGS5NlfuTZbM+r5I+b+3ubTvW7rphz0e3bhu9euzqse0fX3fOuvNGzj3v3LVbto6PjdR+htBXEG8yhckfu27Y86XR8fGxnbtqldn8V6TPW5GWk/R5Kz8WRiaXt6T5Ly/YXmnG9mb+0pP/0Jx+aePwAQAAAAAAAAAAAAAAAAAA/Bu7dhci11nGAfw9M7Mz021jVvo1Dc1myBdRiyZxK6mW7gHBQpuELAWZqa4l2ASLmya0SYl1bAO2NUERWgIhkgsjsdhavOmHLWI/CERqNODGIG3RXuiF0molLbmQlJHszJmdOTvjrGNpmvr7XZxz5j3P+z7nnYuF/9kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID31XRtbLIyPlEdjkKIQrZrTb2L5F42H8flAfp++bkd3y+MnlnVPlbIDbAQAAAA0FeSw4daI8VQyGVDNlw182lpaLsRZnM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2e6NjZZGZ+oXhyFEDWGMumaehfJvWw+jssD9H397Sc+88ro6F/bx0oD7QAAAADoJ8nhs6G/GEphWRiKruqoa74bCItS89N1yTqL51mXfnfQq27ZPOtWzrPuY33qNjbPuwMAAABc+JL8n2uNjIRCbkHP/J/k+mzz3KtuSapPUj/IbwUAAACA/02S/wutkVIo5EqtvN7v//hJ3l+aqkvm9/u/fTJ/RY/5K1ND6fkbmmf/pwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC8d0bWyyMj5RzUYhRD1q6l0k97L5OC4P0Hft88N/v/losWOskBtgIQAAAKCvRg5/cOls9C6GQm44DIWLZ3L/6I2HnvriU8+MhRAaMT+fD7s379x519rGMalbc/zo0PeOvfmtOXVrGsfztkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA9M10bm6yMT1QvikKIetTUu0juZfNxXB6g72uf+8KfHzv17BvtY6UB1gEAAAD6S3L4bPYvhlLIh3y4YuZTe9Y/J5Oa3+udAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDhcfc37v365qmpLXe5cOHCRevifP9lAgAA3mtLQhTq/6UrN53vpwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Ipmtjk5XxiWoxCiHqUVPvIrmXzcdxeYC+8XMnCgvOPP9i+1hpgHUAAACA/pIcPpv9i6EUhsJQuHzmU7d3AjP5f+R9fEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgA2W6NjZZGZ+oLohCiHrU1LtI7mXzcVweoO+jew5+9sjC797UPlbIDbAQAAAA0FeSw/OtkWIo5D4eCuHq5uepzglRtnnu/l5gdt6OjmnD855X65iXnfe8vamd5Zq7acwrJuuNNM6teeW588pt80qh1b7cMS/s75i1oM9zBgAAADiPkvxfaI2MhEKu0JZzf9JRPyLnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9TNfGJivjE9UoCiHqUVPvIrmXzcdxeYC+9/7mo5d85af7drWPlQZYBwAAAOgvyeGz2b8YSmFx+EhYPJP7w0hnfVL3j8rZI4/88y+rQlh9xcnRXHrZHyYXv3rthhfShxAyndWZEBY2+0U9+v36d4/cs7x+9rEQVl+evXpOv/Cf+3UuGdefrmzZsPPYyR19vpzW0wEAAMCFLcn/Q62RkVDI3dkz/yfJu0/+b5kJ4Avv2fPzy5rHZiJPzciMNPtlevT7/PIn/rRi3d/ePJf/0/2G264/dXDbkcs6GjZGUqK4Pr5t18aT1x7OJLtu9M+m+iffy5e++ca/tu5++GyjfzEUm+OLUhtpdJt7TLkork9lDlTXv3ug1tk/12P/D/72xVO/XLTvnXP9314y3Oq/MnTr377zXv2Hb3lo/3UHj27s7B9CKHfr/9Y7N4Ur/3DHA+n9D6cWbv/m248pUVw/vvT04XWHStd39o9S/ZPv/2enHt3/44e/80zSP/mtyKpl8+2fSfV/ee+le166f9Oizv6ZHvt/4dZXRreXv/379P5v71g11/Mp5u7/8WuevO3VzfF96VsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLtO1scnK+EQ1E4UQ9aipd5Hcy+bjuDxA39dvPvHWrft+9IP2sdIA6wAAAAD9JTl8NvsXQynkQz4Mz+T+pytbNuw8dnJHGGncjZrn3NT2u3d+Yuv2XXfefp6eHAAAAJivJP/nWiMjoZBbHoaa+X98266NJ689nEnyfybJ/1vvmNqyOrTqXt576Z6X7t+0qPWeIISZnwUUz9V9erbuxhtOjJz+49dWzNRdlKpbO1t3fOnpw+sOla5P1gvtdWtC6/3E49c8edurm+P7Ws/XXvfJr26far6eSNYdvuWh/dcdPLqxtY/mebi5blI3lTlQXf/ugVpSl22ei819AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdfGJivjE9WQDSHqUVPvIrmXzcdxeYC+65f/4oFLzjy7uH2skBtgIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV27Cc0jiqOA/h7uxuzzSZt0grGimlaFaUeLAoielFRkVak4KlSpNragygIIko9mEorlqp4EVq9FFFBjVJQsLFYWiUV/xUvHlRQqB6EUgxoQ/FgJNk3m82k46bTXtTPB5a3782b7/xm5u1sNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Kt21wZn26M7HJu9efvsXzzx46uk7P3pk+5VPvf3L8OZbP9/f88bp8S0rt35/27LNBx9aO7b31SN/9H3w1/GOwU82m9WpWw8hnowh1D+eePnZ8S8vmh6LIYRq7B8JYSAuPTIQcwlr/gwhbGnVOXfj+6eu2zrdbt/dPWd8SS4kf16hUc3qaeqfWy//LfW0zrZNPnF1+PGWDTu+XvHeu12jJ0Zmp8R623oKYfGm9v27QgiL0mtattoGs51Tuz6E0NO23w0d6rpsgfVfU9C/JLUXpLbRISfbvirXr+Tm5fuZrlzb0+F4s/YsX/DUBdRRdl4nvbl+/mF0rorqzMYHUvthalefZX41e8VQiaHWKv/hOLtGQtt9iyHO3Mt6q19p3duQzj/Xj7l+JdevduXOa+a4aaFVY5w7ns3LjWeP41oaX9n+rD6DewrGL05tPX1QT2f9kH/T1Jj3pnVeM7K6Jv6hlqS785TyKgUHyMZbNz7djEYaa8Sl8/aZmqc2lW0b3/D8FdWNnxztL6gj7o8pP55F/lQrf9tXA733vbPr8cGi/E2VlF8plf/TumO/3bvrtVcK81/K8qul8q891HNy3ac7VxVen4ns+tRK5d9//LMXVlz4wGjRYor7svx6qfybx451900eOlxY/5rs+iwqlf/DTXf8/Na3B04U5ocsv6dU/saxR1/sHpq8qjD/cPOj0JhZoSXWz++j1383NPTrcFH+N83rH0f6zpAfO+a/ObL3xteX7F5buD7XZ9env1T9d11+cEfv5IFLi56dcd/5+uYE+H9alv7Gei71y/7OPFdtvxf2DNea30C96dV3Pg+UM32cxel9/n8vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/swMHAgAAAACC/K0HuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA///KSxvl") r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005e00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000086dbda503d7703ad3d3afe1272d94749000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000083000000bf090000000000005509010000000000ac00000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff51000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000159175233c000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005b80), 0x1, 0x0) io_setup(0x8, &(0x7f0000005c00)=0x0) read$usbmon(r4, &(0x7f0000005bc0)=""/59, 0x3b) (async) read$usbmon(r4, &(0x7f0000005bc0)=""/59, 0x3b) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0xb31}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (async) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) io_destroy(r5) io_getevents(r5, 0x6, 0x2, &(0x7f0000005c40)=[{}, {}], 0x0) (async) io_getevents(r5, 0x6, 0x2, &(0x7f0000005c40)=[{}, {}], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x7) read$char_usb(r4, &(0x7f0000005e80)=""/109, 0xc84138ee2a7592cf) [ 75.808178][ T5333] Bluetooth: hci0: command tx timeout [ 76.202525][ T5356] loop0: detected capacity change from 0 to 32768 [ 76.453042][ T5356] bcachefs (loop0): starting version 1.519: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=0,compression=lz4,nopromote_whole_extents,nojournal_transaction_names,allocator_stuck_timeout=3 [ 76.453058][ T5356] allowing incompatible features above 0.0: (unknown version) [ 76.453062][ T5356] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 76.475712][ T5356] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 76.483530][ T5356] bcachefs (loop0): invalid bkey in superblock btree=extents level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 360287970189639680:0:0 durability: 0 (invalid extent entry 000000000001b000) [ 76.483569][ T5356] invalid extent entry type (got 12, max 7), deleting [ 76.512188][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.512260][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.523144][ T5356] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 76.526060][ T5356] bcachefs (loop0): Version downgrade required: [ 76.529970][ T5356] bcachefs (loop0): Version upgrade required: [ 76.529970][ T5356] Version upgrade from 0.24: unwritten_extents to 1.519: (unknown version) incomplete [ 76.529970][ T5356] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 76.529970][ T5356] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 76.641336][ T5356] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 76.641368][ T5356] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key 0:262144:0 durability: 1 ptr: 0:32:0 gen 0 [ 76.641376][ T5356] loop0 node offset 0/16: incorrect min_key: got POS_MIN should be 0:262144:0 [ 76.641383][ T5356] loop0 btree validate error [ 76.641388][ T5356] flagging btree snapshots lost data [ 76.641394][ T5356] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 76.641401][ T5356] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 76.641407][ T5356] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 76.641414][ T5356] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 76.641420][ T5356] ret btree_node_read_err_bad_node [ 76.681255][ T5356] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 76.692057][ T5356] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 76.692073][ T5356] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 65535 min_key R 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 76.692081][ T5356] node offset 16/65535 bset u64s 13 bset byte offset 80: keys out of order: u64s 5 type set 3:29:0 len 1 ver 0 > u64s 5 type set 0:31:0 len 1 ver 0 [ 76.692090][ T5356] node offset 24/65535 bset u64s 24 bset byte offset 192: keys out of order: u64s 5 type deleted 50331648:38:0 len 0 ver 0 > u64s 5 type set 0:120:0 len 77 ver 0 [ 76.692098][ T5356] loop0 node offset 32/65535: btree node data missing: expected 65535 sectors, found 32 [ 76.692105][ T5356] loop0 btree validate error [ 76.692110][ T5356] repair success (rewriting node) [ 76.735675][ T5356] bcachefs (loop0): check_topology... [ 76.735985][ T5356] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 76.743879][ T5356] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 76.751287][ T5356] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 76.754744][ T5356] bcachefs (loop0): scan_for_btree_nodes... [ 76.769508][ T5356] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 76.776010][ T5356] done [ 76.777051][ T5356] bcachefs (loop0): check_topology... [ 76.777237][ T5356] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 76.783309][ T5356] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 76.788620][ T5356] done [ 76.789886][ T5356] bcachefs (loop0): accounting_read... done [ 76.793822][ T5356] bcachefs (loop0): alloc_read... done [ 76.796775][ T5356] bcachefs (loop0): snapshots_read... done [ 76.801775][ T5356] bcachefs (loop0): check_allocations... [ 76.804416][ T5356] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 76.804440][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 76.820095][ T5356] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 76.820111][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 76.842702][ T5356] bcachefs (loop0): bucket 0:38 gen 0 different types of data in same bucket: journal, btree [ 76.842717][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 76.862908][ T5356] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 76.862923][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 76.874953][ T5356] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 76.874964][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 76.887055][ T5356] bcachefs (loop0): bucket 0:35 gen 0 different types of data in same bucket: journal, btree [ 76.887070][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 76.900039][ T5356] ------------[ cut here ]------------ [ 76.902454][ T5356] kernel BUG at fs/bcachefs/btree_iter.c:633! [ 76.904981][ T5356] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 76.907897][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.911402][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.915705][ T5356] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 76.918442][ T5356] Code: fd 90 0f 0b e8 40 a7 97 fd 90 0f 0b e8 38 a7 97 fd 90 0f 0b e8 30 a7 97 fd 90 0f 0b e8 28 a7 97 fd 90 0f 0b e8 20 a7 97 fd 90 <0f> 0b e8 18 a7 97 fd 90 0f 0b e8 10 a7 97 fd 90 0f 0b 66 66 66 66 [ 76.925794][ T5356] RSP: 0018:ffffc9000d3c64a0 EFLAGS: 00010293 [ 76.928171][ T5356] RAX: ffffffff842816e0 RBX: ffff888052d44360 RCX: ffff888000b92440 [ 76.931182][ T5356] RDX: 0000000000000000 RSI: 000d280000000000 RDI: 0000000000000000 [ 76.933793][ T5356] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 76.936677][ T5356] R10: dffffc0000000000 R11: fffff52001a78c88 R12: 000d280000000000 [ 76.939851][ T5356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.943148][ T5356] FS: 00007ff3c70726c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 76.946390][ T5356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.948878][ T5356] CR2: 000056345a4d6168 CR3: 0000000040070000 CR4: 0000000000352ef0 [ 76.952244][ T5356] Call Trace: [ 76.953642][ T5356] [ 76.954887][ T5356] bch2_btree_path_traverse_one+0xfec/0x21d0 [ 76.957328][ T5356] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 76.960290][ T5356] ? bch2_check_allocations+0x120d/0x57b0 [ 76.962982][ T5356] ? bch2_btree_iter_verify+0x1d/0x360 [ 76.965431][ T5356] bch2_btree_iter_peek_max+0x9e8/0x58f0 [ 76.967793][ T5356] ? bch2_check_allocations+0x120d/0x57b0 [ 76.970484][ T5356] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 76.973522][ T5356] ? bch2_trans_begin+0xbe0/0x2310 [ 76.975884][ T5356] ? bch2_check_allocations+0x11cd/0x57b0 [ 76.978216][ T5356] ? bch2_trans_begin+0xbf5/0x2310 [ 76.980228][ T5356] ? bch2_trans_begin+0x1a71/0x2310 [ 76.982441][ T5356] ? bch2_trans_node_iter_init+0x348/0x5e0 [ 76.984763][ T5356] ? bch2_trans_node_iter_init+0x406/0x5e0 [ 76.987177][ T5356] ? __pfx_bch2_trans_begin+0x10/0x10 [ 76.989525][ T5356] ? __pfx_bch2_trans_node_iter_init+0x10/0x10 [ 76.992301][ T5356] ? bch2_check_allocations+0x1aa1/0x57b0 [ 76.994538][ T5356] bch2_check_allocations+0x120d/0x57b0 [ 76.996760][ T5356] ? prb_read_valid+0x3c/0x60 [ 76.998628][ T5356] ? desc_read+0x1b8/0x3f0 [ 77.000472][ T5356] ? bch2_check_allocations+0xf51/0x57b0 [ 77.002630][ T5356] ? prb_first_seq+0xfd/0x1a0 [ 77.004425][ T5356] ? __pfx_prb_first_seq+0x10/0x10 [ 77.006228][ T5356] ? desc_read+0x1b8/0x3f0 [ 77.007906][ T5356] ? __pfx_bch2_check_allocations+0x10/0x10 [ 77.010161][ T5356] ? up+0xde/0x150 [ 77.011770][ T5356] ? __pfx__prb_read_valid+0x10/0x10 [ 77.013703][ T5356] ? __console_unlock+0x14c/0x1a0 [ 77.015531][ T5356] ? __pfx___console_unlock+0x10/0x10 [ 77.017733][ T5356] ? prb_read_valid+0x3c/0x60 [ 77.019724][ T5356] ? console_unlock+0x21b/0x270 [ 77.021672][ T5356] ? bch2_check_allocations+0x11c1/0x57b0 [ 77.023784][ T5356] ? irq_work_queue+0xc3/0x140 [ 77.025462][ T5356] ? bch2_check_allocations+0x1aa1/0x57b0 [ 77.027575][ T5356] ? __pfx_vprintk_emit+0x10/0x10 [ 77.029413][ T5356] ? do_raw_spin_lock+0x121/0x290 [ 77.031313][ T5356] ? __pfx___bch2_print+0x10/0x10 [ 77.033256][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.035259][ T5356] __bch2_run_recovery_passes+0x3ba/0x1060 [ 77.037371][ T5356] bch2_run_recovery_passes+0x184/0x210 [ 77.039310][ T5356] bch2_fs_recovery+0x2690/0x3a50 [ 77.041311][ T5356] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 77.043587][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.045748][ T5356] ? __mutex_trylock_common+0x153/0x260 [ 77.048125][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.049912][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.051836][ T5356] ? bch2_fs_start+0xa0f/0xda0 [ 77.053682][ T5356] ? up_write+0x1c4/0x420 [ 77.055409][ T5356] ? bch2_fs_start+0x5e7/0xda0 [ 77.057350][ T5356] bch2_fs_start+0xaaf/0xda0 [ 77.059327][ T5356] ? bch2_fs_start+0x5e7/0xda0 [ 77.061115][ T5356] ? __pfx_bch2_fs_start+0x10/0x10 [ 77.063234][ T5356] ? sget+0x267/0x620 [ 77.064985][ T5356] bch2_fs_get_tree+0xb39/0x1520 [ 77.067680][ T5356] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 77.070219][ T5356] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 77.072611][ T5356] vfs_get_tree+0x8f/0x2b0 [ 77.074485][ T5356] do_new_mount+0x2a2/0x9e0 [ 77.076369][ T5356] ? ns_capable+0x8a/0xf0 [ 77.078102][ T5356] ? __pfx_do_new_mount+0x10/0x10 [ 77.082033][ T5356] ? path_mount+0x61c/0xfe0 [ 77.083976][ T5356] ? user_path_at+0x44/0x60 [ 77.085948][ T5356] __se_sys_mount+0x317/0x410 [ 77.088025][ T5356] ? __pfx___se_sys_mount+0x10/0x10 [ 77.090223][ T5356] ? do_syscall_64+0xbe/0x3b0 [ 77.092129][ T5356] ? __x64_sys_mount+0x20/0xc0 [ 77.093773][ T5356] do_syscall_64+0xfa/0x3b0 [ 77.095511][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.097551][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.100048][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 77.102122][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.104668][ T5356] RIP: 0033:0x7ff3c619038a [ 77.106695][ T5356] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.114766][ T5356] RSP: 002b:00007ff3c7071e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.118153][ T5356] RAX: ffffffffffffffda RBX: 00007ff3c7071ef0 RCX: 00007ff3c619038a [ 77.121502][ T5356] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007ff3c7071eb0 [ 77.125022][ T5356] RBP: 00002000000000c0 R08: 00007ff3c7071ef0 R09: 000000000000001e [ 77.128597][ T5356] R10: 000000000000001e R11: 0000000000000246 R12: 0000200000000100 [ 77.132130][ T5356] R13: 00007ff3c7071eb0 R14: 0000000000005a27 R15: 0000200000005f00 [ 77.135533][ T5356] [ 77.136898][ T5356] Modules linked in: [ 77.139689][ T5356] ---[ end trace 0000000000000000 ]--- [ 77.163555][ T5356] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 77.166254][ T5356] Code: fd 90 0f 0b e8 40 a7 97 fd 90 0f 0b e8 38 a7 97 fd 90 0f 0b e8 30 a7 97 fd 90 0f 0b e8 28 a7 97 fd 90 0f 0b e8 20 a7 97 fd 90 <0f> 0b e8 18 a7 97 fd 90 0f 0b e8 10 a7 97 fd 90 0f 0b 66 66 66 66 [ 77.201039][ T5356] RSP: 0018:ffffc9000d3c64a0 EFLAGS: 00010293 [ 77.203864][ T5356] RAX: ffffffff842816e0 RBX: ffff888052d44360 RCX: ffff888000b92440 [ 77.213253][ T5356] RDX: 0000000000000000 RSI: 000d280000000000 RDI: 0000000000000000 [ 77.217288][ T5356] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 77.222059][ T5356] R10: dffffc0000000000 R11: fffff52001a78c88 R12: 000d280000000000 [ 77.225623][ T5356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.230457][ T5356] FS: 00007ff3c70726c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 77.234554][ T5356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.238232][ T5356] CR2: 000056342f20c660 CR3: 0000000040070000 CR4: 0000000000352ef0 [ 77.241672][ T5356] Kernel panic - not syncing: Fatal exception [ 77.244769][ T5356] Kernel Offset: disabled [ 77.246699][ T5356] Rebooting in 86400 seconds..