program: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x13, 0x9, 0x3}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r1 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x0, 0x3000}) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='btree_node_prefetch,direct_io%norecovery,str_hash=crc32c,journal_flush_disabled,norecovery,journal_transaction_names,reconstruct_alloc,errors=continue,\x00'], 0x1, 0x5927, &(0x7f00000001c0)="$eJzs3W2QXFWdMPBzu3synZm8TAJIBJkMgSiCmglvhS+l0ce3AqRiYSnhicJAJhhNQioJAgEl+IAPFGChpaWoH9BCatFoUQWrRErkZRNWUYrVpbaQWtlFP7iFLCmBSFmuszXT93R67vSd29PTExL4/SqZ2/f07f8599zTt+//dM90AAAA4FVh97Vb9p51xPt+8fnhF6/64E82XB16y2Pl1bhBX7q87OVqIftTd2XR2DI7Lt5wxff+MHDhe35+Z893X9q15ui1v33vIRfe+6nTd97yzQdemHv3358uihvH0/H71pNnkxCqP93z1S/seuTw0bIkhFBO+raHsCBZ+MCCJBNi8K8hhDXpyqLMnXe9eNLa0eXVN3SPK5+f2c54f3WrpuNs295LTwi/e/eqa361+Ic/6NrxzPZ9myTVhvEUwrzzGx/fFUKYnf4fFUdbHI9x0K4MIfQ0PO60gnYd02L7l+WsH5kuZ6XL3oI48f4lmfVSZrvsetSVWfYU1Dddee1od7siczLr2ZPRdOW1M5YvSJc/TpfHTzF+Of5PQikJlXrz1yf7xkhoOG5JSMaOZbW+Xqof25Duf2Y9yayXMuvlrsx+jdWbDrRykowvj9tlyuPpuJKWH914rm7i7Jzy16bLavpEfSmuh+yNmt4JN+r7NSa2a0+2or5JGjcDSg3noGbl9QOfHozetKw3WTjhMSNNxPt2rbpxaXn1g7vzdi+5M0njJ23F3/bLBXM+8f3rL8m+rtfjn19K45faiv/UGY8+d+713/lGbvybY/xyW/FPvK/n2TMeunZJbv/sif1TaSv+0NMP37T40At25Lb/1hi/2lb8FTsf7Z679777c9s/GPtndlvxn3z7+39/x+P3PJMbP8T4PW3FX71z0xe7+/celxv//tg/vTH+X6YS/6nnd5z6RH//Hwfy4j8W489tq/23b7/lbbfNv+H03OO7MvZPX1vxzzz23mvm7L3nqLxzZ3Jrp145AV6dDkmvsa5L19vNM6erIV/4+kClds03J/0/t5MVZS4+R+uZ18n4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBCOOyEf/7Af36079lKut6d3niyVFvG8lkhJLNDCFu2Dm3eum7jRQOfuviSzRuH1g8MbR0Y3rh18+UDJ79pYPPwpvVDl4/eO/jmk2qPWxiS2jI5akLd3SMjI6W+8WWxvv9z7I7fLT3tv/4UwuBhv+mv5LZ/2S0bbju0yc+MZMXIuzZcctZvTvl2ul99abv6mrRrZGRkJOS067/P+dttX97zh+NCGHzNZO16+Ml3/mxcg8YK9sVJlbpDrUHdSU/TdtRbnbYn9ldl7br1w4OT9+/o48s5+/F/r3jmr2sv+9Lfav1bzd2PFvt39oqR9aWvrTrzf752Za2gqF0v13Ev6u+4F7F9sf+qaX/PS/drXs5+VXL269pf3f/4T4+4/oXtYbDy/OKJdRftV1c6ALqS17ZUb6yhJ1kwrryabh+PeHzcsq0bNi3bcvm2N6/bMHTR8EXDG9+6/OTlpw6ecuopy8b2fFmH9z/W//oW93//jKf5n9n+4/iztfFU1K6i/hhtV3F/NLYo7/nXc/YXvvLWWx46q1ZQNM7j1vXzSbrsGT3Oy0PDeJvYV832q6gfQggDzfrhuRdOD4f/27pris5DjUem8WdGsmLkkSV//vZp31r0jlrBfjnPNzaozfN8vdX72jPWX9X0eIwcoP3bHcrpfvU2bdfyRx7qunH3nz5bb9+sWeGyoa1bNy+v/ZyTtnROcmTTdmVL434tHvtZDmm3hPowbTJeR3WFWvuy58+4ebZXe9P7epOFTfcrK963a9WNS8urH9yd19PJnbUaZ4e5tWXyupwt12ceWK43uFn9B+rzr2h89H/gW3d/9O4fnTxhfJxY+1m0X0nOfv3w8du/8t0v/f8fdW6/PvDOR/v+/O+fXForOFjOK/VWp+1JGs8rJ4ZQ9PxbHJrvR+7zr9R8f4qef9l69m3fPN5AZr03lNt6vp54X8+zZzx07ZLc5+ueVp+vV45bKxc8Xw+U8ZN9fiWV8e2YuefXuIGSrBj5+XWHbH/gqpVH1AqKxnV962bj+qQW8o+c/frZuU/0Xzzw//61c+eN773prvN+O7Tic7WC9o97bEtnjns17d9qTv/WWx3zzsb+fcuFF69fUys/cK9/02VB/hNPJVsu3/bpofXrhzdvaW2/Wn09jfVke7nd19N4dltYsF+lCfs1czda6a9Wn2+x/Wva7q/xz7fekLT1urDtlwvmfOL711/SN+FRaUXnl9L4pbbiP3XGo8+de/13vpEb/+YYv9JW/KGnH75p8aEX7MiNf2uSxq+m8edMKf6KnY92z9173/258Qdj+2e31f4n3/7+39/x+D3P5MYPMX5ve/3//I5Tn+jv/2Nu/MeStJ7Ra6QQ7nrxpLW19SR0pc+32I6uce0K2fUks17KrJcb10u1udZ6BeUkGV8et0vLj25oSzMfyymPV2HVRbXlS3E9ZG9MXn6gKTWc+5uVF12nAgC80sX3/+M1aHz/fzi9UMqfaYB9ppuHLcqJG/OwffM5s8bdvyiNHx8f5wH73xIGR5dXD9Qu9Kf6PkJ8PmTnOWM9xx0zPka785xF8+9LMuuxXbX58kpDHpqamNdUQgvz7xPrmXz+PbP7xfPjA9dNaNZAw7xV9vh1pTNmzT7vkGlvZTRC3vjIzovFz3P0zwsrx+prcXxkP0cTj0P2czSxniMyJ852P0cz3fERmz3J+BhrcvH7GxOPX5ikf/cdv+bRssdvCse7Orr9TL8/24F5w6antP03bziz74ftv3nJqcU/UOYlD/R5w1ge96PS4nziR3PKOzWfGE8XsV17JmnL/mA+EXilivl/fI0Yzf9HL8D/ktmu6Do0e9UY4+V+TqjcvD1FecfEz+n1tPU6vnrnpi929+89Lvc65/5WP/ezadxaT8Hnfor6cWlmvbAfcyZoivK9bD1F/Z79XEZvmNtWv9++/Za33Tb/htNz+31l7YW0uN+/Mm5tbkG/HwT5QvP48oVXRb4w0/NnL1s+kn7waabykY/klE81H+mZcKO+X2MOunyka/+2CwA4eMT8v/7+WZr//0fcIL2OKMpbj8+sx3i5eWvO9Ule3vqhdHlZZvve9DcqpnrdfOax914zZ+89R+XmLbe2mof+w7i1vsI8dHp5c24esbIznxfPzSPqedb08sTc9tfzxOnl6bnx63n69PLo3P6p59HTmwfIjV+fBzjY89yC+bpMZXG11fm6V2wenf767Ezl0WfnlE81j+6dcKO+X2Pk0QAAL6+Y/8fLuJj/P5TZbrrvs+fmBR26bs/+PZB6/Mf2V14503nfTOetM53Xz/S8xMGeF8/0vNDMzpO96vPitFJ5MQAAB7KY/89O1/Pz/+nlJ83yt65x+Yn8vGl8+fkBkp8f7PNf8n/vixeT/wMAvLLF/D/+2mP8+3//lK5n/269PD0nvjxdnj7Z+Gk5T+/8PFvwOYCXdx5g9r7tC+cB0gcevPMAs2e8bQAATF3XWKY08ffsP54us79nn/d7+efmbN+qSnrFeMHWzcPD512yac3Q1uHzNl68ZnjLeZduXrd16/DG2nbTzRtz85Y0b+wKlbQ/mm+Xzdvmp38PYX7O30PIbh/DHjl2Y+LfQ8hWO7vg7wjsO36ttTfv+JUm2b7Z+Mg73nnxP5azfVQ//hd+8sTz1m45b93GdVvXDa1ft214/HajWWvPFL43M3bLlL4vNfNjomo9cpN2VMOMtSPzx4VLo/2d5B7/0f5IMu1YkLZkQd73H+S0+xf/8uXPHDvytztCGDys/Lpp9V+yYuQfzxn+0Nbdv9k02v7SpO2vb5m2q+j7SrPbx/2prL94y9YT1l58ycbsN0q2J85nlOrrMzSfkT79yy3OT6zOKZ/q5xTKE24cmFqenwAAYJz4/n+8no3vH34pvYCK5a3n6dN7/zg3Tx9sLU/Pfi9ZUZ6e3T7ub9M8vTLxurI6zTw9W39Rnt5s+2Z5el7enRf/IznbT1Xr42R6n/PIHSfntzZOst9nUDROsttPOk6a5B/JNMdJtv6icfL6MH7aIG+c5B33vPgfztk+T+vjYXqfy8kdDze3Nh7emFkvGg/Z7ac6HkrTHA/Z+ovGQ7Ptm42HvOObF/+snO1bNX58jA6MsXExfN6lF2/+dMN2M/39F9Nv38x+/0e7Wm//zH7ua+bbP7OfK5v59k/vc2W57X9sejNhrbd/Zr/fpV37bb42/bBZ0efPiuZxV+WUT3Ued9aEGwcm87jw8on5f3y7J+b/N6TLTr8NdPB/T5rvMWsav0PfY1Z0HeP1fJLKDgBezwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa011ZNLbcfe2WvWcd8b5ffH74xas++JMNV7/hiu/9YeDC9/z8zp7vvrRrzdFrf/veQy6891On77zlmw+8MPfuvz9dGLhv7Gfl+HS1GkLybBJC9ad7vvqFXY8cPlqWhBDKSd/2EBYkCx9YkGQiDP41hLCm3s7xd9714klrR5dX39A9rnx+Jkh2v0JvObansZ0hXFa4RxyEquk427b30hPC79696ppfLf7hD7p2PLN93yZJtWE8hTDv/MbHd4UQZqf/R8XRtig+OF2uDCH0NDzutIJ2HdNi+5flrB+ZLmely96COPH+JZn1Uma77HrUlVn2FNQ3XXntaHe7InMy69mT0XTltTOWL0iXP06Xx08xfjn+T0IpCZV689cn+8ZIaDhuSUjGjmW1vl6qH9uQ7n9mPcmslzLr5a7Mfo3Vmw60cpKML4/bZcrj6biSlh/deK5u4uyc8temy+qi8ceyOuFGTe+EG/X9GhPbtWeStuwPpYZzULPy+r6mB6M3LetNFk54zEgT8b5dq25cWl794O6+nHYkdyZp/KSt+Nt+uWDOJ75//SWL8uKfX0rjl9qK/9QZjz537vXf+UZu/Jtj/HJb8U+8r+fZMx66dklu/+yJ/VNpK/7Q0w/ftPjQC3bktv/WGL/aVvwVOx/tnrv3vvtz2z8Y+2d2W/GffPv7f3/H4/c8kxs/xPg9bcVfvXPTF7v79x6XG//+2D+97Y2f53ec+kR//x8H8uI/FuPPbSv+7dtvedtt8284Pff4roz909dW/DOPvfeaOXvvOSrv3Jnc2qlXToBXp0PSa6zr0vV288zpasgXvj5QqV3zzUn/z+1kRRmj9cybwfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwy/frKkz9+zrs+vKqShJDkbDPSRLyvPGvFioE26h16+uGbFh96wY7GskVtxAEAAACKxTy8VC+phkXh0mR2OLLp9nGO4Mi4lowvz84hxDjZOYJ245Q6FKfcoTiVDsXp6lCcWR2K092hONWCONXQWpzZk8SpjI6KFtvTM2l7Wo/T26E4czoUZ26H4szrUJz5HYrTN2mc1sfhgg7FWdihOId0KM6hHYpzWIfivKZDcQ7vUJzsnPJUx+HcdMsj8uKM3SgXxqkk5fodzebTD0/rOWqa9fQW1DO36PW4xXpmt1jPMZnHlaZYT7XFel4/zXqSFut54zTrKRXUE8ftZdn2xXriWovj//IOxdnWoThXdCjOlR2K89kOxflch+JcNc04AK2K+f++fK8vdFfeEXrSM052FiDmu4vHfk58vcs7IcV4r8uUzyqKl03UM/EWT7V92QmETLwlmfKucfEq9XxkknjVxnhLM3cW7m92QiHTvuMz5d1F8bITCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwg3595ckfP+ddH14VkjD6r6mRJuJ95VkrVgy0Ue+uVTcuLa9+cHdjWXeljUAAAABAoZiHd9VLqqG7sjx0J7PGbVdN5wGq6Xq5r7bsnxdWji6TgdLYek+yYNLHVdLHLdu6YdOyLZdve/O6DUMXDV80vPGty09efurgKaeesmztuvXDg7WfIXQXxAshjE0/bLl826eH1q8f3rylVpht/6L0cYvS9SR9XP9bwuDo8uq0/QsL6itNqG/mbhQfPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+l127C5HzKuMAft6Z2ZnptrEr/ZqGZjPko0QtmsStpFq6rwgW2iRkKchsdS3BJljcNKFNSqxjG7CtCYrQEgiRXBiJxdbiTT9sEftBIFKjATcGaYv2Qi+UVitpyYWkjGR3zuzM7ExmHUvTxt/vYt6Zc55znvfMxcL/3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/TVVHZmojI6NDyYhJF1qah3EuWw+Tct99P3Kc9t+UBg+taJ5rJDrYyMAAACgp5jDBxojxVDIZUM2XDn9aUlomgizuR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/M1UdmaiMjo1fmISQdKmpdRDnsvk0LffR9/W3n/jMK8PDf2seK/WxDwAAANBbzOGZxkgxlMLSMJBc2VIXnw0sbFvfXhf3WTTPuvZnB93qls6z7up51n2sR936+nVnAAAAgA+/mP9zjZGhUMgt6Jr/e+X6WLe4rS5bv/bzWwEAAADgfxPzf6ExUgqFXKmR1+eb95e01cX1vf5vH9cv77K+1//z19Wv/k8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8eU9WRicro2Hg2CSHpUlPrIM5l82n6+T76rn5+8B83H35wSfNYIdfHRgAAAEBPMYfPRu9iKOQGw0C4cDr3D9944KkvPfXMSAihPD2dz4edG7dvv2v1zGusW3X08MD3j7z57Tl1q2Zez9kBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA98xUdWSiMjo2fkESQtKlptZBnMvm07TcR9/XPvfFvzx24tk3msdKfewDAAAA9BZz+Gz2L4ZSyId8uHz6U3PWPyPTtr7bMwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/HH3N+/9xsbJyU13eeONN9403pzrv0wAAMB7bXFIQu2/dMWGc33XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB8FUdWSiMjo2XkxCSLrU1DqIc9l8mpb76Js+d6yw4NTzLzaPlfrYBwAAAOgt5vDZ7F8MpTAQBsJl0586PROYzv9D7+NNAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8oU9WRicro2PiCJISkS02tgziXzadpuY++j+7a/9lDF3/vpuaxQq6PjQAAAICeYg7PN0aKoZD7eCiEq+qfJ1sXJNn6tfNzgdl121qWDc57XbVlXXbe63a3nSxXP83MumLcb2jm2lhXnruu3LSuFBrtyy3rwt6WVQt63GcAAACAcyjm/0JjZCgUcoWmnPvTlvohORcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6GKqOjJRGR0bT5IQki41tQ7iXDafpuU++t77249e9NWf7dnRPFbqYx8AAACgt5jDZ7N/MZTCovCRsGg694eh1vpY98/K6UOP/OuvK0JYefnx4Vz7tj+Kb3792g0vtL+EkGmtzoRwcb1f0qXfb37/yD3LaqcfC2HlZdmr5vQLZ+/XumVae7qyad32I8e39fhyAAAA4DwR8/9AY2QoFHJ3ds3/MXn3yP8N0wH84nt2/eLS+ms9kbetyAzV+2W69PvCsif+vHzN3988k//P1u9T+7ccurSl4cxImyStjW7Zsf74tQcz8dQz/bNt/eP38uVvvfHvzTsfPj3TvxiK9fGFuU795762uSCtTWb2ja99d1+1tX+uy/kf/N2LJ361cM87Z/q/vXiw0f/qs5z/7P0Hb3lo73X7D69v7R9CKHfq/9Y7N4Ur/njHA+3nH2zbuPmbb35tk6S1o0tOHlxzoHR9a/+krX/8/n9+4tG9P3n4u8/E/vG3IiuWzrd/pq3/y7sv2fXS/RsWtvbPdDn/C7e+Mry1/J0/tJ//9pZdc13vYu75H7/mydte3Zje1z4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfpmqjkxURsfGM0kISZeaWgdxLptP03IffV+/+dhbt+758Q+bx0p97AMAAAD0FnP4bPYvhlLIh3wYnM79T1c2rdt+5Pi2MDQzm9Svucmtd2//xOatO+68/RzdOQAAADBfMf/nGiNDoZBbFgbq+X90y471x689mIn5PxPz/+Y7JjetDI26l3dfsuul+zcsbDwnCGH6ZwHFM3Wfnq278YZjQyf/9PXlHetWz9YdXXLy4JoDpetjXWiuWxUazycev+bJ217dmN7XuL/muk9+betk/fFE3Hfwlof2Xrf/8PrGOerXwfq+sW4ys2987bv7qrEuW78W6+cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOaaqo5MVEbHxkM2hKRLTa2DOJfNp2m5j75rl/3ygYtOPbuoeayQ62MjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sMOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9usnNI6yjwP48+wmb7bZpE3aF4yKaVoVpR4sCiJ6UVGRVqTgqVKk2tqDKAgiSj2YSiuWqngRrF6KqKBGKSjYWCytkor/ihcPKihUD0IpBrRL8aCS3We2m+mOq5MqqJ8PDE+eZ2a+85t5np3NAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8owz0jTXbwzvub9xyzg0fPXrXiUdueufebRc9/Op3E5uu+3Dv4EsnZzav2PLl9cs27b97zfTu5w/9NPzWL0d7Bj/Ualalbi2EeDyGUHt39pnHZj4+a24shhCqcWQyhNG49NBozCWs/jmEsLld5/ydb564fMtcu23XwLzxJbmQ/H2FejWrp2Vkfr38u9TSOtvaePCS8PW167d/uvyN1/unjk2eOiTWOtZTCIs3dp7fH0JYlLY52Woby05O7boQwmDHeVf2qOv8P1j/pQX9c1P7v9TWe+Rk+1fm+pXccfl+pj/XDva43kIV1VH2uF6Gcv38y2ihiurMxkdT+3ZqV/3J/Gq2xVCJoa9d/j3x1BoJHfMWQ2zOZa3dr7TnNqT7z/Vjrl/J9av9uftqXjcttGqM88ez43Lj2eu4L42v6HxXd3FrwfjZqa2lD+rJrB/yf7TUT/ujfV9NWV2zv1PL36HS8Q7qNt6e+DQZ9TRWj0tPO+fXLrJ9M+ufuLC64b3DIwV1xL0x5cdS+Vs/GR26/bWdD4wV5W+spPxKqfxv1h754badLzxXmP90ll8tlX/ZgcHja9/fsbLw+cxmz6evVP4dRz94cvn/75zqNtfN/D1Zfq1U/jXTRwaGGwcOFta/Ons+i0rlf3X1jd++8vm+Y4X5IcsfLJW/Yfq+pwbGGxcX5h9sfRTqzRVaYv38OHXFF+Pj308U5X+WPf/hLvmxZ/7Lk7uvenHJrjWF63Nd9nxGStV/8wX7tw819p1X9O6Me87UNyfAf9Oy9D/W46lf9nfmQnX8Xnh2oq/1DTSUtuEzeaGcuess/gvzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNHTggAQAAABD0/3U7AgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCoAAP//6isnhg==") openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x82, 0x190) [ 68.597205][ T4669] Bluetooth: hci0: command tx timeout [ 68.716644][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.722816][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.813056][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.833872][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.896367][ T5314] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.900728][ T5314] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.905614][ T5314] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.911271][ T5314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.928009][ T5307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.076891][ T5307] usb 5-1: Using ep0 maxpacket: 32 [ 69.084209][ T5307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 69.092021][ T5307] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 69.099125][ T5307] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.112467][ T5307] usb 5-1: config 1 interface 0 has no altsetting 0 [ 69.119090][ T5307] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 69.125951][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.134431][ T5307] usb 5-1: Product: syz [ 69.137199][ T5307] usb 5-1: Manufacturer: syz [ 69.139872][ T5307] usb 5-1: SerialNumber: syz [ 69.160518][ T5315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.659523][ T5314] loop0: detected capacity change from 0 to 32768 [ 70.039736][ T5314] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 70.069993][ T5314] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,journal_flush_disabled,norecovery,reconstruct_alloc [ 70.069993][ T5314] allowing incompatible features above 0.0: (unknown version) [ 70.069993][ T5314] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 70.087740][ T5314] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 70.091440][ T5314] bcachefs (loop0): Version upgrade required: [ 70.091440][ T5314] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 70.091440][ T5314] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 70.091440][ T5314] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 70.124878][ T5314] bcachefs (loop0): dropping and reconstructing all alloc info [ 70.427785][ T5314] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 70.427808][ T5314] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 70.427819][ T5314] loop0 node offset 0/16 bset u64s 0: invalid bkey format: field 2 too large: 18446744073709551615 + 0 > 4294967295 [ 70.427828][ T5314] u64s 3 fields 64:0, 64:0, 65:0, 0:0, 0:0, 0:0 [ 70.427909][ T5314] flagging btree xattrs lost data [ 70.427917][ T5314] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 70.427925][ T5314] ret btree_node_read_validate_error [ 70.456444][ T5314] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 70.486344][ T5314] bcachefs (loop0): scan_for_btree_nodes... [ 70.511628][ T5317] ------------[ cut here ]------------ [ 70.516525][ T5317] UBSAN: shift-out-of-bounds in fs/bcachefs/bkey.c:163:16 [ 70.548644][ T5317] shift exponent 4294967295 is too large for 64-bit type 'u64' (aka 'unsigned long long') [ 70.553216][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: read_btree_node Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 70.553234][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.553240][ T5317] Call Trace: [ 70.553248][ T5317] [ 70.553255][ T5317] dump_stack_lvl+0x189/0x250 [ 70.553379][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.553396][ T5317] ? __pfx__printk+0x10/0x10 [ 70.553408][ T5317] ? unwind_next_frame+0xa5/0x2390 [ 70.553427][ T5317] ubsan_epilogue+0xa/0x40 [ 70.553439][ T5317] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 70.553498][ T5317] __bch2_bkey_unpack_key+0xd8c/0xe10 [ 70.553520][ T5317] __bch2_bkey_compat+0x4db/0xbd0 [ 70.553551][ T5317] ? __pfx___bch2_bkey_compat+0x10/0x10 [ 70.553572][ T5317] ? kfree+0x18e/0x440 [ 70.553586][ T5317] ? bch2_btree_node_fill+0xd12/0x14f0 [ 70.553599][ T5317] ? bch2_btree_node_get_noiter+0xa2c/0x1000 [ 70.553610][ T5317] ? read_btree_nodes_worker+0x1319/0x1e20 [ 70.553624][ T5317] ? kthread+0x70e/0x8a0 [ 70.553638][ T5317] ? ret_from_fork+0x3fc/0x770 [ 70.553649][ T5317] ? ret_from_fork_asm+0x1a/0x30 [ 70.553672][ T5317] ? bch2_checksum_update+0x91/0x160 [ 70.553689][ T5317] ? __pfx_bch2_checksum+0x10/0x10 [ 70.553703][ T5317] validate_bset_keys+0x6c1/0x1390 [ 70.553731][ T5317] ? validate_bset+0x1420/0x1bd0 [ 70.553747][ T5317] ? __pfx_validate_bset_keys+0x10/0x10 [ 70.553778][ T5317] ? prt_str+0x439/0x760 [ 70.553793][ T5317] ? bch2_btree_node_read_done+0x17a0/0x4f60 [ 70.553811][ T5317] bch2_btree_node_read_done+0x18c8/0x4f60 [ 70.553857][ T5317] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 70.553878][ T5317] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 70.553897][ T5317] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 70.553911][ T5317] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 70.553922][ T5317] ? bch2_printbuf_make_room+0xdb/0x360 [ 70.553939][ T5317] ? enumerated_ref_put+0xbe/0x270 [ 70.553956][ T5317] btree_node_read_work+0x426/0xe30 [ 70.553984][ T5317] ? __pfx_btree_node_read_work+0x10/0x10 [ 70.554000][ T5317] ? bch2_latency_acct+0x436/0x520 [ 70.554014][ T5317] ? __pfx_bch2_latency_acct+0x10/0x10 [ 70.554025][ T5317] ? bio_associate_blkg+0x6d/0x230 [ 70.554042][ T5317] bch2_btree_node_read+0x887/0x29f0 [ 70.554071][ T5317] ? bch2_btree_node_fill+0x954/0x14f0 [ 70.554087][ T5317] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 70.554101][ T5317] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 70.554162][ T5317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.554177][ T5317] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 70.554188][ T5317] ? bch2_btree_node_mem_alloc+0xcd9/0x1820 [ 70.554204][ T5317] ? six_unlock_ip+0x302/0x430 [ 70.554221][ T5317] ? bch2_btree_node_fill+0xb47/0x14f0 [ 70.554233][ T5317] bch2_btree_node_fill+0xd12/0x14f0 [ 70.554245][ T5317] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 70.554263][ T5317] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 70.554277][ T5317] ? btree_cache_find+0xf4/0x2d0 [ 70.554291][ T5317] ? btree_cache_find+0xf4/0x2d0 [ 70.554302][ T5317] ? btree_cache_find+0x26f/0x2d0 [ 70.554314][ T5317] ? __pfx_btree_cache_find+0x10/0x10 [ 70.554334][ T5317] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 70.554353][ T5317] read_btree_nodes_worker+0x1319/0x1e20 [ 70.554377][ T5317] ? read_btree_nodes_worker+0xcef/0x1e20 [ 70.554405][ T5317] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 70.554433][ T5317] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 70.554449][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 70.554461][ T5317] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 70.554485][ T5317] ? __kthread_parkme+0x7b/0x200 [ 70.554499][ T5317] ? __kthread_parkme+0x1a1/0x200 [ 70.554519][ T5317] kthread+0x70e/0x8a0 [ 70.554538][ T5317] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 70.554551][ T5317] ? __pfx_kthread+0x10/0x10 [ 70.554574][ T5317] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.554583][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 70.554592][ T5317] ? __pfx_kthread+0x10/0x10 [ 70.554609][ T5317] ret_from_fork+0x3fc/0x770 [ 70.554624][ T5317] ? __pfx_ret_from_fork+0x10/0x10 [ 70.554641][ T5317] ? __pfx_kthread+0x10/0x10 [ 70.554656][ T5317] ret_from_fork_asm+0x1a/0x30 [ 70.554672][ T5317] [ 70.554741][ T5317] ---[ end trace ]--- [ 70.768802][ T4669] Bluetooth: hci0: command tx timeout [ 70.938434][ T5317] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 70.941547][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: read_btree_node Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 70.946564][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.951176][ T5317] Call Trace: [ 70.952734][ T5317] [ 70.953959][ T5317] dump_stack_lvl+0x99/0x250 [ 70.955936][ T5317] ? __asan_memcpy+0x40/0x70 [ 70.957924][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.960331][ T5317] ? __pfx__printk+0x10/0x10 [ 70.962349][ T5317] panic+0x2db/0x790 [ 70.964134][ T5317] ? __pfx_panic+0x10/0x10 [ 70.965981][ T5317] ? _printk+0xcf/0x120 [ 70.967677][ T5317] ? __pfx__printk+0x10/0x10 [ 70.969573][ T5317] ? unwind_next_frame+0xa5/0x2390 [ 70.971772][ T5317] check_panic_on_warn+0x89/0xb0 [ 70.973969][ T5317] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 70.976932][ T5317] __bch2_bkey_unpack_key+0xd8c/0xe10 [ 70.979273][ T5317] __bch2_bkey_compat+0x4db/0xbd0 [ 70.981468][ T5317] ? __pfx___bch2_bkey_compat+0x10/0x10 [ 70.983750][ T5317] ? kfree+0x18e/0x440 [ 70.985412][ T5317] ? bch2_btree_node_fill+0xd12/0x14f0 [ 70.987772][ T5317] ? bch2_btree_node_get_noiter+0xa2c/0x1000 [ 70.990190][ T5317] ? read_btree_nodes_worker+0x1319/0x1e20 [ 70.992563][ T5317] ? kthread+0x70e/0x8a0 [ 70.994510][ T5317] ? ret_from_fork+0x3fc/0x770 [ 70.996507][ T5317] ? ret_from_fork_asm+0x1a/0x30 [ 70.998713][ T5317] ? bch2_checksum_update+0x91/0x160 [ 71.001011][ T5317] ? __pfx_bch2_checksum+0x10/0x10 [ 71.003154][ T5317] validate_bset_keys+0x6c1/0x1390 [ 71.005510][ T5317] ? validate_bset+0x1420/0x1bd0 [ 71.007798][ T5317] ? __pfx_validate_bset_keys+0x10/0x10 [ 71.010301][ T5317] ? prt_str+0x439/0x760 [ 71.012141][ T5317] ? bch2_btree_node_read_done+0x17a0/0x4f60 [ 71.014597][ T5317] bch2_btree_node_read_done+0x18c8/0x4f60 [ 71.017060][ T5317] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 71.019730][ T5317] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 71.022120][ T5317] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 71.024458][ T5317] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 71.026875][ T5317] ? bch2_printbuf_make_room+0xdb/0x360 [ 71.029060][ T5317] ? enumerated_ref_put+0xbe/0x270 [ 71.031008][ T5317] btree_node_read_work+0x426/0xe30 [ 71.033513][ T5317] ? __pfx_btree_node_read_work+0x10/0x10 [ 71.036061][ T5317] ? bch2_latency_acct+0x436/0x520 [ 71.038348][ T5317] ? __pfx_bch2_latency_acct+0x10/0x10 [ 71.040869][ T5317] ? bio_associate_blkg+0x6d/0x230 [ 71.043049][ T5317] bch2_btree_node_read+0x887/0x29f0 [ 71.045372][ T5317] ? bch2_btree_node_fill+0x954/0x14f0 [ 71.047896][ T5317] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 71.050279][ T5317] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 71.052842][ T5317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.055557][ T5317] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 71.058326][ T5317] ? bch2_btree_node_mem_alloc+0xcd9/0x1820 [ 71.061013][ T5317] ? six_unlock_ip+0x302/0x430 [ 71.063205][ T5317] ? bch2_btree_node_fill+0xb47/0x14f0 [ 71.065632][ T5317] bch2_btree_node_fill+0xd12/0x14f0 [ 71.067922][ T5317] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 71.070541][ T5317] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 71.073041][ T5317] ? btree_cache_find+0xf4/0x2d0 [ 71.075238][ T5317] ? btree_cache_find+0xf4/0x2d0 [ 71.077623][ T5317] ? btree_cache_find+0x26f/0x2d0 [ 71.079789][ T5317] ? __pfx_btree_cache_find+0x10/0x10 [ 71.082080][ T5317] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 71.084147][ T5317] read_btree_nodes_worker+0x1319/0x1e20 [ 71.086107][ T5317] ? read_btree_nodes_worker+0xcef/0x1e20 [ 71.088165][ T5317] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 71.090763][ T5317] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 71.093340][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 71.095567][ T5317] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 71.098100][ T5317] ? __kthread_parkme+0x7b/0x200 [ 71.100166][ T5317] ? __kthread_parkme+0x1a1/0x200 [ 71.102371][ T5317] kthread+0x70e/0x8a0 [ 71.104173][ T5317] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 71.106699][ T5317] ? __pfx_kthread+0x10/0x10 [ 71.108747][ T5317] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.110994][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 71.113283][ T5317] ? __pfx_kthread+0x10/0x10 [ 71.115370][ T5317] ret_from_fork+0x3fc/0x770 [ 71.117358][ T5317] ? __pfx_ret_from_fork+0x10/0x10 [ 71.119595][ T5317] ? __pfx_kthread+0x10/0x10 [ 71.121665][ T5317] ret_from_fork_asm+0x1a/0x30 [ 71.123787][ T5317] [ 71.125510][ T5317] Kernel Offset: disabled [ 71.127450][ T5317] Rebooting in 86400 seconds..