program: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f00000000c0)={&(0x7f00000004c0)=[r1, r1], &(0x7f0000000100)=[0xd], 0xfffffffffffeffff, 0x2, 0x2}) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800400, &(0x7f00000000c0)={[{@noexcl}, {@discard}, {@norecovery}, {@fsck}, {@read_only}, {@norecovery}, {@fix_errors={'fix_errors', 0x3d, 'ask'}}, {@journal_transaction_names}, {@shared_inode_numbers}, {@erasure_code}]}, 0x1, 0x59d0, &(0x7f000000ba00)="$eJzs3X2QHOV5IPC3Z2a1X1ppJSDIYFaLgIRAbK34OmynYiUX2ykglChSDuKwYUErIlsSKkkEECSIHPig+CicsivByR/EhanDVnxUwdnIlDGYE5yNTXH2UVeYsrnD/sNXmENlQEfZPu/VzPQ7u9M7vT07Oysk+P1K2p7u6Xnep7vf6ennndmdAAAAwLvCU7fsOHD+MR/57t9NvHnjn31jy01hsFxb3hdXGE6n175dGXIw9VZW1KbZfvF713/5Z6NX/Ml3Hhz40lv7Nhy/8Ud/esQVj37qnL33/NMTbww9/NuXi+LG/nTK1HzyahJC3zf3f/4z+545urqs2vPKyfDuEJYly59YlmRCjP0qhLChkWfznQ+9efrG6vSm23ubli/NBNHf392qx7nasXYduObU8JM/Xn/z91d+9V979ryye2qVpG9afwphyWXTH98TQuhP/1fF3rYiPjidrgshDE173NkFeZ3QZv6rc+aPTaeL0ulgQZx4/6rMfCmzXnY+6slMBwram6+8PDpdr8jizHz2ZDRfeXnG5cvS6dfT6SlzjF9unE9DKQmVRvqbk6k+EqYdtyQktWPZ15gvNY5tSLc/M59k5kuZ+XJPZrtq7aYdrZwkzcvjepnl8XRcSZcfP/1c3cKFOcvfk0770ifqW3E+ZG/UDc640diumpjX/llyORhK085BrZY3Dnx6MAbT+waT5TMeM9lCvG/f+jv6Z8sjeTBJ4ye1Nucaf9f3li3+5Fduu3pFXvzLSmn8X092Ev+lc5997eLbvviF3Ph3x/jljvI/7bGBV8998pZVrY5FLf7+uH8qHcUff/npO1ceefme3PzvjfH7Ooq/du+zvUMHHns8J3xIxuL+6e8o/osf+uhPH3j+kVeGcx7zn0KMP9BR/Ev2brurd+TAydn4jfwfj/tnsKP4L72+56wXRkZ+PpoX/7kYf6ij+PfvvueD9y29/Zzc47su7p/hjuKfd+KjNy8+8MhxeefO5N5uvXICvDsdkV5j3ZrOd1pnzte0euEfRyv168DF6f+hbjaUueCptrOkemMy70oIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObuqFP/68f+18eHX62k873pjRdL9WlcviiEpD+EsGPn+Padm7ZeOfqpq67evnV88+j4ztGJrTu3Xzd6xh+Mbp/Ytnn8uuq9Y+87PYTQE8LykNQevzw5bkbbvZOTk6Xh5mWxvX974p6fnHT2//5FCGNH/XCkkpv/6nu23Hdki58ZydrJD2+5+vwfnvkv6XYNp3kNt8hrcnJyMuTk9X8u+s19f7//ZyeHMPY7s+X19It/9K2mhGoLpuKkSr2hnlBvMtAyj0bWaT5xf1U2bto8MTb7/q0+vpyzHf/u+ld+tfHaz/6mvn/7crejzf3bv3Zyc+kf1p/3//7hhvqCorzeruNetL/jVsT84v7rS/f3knS7luRsVyVnu275/uPPf/OY297YHcYqr6+c2XbRdvWkHaAneU9b7cYWBpJlTcv70vXjEY+PW71zy7bVO67b9b5NW8avnLhyYusH1pyx5qyxM886c3Vty1d3eftj+7/b5vYfnP609K93fz3+bK8/FeVVtD+qeRXvj+kZ5T3/Bi78zOc+cM+T59cXFPXzuHbp15P1vNI8B6rHeU2Y1t9m7qtW21W0H0IIo632w2tvnBOO/h+bbi46D00/MtN/ZiRrJ59Z9ct/OfufV/xhfcFBOc9PT6jD83wj66l8avurLz0ek4fo/u0N5XS7BlvmteaZJ3vueOoXf9PIb9GicO34zp3b19R/Lk4zXZwc2zKv7NK4XStrP8sh3S2h0U1b9NdQuxSp55c9f8bVs3t1ML1vMFne2JzeaduVFVfat/6Ok8qXfPupvD2dPFhvsT8M1afJe3PW3Jx5YLmRcKv2D9XnX1H/GPnYPz/88Ye/dsaM/nFa/WfRdiU52/XV5+//3Jc++x++1r3t+tgfPTv8yx//1Un1BYfLeaWRdZpPMv28cloIU8+/1vtoZWi9HbnPv1Lr7Sl6/mXbmVq/dbzRzPxgKGefrw2zPV9Pe2zg1XOfvGVV7vN1f7vP1xua5soFz9dDpf9kn19JpTmPhXt+NXWUZO3kd249YvcTN647pr6gqF831m7Vr09vo/7I2a5vXfzCyFWj//6/d++88eU/eOjSH42v/dv6gs6Pe8ylO8e9L92/fTn7t5F1rDun79/3X3HV5g315Yfu9W86Lah/4qlkx3W7Pj2+efPE9h3tbVe7r6exnexe7vT1NJ7dlhdsV2nGdi3cjen7qzzP51vMf0PH+6v5+TYYko5eF3Z9b9niT37ltquHZzwqbeiyUhq/1FH8l8599rWLb/viF3Lj3x3jVzqKP/7y03euPPLyPbnx703S+H0dxV+799neoQOPPZ4bfyzm399R/Bc/9NGfPvD8I6/kxg8x/mBn+//1PWe9MDLy89z4zyVpO9VrpBAeevP0jfX5JPSkz7eYR09TXiE7n2TmS5n58vT5Un2stdFAOUmal8f10uXHT8ullb/MWR6vwvpW1KdvxfmQvTH78kNNadq5v9XyoutUAIB3uvj+f7wGje//T6QXSvkjDTBlvnXYipy4sQ6bGs9Z1HT/ijR+fHwcBxx5fxirTm8arV/oz/V9hPh8yI5zxnZOPqE5RqfjnEXvf63KzMe86uPllWl1aGpmXVMJbYy/z2xn9vH3zOYXj4+P3jojrdHGuFV5ej6j9fYHau8ctfq8QybfSjVCXv/IjovFz3OMLAnrau212T+yn6OJxyH7OZrYzjGZE2enn6OZb/+Iac/SP2opF7+/MfP4hVn2b0864pnXf7LHb2r9wuPdV12/xfuzDbOdb9p9f7YL44YtT2kHb9xwYd8PMy6ZEz99gh3q44ZxedyOSpvjiR/PWd6t8cR4uoh57Z8ll4PBeCLwThXr//gaUa3/qxfg/zezXtF1aPaqMcbL/ZxQuXU+RXXHzM/pDXT0On7J3m139Y4cODn3Oufxdj/3s61pbqDgcz9F+/GkzHzhfswZoCmq97LtFO337OcyBsNQR/v9/t33fPC+pbefk7vf19VfSIv3++ea5oYK9vthUC+0jq9eeFfUCws9fva21SPpB58Wqh75i5zlc61HBmbcaGxXzWFXj/Qc3LwAgMNHrP8b75+l9f//jCuk1xFFdespmfkYL7duzbk+yatb/zydXptZfzD9jYq5Xjefd+KjNy8+8MhxuXXLve3Wof+xaW64sA7Nq5v7Z6zf36Juzq0j1nXn8+K5dUSjzppfnZibf6NOnF+dnhu/VqcnrevocnH8WEfn7p9GHT2/cYDc+I1xgMO9zi0Yr8s0FmfbHa97x9bR6a/PVuvoH1/Q/Tr6wpzlc62jB2fcaGxXjToaAODtFev/eBkX6/8nM+vN93323LqgS9ft2b8H0oj/3MGoKxe47vs383//t7huXei6fqHHJQ73unh+n6coHhda2HGyQ6EuDgvw/nLbdXHaaHNdPJWJuhgAgENBrP/70/n8+n9+9Umr+q2nqT45jOvzLnw+W33eLP56yKFTnx/u41+HdP3/kXC41/9xPmRv1HVe/x/cv8Ci/gcAeGeL9X/8tcf49//+Szqf/bv16vSc+O/SOj3ep07vVp3e/XG24HMAb+84QP/U+j4HAADA26GnVinN/D37T6TT7O/Z5/1e/sU567erkl4eX75z+8TEpVdv2zC+c+LSrVdtmNhx6TXbN+3cObG1vt5868bcuiWtG3tCJd0frdfL1m1L0/fllub8PYTs+jHssbUbM/8eQrbZ/oK/IzB1/NrLN+/4lWZZv1X/yDveefH/Mmf9qHH8r/ir0y7duOPSTVs37dw0vnnTronm9apV68Acvjcz7pY5fV/q0y/urnaZ2q3at2ZmlOb+/Z0d5tH0Y8YfFy5V93eSe/yreSSZPJalmSzL+/6DnLy/+9/+/q9PnPzNAyGMHVV+71zzbg65dvI/XzTx5zuf+uG2av6lWfNvrJnmVfR9pdn14/ZUNl+1Y+epG6+6emv2GyU7E8czSo35BRrPSJ/+5TbHJy7JWT7XzymUZ9w4NLU9PgEAQJP4/n+8no3vH342vYCKy9uv0+f3/nFunT7WXp2e/V6yojo9u37c3nbr9L551unZ9ovq9Fbrt6rT8+ruvPh/kbP+XLXfT+b3OY/cfnJZe/0k+30GRf0ku/5c+0kyz36Sbb+on7Rav1U/yTvuefEvyFk/T/v9YX6fy8ntD3e31x9+PzNf1B+y68+1P5Tm2R+y7Rf1h1brt+oP2ePbWxD//Mz6c9XcP6odo9YvJi695qrtn5623kJ//8X881vY7//oVPv5L+znvhY+/4X9XNnC5z+/z5Xl5v/c/EbC2s9/Yb/fpVMHbbw2/bBZ0efPisZx1+csn+s47qIZNw5NxnHh7RPr//h2T6z/b0+n3X4b6PD/njTfY9Yyfpe+x6zoOsbr+SyNHQK8ngMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0p7eyojZ96pYdB84/5iPf/buJN2/8s29suen3rv/yz0av+JPvPDjwpbf2bTh+44/+9IgrHv3UOXvv+acn3hh6+LcvFwYerv2snJLO9oWQvJqE0PfN/Z//zL5njq4uS0II5WR4dwjLkuVPLEsyEcZ+FULY0Miz+c6H3jx9Y3V60+29TcuXZoJktysMlmM+0/MM4drCLeIw1Jf2s10Hrjk1/OSP19/8/ZVf/deePa/snlol6QvhrsnJyY312SWXTX98TwihP/1fFXvbivjgdLouhDAw7XFnF+R1Qpv5r86ZPzadLkqngwVx4v2rMvOlzHrZ+agnMx0oaG++8vLodL0iizPz2ZPRfOXlGZcvS6dfT6enzDF+Of5PQikJlUb6m5OpPhJCpXHckpDUjmVfY77UOLYh3f7MfJKZL2Xmyz2Z7aq1m3a0cpI0L4/rZZbH03ElXX789HN1CxfmLH9POu1Ln6hvxfmQvVE3OONGY7tqYl77Z8nlYChNOwe1Wt448OnBGEyXDSbLZzxmsoV43771d5xUvuTbTw3n5JE8mKTxk47i7/ressWf/MptV6/Ii39ZKY1f6ij+S+c++9rFt33xC7nx747xyx3FP+2xgVfPffKWVbn7Z3/cP5WO4o+//PSdK4+8fE9u/vfG+H0dxV+799neoQOPPZ6b/1jcP/0dxX/xQx/96QPPP/JKbvwQ4w90FP+Svdvu6h05cHJu/Mfj/hnsrP+8vuesF0ZGfj6aF/+5GH+o7fif75+Kf//uez5439Lbz8k9vuvi/hnuKP/zTnz05sUHHjku79yZ3NutV06Ad6cj0musW9P5gjqzMW6RrTPna1q98I+jlfo13+L0/1A3G8qotrNkAeMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDO9IMbzvjERR++YH0lCSHJWWeyhXhfedHataMdtDv+8tN3rjzy8j3Tl63oIA4AAABQLNbhpcaSvrAiXJP0h2Nbrh/HCI6Nc0nz8uwYQoyTHSPoNE6pS3HKXYpT6VKcni7FWdSlOL1ditMXmnd2Nk5faC9O/yz5VKq9os18BlrHSQ9j+3EGZ8lnLnEWdynOUJfiLOlSnKVdijM8a5z2++GyLsVZ3qU4R3QpzpFdinNUl+L8TpfiHN2lONkx5bn2w6F0zWPy4tRulAvjVJJy445W4+lHp+0cN892BgvaGSp6PW6znf422zkh87jSHNvpa7Od351nO0mb7fz+PNspFbQT++212fxiO3Euv52mS5vrOo9TE/PZ1aU413cpzg1divM3XYrzt12Kc+M84wC0K9b/U/XecOit/GEYSM842VGAWO+urP2c+XqXd0KK8d6bWb6oKF62UM/EWznX/LIDCJl4qzLLe5riVRr1yCzx+qbHOylzZ+H2ZgcUMvmdklneWxQvO7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvoBzec8YmLPnzB+pCE6r+WJluI95UXrV072kG7+9bfcVL5km8/NX1Zb6WDQAAAAEChWIf3NJb0hd7KmtCbLGpary8dB+hL58vD9enIkrCuOk1GS7X5gWTZrI+rpI9bvXPLttU7rtv1vk1bxq+cuHJi6wfWnLHmrLEzzzpz9cZNmyfG6j9D6G0Vb+nU/NoQasMPO67b9enxzZsntu+oL8/mvyLNY0U6n6SPG3l/GKtOb0rzX16Qf2lGewt3o/joAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx/du0uRK6zfAD4e2ZmZ6bb5p/9k35MQ7MZ8lGiFk3iVlIt3QOChTYJWQoyU11LtAkWN01okxLr2AZsa4IitARCJBdGYrG1eNMPW8R+EIjUasCNQdqivdALpdVKWnKhKSPZmTNfmcmsk9B89Pe7OOfM8z7v+5z3LCw8ZwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPlzTlbHJ0vhEeTgKIeqRU+0iGUtn47g4QN0vv7DlB7nR48taY/MGWAcAAADoL+nDhxqRfMhl0iEdrp75tCi0DIRm3w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHz0TFfGJkvjE+VLoxCiHjnVLpKxdDaOiwPUfeu9pz7z+ujo31pjhQHWAQAAAPpL+vBUI5IPhbA4DEVXt+Ul7wbmd8zvzEvWWTDLvM53B73yFs8y79pZ5n2sT97a+nl7AAAAgAtf0v9nGpGRkMvM6dn/9+vrk7yFHXnp+nmQ3woAAAAAZybp/3ONSCHkMoVGvz7bfn9RR14yv9/39sn8pc3QJa3j/b7PX1M/+54eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c05WxydL4RDkdhRD1yKlWq6nmZU0yls7GcXGAuitfHP7HrQcfXtQay2UGWAgAAADoK+nDm613PuQyw2EoXDrT7I/evO+ZLz7z3FgIodbmZ7Nh+/qtW+9ZWTsmeSteOzj0/UPvfPuUvBW14znbIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNZMV8YmS+MT5UuiEKIeOdUukrF0No6LA9R983Nf+MsTR59/uzVWGGAdAAAAoL+kD2/2/vlQCNmQDVfOfGrt9U9Kdczv9c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHjc+837v7F+amrDPS7O0kXGU/2oX+RDCOfBbZzZxbn+zwQAAJxtC0MUqv+jq9ad67sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOB9OVscnS+EQ5H4UQ9cipdpGMpbNxXBygbvzC4dyc4y++3BorDLAOAAAA0F/Shzd7/3wohKEwFK6Y+dTtncBM/z/yId4kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcF6ZroxNlsYnynOiEKIeOdUukrF0No6LPVfP9xx5fMfezx6Y+71bWmO5zEBbAAAAAPpI+vBsI5IPuczHQy5cU/881T4hStfP3d8LNOdtaZs2POt5lbZ56VnP21k7fTWZmanvpjYveRORHqmdG/OKOzueSCYUW+YVQqN8sW1e2N02a06f+wwAAABwDiX9f64RGQm5TK6lz/1pW/6IPhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6GG6MjZZGp8oR1EIUY+cahfJWDobx8UB6t7/2/+/7Cs/27WtNVYYYB0AAACgv6QPb/b++VAIC8L/hQUzfX8Yac9P8v5ZOnHgsX/9dVkIy688MprpXPZHycWv37zppc5DCKn27FQIc+v1oh71fvP7x+5bUj3xRAjLr0hfc0q9cPp67UvG1WdLG9ZsPXRkS5+HAwAAABeJpP8fakRGQi5zd8/+P+m8+/T/DTMN+Nz7dvzi8vqx3pF3zEiN1OuletT7/JKn/rx01d/fOdn/n67ep/ZuOnB5W8FapEMUV8c3bVt75Pr9qWTXtfrpjvrJc/nSt97+98btj56o1c+HfD0+P9Ot/qnHDpfE1anUnvLqD/ZU2utneuz/4d+9fPRX83e9f7L+ewuHG/WvPc3+T19/+LZHdt+w9+Da9vohhGK3+u++f0u46o93PdS5/+GOhVuffOuxQxT/p7ro2P5V+wo3ttePOuonz//nRx/f/ZNHv/tcUj/5rciyxbOtn2qvX31157wdrzy4bn57/VSP/b90++ujm4vf+UPn/u9sWzXT8y5O2X/1yeuevuON9fEDnUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXl+nK2GRpfKKcikKIeuRUu0jG0tk4Lg5Q961bD797+64f/7A1VhhgHQAAAKC/pA9v9v75UAjZkA3DM33/s6UNa7YeOrIljNRGo/o5M7X53q2f2Lh52913nqM7BwAAAGYr6f8zjchIyGWWhKF6/z++advaI9fvTyX9fyrp/zfeNbVheWjkvbpz3o5XHlw3v/GeIISZnwXkT+Z9upl3802HR4796etLu+atbOa9tujY/lX7CjcmeaE1b0VovJ948rqn73hjffxA4/5a8z75tc1T9dcTybrDtz2y+4a9B9c29lE/D9fXTfKmUnvKqz/YU0ny0vVzvr7v7obO9M8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe06crYZGl8ohzSIUQ9cqpdJGPpbBwXB6i7eskvH7rs+PMLWmO5zAALAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9lBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCvv1FyJVFccB/JyZ3Xbc2dVdDdqK1tWKwh6Sgoh6qagIjRB6MiQszYcoCCIKe2gNjcSKXoKsF4kKqi2Egtwk0WKN/kkvPVRQYD0EIi2Um/TQxs6cO85e5zZ1taD8fGA4+ztz7/f+7r1n7uwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9KX89IYzy47cGZ28676ZPH7zn22C3v3b/lkkdf/2Fsww0f7+5/5fjUxmWbvr5xyYa9966a3PnigV8G3/n9cNfgR5rDilTWQohHYwi196efe2Lq03Pm5mIIoRqHxkMYjosPDMdcwsrfQggbW33Of/PtY1dumhu37OibN78oF5I/r1CvZv00Dc3vl/+XWlpnm2cevix8e/3arZ8vfevN3okj4yc2ibW29RTCwvXt+/eGEBak15xstY1kO6dxTQihv22/q7v0deFf7P/ygvr8NJ6VxnqXnOz95bm6ktsuX2d6c2PzXH+dnZ3tcuCSivoou103A7k6/zA6VUV9ZvPDaXw3jSv+Zn41e8VQiaGn1f598cQaCW1rNIbYuJe1Vl1p3duQzj9Xx1xdydXV3tx5NY6bFlo1xvnz2Xa5+exx3JPml7U/qzu4vWD+3DTW0gf1eFaH/B9N9ZP+aJ1XQ9bX9J/08m+otD2DOs23bny6GfU0V4+LT9pntoPsvam1T11cXffBwaGCPuLumPJjqfzNnw0P3PnG9odGivLXV1J+pVT+d6sP/XTH9pdeKMx/Nsuvlsq/Yl//0dUfblteeH2ms+vTUyr/rsMfPb307LsnOt3rRv6uLL9WKv+6yUN9gzP79hf2vzK7PgtK5X9z7c3fv/blniOF+SHL7y+Vv27ygWf6RmcuLczf3/wo1BsrtMT6+Xniqq9GR38cK8r/Irv+gx3yY9f8V8d3XvPyoh2rCtfnmuz6DJXq/9aL9m4dmNlzQdGzM+46Xd+cAGemJel/rCdTXfZ35qlq+73w/FhP8xtoIL0GT+eBcuaOs/AfzAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCpAAAA//+ioSi3") [ 85.802217][ T5321] Bluetooth: hci0: command tx timeout [ 86.192840][ T5346] loop0: detected capacity change from 0 to 32768 [ 86.439063][ T5346] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,fsck,fix_errors=ask,norecovery,noexcl [ 86.439077][ T5346] allowing incompatible features above 0.0: (unknown version) [ 86.439083][ T5346] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.459274][ T5346] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 86.464141][ T5346] bcachefs (loop0): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key U64_MAX:0:0 durability: 0 ptr: 0:32:10 gen 0 cached unwritten [ 86.464179][ T5346] pointer spans multiple buckets (10 + 256 > 256), deleting [ 86.481075][ T5346] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.484873][ T5346] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 86.484873][ T5346] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 86.503039][ T5346] bcachefs (loop0): invalid btree id 251 (max 63), fix? [ 86.568926][ T5346] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree xattrs level 0/0 [ 86.568955][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 7 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 86.568961][ T5346] loop0 node offset 0/7 bset u64s 0: bset past end of btree node (offset 0 len 8 but written 7), fix? [ 86.588265][ T5346] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree xattrs level 0/0 [ 86.588274][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 7 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 86.588280][ T5346] loop0 node offset 0/7 bset u64s 0: bset past end of btree node (offset 0 len 8 but written 7), fix? [ 86.588284][ T5346] Unable to continue, halting [ 86.603046][ T10] cfg80211: failed to load regulatory.db [ 86.630980][ T5346] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 86.631014][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 7 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 86.631023][ T5346] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 86.631029][ T5346] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 86.631035][ T5346] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 86.631041][ T5346] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 86.631048][ T5346] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 86.631054][ T5346] ret fsck_errors_not_fixed [ 86.670687][ T5346] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 86.680197][ T5346] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 86.680211][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 86.680219][ T5346] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 86.707500][ T5346] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree lru level 0/0 [ 86.707526][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 86.707534][ T5346] node offset 0/16 bset u64s 0: bset version 19 older than superblock version_min 24, fix? [ 86.725869][ T5346] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree lru level 0/0 [ 86.725882][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 86.725890][ T5346] node offset 0/16 bset u64s 0: bset version 19 older than superblock version_min 24, fix? [ 86.725896][ T5346] Unable to continue, halting [ 86.745037][ T5346] bcachefs (loop0): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 86.751329][ T5346] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree freespace level 0/0 [ 86.751340][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 86.751345][ T5346] node offset 24/32 bset u64s 24 bset byte offset 168: bad k->u64s 0 (min 3 max 253), fix? [ 86.767787][ T5346] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree freespace level 0/0 [ 86.767803][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 86.767812][ T5346] node offset 24/32 bset u64s 24 bset byte offset 168: bad k->u64s 0 (min 3 max 253), fix? [ 86.767820][ T5346] Unable to continue, halting [ 86.788783][ T5346] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 86.797430][ T5346] bcachefs (loop0): error validating btree node at btree backpointers level 0/0 [ 86.797444][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 86.797451][ T5346] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295 [ 86.797458][ T5346] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0, btree topology error: [ 86.819067][ T5346] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 86.819081][ T5346] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 86.819091][ T5346] flagging btree backpointers lost data [ 86.819097][ T5346] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 86.819104][ T5346] ret btree_node_read_validate_error [ 86.851228][ T5346] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 86.861551][ T5346] ------------[ cut here ]------------ [ 86.865695][ T5346] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:212:18 [ 86.869442][ T5346] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 86.874297][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 86.874312][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.874318][ T5346] Call Trace: [ 86.874324][ T5346] [ 86.874329][ T5346] dump_stack_lvl+0x189/0x250 [ 86.874426][ T5346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.874438][ T5346] ? __pfx__printk+0x10/0x10 [ 86.874462][ T5346] ubsan_epilogue+0xa/0x40 [ 86.874474][ T5346] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 86.874530][ T5346] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 86.874551][ T5346] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 86.874565][ T5346] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 86.874586][ T5346] bch2_btree_node_hash_insert+0x7e/0xc0 [ 86.874600][ T5346] bch2_btree_root_read+0x59e/0x760 [ 86.874613][ T5346] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 86.874633][ T5346] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 86.874650][ T5346] read_btree_roots+0x2c6/0x840 [ 86.874669][ T5346] ? __pfx_read_btree_roots+0x10/0x10 [ 86.874687][ T5346] bch2_fs_recovery+0x261f/0x3a50 [ 86.874694][ T5346] ? check_noncircular+0xe0/0x160 [ 86.874710][ T5346] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 86.874723][ T5346] ? __lock_acquire+0xab9/0xd20 [ 86.874734][ T5346] ? __lock_acquire+0xab9/0xd20 [ 86.874744][ T5346] ? __lock_acquire+0xab9/0xd20 [ 86.874766][ T5346] ? bch2_fs_start+0x9fe/0xd90 [ 86.874783][ T5346] ? up_write+0x1c4/0x420 [ 86.874795][ T5346] ? bch2_fs_start+0x5c4/0xd90 [ 86.874810][ T5346] bch2_fs_start+0xa99/0xd90 [ 86.874823][ T5346] ? bch2_fs_start+0x5c4/0xd90 [ 86.874837][ T5346] ? __pfx_bch2_fs_start+0x10/0x10 [ 86.874854][ T5346] ? sget+0x267/0x620 [ 86.874874][ T5346] bch2_fs_get_tree+0xafc/0x14f0 [ 86.874906][ T5346] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 86.874932][ T5346] ? aa_get_newest_label+0xf7/0x5d0 [ 86.874946][ T5346] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 86.874969][ T5346] ? apparmor_capable+0x137/0x1b0 [ 86.874986][ T5346] vfs_get_tree+0x92/0x2b0 [ 86.875000][ T5346] do_new_mount+0x24a/0xa40 [ 86.875018][ T5346] __se_sys_mount+0x317/0x410 [ 86.875036][ T5346] ? __pfx___se_sys_mount+0x10/0x10 [ 86.875054][ T5346] ? do_syscall_64+0xbe/0x3b0 [ 86.875095][ T5346] ? __x64_sys_mount+0x20/0xc0 [ 86.875110][ T5346] do_syscall_64+0xfa/0x3b0 [ 86.875119][ T5346] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.875134][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.875144][ T5346] ? clear_bhb_loop+0x60/0xb0 [ 86.875154][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.875160][ T5346] RIP: 0033:0x7ff5e29900ca [ 86.875168][ T5346] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.875174][ T5346] RSP: 002b:00007ff5dedf4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.875182][ T5346] RAX: ffffffffffffffda RBX: 00007ff5dedf4ef0 RCX: 00007ff5e29900ca [ 86.875189][ T5346] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007ff5dedf4eb0 [ 86.875195][ T5346] RBP: 0000200000000180 R08: 00007ff5dedf4ef0 R09: 0000000000800400 [ 86.875201][ T5346] R10: 0000000000800400 R11: 0000000000000246 R12: 0000200000000540 [ 86.875206][ T5346] R13: 00007ff5dedf4eb0 R14: 00000000000059d0 R15: 00002000000000c0 [ 86.875224][ T5346] [ 86.875229][ T5346] ---[ end trace ]--- [ 87.044894][ T5346] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 87.048146][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 87.053343][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.058100][ T5346] Call Trace: [ 87.059497][ T5346] [ 87.060816][ T5346] dump_stack_lvl+0x99/0x250 [ 87.062830][ T5346] ? __asan_memcpy+0x40/0x70 [ 87.064830][ T5346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.067127][ T5346] ? __pfx__printk+0x10/0x10 [ 87.069588][ T5346] panic+0x2db/0x790 [ 87.071554][ T5346] ? __pfx_panic+0x10/0x10 [ 87.073699][ T5346] ? _printk+0xcf/0x120 [ 87.075741][ T5346] ? __pfx__printk+0x10/0x10 [ 87.077748][ T5346] check_panic_on_warn+0x89/0xb0 [ 87.079963][ T5346] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 87.083335][ T5346] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 87.086559][ T5346] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 87.089911][ T5346] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 87.093310][ T5346] bch2_btree_node_hash_insert+0x7e/0xc0 [ 87.096085][ T5346] bch2_btree_root_read+0x59e/0x760 [ 87.098341][ T5346] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 87.100878][ T5346] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 87.103338][ T5346] read_btree_roots+0x2c6/0x840 [ 87.105340][ T5346] ? __pfx_read_btree_roots+0x10/0x10 [ 87.107787][ T5346] bch2_fs_recovery+0x261f/0x3a50 [ 87.110185][ T5346] ? check_noncircular+0xe0/0x160 [ 87.112603][ T5346] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 87.114825][ T5346] ? __lock_acquire+0xab9/0xd20 [ 87.116860][ T5346] ? __lock_acquire+0xab9/0xd20 [ 87.119105][ T5346] ? __lock_acquire+0xab9/0xd20 [ 87.121407][ T5346] ? bch2_fs_start+0x9fe/0xd90 [ 87.123542][ T5346] ? up_write+0x1c4/0x420 [ 87.125479][ T5346] ? bch2_fs_start+0x5c4/0xd90 [ 87.127909][ T5346] bch2_fs_start+0xa99/0xd90 [ 87.130409][ T5346] ? bch2_fs_start+0x5c4/0xd90 [ 87.132862][ T5346] ? __pfx_bch2_fs_start+0x10/0x10 [ 87.135302][ T5346] ? sget+0x267/0x620 [ 87.137177][ T5346] bch2_fs_get_tree+0xafc/0x14f0 [ 87.139772][ T5346] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 87.142156][ T5346] ? aa_get_newest_label+0xf7/0x5d0 [ 87.144422][ T5346] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 87.147086][ T5346] ? apparmor_capable+0x137/0x1b0 [ 87.149749][ T5346] vfs_get_tree+0x92/0x2b0 [ 87.152293][ T5346] do_new_mount+0x24a/0xa40 [ 87.154586][ T5346] __se_sys_mount+0x317/0x410 [ 87.156667][ T5346] ? __pfx___se_sys_mount+0x10/0x10 [ 87.158770][ T5346] ? do_syscall_64+0xbe/0x3b0 [ 87.160734][ T5346] ? __x64_sys_mount+0x20/0xc0 [ 87.162812][ T5346] do_syscall_64+0xfa/0x3b0 [ 87.164844][ T5346] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.167230][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.170106][ T5346] ? clear_bhb_loop+0x60/0xb0 [ 87.172299][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.174872][ T5346] RIP: 0033:0x7ff5e29900ca [ 87.176708][ T5346] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.186054][ T5346] RSP: 002b:00007ff5dedf4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.189870][ T5346] RAX: ffffffffffffffda RBX: 00007ff5dedf4ef0 RCX: 00007ff5e29900ca [ 87.193368][ T5346] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007ff5dedf4eb0 [ 87.196788][ T5346] RBP: 0000200000000180 R08: 00007ff5dedf4ef0 R09: 0000000000800400 [ 87.200320][ T5346] R10: 0000000000800400 R11: 0000000000000246 R12: 0000200000000540 [ 87.203655][ T5346] R13: 00007ff5dedf4eb0 R14: 00000000000059d0 R15: 00002000000000c0 [ 87.207096][ T5346] [ 87.208810][ T5346] Kernel Offset: disabled [ 87.210809][ T5346] Rebooting in 86400 seconds..