program: socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010000", 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x2200850, &(0x7f0000000000)=ANY=[], 0x41, 0x5a4b, &(0x7f0000006740)="$eJzs3X+QHNV9IPDXM7Pa0a5+rAQOMpjVIqOE4Nha8av8IxVvcomdAoeSy6nE4mTDglZEthAq/Qggk1jkwGcV2GWnnEpw8gdxYV9sKy6qzMUolAk/TuJsbBUXH3WFqbPvsP/wFeFQBdBRlM+bmpl+szO909uzs7NCgs+npO3pNz3f9/r1m575vundCQAAALwhHL1jz4krz/6d7/7Z1Muf/N1/vOG2MFyul1fjBiPp8ubXqoWcTIOVNfVldlz8yie+9tOx637rO/cNffmVI1vP2/bD3z7jugc/dvnhu//6kZeW3/+LZ4vixvF04cx68nwSQvXbx//iU0eeOKtWlqyo/SwdCGFVsvqRVUkmxPirIYSt6cqazJ3ffPniba31RCsz68b7G1vtONcG1v4TN70t/Og3N9/+/bXf+PuBQ88dmNkkqbaMpxBWXNP6+IEQwtL0f81guozjMQ7aTSGEoZbHvbOgXW/tsv0bctbPSZdL0uVwQZx4/7rMeimzXXY9GsgshwrqW6i8dvS6XZFlmfXsyWih8toZy1ely2+lywvnGb+c7kM5CaUkVJrN35HMjJHQctySkNSPZbW5Xmoe25Duf2Y9yayXMuvlgcx+1etNB1o5SdrL43aZ8ng6rqTl53U4x7f6UE75m9NlNX2ivhLXQ/ZGw/CsG839qovtOj5HW06GUss5qFN588CnB2M4LRtOVs96zHQH8b4jm+9aX97y6NGRnHYk9yVp/KSn+Pu/t2rZR79+cF/2db0Z/5pSGr/UU/wfX3HshasOfumLufE/F+OXe4p/0UNDz1/x2B3rcvvneOyfSk/xJ599/DNrz7z2UG7774nxqz3Fnzh8bHD5iYcezm3/eOyfpT3Ff+Y97/vJV5964Lnc+CHGH+op/pbDuz47OHrigtz4D8f+Ge5t/Lx46LKnR0d/NpYX/8kYf3lP8b9y4O5337vyzstzj++m2D8jPcX/wPkP3r7sxAPn5p07k3v69coJ8MZ0Rvoe69Ppeq955kK15At/NVZpvOdblv5f3s+KMm8+a/Ws6Gd8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghvOlt//X9//sPRp6vpOuD6Y1nSo1lLF8SQrI0hLBn7+Tuvdt3Xj/2sRv37d45uWNscu/Y1M69u28Zu+TXxnZP7doxeUvt3vG3X9x43OqQNJbJubPqHpyeni6NtJfF+v7d+Yd+tP6d/+dfQhh/0w9GK7nt33D3Dfee2eFnRjIx/d4b9l35g0v/Nt2vkbRdIx3aNT09PR1y2vV/P/zze//8+E8vCGH8l+Zq1+PP/MY/tTWoXjATJ1UaDI0GDSZDHdvRbHXanthflW3bd0yNz92/tceXc/bj33/iuVe33fz5nzf6t5q7H13279KJ6R2lv9z8gf//l7c2Cora9Vod96L+jnsR2xf7r5r294p0v1bk7FclZ7/u+P7DT3377IMvHQjjlRfXzq67aL8G0gEwkLy5q3pjDUPJqrbyarp9POLxcRv23rBrw55b9r99+w2T109dP7XzXRsv2XjZ+KWXXbqhvucb+rz/sf5f7nL/T854WvnHB74Vf3Y3ntrbtWTe/VFrV3F/tLYo7/k39KFPfeFddz92ZaNgjnG+tNauuHXzfJIuh2rHeWNoGW+z+6rTfhUdnxDCWKd+eOGly8NZ/2P77UXnodYj0/ozI5mYfmLdv/7tO/9mza83Ck7Keb61QT2e55utnmlPvb+q6fGYPkX7dzCU0/0a7tiujU88NnDX0X/5k2b7liwJN0/u3bt7Y+PnsrSly5JzOrYrWxr3a239Zzmk3RKaw7TDeK0ZCI32Zc+fcfNsrw6n9w0nqzvuV1a878jmu9aXtzx6NK+nk/saNS4NyxvL5C05W+7IPLDcbHCn+k/V51/R+Bh9/9/c/wf3/8Mls8bHRY2fRfuV5OzXN576yhe+/Pn/+A/926/3/8axkX/9n3+0vlFwyp9Xyo2GNFudtidpPa9cFELR829t6Lwfuc+/Uuf9KXr+ZeuZ2b5zvLHM+nAo9/R8veihoeeveOyOdbnP1+NzPV9bd/bWtseVC56vp8r4yT6/kkp7Oxbv+dU2UJKJ6e98+owDj3xy09mNgqLXy+bWncb1xV3kHzn79U9XPT1649h/+O/z3K9mSUYyMf21X/vm1T+cnPjTRkHvxz22pT/HvZr2bzWnf5utjnlna/++47obd2xtlBf1c87734F0dRHf/6bLgvwnnkr23LL/45M7dkzt3tPdfnX7ehrryfZyr6+n8ey2umC/SrP2a/FudNNf3T7fYvu3ztVfIZmjv9qfb8Mh6el1Yf/3Vi376NcP7huZ9ai0omtKafxST/F/fMWxF646+KUv5sb/XIxf6Sn+5LOPf2btmdceyo1/T5LGr/YUf+LwscHlJx56ODf+eGz/0p7iP/Oe9/3kq0898Fxu/BDjD/fW/y8euuzp0dGf5cZ/MqmfRGqxl4UQvvnyxdsa9Sb1k1e1pR0Dbe0K2fUks17KrJdb10txFiGtoJwk7eVxu7T8vJa2dPKHOeXxXVh1TWP5SlwP2Rtzl59qSi3n/k7lRe9TAQBe7+Ln//E9aPz8fyp9o5Q/0wAz2vKwzJxtN3nYmpy49TysbT6n/TPWNWn8+Pg4Dzj6jjBeW9421nijP4/PEV6tNS8+H7LznLGeC97aHqNwnnO6Xv+sec6i+fd1mfXYrsZ8eaUlD03NzmsqoYv599n1zD3/ntn94s+zxj49q1ljLfNW2eM3kM6YdbreIdPeSi1C3vjIzovF6zlGV4RN9fq6HB/Z62jiccheRxPrOTtz4uz1Opq88TEyux/a2hXHR9xujvFRb3Lx55Gzj1+Yo39njl/naNnjN4/jXa1tv9ifz/Zh3rDjKe3kzRsu7udh5iVz4qdPsFN93jCWx/2odDmfuDSnvF/zifF0Edt1fI62nAzmE4HXq5j/x9eIWv5fewP+/zLbFeUp2XeNMV7udULlzu0pyjtmX6c31NPr+JbDuz47OHrigtz3OQ93e53erra1oYLrfor6cX1mvbAfcyZoivK9bD1F/Z69LmM4LO+p379y4O5337vyzstz+31T44W0uN+/0La2vKDfT4N8oXN8+cIbIl9Y6HUMRfNnr1k+kl74tFj5yO/nlM83HxmadaO5X3Wnbj4y80Lalo8MnNx2AQCnj5j/Nz8/S/P//xU3SN9HFOWtF2bWY7zcvDXn/Ule3vp76fLmzPbD6W9UzPd98wfOf/D2ZSceODc3b7mn2zz079rWRgrz0IXlzbl5xKb+XC+em0c086yF5Ym57W/miQvL03M+pm3J0xeWR+f2TzOPbp8H+MKx7uLHeYDc+M15gD7mub+Y2WiOPHewm/jd57kF83WZyuJqt/N1r0kevaJ9Pxclj05/fXax8ugP5ZTPN48ennWjuV91p24e3V4ujwYAXq9i/h/fxsX8/7HMdgv9nD03L+jT+/bs3wNpxn9yUfLKmfh9+vy3OO9b7Lx1sfP6xZ6XON0//13seaGR+h/wXKx5skX5fHmwbf3UzovTSuXFAACcqiot+X/8va78/H9h+cms/G2g8RZyJj85/fLz1u3k5znxXzf5+ek+/7W418m8ZteXnyr5f1xPV6fl/wAAnIJi/h9/7TH+/b//kq5n/2796ZinB5+jy9NPmzy9z/NsMX7rdQDmARY4DzATuavr41v+aJZ5AAAAXgsD9Uxp9u/ZfyRdZn/PPu/38q/K2b5blfTt8bV7d09NXb1v19bJvVNX77xx69Seq2/avX3v3qmdje0Wmjfm5i1p3jgQKml/dN4um7etTP8ewsqcv4eQ3T6GPad+Y/bfQ8hWu7Tg7wjMHL/u2pt3/EpzbN9pfOQd77z4f5izfdQ8/tf90UVXb9tz9fad2/dun9yxff9U+3a1rHVoHt+bmaT/5/V9qZkfs5Tm//2d8fAsrB2l0DZESrX+Tsbyjn+tHUmmHavSh6/K+/6DnHZ/97/9+R+fP/3zr4Yw/qbyWxbUf8nE9H/+8NTv7T36g1219pdyx2+tPc0t03YVfV9pdvu4P5UdN+7Z+7ZtN+7bmf1Gyd7E+YxSc32R5jPSp3+5y/mJLTnl8/39/XLrjU4TAKeIrucnAABoEz//j+9n4+eHn0/fQMXy7vP05ufHf5eta648PX5+nJunj3eXp2e/l6woT89uH/e32zy9usA8PVt/UZ7eaftOeXpb3j1QHP/3W7dfgO7HSQ/XecT08+sH9+WOk2u6GyfZ7zMoGifZ7ec7TpIFjpNs/UXjpNP2ncZJ3nHPi//BnO3zFI2HSnM8LOy6nNzx8LnuxsOvZtaLxkN2+/mOh1L346HjN6Vk6y8aD5227zQe8o5vXvwrc7bvVvv4qA2M+riYuvqmG3d/vGW7xf7+izD7koxu2rdk5rGL+/0fveq+fxf3uq+Ftz+EiXpJXvsX97qyhbe/qP/ncV3ZijDrurLc9j+5sJmw7ttfdF1iNXTq/26/3yUjb/PZjz9Z87XpmaDo+rOiedzNOeXzncddMuvGqck8Lrx2Yv4f32TG/P/OdJnzNX09O/2/J833mHWM36fvMSt6H/OGez3PfuTu9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgdWGwsqa+PHrHnhNXnv073/2zqZc/+bv/eMNtv/KJr/107Lrf+s59Q19+5cjW87b98LfPuO7Bj11++O6/fuSl5ff/4tnCwCP1n5UL09VqCMnzSQjVbx//i08deeKsWlkSQignIwdCWJWsfmRVkokw/moIYWuzne13fvPli7fVlrfdOdhWvjKzXXa/wnA5tqe1nSHcXLhHnIaq6Tjbf+Kmt4Uf/ebm27+/9ht/P3DouQMzmyTVlvEUwoprWh8/EEJYmv6viaNtTXxwutwUQhhqedw7C9r11i7bvyFn/Zx0uSRdDhfEifevy6yXMttl16OBzHKooL75mO5QlteOXrcrsiyznj0ZLVReO2P5qnT5rXR54Tzjl+P/JJSSUGk2f0cyM0ZCy3FLQlI/ltXmeql5bEO6/5n1JLNeyqyXBzL7Va83HWjlJGkvj9tlyuPpuJKWn9d6ru7gQznlb06X1fSJ+kpcD9kbDcOzbjT3qy626/gcbUn9p+JNeldqOQd1Kk8yuzaclg0nq2c9ZrqDeN+RzXetL2959OhITjuS+5I0ftJT/P3fW7Xso18/uG9NXvxrSmn8Uk/xf3zFsReuOvilL+bG/1w9/pLhUO4p/kUPDT1/xWN3rMvtn+Oxfyo9xZ989vHPrD3z2kO57b8nxq/2FH/i8LHB5Sceeji3/eO1/qnUX/l6if/Me973k68+9cBzufFDPL5DPcXfcnjXZwdHT1yQG//h2D/DvY2fFw9d9vTo6M/G8uI/GeMv7yn+Vw7c/e57V955ee7x3RT7Z6Sn+B84/8Hbl5144Ny8c2dyT79eOQHemM5I32N9Ol3vNc9cqJZ84a/GKo33fMvS/8v7WVFGrZ4VixgfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDXp3++9ZKPfPi9H9xcSUJIcraZ7iDeV14yMTHWQ72Tzz7+mbVnXnuotWxND3EAAACAYjEPLzVLqmFNuClZGs7puH2cIzgnriXt5dk5hBgnO0fQa5xShzilwjhLZ8Up96k9lT7FGehTnCV9ijPYpzjVgjjV0F2cpXPEqdRGQJftGZqzPd3HGe5TnGV9irO8T3FW9CnOyj7FGZkzTvfjcFWf4qzuU5wzOsSp9BDnzD615019ivNLfYpzVp/iZOeU5zsOl6dbnp2uD2bj1G+UC+NUknLzjk7z6Wel9Zyb194u6xkuqGd50etxl/Us7bKet2YeV5pnPdUu6/nlBdaTdFnPry6wnlJBPXHc3pxtX6wnrnU5/m/pU5z9fYrziT7FubVPcf6kT3H+tE9xPrnAOADdivn/TL43EgYrvx6G0jNOdhYg5rtr6z9nv97lnZBivLdkypcUxcsm6pl4a+fbvuwEQibeukz5QFu8ShhJa5gjXrU13vrMnXPt73smOretNd6FmfLBOeK17kA2PwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAxfDPt17ykQ+/94ObQxJq/zqa7iCUG/eVl0xMjPVQ75HNd60vb3n0aGvZYKWHQAAAAEChmIcPNEuqYbCyMQwmS9q2q6bzANV0vTzSWI6uCJtqy2SsVF8fSlbN+bhK+rgNe2/YtWHPLfvfviRMXj91/dTOd228ZONl45dedumGbdt3TI03foYwWBAvhFCffthzy/6PT+7YMbV7T6Nwpv2D9Z9r0setSUuT9HGj7wjjteVtaftXF9RXmlXf4t3o7ggCAAAAAAAAAAAAAAAAAAAAAPBv7NpdqKR1GQDw552ZMzMe3Tzh17i4x2FdxcpK7Rha4nkhSPBj8SDEOdZJllxJOrqL7spmky6kphSBsrBseNGGSZp040dK5AcLhllCZ5NQKS/qotAyVLwIZeLMzDtfZ8Y5DuKq/X4X78fzf/7/5/2/Fwee9wwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvn+XazOL87NzCZBKRDMmpD5CN5YtpWh2j7tce3f6j0vSbp3bHSoUxFgIAAABGyvrwiXakHKVCPvJxfONuY3QNRKfvBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8s12YW52fnFg5PIpIhOfUBsrF8MU2rY9R96fX7P//89PQ/umOVMdYBAAAARsv68Fw7Uo5KnBQTyfErnX87mn0bWN83v5nXka2zYY15/d8OhuWdtMa8U9aY94kReZtb510RUQoAAAD4cMv6/0I7MhWlwrpV/XDW/4/q67O8E/vy8q3z2n8rUFxzJgAAAPDOsv6/8z/uSpQKlXa/vtZ+f2NfXjZ/1P/ts/knD5k/6v/5F7fOuwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+LBYrs0szs/OLeSTiGRITn2AbCxfTNPqGHXPfGzyXxceuGVjd6xUGGMhAAAAYKSsD++03uUoFSZjIg5v9P3T59/14FcefHgmIpptfrEYu7bs2HHtmc1jlnfGMwcmfvjUK99dlXdG83jINggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxnlmszi/OzcwuHJRHJkJz6ANlYvpim1THqvvjFL//t3uceebk7VhljHQAAAGC0rA/v9P7lqEQxinFs466711+R65s/7JsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NFx3bdv+NaWpaWt17o4NBf1fMQH4DFcuOi9ONR/mQAAgPfaiZFE/V067pJD/dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAHwXJtZnF+dm6hnEQkQ3LqA2Rj+WKaVseomz76bGndm4890R2rjLEOAAAAMFrWh3d6/3JUYiIm4pjG3aBvAo3+f+p9fEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgA2W5NrM4Pzu3sC6JSIbk1AfIxvLFNK2OUfee3fu+cPeRP7igO1YqjLEQAAAAMFLWhxfbkXKUCp+MUpzQul/qnZDkW+fB3wU687b3TJtc87xaz7z8mufd1rezQms3zXnlbL2p5rk9r9qZl2vNq3bNq0S7fLU9r/Gy9vRUWzfiOVe/eQAAAHj/ZP1/qR2ZilKh1NX//7wnf0qfCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMsVybWZyfnVtIkohkSE59gGwsX0zTauOq9K7q3vD7jx/x9V/cvrM7VhlrBwAAAMAoWR/e6f3LUYkN8bHY0Oj7Y6o3P8v79/xbd9/5n7+fGnH6sQenC/3L/iS7+O2L5z3ef4jI9WbnIo5s1UuG1PvdH++8flP9rXsjTj8mf8KqevHO9XqXTOsPzW+9eMdTB7ePeDkAAADwEZH1/xPtyFSUCtcM7f+zzntE/9/WaMCPvH73r45uHVsded+M3FSrXm5IvS9tuv+vJ5/9z1dW+v/V9T7dvvrsvqvvPrqnYDPSJ0nrs1fv3HzwrP25bNfN+vm++tl7+ep3Xv7vlbvueKtZvxzlVnx936M0q60+9pWPtL6U27tw0dt7a731C0P2f8sfnnjuN+tvf2Ol/usnTrbrnxKD6jd3XhhaPw5L65OX3rrnnH0HNvfWj4jqoPqvvnFBHPfnq27u3/9k38Ldb7772P8C0vozG1/bf/ZdlXN76yd99bP3/8vn7tnzszu+/3BWP/utyKknrbV+rq/+07cdtfvJmy5Z31s/N2T/j1/2/PS26vf+1L//K3pWLQx9itX7v++0By5/YUt6Y/8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR8tybWZxfnZuIZdEJENy6gNkY/limlbHqPvShc++etntP/1xd6wyxjoAAADAaFkf3un9y1GJYhRjstH3PzS/9eIdTx3cHlPN0aR1Lixtu27Hp67ctvOaKw7RkwMAAABr9dKFSaP/L7QjU1EqbIqJVv8/e/XOzQfP2p/L+v/cyjmJiCuvWtp6erTznr7tqN1P3nTJ+vZ3gojGzwLKK3mf6+Sdf96zU6/95ZsnD8w7s5P3zMbX9p99V+XcLC+6886I9veJ+0574PIXtqQ3tp+vO+8z39i21Po8ka07eemte87Zd2BzLvuO0TpPttbN8pZyexcuentvLTcVpZXxfCuv3No3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDacm1mcX52biHyEcmQnHq3ViAbyxfTtDpG3Ys2/frmI958ZEN3rFQYYyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYr78Qqao4DuDnzOy2szu7uqtBW9G6WlHYg1IQUS8VFaERQk+GhKX5EAVBRGEPraGRWNFLkPUiUUG1hWCQmyRarNE/6aWHCgqsh0CkhdpFeqjYmXNnZ69zG521oPx8YDhzzr33e3/3njN3ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/5SeruFae2THIzN3XnTrZ0/dP/3k7R88tO2KJ976aXTTzZ/u7Xv95OTm5Vu+vWXppgMPrJnY/crh3wbe++NY2+DH683K1K2EEE/EECofTr349OTnF8yOxRBCOQ6OhTAUlxweirmE1b+HEDc36py/cd/0NVtm2227euaNL86F5K8rVMtZPXWD8+vl/6WS1tnWmceuCt/ftH77l8vefad7/PjY3C5xdp9yWk8hLNrYfHx3CKE3vWZlq204Ozi160IIfU3HXdemrktPs/5Vcys069dcnNrzUlttk5NtX5Hrl3L75fuZ7lzb1+Z8C1VUR6f7tdOf6+cfRgvVqHNV6/Gh1L6f2pVnmF/OXjGUYuhqlP9gnFsjoWneYoi1uaw0+qXG3IZ0/bl+zPVLuX65O3ddtfOmhVaOcf54tl9uPFvsXWl8efOzuoW7CsYvTG0lfVBPZv2Qf1NXPeVN47pqH/2srqm/qeXfUGp6BrUab0x8moxqGqvGJacc82cL2bbJ9c9eXt7w0ZHBgjri3pjyY0f5W78Y6r/n7Z2PDhflbyyl/FJH+T+sPfrL3Ttffbkw/4Usv9xR/tUH+06s/XjHisL7M5Xdn67Tyo+pn22799gnzy07/77xVnNdy9+T5Vc6qv/GiaM9AzMHDxXWvzq7P70d5X93w20/vvn1/uOF+SHL7+sof8PEw8/3jMxcWZh/qP5RqNZWaAfr59fxa78ZGfl5tCj/q+z+D7TIj23z3xjbff1ri3etKVyf67L7M5jye8+o/jsuO7C9f2b/JUXPzrjnbH1zApyblqbfWM+kfrv/mfumSy3/Zy5A7SdC0/+Fl0a76t9A/ek1cJZO1MrseRb9g/kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7EDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FQAA///D5CSg") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4b) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) close(0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f05ebbee1, 0x2010, 0xffffffffffffffff, 0x0) r3 = socket(0x14, 0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x61d2, 0x0) [ 86.429790][ T4685] Bluetooth: hci0: command tx timeout [ 86.501255][ T5319] Bluetooth: hci0: hardware error 0x00 [ 86.509260][ T5340] Bluetooth: MGMT ver 1.23 [ 86.511415][ T5333] [ 86.512351][ T5333] ====================================================== [ 86.515304][ T5333] WARNING: possible circular locking dependency detected [ 86.518166][ T5333] 6.16.0-rc5-syzkaller #0 Not tainted [ 86.520328][ T5333] ------------------------------------------------------ [ 86.523310][ T5333] kworker/0:4/5333 is trying to acquire lock: [ 86.525938][ T5333] ffff888035967b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_info_timeout+0x60/0xa0 [ 86.529939][ T5333] [ 86.529939][ T5333] but task is already holding lock: [ 86.532900][ T5333] ffffc9000d4b7bc0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 86.538145][ T5333] [ 86.538145][ T5333] which lock already depends on the new lock. [ 86.538145][ T5333] [ 86.542467][ T5333] [ 86.542467][ T5333] the existing dependency chain (in reverse order) is: [ 86.546361][ T5333] [ 86.546361][ T5333] -> #1 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 86.550839][ T5333] lock_acquire+0x120/0x360 [ 86.553113][ T5333] __flush_work+0x6b8/0xbc0 [ 86.555393][ T5333] __cancel_work_sync+0xbe/0x110 [ 86.557837][ T5333] l2cap_conn_del+0x4f0/0x680 [ 86.560039][ T5333] hci_conn_hash_flush+0x10a/0x230 [ 86.562506][ T5333] hci_dev_close_sync+0xaef/0x1330 [ 86.564971][ T5333] hci_error_reset+0x127/0x3e0 [ 86.567300][ T5333] process_scheduled_works+0xae1/0x17b0 [ 86.570007][ T5333] worker_thread+0x8a0/0xda0 [ 86.572290][ T5333] kthread+0x70e/0x8a0 [ 86.574309][ T5333] ret_from_fork+0x3fc/0x770 [ 86.576622][ T5333] ret_from_fork_asm+0x1a/0x30 [ 86.578960][ T5333] [ 86.578960][ T5333] -> #0 (&conn->lock#2){+.+.}-{4:4}: [ 86.582237][ T5333] validate_chain+0xb9b/0x2140 [ 86.584576][ T5333] __lock_acquire+0xab9/0xd20 [ 86.586805][ T5333] lock_acquire+0x120/0x360 [ 86.589092][ T5333] __mutex_lock+0x182/0xe80 [ 86.591362][ T5333] l2cap_info_timeout+0x60/0xa0 [ 86.593735][ T5333] process_scheduled_works+0xae1/0x17b0 [ 86.596424][ T5333] worker_thread+0x8a0/0xda0 [ 86.598704][ T5333] kthread+0x70e/0x8a0 [ 86.600859][ T5333] ret_from_fork+0x3fc/0x770 [ 86.603166][ T5333] ret_from_fork_asm+0x1a/0x30 [ 86.605498][ T5333] [ 86.605498][ T5333] other info that might help us debug this: [ 86.605498][ T5333] [ 86.609898][ T5333] Possible unsafe locking scenario: [ 86.609898][ T5333] [ 86.613085][ T5333] CPU0 CPU1 [ 86.615447][ T5333] ---- ---- [ 86.617600][ T5333] lock((work_completion)(&(&conn->info_timer)->work)); [ 86.620743][ T5333] lock(&conn->lock#2); [ 86.623752][ T5333] lock((work_completion)(&(&conn->info_timer)->work)); [ 86.628120][ T5333] lock(&conn->lock#2); [ 86.629954][ T5333] [ 86.629954][ T5333] *** DEADLOCK *** [ 86.629954][ T5333] [ 86.633454][ T5333] 2 locks held by kworker/0:4/5333: [ 86.635902][ T5333] #0: ffff88801a474d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 86.640997][ T5333] #1: ffffc9000d4b7bc0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 86.646128][ T5333] [ 86.646128][ T5333] stack backtrace: [ 86.648293][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: kworker/0:4 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 86.648303][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.648310][ T5333] Workqueue: events l2cap_info_timeout [ 86.648322][ T5333] Call Trace: [ 86.648327][ T5333] [ 86.648331][ T5333] dump_stack_lvl+0x189/0x250 [ 86.648342][ T5333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.648350][ T5333] ? __pfx__printk+0x10/0x10 [ 86.648360][ T5333] ? print_lock_name+0xde/0x100 [ 86.648369][ T5333] print_circular_bug+0x2ee/0x310 [ 86.648378][ T5333] check_noncircular+0x134/0x160 [ 86.648388][ T5333] validate_chain+0xb9b/0x2140 [ 86.648408][ T5333] ? ret_from_fork_asm+0x1a/0x30 [ 86.648422][ T5333] __lock_acquire+0xab9/0xd20 [ 86.648438][ T5333] ? l2cap_info_timeout+0x60/0xa0 [ 86.648448][ T5333] lock_acquire+0x120/0x360 [ 86.648457][ T5333] ? l2cap_info_timeout+0x60/0xa0 [ 86.648471][ T5333] __mutex_lock+0x182/0xe80 [ 86.648482][ T5333] ? l2cap_info_timeout+0x60/0xa0 [ 86.648493][ T5333] ? irqentry_exit+0x74/0x90 [ 86.648502][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.648517][ T5333] ? l2cap_info_timeout+0x60/0xa0 [ 86.648524][ T5333] ? __pfx___mutex_lock+0x10/0x10 [ 86.648533][ T5333] l2cap_info_timeout+0x60/0xa0 [ 86.648540][ T5333] ? process_scheduled_works+0x9ef/0x17b0 [ 86.648548][ T5333] process_scheduled_works+0xae1/0x17b0 [ 86.648559][ T5333] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.648569][ T5333] worker_thread+0x8a0/0xda0 [ 86.648581][ T5333] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.648592][ T5333] ? __kthread_parkme+0x7b/0x200 [ 86.648601][ T5333] kthread+0x70e/0x8a0 [ 86.648611][ T5333] ? __pfx_worker_thread+0x10/0x10 [ 86.648619][ T5333] ? __pfx_kthread+0x10/0x10 [ 86.648628][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.648637][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.648648][ T5333] ? __pfx_kthread+0x10/0x10 [ 86.648661][ T5333] ret_from_fork+0x3fc/0x770 [ 86.648673][ T5333] ? __pfx_ret_from_fork+0x10/0x10 [ 86.648683][ T5333] ? __pfx_kthread+0x10/0x10 [ 86.648705][ T5333] ret_from_fork_asm+0x1a/0x30 [ 86.648726][ T5333] [ 86.971093][ T5350] loop0: detected capacity change from 0 to 32768 [ 86.978992][ T5350] ======================================================= [ 86.978992][ T5350] WARNING: The mand mount option has been deprecated and [ 86.978992][ T5350] and is ignored by this kernel. Remove the mand [ 86.978992][ T5350] option from the mount to silence this warning. [ 86.978992][ T5350] ======================================================= [ 87.060428][ T5350] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 87.060459][ T5350] allowing incompatible features above 0.0: (unknown version) [ 87.060464][ T5350] features: atomic_nlink [ 87.081326][ T5350] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 87.084601][ T5350] bcachefs (loop0): initializing new filesystem [ 87.092523][ T5350] bcachefs (loop0): going read-write [ 87.095990][ T5350] bcachefs (loop0): marking superblocks [ 87.104130][ T5350] bcachefs (loop0): initializing freespace [ 87.108873][ T5350] bcachefs (loop0): done initializing freespace [ 87.113202][ T5350] bcachefs (loop0): reading snapshots table [ 87.115697][ T5350] bcachefs (loop0): reading snapshots done [ 87.123935][ T5350] bcachefs (loop0): done starting filesystem [ 87.155471][ T25] audit: type=1800 audit(1751880206.541:2): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=4098 res=0 errno=0 [ 87.216437][ T5350] tunl0: entered promiscuous mode [ 87.219869][ T5350] netlink: 'syz.0.0': attribute type 4 has an invalid length. [ 87.222970][ T5350] netlink: 9 bytes leftover after parsing attributes in process `syz.0.0'. [ 87.330213][ T5350] syz.0.0 (5350) used greatest stack depth: 16176 bytes left [ 88.488533][ T45] Bluetooth: hci0: command tx timeout [ 90.569151][ T5363] Bluetooth: hci0: command tx timeout [ 91.612646][ T54] cfg80211: failed to load regulatory.db [ 92.648517][ T5363] Bluetooth: hci0: command tx timeout