program:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
r1 = dup(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcd, 0x1, 0x0, 0x0, 0x0, 0xe56, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x7}, 0x10e1f0, 0x0, 0x1, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600))
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fedbdf250400000048000180140002007465616d5f736c6176655f31000000000800030001000020140051007663616e3000000000000000000000001400020069703667726574617030000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)={0x14, 0x39, 0x9, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000006180)={'syz0\x00', {0x9, 0x2a6, 0xcc, 0xfff8}, 0x3f, [0x5, 0x3c, 0x41, 0x4, 0xb4, 0xc, 0xffffffff, 0x69, 0x7, 0x4, 0xd, 0x40, 0x701, 0x4, 0xb, 0x200, 0x4, 0x8, 0x8, 0x7, 0x9, 0x2, 0x6, 0x4, 0x6, 0x5bb08dfe, 0x6dc, 0x73570, 0xb, 0x5, 0x5, 0x3, 0x0, 0xd90, 0xf21, 0x1, 0x9, 0x3, 0x8, 0x3, 0x5, 0xffffffc0, 0x1, 0x3, 0xf72d, 0x3, 0x2, 0x0, 0xfffffffc, 0xca2, 0x8, 0x4, 0x1, 0x9, 0x8001, 0xd9, 0xb89, 0x101, 0x4, 0x4, 0x2, 0x800, 0x1f, 0xfffffff8], [0x2, 0x4, 0x9, 0x5, 0x1, 0xffff0000, 0xa, 0xf74, 0x6, 0x2, 0x8000, 0x6, 0x0, 0x10000, 0x40, 0x4, 0x1, 0x6, 0x40, 0xfffffff5, 0x4, 0x7, 0x8, 0x7, 0xfffffffb, 0x9, 0x80000000, 0x51, 0x6, 0x1800, 0x6, 0x200, 0x38a, 0x6, 0xffffffff, 0x28, 0x800, 0x8, 0x6000, 0x1, 0x80000001, 0x8, 0x6, 0x81, 0xf22, 0x401, 0xb, 0xfffffffb, 0x6, 0x4, 0x3, 0x6, 0x6bef, 0x994, 0x5, 0x5, 0x1, 0x1, 0x8, 0x0, 0x2, 0x8, 0xfffffffe, 0x4], [0x4, 0x200, 0x4, 0x794eca80, 0xf263, 0x32efdc33, 0x4, 0xdcac, 0x0, 0x4, 0x568, 0x4, 0xd, 0xd, 0x10, 0x2, 0x0, 0xb, 0x0, 0x3, 0x4, 0x9, 0x9, 0x4, 0xb000, 0x8, 0x140000, 0x9, 0x40, 0x1, 0x9, 0x3, 0x6, 0x5, 0x0, 0x4, 0x9, 0x1, 0x0, 0x10000, 0x72ccd868, 0x7, 0x3, 0x3, 0x1, 0x3, 0xee9, 0x38de3005, 0x8, 0x3, 0x1000, 0x72b7, 0x0, 0x7, 0x0, 0x4, 0x65db, 0x6, 0x6, 0x7, 0xfffffff9, 0x101, 0x2, 0x45d], [0xb94, 0x5, 0x67d, 0x3, 0x1000, 0xfffffffd, 0x1, 0x8, 0x9, 0x9ac, 0x1000, 0x173, 0x7, 0xbf9, 0x35c, 0x94d, 0xc, 0xffff, 0x2, 0x1, 0x5, 0x8, 0x84e0, 0x5, 0x1398, 0xce, 0x7, 0xa, 0x6, 0x3, 0x0, 0x9, 0x0, 0x5, 0x1, 0x438a, 0x1, 0x1, 0x2, 0x8000001, 0xffff992a, 0x4, 0x0, 0x4, 0x4, 0x94, 0x0, 0xe, 0x6, 0x9, 0x9, 0x985, 0x2, 0x9, 0xff, 0xffffffff, 0xf, 0x3ff, 0xb, 0x21, 0x10, 0xa, 0x4, 0x7]}, 0x45c)
write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x72, 0xffff, 0xe, 0xadc6}, 0x31, [0xe5ea, 0x0, 0x3, 0x9b, 0x5, 0x1, 0x1, 0x8, 0x4, 0x400, 0x1, 0x5, 0x0, 0xffffffff, 0x6, 0x1a68, 0x0, 0x3, 0x0, 0x9, 0x78a, 0x7, 0xd0022e0e, 0x5, 0x1, 0xff, 0x2, 0x3, 0x2, 0x8f1, 0x7, 0x6, 0x6, 0x3, 0x3, 0xfffff459, 0xb7c, 0xfffffffc, 0x8, 0x4, 0x81, 0xfffffff7, 0x400, 0x2, 0x4, 0x3, 0x2, 0x600, 0x2, 0x4974, 0x2, 0x400, 0x9, 0xe4, 0x6d, 0x0, 0x49, 0x3ff, 0x4, 0x814, 0x80000000, 0x81, 0x7], [0xa, 0x6, 0x9, 0x1, 0x5, 0x4, 0x4, 0x200, 0xff, 0x1, 0x0, 0x10, 0x8, 0xfffffff9, 0x2, 0x1, 0x98, 0x200, 0x5, 0x6, 0x23d90e76, 0x7, 0x32d, 0x6, 0x8, 0x400, 0x200000, 0x0, 0x4, 0x8000, 0x0, 0x1, 0x5, 0x1, 0x2, 0xb6d, 0x2, 0x2, 0x3, 0x5, 0x7, 0xdab, 0x200, 0x4, 0x4, 0x108, 0xd, 0x8, 0x4, 0xffffffff, 0x6, 0xdc, 0xffffffff, 0x20000007, 0x73, 0x6, 0x7, 0x6, 0xffff, 0x2, 0x7ff, 0x8, 0x9, 0x7], [0x4, 0xfff, 0x4cd5, 0x0, 0x2, 0x81, 0x1, 0x1, 0x80000001, 0xf84d, 0x3, 0x94, 0x9, 0x81, 0x5, 0x8, 0x6a, 0x6, 0x251e, 0x7, 0x8, 0x32, 0x6, 0x1, 0x101, 0x6, 0x80, 0x100, 0x7fff, 0x7, 0x8, 0x1, 0x65d5a3c4, 0x6, 0x7, 0x5, 0x100, 0xbd, 0x1, 0x3ef1, 0x8, 0x4, 0xfffffbd7, 0x6, 0xf4f6, 0x6, 0x10000, 0x0, 0x6, 0xa, 0x8001, 0xc0b2a05, 0x7f, 0x5aed, 0x3, 0x6, 0x8, 0x4, 0x0, 0x6, 0x2, 0x4, 0x400, 0x80000001], [0x7f, 0x0, 0x0, 0x5, 0x35b, 0x40, 0x1, 0x9, 0x0, 0x200, 0x9, 0x90e8, 0x6, 0x43cd, 0x3, 0xdc57, 0x8, 0x3, 0x8, 0xe89, 0x200, 0xa911, 0xfffffe00, 0x1, 0xd72a, 0x5, 0xa, 0x8001, 0x40, 0x1, 0x3, 0x7fff, 0x400, 0xbc6, 0x8, 0x2, 0x8, 0x3, 0x8000, 0x6, 0x7f, 0xfffffff5, 0x6d58aa97, 0x1000, 0x1ff, 0x1, 0x5, 0x400, 0x0, 0xffffffff, 0x5, 0x200, 0x2, 0x6800000, 0xbc5, 0x2, 0x7, 0x9, 0x3, 0x5, 0x6, 0x9, 0x5, 0x100]}, 0x45c)
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000006040)=ANY=[@ANYBLOB="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"], 0x1, 0x5987, &(0x7f0000000680)="$eJzs3W2QXFXdIPBzu3syb3mZBJAIMhkCKIKaCW+FL6XR9a0AqVhYSlgUBjLBaBJSSRAIKMEFFwqw0NJS1A9oIbVotKiCVSIlgmxgFaVYXWoLqZVd9INbyJISyEP5+DhP9cw9Pd13+s7t6ekJCfn9Kpnb5/Tt/zn33tO37/90z3QAAADgoPDI9Vv3nn3EB379xdGXr/nwzzZeG/rL4/U9cYWBdHnFq9VD9qXuytLxZXZcvOmqH/x56OL3/eruvu+/snvt0ev+8P5DLr7/M2fsuu3bD7204N5/PlsUN46nEybLyfNJCD0/3/P1L+1+7PBqXXXklZOBHSEsTpY8tDjJhBj+ewhhba2fjXfe8/LJ66rLa2/qbqhflAlivB/cqse5OrC27738xPDH96657rfLfvyjrp3P7ZhcJempG08hLLyw/vFdIYTe9H9VHG1L44PT5eoQQl/d404v6NcxLfZ/RU75yHQ5L132F8SJ9y/PlEuZ9bLlqCuz7Ctob7by+tHuekXmZ8rZk9Fs5fUz1i9Olz9NlyfMMH65dj4NpSRUat3fkEyOkVB33JKQjB/Lnlq5VDu2Id3+TDnJlEuZcrkrs13j7aYDrZwkjfVxvUx9PB1X0vqj68/VTZyTU//6dNmTPlFfieWQvTGhf8qN2naNi/3aM01f9oVS3TmoWX3twKcHoz+9rz9ZMuUxY03E+3avubl3un4kdydp/GS8zZnG3/6bxfM/9cMbL1uaF//CUhr/X8faif/MmY+/cN6N3/tWbvxbY/xyW/0/6YG+5898+PrlA3nx98T9U2kr/sizj96y7NCLdub2//YYv6et+Kt2Pd69YO8DD+aED8lw3D+9bcV/+p0f/NNdT973XO7+CTF+X1vxz9+1+cvdg3uPz43/YNw//W3Ff+bFnac9NTj4l6G8+E/E+Avain/njtvecceim87IPb6r4/4ZaCv+Wcfef938vfcdlXfuTG7v1CsnwMHpkPQa64a03G6eOVt1+cI3hyoT14Hz0/8LOtlQ5uKz2s7C6o2xZlelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCew0787x/6vx8feL6SlrvTG0+XJpaxfl4ISW8IYeu2kS3b1m+6ZOgzl162ZdPIhqGRbUOjm7ZtuXLolLcMbRndvGHkyuq9w289OYTQFcKSkIw/fkly1JS2u8fGxkoDjXWxvf9w7M4/Hnf6//trCMOH/X6wktv/FbdtvOPQJj8zklVj79l42dm/P/W76XYNpP0aaNKvsbGxsZDTr/9/7j/u+OqePx8fwvDrpuvXo0+/+xcNHRqvmIyTKnWHiQ51J31N+1HrddqfuL8q69ZvGB2efv9WH1/O2Y7/eNVzf193xVf+MbF/e3K3o8X927tqbEPpG2vO+rdvXD1RUdSvV+u4F+3vuBWxf3H/9aT7e2G6XQtztquSs13X//bBJ39+xI0v7QjDlReXTW27aLu60gHQlby+pXZjC33J4ob6nnT9eMTj41Zs27h5xdYrt791/caRS0YvGd309pWnrDxt+NTTTl0xvuUrOrz9sf03trj9+2Y8Lfrcjp/Gn62Np6J+Fe2Par+K90d9j/Kef33nfOlrb7/t4bMnKorGeVy7dj5Jl33V47wy1I23qfuq2XYV7YcQwlCz/fDCS2eEw//X+uuKzkP1R6b+Z0ayauyx5X/77unfWfquiYp9cp6v71Cb5/laryf7M76/etLjMbaf7t/uUE63q79pv1Y+9nDXzY/89fO1/s2bF64Y2bZty8qJn/PTns5Pjmzar2xt3K5l4z/LId0toTZMm4zXMH4pMtG/7Pkzrp7dq/3pff3JkqbblRXv273m5uPK5//ykbw9ndw90WJvWDCxTN6Qs+aGzAPLtQ43a39/ff4VjY/BD33n3o/f+5NTpoyPkyZ+Fm1XkrNdP37yzq99/yv/+Scz2a55aV3z7frQux8f+Nv//vRxExUHynml1uu0P0n9eeWkEIqef8tC8+3Iff6Vmm9P0fMv287k+s3jDWXK/aHc1vP1pAf6nj/z4euX5z5f97T6fL26oVQueL7uL+Mn+/xKKo396OTzq/G80TBQklVjv7rhkB0PXbP6iImKonFdW7vZuD65hfwjZ7t+cd5Tg5cO/af/2bnz4Q/ecs8FfxhZ9YWJivaPe+xLZ457T7p/e3L2b63XMe+s379vu/jSDWsn6vff6990WZD/xFPJ1iu3f3Zkw4bRLVtb265WX09jO9m93O7raTy7LSnYrtKU7Zq7G63sr1afb7H/a9veX43Pt/6QtPW6sP03i+d/6oc3XjYw5VFpQxeW0viltuI/c+bjL5x34/e+lRv/1hi/0lb8kWcfvWXZoRftzI1/e5LG72kr/qpdj3cv2PvAg7nxh2P/e9uK//Q7P/inu56877nc+CHG729v/7+487SnBgf/khv/iSRtp3qNFMI9L5+8bqKchK70+Rb70dXQr5AtJ5lyKVMu15dLE3OttQbKSdJYH9dL64+u60szn8ipj1dhPUsnlq/EcsjemL5+f1OqO/c3qy+6TgUAeK2L7//Ha9D4/v9oeqGUP9MAk2abhy3NiRvzsMn5nHkN9y9N48fHx3nAwbeF4ery2qGJC/2Zvo8Qnw/Zec7YzvHHNMZod56zaP59eaYc+zUxX16py0NTU/OaSmhh/n1qO9PPv2c2v3h+fOiGKd0aqpu3yh6/rnTGrNnnHTL9rVQj5I2P7LxY/DzH4MKwery9FsdH9nM08ThkP0cT2zkic+Js93M0sx0fsdvTjI/xLhe/vzH1+IVp9u/k8WseLXv8ZnC8e6rrz/X7sx2YN2x6Stt384Zz+36Yecmc+OkTbH+fN4z1cTsqLc4nfjynvlPzifF0Efu1Z5q+7AvmE4HXqpj/x9eIav5fvQD/l8x6Rdeh2avGGC/3c0Ll5v0pyjumfk6vr63X8fN3bf5y9+De43Ovcx5s9XM/mxtKfQWf+ynaj8dlyoX7MWeCpijfy7ZTtN+zn8voDwva2u937rjtHXcsuumM3P2+euKFtHi/f62htKBgvx8A+ULz+PKFgyJfmOv5s1ctH0k/+DRX+cjHcupnmo/0TblR265xB1w+0rVv+wUAHDhi/l97/yzN//9PXCG9jijKW0/IlGO83Lw15/okL2/9SLq8IrN+f/obFTO9bj7r2Puvm7/3vqNy85bbW81D/0tDaaAwD83Lm3unrN/bJG/OzSNWd+bz4rl5RC3Pml2emNv/Wp44uzw9N34tT2+SR5eL48c8Onf/1PLo2c0D5MavzQMc6HluwXxdprFYbHW+7jWbR6e/PjtXefQ5OfUzzaP7p9yobdc4eTQAwKsr5v/xMi7m/w9n1pvt++y5eUGHrtuzfw+kFv+JfZVXznXeN7v3f4vz1rnO6+d6XuJAz4tn93mK4nmhuZ0nO+jz4rTRxrx4sifyYgAA9gcx/+9Ny/n5/+zyk2b5W1dDfiI/bxr/IM3P46+H7D/5+YE+/7Vf5/8fCAd6/h/LIXtjQvv5/779CyzyfwCA17aY/8dfe4x//++/peXs362Xp+fEP0jz9HifPL1TeXrn59nC7D8HEP+6kc8BZLQ0D9A7ub7PAQAA8GroGs+Upv6e/SfTZfb37PN+L/+8nPVbVUkvjy/atmV09ILLNq8d2TZ6waZL145uveDyLeu3bRvdNLHebPPG3LwlTW26QiXdH83Xy+Zti9L35Rbl/D2E7Pox7JHjN6b+PYRss70Ff0dg8vi11t+841eaZv1m4yPveOfF/0TO+lHt+F/86ZMuWLf1gvWb1m9bP7Jh/fbRxvWqWWvfDL43M+6WGX1f6qNP76gOmfFb49+amVGa+fd3ttmPhh9T/rhwqbq/k9zjX+1HkunH4rQni/O+/yCn37/+H1/93LFj/7grhOHDym+Yab8bQ64a+6/njn5k2yO/31ztf2na/tfWTPtV9H2l2fXj9lQ2XLp124nrLr1sU/YbJdsT5zNKtfIczWekT/9yi/MT5+fUz/RzCuUpN/ZPLc9PAADQIL7/H69n4/uHX0kvoGJ963n67N4/zs3Th1vL07PfS1aUp2fXj9vbap7eM8s8Pdt+UZ7ebP1meXpe3p0X/2M5689U6+Nkdp/zyB0nF7Y2TrLfZ1A0TrLrz3ScJLMcJ9n2i8ZJs/WbjZO8454X/6M56+dpfTzM7nM5uePh1tbGw5sz5aLxkF1/puOhNMvxkG2/aDw0W7/ZeMg7vnnxz85Zv1WN46M6MMbHxegFl1+65bN1683191/Mvn9z+/0f7Wq9/3P7ua+57//cfq5s7vs/u8+V5fb/idnNhLXe/7n9fpd27bP52vTDZkWfPyuax12TUz/Tedx5U27sn8zjwqsn5v/x7Z6Y/9+ULjv9NtCB/z1pvsesafwOfY9Z0XWM1/NpGtsPeD0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaE13Zen48pHrt+49+4gP/PqLoy9f8+Gfbbz2TVf94M9DF7/vV3f3ff+V3WuPXveH9x9y8f2fOWPXbd9+6KUF9/7z2cLAA+M/KyekxZ4QkueTEHp+vufrX9r92OHVuiSEUE4GdoSwOFny0OIkE2H47yGEtbV+Nt55z8snr6sur72pu6F+USZIdrtCfzn2p76fIVxRuEUcgHrScbZ97+Unhj++d811v1324x917Xxux+QqSU/deAph4YX1j+8KIfSm/6viaFsaH5wuV4cQ+uoed3pBv45psf8rcspHpst56bK/IE68f3mmXMqsly1HXZllX0F7s5XXj3bXKzI/U86ejGYrr5+xfnG6/Gm6PGGG8cvxfxJKSajUur8hmRwjoe64JSEZP5Y9tXKpdmxDuv2ZcpIplzLlcldmu8bbTQdaOUka6+N6mfp4Oq6k9UfXn6ubOCen/vXpsid9or4SyyF7Y0L/lBu17RoX+7Vnmr7sC6W6c1Cz+tqBTw9Gf1rXnyyZ8pixJuJ9u9fcfFz5/F8+MpDTj+TuJI2ftBV/+28Wz//UD2+8bGle/AtLafxSW/GfOfPxF8678Xvfyo1/a4xfbiv+SQ/0PX/mw9cvz90/e+L+qbQVf+TZR29ZduhFO3P7f3uM39NW/FW7Hu9esPeBB3P7Pxz3T29b8Z9+5wf/dNeT9z2XGz/E+H1txT9/1+Yvdw/uPT43/oNx//S3N35e3HnaU4ODfxnKi/9EjL+g5fhf752Mf+eO295xx6Kbzsg9vqvj/hloq/9nHXv/dfP33ndU3rkzub1Tr5wAB6dD0musG9Jyu3nmbNXlC98cqkxc881P/y/oZEMZ1XYWzmF8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABem3539SmfPPc9H11TSUJIctYZayLeV563atVQG+2OPPvoLcsOvWhnfd3SNuIAAAAAxWIeXqrV9ISl4fKkNxzZdP04R3BkLCWN9dk5hBgnO0fQbpxSh+KUOxSn0qE4XR2KM69Dcbo7FKenIE5PaC1O7zRxKtVR0WJ/+qbtT+tx+jsUZ36H4izoUJyFHYqzqENxBqaN0/o4XNyhOEs6FOeQDsU5tENxDutQnNd1KM7hHYqTnVOe6ThckK55RF6c8RvlwjiVpFy7o9l8+uFpO0fNsp3+gnYWFL0et9hOb4vtHJN5XGmG7fS02M4bZ9lO0mI7b55lO6WCduK4vSLbv9hOLLU4/q/sUJztHYpzVYfiXN2hOJ/vUJwvdCjONbOMA9CqmP9P5nsDobvyrtCXnnGyswAx3102/nPq613eCSnGe0Omfl5RvGyinom3bKb9y04gZOItz9R3NcSr1PKRaeL11Mc7LnNn4fZmJxQy/TshU99dFC87sQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc+h3V5/yyXPf89E1IQnVf02NNRHvK89btWqojXZ3r7n5uPL5v3ykvq67krt6TxtNAAAAAKmYh3fVanpCd2Vl6E7mNazXk84DxES8PDCxHFwYVleXyVBpvNyXLJ72cZX0cSu2bdy8YuuV29+6fuPIJaOXjG56+8pTVp42fOppp65Yt37D6PDEzxC6m8VbNFleFcL49MPWK7d/dmTDhtEtWyfqs/1fmvZjaVpO0scNvi0MV5fXpv1fUtD/0pT25u5GCOGa4iMIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/86u3cXIVZZxAH/PzOzMsFBZw9fQ0O2kH6Qq0bYupihhT2IiCbRNNyRmBl1JI20kbmkDLak4QhMB2/iRQJo0Nb2wphJB4g0fQox8pEkNok3c2hggyoVeaEAxhfRCS8Z0d858dU5nHRpa6u93MefM+z7v+5x3Lpr8TxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4IMzXRubrIxPVIejEKKUmnoPyVw2H8flAfp++bktPyiMHl/WPlbIDbARAAAA0FeSw4eaI8VQyGVDNlw5821RaJsIrdwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8/5mujU1WxieqF0YhRCk19R6SuWw+jssD9H3jnSc+8+ro6N/ax0oD7AMAAAD0l+TwTHOkGEphcRiKruyoS94NzO9a312X7LNgjnXd7w7S6hbPse7qOdZ9rE/d2sZ1ewAAAIAPvyT/55ojI6GQm5ea//vl+iiE+OR1YVddtnEd5G8FAAAAgPcnyf+F5kgpFHKlZl6fQ96fsairLlnf7//tk/VLU9b3+//8NY2r/6cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA+P6drYZGV8opqNQohSaur1eqZ1OyuZy+bjuDxA35XPD//j5oMPLmofK+QG2AgAAADoK8nhrehdDIXccBgKF86E/dEb9z31xaeeGQshzMb8fD5sX791610rZz+TuhWvHBz63qG3vnVK3YrZz7N2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4IyZro1NVsYnqhdEIUQpNfUekrlsPo7LA/R9/XNf+MtjR599s32sNMA+AAAAQH9JDm9l/2IohXzIh8tnvrVn/ZMyXevT3hkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA54+7v3Hv19dPTW24y40bN2fmphhCOAce4/3dnO1/mQAAgDNtYYhC/X90xbqz/dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC5YLo2NlkZn6gWoxCilJp6D8lcNh/H5QH6xs8dLsw7/vyL7WOlAfYBAAAA+ktyeCv7F0MpDIWhcNnMt17vBGby/8gH+JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAOWW6NjZZGZ+ozotCiFJq6j0kc9l8HJdTdy+mzjy6Y+9nD1z83Zvaxwq5gY4AAAAA9JHk8HxzpBgKuY+HQriq8X2qc0GUbVx7vxdordvSsWx4zutqHeuyc163s+tkucZpZtclbyKyI7PX5rryqevKbetKodm+3LEu7O5YNa/PcwYAAAA4i5L8X2iOjIRCrtCWc3/aUT8i5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKaZrY5OV8YlqFIUQpdTUe0jmsvk4Lg/Q997ffvSir/xs17b2sdIA+wAAAAD9JTm8lf2LoRQWhI+EBTO5P4x01id1/6ycOPDIv/66LITllx8ZzXVv+6Pk5tev3/BC90cImc7qTAgXN/pFKf1+8/tH7llSP/FYCMsvy151Sr9w+n6dW8b1pysb1mw9dGRLnx8HAAAAzhNJ/h9qjoyEQu7O1PyfJO8++b9pJoBffM+OX1za+Gwk8q4VmZFGv0xKv88veeLPS1f9/a2T+f90/T61d9OBSzsazo50ieL6+KZta49cuz+TnHq2f7arf/K7fOmbb/574/aHT8z2L4ZiY3x+rlf/zp49+l8Q16cye6qr39tT6+yfSzn/g7978eiv5u9692T/dxYON/tffZrz93qWVv/hWx7afd3eg2s7+4cQyr36v/3uTeGKP97xQPf5h7s2bv/l2z+7RPF/6ouO7V+1r3R9Z/+oq3/y+//86KO7f/Lwd55J+id/K7Js8Vz7Zzr711/eecmOl+5fN7+zfybl/C/c+uro5vK3/9B9/ts7ds2lPsUp568/fs2Tt722Pr6vewoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD8Ml0bm6yMT1QzUQhRSk29h2Qum4/j8gB937j58Nu37vrxD9vHSgPsAwAAAPSX5PBW9i+GUsiHfBieyf1PVzas2XroyJYwMjsbNa65qc13b/3Exs3b7rz9LD05AAAAMFdJ/s81R0ZCIbckDDXy//imbWuPXLs/k+T/TJL/N94xtWF5aNa9vPOSHS/dv25+8z1BCDN/FlA8WffpVt2NNxweOfanry3tWbeyVffKomP7V+0rXZ/Uhfa6FaH5fuLxa5687bX18X3N52uv++RXN081Xk8k+w7f8tDu6/YeXNs8R+M63Ng3qZvK7Kmufm9PLanLNq7FxrkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIbvt26na2OTlfGJasiGEKWU13tI5rL5OC4P8Airl/zygYuOP7ugfayQG2AjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2K+/EKmqOA7g58zstuPOru5q0Fa0rlYU9pAURNRLRUVohNCTIWFpPkRBEFHYQ2toJFb0EmS9SFRQbSEU5CaJFmv0T3rpoYIC6yEQaaHcpIc2dubccfY6t6mrBeXnA8PZ35l7v/d37z1zZwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+E/p6xlpjAe3PThz23k3ffL4Pcceu+W9+7dc8ujrP4xtuOHj3f2vHJ/auGzT1zcu2bD33lWTO1888MvgO78f7hr8SHNYkcpaCPFoDKH2/vRzT0x9es7cXAwhVOPQeAjDcfGB4ZhLWPlbCGFjq8/5b7597MpNc+OWHX3z5hflQvLnFerVrJ+mofn98v9SS+ts88zDl4Vvr1+79fOlb73ZO3Fk/MQmsda2nkJYuL59/94QwoL0mpOttpFs5zSuCSH0t+13dZe+LvyL/V9eUJ+fxrPSWO+Sk72/PFdXctvl60xvbmye66+zs7NdDlxSUR9lt+tmIFfnH0anqqjPbH44je+mccXfzK9mrxgqMfS02r8vnlgjoW2NxhAb97LWqiutexvS+efqmKsrubramzuvxnHTQqvGOH8+2y43nz2Oe9L8svZndQe3F8yfm8Za+qAez+qQ/6OpftIfrfNqyPqa/pNe/g2VtmdQp/nWjU83o57m6nHxSfvMdpC9N7X2qYur6z44OFTQR9wdU34slb/5s+GBO9/Y/tBIUf76SsqvlMr/bvWhn+7Y/tILhfnPZvnVUvlX7Os/uvrDbcsLr890dn16SuXfdfijp5eeffdEp3vdyN+V5ddK5V83eahvcGbf/sL+V2bXZ0Gp/G+uvfn7177cc6QwP2T5/aXy100+8Ezf6Mylhfn7mx+FemOFllg/P09c9dXo6I9jRflfZNd/sEN+7Jr/6vjOa15etGNV4fpck12foVL933rR3q0DM3suKHp2xl2n65sT4My0JP2P9WSqy/7OPFVtvxeeH+tpfgMNpNfg6TxQztxxFv6D+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAHO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVAAD//+8JFow=")
getpid()
[ 75.515520][ T5299] Bluetooth: hci0: command tx timeout
[ 75.930552][ T5319] loop0: detected capacity change from 0 to 32768
[ 76.177854][ T5319] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=ask,norecovery,recovery_pass_last=reconstruct_snapshots,noexcl
[ 76.177873][ T5319] allowing incompatible features above 0.0: (unknown version)
[ 76.177880][ T5319] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 76.198620][ T5319] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 76.203096][ T5319] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 76.207784][ T5319] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[ 76.207784][ T5319] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 76.220113][ T5319] bcachefs (loop0): invalid btree id 251 (max 63), fix?
[ 76.288258][ T5319] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0:
[ 76.288284][ T5319] mode=100755
[ 76.288289][ T5319] flags=(15300000)
[ 76.288295][ T5319] journal_seq=5
[ 76.288300][ T5319] hash_seed=fc917866faeb7b5b
[ 76.288305][ T5319] hash_type=siphash
[ 76.288311][ T5319] bi_size=1050
[ 76.288315][ T5319] bi_sectors=8
[ 76.288322][ T5319] bi_version=0
[ 76.288328][ T5319] bi_atime=2770562249
[ 76.288333][ T5319] bi_ctime=2770562249
[ 76.288338][ T5319] bi_mtime=0
[ 76.288342][ T5319] bi_otime=0
[ 76.288346][ T5319] bi_uid=0
[ 76.288351][ T5319] bi_gid=0
[ 76.288356][ T5319] bi_nlink=0
[ 76.288360][ T5319] bi_generation=0
[ 76.288365][ T5319] bi_dev=10523
[ 76.288370][ T5319] bi_data_checksum=10
[ 76.288374][ T5319] bi_compression=0
[ 76.288378][ T5319] bi_project=0
[ 76.288383][ T5319] bi_background_compression=0
[ 76.288388][ T5319] bi_data_replicas=0
[ 76.288393][ T5319] bi_promote_target=0
[ 76.288398][ T5319] bi_foreground_target=0
[ 76.288403][ T5319] bi_background_target=0
[ 76.288407][ T5319] bi_erasure_code=0
[ 76.288412][ T5319] bi_fields_set=0
[ 76.288417][ T5319] bi_dir=0
[ 76.288422][ T5319] bi_dir_offset=0
[ 76.288427][ T5319] bi_subvol=0
[ 76.288431][ T5319] bi_parent_subvol=0
[ 76.288436][ T5319] bi_nocow=0
[ 76.288440][ T5319] bi_depth=0
[ 76.288445][ T5319] bi_inodes_32bit=0
[ 76.288450][ T5319] bi_casefold=0
[ 76.288454][ T5319] invalid data checksum type (10 >= 5, deleting
[ 76.375843][ T5319] bcachefs (loop0): error validating btree node at btree xattrs level 0/0
[ 76.375869][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0
[ 76.375874][ T5319] loop0 node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647, btree topology error: running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 76.400306][ T5319] bcachefs (loop0): btree node read error at btree xattrs level 0/0
[ 76.400321][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0
[ 76.400330][ T5319] flagging btree xattrs lost data
[ 76.400335][ T5319] running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 76.400341][ T5319] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 76.400348][ T5319] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 76.400358][ T5319] ret btree_node_read_validate_error
[ 76.436118][ T5319] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing
[ 76.443119][ T5319] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0
[ 76.443134][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 76.443142][ T5319] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[ 76.471532][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.471603][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.486695][ T5319] bcachefs (loop0): invalid bkey in btree_node btree=freespace level=0: u64s 5 type set 0:31:0 len 1073741825 ver 0
[ 76.486709][ T5319] size greater than offset (1073741825 > 31), deleting
[ 76.496648][ T5319] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[ 76.502127][ T5319] bcachefs (loop0): error validating btree node at btree backpointers level 0/0
[ 76.502140][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 76.502149][ T5319] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295
[ 76.502157][ T5319] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0, btree topology error:
[ 76.525107][ T5319] bcachefs (loop0): btree node read error at btree backpointers level 0/0
[ 76.525120][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 76.525127][ T5319] flagging btree backpointers lost data
[ 76.525134][ T5319] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0)
[ 76.525140][ T5319] ret btree_node_read_validate_error
[ 76.555485][ T5319] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[ 76.568783][ T5319] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree deleted_inodes level 0/0
[ 76.568811][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0
[ 76.568819][ T5319] loop0 node offset 0/8 bset u64s 0: checksum error, type none: got should be , fix?
[ 76.587397][ T5319] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree deleted_inodes level 0/0
[ 76.587412][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0
[ 76.587421][ T5319] loop0 node offset 0/8 bset u64s 0: checksum error, type none: got should be , fix?
[ 76.587435][ T5319] Unable to continue, halting
[ 76.612840][ T5319] bcachefs (loop0): btree node read error at btree deleted_inodes level 0/0
[ 76.612857][ T5319] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0
[ 76.612865][ T5319] flagging btree deleted_inodes lost data
[ 76.612871][ T5319] ret fsck_errors_not_fixed
[ 76.638225][ T5319] bcachefs (loop0): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing
[ 76.643548][ T5319] ------------[ cut here ]------------
[ 76.647479][ T5319] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:212:18
[ 76.650986][ T5319] shift exponent 251 is too large for 64-bit type 'unsigned long long'
[ 76.656127][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full)
[ 76.656139][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.656146][ T5319] Call Trace:
[ 76.656150][ T5319]
[ 76.656156][ T5319] dump_stack_lvl+0x189/0x250
[ 76.656262][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.656278][ T5319] ? __pfx__printk+0x10/0x10
[ 76.656297][ T5319] ubsan_epilogue+0xa/0x40
[ 76.656309][ T5319] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 76.656375][ T5319] __bch2_btree_node_hash_insert+0x184d/0x1ab0
[ 76.656400][ T5319] ? __bch2_btree_node_hash_insert+0x200/0x1ab0
[ 76.656420][ T5319] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 76.656443][ T5319] bch2_btree_node_hash_insert+0x7e/0xc0
[ 76.656460][ T5319] bch2_btree_root_read+0x59e/0x760
[ 76.656477][ T5319] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 76.656500][ T5319] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 76.656515][ T5319] read_btree_roots+0x2c6/0x840
[ 76.656537][ T5319] ? __pfx_read_btree_roots+0x10/0x10
[ 76.656563][ T5319] bch2_fs_recovery+0x261f/0x3a50
[ 76.656577][ T5319] ? check_noncircular+0xe0/0x160
[ 76.656599][ T5319] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 76.656627][ T5319] ? __lock_acquire+0xab9/0xd20
[ 76.656653][ T5319] ? __lock_acquire+0xab9/0xd20
[ 76.656674][ T5319] ? __lock_acquire+0xab9/0xd20
[ 76.656704][ T5319] ? bch2_fs_start+0x9fe/0xd90
[ 76.656716][ T5319] ? up_write+0x1c4/0x420
[ 76.656725][ T5319] ? bch2_fs_start+0x5c4/0xd90
[ 76.656738][ T5319] bch2_fs_start+0xa99/0xd90
[ 76.656749][ T5319] ? bch2_fs_start+0x5c4/0xd90
[ 76.656763][ T5319] ? __pfx_bch2_fs_start+0x10/0x10
[ 76.656783][ T5319] ? sget+0x267/0x620
[ 76.656796][ T5319] bch2_fs_get_tree+0xafc/0x14f0
[ 76.656826][ T5319] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 76.656858][ T5319] ? aa_get_newest_label+0xf7/0x5d0
[ 76.656873][ T5319] ? vfs_parse_monolithic_sep+0x2df/0x310
[ 76.656894][ T5319] ? apparmor_capable+0x137/0x1b0
[ 76.656914][ T5319] vfs_get_tree+0x92/0x2b0
[ 76.656927][ T5319] do_new_mount+0x24a/0xa40
[ 76.656944][ T5319] __se_sys_mount+0x317/0x410
[ 76.656960][ T5319] ? __pfx___se_sys_mount+0x10/0x10
[ 76.656977][ T5319] ? do_syscall_64+0xbe/0x3b0
[ 76.657040][ T5319] ? __x64_sys_mount+0x20/0xc0
[ 76.657054][ T5319] do_syscall_64+0xfa/0x3b0
[ 76.657070][ T5319] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.657084][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.657094][ T5319] ? clear_bhb_loop+0x60/0xb0
[ 76.657109][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.657119][ T5319] RIP: 0033:0x7fe9cab900ca
[ 76.657132][ T5319] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.657140][ T5319] RSP: 002b:00007fe9cb95fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 76.657152][ T5319] RAX: ffffffffffffffda RBX: 00007fe9cb95fef0 RCX: 00007fe9cab900ca
[ 76.657159][ T5319] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007fe9cb95feb0
[ 76.657166][ T5319] RBP: 0000200000000180 R08: 00007fe9cb95fef0 R09: 0000000000000000
[ 76.657173][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000540
[ 76.657180][ T5319] R13: 00007fe9cb95feb0 R14: 0000000000005987 R15: 0000200000006040
[ 76.657200][ T5319]
[ 76.657205][ T5319] ---[ end trace ]---
[ 76.848515][ T5319] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 76.851862][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full)
[ 76.857087][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.861752][ T5319] Call Trace:
[ 76.863297][ T5319]
[ 76.864630][ T5319] dump_stack_lvl+0x99/0x250
[ 76.866748][ T5319] ? __asan_memcpy+0x40/0x70
[ 76.869255][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.871661][ T5319] ? __pfx__printk+0x10/0x10
[ 76.873791][ T5319] panic+0x2db/0x790
[ 76.875707][ T5319] ? __pfx_panic+0x10/0x10
[ 76.877701][ T5319] ? _printk+0xcf/0x120
[ 76.879603][ T5319] ? __pfx__printk+0x10/0x10
[ 76.881685][ T5319] check_panic_on_warn+0x89/0xb0
[ 76.883858][ T5319] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 76.886667][ T5319] __bch2_btree_node_hash_insert+0x184d/0x1ab0
[ 76.889498][ T5319] ? __bch2_btree_node_hash_insert+0x200/0x1ab0
[ 76.892508][ T5319] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 76.895691][ T5319] bch2_btree_node_hash_insert+0x7e/0xc0
[ 76.898288][ T5319] bch2_btree_root_read+0x59e/0x760
[ 76.900643][ T5319] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 76.903144][ T5319] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 76.905722][ T5319] read_btree_roots+0x2c6/0x840
[ 76.907820][ T5319] ? __pfx_read_btree_roots+0x10/0x10
[ 76.910094][ T5319] bch2_fs_recovery+0x261f/0x3a50
[ 76.912155][ T5319] ? check_noncircular+0xe0/0x160
[ 76.914264][ T5319] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 76.916979][ T5319] ? __lock_acquire+0xab9/0xd20
[ 76.919564][ T5319] ? __lock_acquire+0xab9/0xd20
[ 76.921886][ T5319] ? __lock_acquire+0xab9/0xd20
[ 76.923916][ T5319] ? bch2_fs_start+0x9fe/0xd90
[ 76.925859][ T5319] ? up_write+0x1c4/0x420
[ 76.927811][ T5319] ? bch2_fs_start+0x5c4/0xd90
[ 76.929716][ T5319] bch2_fs_start+0xa99/0xd90
[ 76.931697][ T5319] ? bch2_fs_start+0x5c4/0xd90
[ 76.933768][ T5319] ? __pfx_bch2_fs_start+0x10/0x10
[ 76.935828][ T5319] ? sget+0x267/0x620
[ 76.937585][ T5319] bch2_fs_get_tree+0xafc/0x14f0
[ 76.939959][ T5319] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 76.942392][ T5319] ? aa_get_newest_label+0xf7/0x5d0
[ 76.944664][ T5319] ? vfs_parse_monolithic_sep+0x2df/0x310
[ 76.947139][ T5319] ? apparmor_capable+0x137/0x1b0
[ 76.949481][ T5319] vfs_get_tree+0x92/0x2b0
[ 76.951518][ T5319] do_new_mount+0x24a/0xa40
[ 76.953755][ T5319] __se_sys_mount+0x317/0x410
[ 76.955791][ T5319] ? __pfx___se_sys_mount+0x10/0x10
[ 76.958102][ T5319] ? do_syscall_64+0xbe/0x3b0
[ 76.960375][ T5319] ? __x64_sys_mount+0x20/0xc0
[ 76.963357][ T5319] do_syscall_64+0xfa/0x3b0
[ 76.965612][ T5319] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.968059][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.970784][ T5319] ? clear_bhb_loop+0x60/0xb0
[ 76.972798][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.975418][ T5319] RIP: 0033:0x7fe9cab900ca
[ 76.977485][ T5319] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.986468][ T5319] RSP: 002b:00007fe9cb95fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 76.990297][ T5319] RAX: ffffffffffffffda RBX: 00007fe9cb95fef0 RCX: 00007fe9cab900ca
[ 76.994048][ T5319] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007fe9cb95feb0
[ 76.997631][ T5319] RBP: 0000200000000180 R08: 00007fe9cb95fef0 R09: 0000000000000000
[ 77.001215][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000540
[ 77.005209][ T5319] R13: 00007fe9cb95feb0 R14: 0000000000005987 R15: 0000200000006040
[ 77.008602][ T5319]
[ 77.010520][ T5319] Kernel Offset: disabled
[ 77.012536][ T5319] Rebooting in 86400 seconds..