program: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000005ac0)=""/111, &(0x7f0000005b40)=0x6f) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) (async) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[], 0x1, 0x5a2e, &(0x7f0000000080)="$eJzs3X+QHNV9IPDXM7Pa2V2ttBIQZDCrRaCEQGyt+FXY5IKSS+wUEEouUg7iZMOCVkRGEipJBBAkiBzk4AAXzjmV4OQP4sPUYSsuquBiFMpEwAHnXxQXH3UF1Jk77D+4IhyqADrOxWWvdqffaKZ3ent2dlYS4vMpaXvem57ve/36TU+/1707AQAAgI+E5+7YceCSE37r+388/t6tv/13W24LA+Wp/GpcYShd3ni4asih1FtZNrXM9otfuvmbPxu5+je+90j/N95/dsPJG1/5zWOufuJLF+69/y+fenfwsX9+vShu7E+nH0wnbyUhVL+7/8/+5NkfHD+Zl4QQysnQ7hCWJEufWpJkQoz+PISwIU0syzz56HtnbZxc3nZ3b1P+4sx6+vtHWzXtZ7sO3HBG+Mmvr7v9R8u//Tc9e97cfXCVpNrQn0JYdGXj63tCCH3p/0mxt8X+GDvt2hBCf8PrzosPru1rWa9T2qz/qpz0ielyQbocKIgTn1+RSZcy62XTUU9m2V9Q3lzl1aPT9YoszKSzB6O5yqtnzF+SLr+TLk+fZfxy/J+EUhIq9epvTg72kdCw35KQTO3Laj1dqu/bkG5/Jp1k0qVMutyT2a6pctOOVk6S5vy4XiY/Ho4raf7JjcfqFi7Nyf9YuqxOvVHL4f2YDtkHNQPTHtS3a0qs1/4Z6nIolBqOQa3y6zs+3RkDad5AsnTaayZaiM89u+6eleX1Tz83lFOP5JEkjZ/MMn6t4Xf9cMnCL37rruuzn+v1+FeW0viljur/2kUvvH35XV//Wm78+2L8ckfxz3yy/62LnrljRW777I/tU+ko/tjrz9+7/Nir9uTW/4EYv9pR/DV7X+gdPPDkvqHGzMb4o7F9+jqK/+r5n/npwy89/mZu+4QYv7+j+Ov3bvty7/CB03Lj74vtM9BZ/3lnz7kvDw+/MZIX/8UYf7Cj+A/tvv/TDy6++8Lc/bs2ts9QR/EvPvWJ2xceePykvGNn8kC3PjkBPpqOSc+x7kzTnY4z56phvPAXI5XaOd/C9P9gCOGC7MRIpzInn5PlLOpSaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIjjvjP3/2f35+6K1Kmu5NH7xaqi1j/oIQkr4Qwo6dY9t3btp6zciXrrt++9axzSNjO0fGt+7cftPI2b8ysn182+axmyafHf3EWbXXLQ1JbZmcNK3s3omJidJQc14s71+euucnK8/7X/8YwuhxPx6u5NZ/1f1bHjy2xc+MZM3EBVuuv+TH5/x1ul1Dab2GWtRrYmJiIuTU639f9sGDf7r/Z6eFMPoLM9Xr+Vd/7e+bKjSVcTBOqtQbahXqTfpb1qNe67Q+sb0qGzdtHh+duX0nX1/O2Y5/dfObP99441c+qLVvNXc72mzfvjUTm0t/vu7i//fnJ/6LWn0K6nW49ntRe6dbcUusX2y/atrei9LtWpSzXZWc7brjR/te+u4Jd727O4xW3lk+veyi7epJO0BP8rG2yo0l9CdLmvKr6fpxj8fXrdq5ZduqHTft+sSmLWPXjF8zvvVTq89efe7oOeees2pqy1d1eftj+b/Y5vYfmv60+A92fyf+bK8/FdWrqD0m61XcHo01ynv/9V/6J1/91P3PXFLLKOrnce368SRd9k/u59Whob9Nb6tW21XUDiGEkVbt8Pa7F4bj/9um24uOQ417pvFnRrJm4gcr/umvz/urZb9ayzgkx/nGCnV4nK/X+mB9ptqrmu6PiSO0fXtDOd2ugZb1Wv2DBSGEf/zDev0WLAg3ju3cuX117efCtKYLkxNb1iubG7dr+dTPckibJdS7aYv+Oqkn1OqXPX7G1bOtOpA+N5AsbbldWfG5Z9fds7K8/unn8lo6eaRWYl8YrC2Tj+esuTnzwnK9wq3KP1Lff0X9Y/izf/XY5x/727On9Y8zaz+LtivJ2a5vv/TQV7/xlX/zt93brs/+2gtD//Tff39lLePDclyp1zqtT9J4XDkzhKL33/LQejty33+l1ttT9P7LlnNw/dbxRjLpgVDu6P165pP9b130zB0rct+v+9t9v97SlCoXvF+PlP6TfX8lleZ6zN/7q6mjJGsmvnfnMbufunXtCbWMon5dX7tVvz6rjfFHznb9fU/M6dZx45u/8ugVr4yt+aNaRuf7PdalO/u9mrZvNad9J2vd9ILG9v3k1ddt3lDLP3LPf9NlwfgnHkp23LTr2rHNm8e372hvu9r9PI3lZFu508/TeHRbWrBdpWnbNX8P2mmv3Pfb5S8PXzfyr/9rtr02dNxeze+3gZB09Lmw64dLFn7xW3ddPzTtVWlBV5bS+KWO4r920QtvX37X17+WG/++GL/SUfyx15+/d/mxV+3Jjf9AksavdhR/zd4XegcPPLkvN/5orH9fR/FfPf8zP334pcffzI0fYvyBztr/nT3nvjw8/EZu/BeTtJzJc6QQHn3vrI21dBJ60vdbrEdPU71CNp1k0qVMutyYLtXmWusFlJOkOT+ul+af3FCXVn6vVWZPCPEsrLqstnw/pkP2wcz5R5pSw7G/VX7ReSoAwNEuXv+P56Dx+v94eqKUP9PAR13j1Oxcx2HL8spIx2EH53MWND2/LI2/7GCdpuYZhj8ZRieXt43UTvRnex0hvh+y85yxnNNOaY7R6Txn0fz7ikw61qs2X15pGIempo9rKqGN+ffp5cw8/57Z/OL58ZE7p1VrpGHeKrv/etIZs1b3O2TqW5mMcLB/nLC4cb3svFi8n2N4UVg7VV6b/SN7H03cD9n7aGI5J2QOnLO+jya9nDDX/hGrPUP/mKpy8fWN6fsvzNC+B/df62jZ/TeL/V2dXL/d67MHMsebdq/PdmHesOUh7dDNG87v9TDzkjnx0zfYkT5vGPPjdlTanE/8fE5+t+YT4+FiKIQ1k8v9M9TlUDCfCByt4vg/fkZMjv8nT8D/T2a9ovPQ7FljjJd7n1C5dX2Kxh3T79Pr7+hzfP3ebV/uHT5wWu55zr527/vZ1pTqT8qhL+Tf91PUjisz6cJ2zJmgKRrvZcspavfsfRkDYbCjdn9o9/2ffnDx3Rfmtvva2gdpcbt/tSk1WHC/1Xzfz/nhv8/g6Bwv3HbkjRdeGmyM36X7GIrmzw7beCS98Wm+xiO/m5M/2/FI/7QH9e2aEus1+/HIglm/YiZtjUdKmZ0HANAgjv/r18/S8f//iCuk5xFF49bTM+kYL3fcmnN+kjdu/Z10eeO+f9uUP5D+RsUsz5v70uVJ2XPLeG6ePNB6HHrrtFL+Q1NqqHAcOrdxc+44ZW137hfPHUfUx1lzGyfm1r8+TpzbOD03/iNJ/am5jKNz26c+jp7bPEBu/Po8wPRxbqmN+EfKdbHC+bpMYTHZ7nzdkTmOrjSmOxtHp78+O1/j6EtDCB80tEc023H0wLQH9e2a0vk4urvavq5nHA0AHGXi+D+exsXx/zOZ9eZ6nT13XNCl8/bs3wOpx39x3seVafz5HvfN7fpv8bh1vsf18z0vMbv7Rf/97bXnjpxx8XzPC3U0TxYuPvWJ2xceeHzaPFk9/gOH+X7XQzAubmXauDgt9EM1Lm5xD5ZxMQDA0S2O/+MF8fzx/9zGJ63Gbz1N45OP2Pg8nkgbnx8d161z4ndr/qs3U058rv35r+bx/w1t1v/DO/6vXXM/ZOP/mA7ZBzVH5Pi/BeN/AICjWxz/x197jH//7z+l6ezfrf/wjdNrMxuuoxunzxT/yLlPpfvzbMF9AId3HqDv4G8cmQcAAOBwePOV2jL7e/ZfSJc3ZtZv/Xv5Sbg8Z/1pEwc5Kump8VU7t4+PX3H9tg1jO8ev2HrdhvEdV9ywfdPOneNba+s1jxv/XVOMdsaNueOWdNzYEypTVW73+0YXp9cXF+f8PYTs+klagROn4k//ewjZYvsK/o5Az9RIt/365v1dhdIM6/e3WD9vf+fF/72c9aP6/r/698+8YuOOKzZt3bRz09jmTbvGm9ebHLX2z+J7M2OzzOr7UjM/pinN/vs7u1OP0rR69KTtkff97EmmHkvSmizJ+/6DnHp//7/86R+cOvHBwyGMHlf++JzaL1kz8R8vG/+dnc/9eNtk/Usz1r++Zlqvou8rza4ft6ey+bodO8/YeN31W7PfKNmZOJ9RqqfnaT4jffuX25yfWJ+TP9v7FMrTHhyZ2p6fAACgSbz+H89n4/XDr6QnUDG//XH63K4f547TR9sbp2e/l6xonJ5dP25vu+P06hzH6dnyi8bprdZvNU7PG3fnxf/dnPVnq/1+Mrf7PHL7yZXt9ZPs9xnk9ZP/m7P+bPtJMsd+ki2/qJ+0Wr9VP8nb73nxP5ezfp72+8Pc7svJ7Q/3tdcffjmTLjpuZNefbX8ozbE/ZMsv6g+t1m/VH/L2b178S3LWb1dz/5jsGFP9YvyKG67bfm3DevP9/Rdzr9/8fv9Hp9qvf/uf2401ave+r/mv//zeVzb/9Z/bfWW59X9xbjNh7dc/f254pvq3+/0unTpk87XpzWZF958VzeOuy8mf7TzugmkPjkzmceHwieP/eLknjv/vTpfdvgx0+L4nbUHLUuKz7X9Pmu89bhm/S99jVnQe4/N8hsIKzVTT7vB5DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCe3sqyqeVzd+w4cMkJv/X9Px5/79bf/rstt/3Szd/82cjVv/G9R/q/8f6zG07e+MpvHnP1E1+6cO/9f/nUu4OP/fPr0yOVm5NDUz8rp6fJagjJW0kI1e/u/7NTttTykslXJUO7Q1iSLH1qSZIJOPrzEMKGej2bn3z0vbM2Ti5vu7u3KX9xJkh2u8JAOdansZ4h3FjYVHwIVdN+tuvADWeEn/z6utt/tPzbf9Oz583dB1dJqg39KYRFVza+vieE0Jf+nxR727L44nS5NlPueQX1OqXN+q/KSZ+YLheky4GCOPH5FZl0KbNeNh31ZJb9BeXNVV49Ol2vyMJMOnswmqu8esb8JenyO+ny9FnGL8f/SSgloVKv/ubkYB8JDfstCcnUvqzW06X6vg3p9mfSSSZdyqTLPZntmio37WjlJGnOj+tl8uPhuJLmn9x4rG7h0pz8j6XLavpGfT+mQ/ZBzcC0B/XtmhLrtX+GuhwKpYZjUKv8+o5Pd8ZAmjeQLJ32mokW4nPPrrtnZXn9088N5dQjeSRJ4ycdxd/1wyULv/itu65flhf/ylIav1QQ/9qFjan43GsXvfD25Xd9/WvLQrK7Zfz7YvxyR/U/88n+ty565o4Vue2zP7ZPpaP4Y68/f+/yY6/ak9s+D8T41Y7ir9n7Qu/ggSf35dZ/NLZPX0fxXz3/Mz99+KXH38yNH2L8/o7ir9+77cu9wwdOy42/L7bPQEfxX3tnz7kvDw+/MZIX/8UYf7Cj+A/tvv/TDy6++8Lc/bs2ts9QR/EvPvWJ2xceePykvGNn8kC3PjkBPpqOSc+x7kzTnY4z56phvPAXI5XaOd/C9P9gNwvKmCxn0TzGBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6PQPt5z9hcsu+Ny6ShJCkrPORAvxufKCNWtGOih37PXn712QyVuWu3a1gxIAAACAaHIcvvzYq/aU6jnVsCzckPSFE1uuH+cIToyppDk/O4cQ42TnCDqNU+pSnHKX4lS6FKenS3GycyqdxuntUpzszE02TjW0F6dvhjiVyV7RZn36Z6xP+3EGuhRnYZfiDHYpzqIuxVncpThDM8Zpvx8u6VKcpV2Kc0yX4hzbpTjHdSnOL3QpzvFdiPNaiznl2fbDwXTNE/LiTD0oF8apJOX6E63m049PyzlpjuUMFJQzWPR53GY5fW2Wc0rmdaVZllNts5xfnGM5SZvl/PIcyykVlBP7/43Z+qUfgLN9H92UjRM6i7OrS3FunlWcN87Pi3NLl+rzh12K80ddinPrHOMAtCuO/w+O94ZCb+VXQ396xMnOAsTx7vKpn9M/7/IOSDHexzP5C4riZQfqmXjLZ1u/7ARCJt6KTH5PU7xKfTwyQ7xqY7yVmScLtzc7oZCp3+mZ/N6ieNmJBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYR/9wy9lfuOyCz60LSZj8N+nBvsw6Ey3E58oL1qwZ6aDcZ9fds7K8/unnGvN6KzO+pKeDYgAAAICGcfjBwXU19FZWh95kQdN61XQeoJqmy0O15fCisHZymYyUptL9yZIZX1dJX7dq55Ztq3bctOsTm7aMXTN+zfjWT60+e/W5o+ece86qjZs2j4/WfobQWxAvhDA1/bDjpl3Xjm3ePL59Ry0zW/9l6euWpekkfd3wJ8Po5PK2tP5LC8orTStv/h4U7z0AAAAAAAAAAAAAAAAAAAD+P7t2FyNXVQcA/NyZ2ZlhoTKGr6Ghy6QUgkoUcDGghL2JiSR8NN2QmFl0JY20kbilDbSk4ghNLNhGYwJp0lT7YE0lgsQXyleMfKRJDVabuLUxQJQHfdCAYgrpg5aM6e6c2ZnZmc46ErbU3+/h3jvn/P/nf888bPI/swAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLCma6OT1bHxieEkhKRHTL2LOJfNp2llgLpffn7D9wsjxy5vHSvkBlgIAAAA6Cv24UPNkWIo5LIhGy6c+bQ8tEyEub4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/zNdG52sjo1PnJmEkLSMX9PyXO8izmXzaVoZoO4b7zz5mVdHRv7aOlYeaAcAAABAP7EPzzRHiqEcLglDyYVtcfFsoF5oz++Mi+ssCwuL6zw76BV3yQLjLltg3Mf6xK1s3DcHAAAA+PCL/X+uOVIKhdySnv1/v74+xl3cEZdt3Af5XwEAAADgfxP7/7mf9cuhkCs3+/WF9vvLO+Jifr/f7WP+pT3yZ37P/2Hv/Fsbd7/TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCHx3RtdLI6Nj6RTUJIesTUu4hz2XyaVgaoe/ULw3+/ef9Dy1vHCrkBFgIAAAD6in34XOtdDIXccBgKZ870/SM37t73xX3PjIYQZtv8fD5sXr1x4z1Xz15j3FUH9w9978Bb35oXd9XsddE2CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvG+ma6OT1bHxiTOSEJIeMfUu4lw2n6aVAeq+/rkv/PnxI8+92TpWHmAdAAAAoL/Yh8/1/sVQDvmQD+fPfGrt9U/IdOT3OjMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATh/3fuP+r6+emlpzjwcP8WHrs6fEa3hYzIfF/ssEAAC83y4OSaj/ly5YtdhvDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAqma6OT1bHxiWISQtIjpt5FnMvm07QyQN30+UOFJcdeeKl1rDzAOgAAAEB/sQ+f6/2LoRyGwlA4b+ZT55nAv2P/X/qAXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ZUzXRierY+MTS5IQkh4x9S7iXDafppUFV8s1nx7bsuuze8/+7k2ts4XcQFsAAAAA+oh9eL45UgyF3MdDIVzU+DzVnpBkG/fu5wJzeRva0oYXnFcLITuXl11w3raOneUau5nNK8b1SrP3Zl5lfl6lJa8cmuUrbXlhR1vWkj7vGQAAAGARxf6/0BwphUKu0NLn/rQtvqTPBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6mK6NTlbHxieSJISkR0y9iziXzadpZYC69//mo2d95WfbN7WOlQdYBwAAAOgv9uFzvX8xlMOy8JGwbKbvD6X2+Bj3j+rxvY/+8y+Xh3Dl+YdHcp3L/ig+/Or1G17svISQaY/OhHB2o17So96vf/fofSvqxx8P4crzshfNqxda6u2bX699ybT+dHXNrRsPHN7Q58sBAACA00Ts/4eaI6VQyN3ds/+PnXef/r9ppgE/+74tz57buDY68o6MTKlRL1Nqn4yPn1/x5J8uvfZvb53o/09W71O71u09t63g7EiHJK2Prdu08vA1ezJx17P1sx37jd/Ll7755r/Wbn7k+Gz9Yig2xpfmutWff+1wRlqfyuycuOW9nbX2+rke3/dDv33pyC+Xbn/3RP13Lh5uVr3sJPs/ef3h2x7ecd2u/Svb64cQKt3qv/3uTeGCP9y1tXP/wx0Lt37zrdcOSVo/uPzonmt3l69vr5901I/f/8+PPLbjJ49855lYP/6vyOWXLLR+PHOK91e2nbPl5QdXLW2vn+mx/xdvf3VkfeXbv+/c/51tu8r1fIv5+3/iiqfueG11+kDnFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOllujY6WR0bn8gkISQ9YupdxLlsPk0rA9R94+ZDb9++/cc/aB0rD7AOAAAA0F/sw+d6/2Ioh3zIh+GZvv/p6ppbNx44vCGUZmeTxj03tf7ejZ9Yu37T3Xcu0psDAAAACxX7/1xzpBQKuRVhqNH/j63btPLwNXsysf/PxP5/7V1Ta64MzbhXtp2z5eUHVy1tnhOEMPNvAcUTcZ+ei7vxhkOlo3/82qVd466eizu4/Oiea3eXr49xoTXuqtA8n3jiiqfueG11+kDz/VrjPvnV9VON44m47vBtD++4btf+lc19NO7DjXVj3FRm58Qt7+2sxbhs415s7BsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmG+6NjpZHRufCNkQkh4x9S7iXDafppUB6t6y4hdbzzr23LLWsUJugIUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sMOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9usnNK4ijgP4zO7GbLNJm7SCVTFNq6LUg0VBRC8qKtKKFDxVilRbexAFQUSpB1NpxVIVL4LVSxEV1CgFBRuLpVVS8V/x4kEFhepBKMWANhQPKtmdiZuXPNNsqqB+PrBMZva97/u9ebOzWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Vbpry5vtkZ0PTtx23k2fPH7Pycduee/+7Zc8+voPQ5tv+Hhfzyunxras3Pr1jcs2H7h37eieFw//0vfOb8fmDH6k1axO3XoI8UQMof7++HNPjH16zuRYDCFUY/9wCANx6eGBWEhY82sIYctUndPffPvklVsn2+27u6eNLymEFO8rNKq5npb+6fXy31JP62zbxMOXhW+v37Dj8xVvvdk1cnz4z0NivW09hbB4U/v5XSGERek1Ka+25fnk1K4PIfS0nXf1HHVdeJr1X17SPz+1Z6W2MUdOfn9VoV8pHFfsZ12FtmeO6y1Uq47aaR63cL2FfnEzWqiyOvP4QGrfTe3qeeZX8yuGSgy1qfLvi9NvJT+3yeGutn0whsrUsw3p/gv9WOhXCv1qV+G+mmszLbRqjNPH83GF8bwd19L4yva9eha3l4yfm9p6+qCeyv1Q/KOlMeOPqftqynWN/0Ut/4RK2x402/jUw04Po5HGGnHpjHN+n0V+b2zDUxdXN35wpL+kjrgvpvzYUf62zwZ673xj10PLy/I3VVJ+paP879Yd/emOXS+9UJr/bM6vdpR/xcGeE+s+3LmqdH7G8/zUmh/l+ebfdeyjp1ecfffIbM+6mb8359fnU/94vsB1o0e7+yYOHkr1z9ho45o8P4s6mp9vrr35+9e+3H+8dH5Czu/pKH/j6APPdA9OXFqaf6j1UWg0V2gH6+fnkau+Ghz8cags/4s8/32z5Mc5818d3nPNy0t2ry1dn+vz/PR3VP+tFx3Y0Tux/4KyvTPuPVPfnAD/T8vS/1hPpn6nvzMXqu33wvNDtdY3UG969Z3JCxVMXmfx35gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ac7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//0dse2g==") [ 87.031562][ T10] tipc: Node number set to 11578026 [ 85.975744][ T5348] Bluetooth: hci0: command tx timeout [ 86.335907][ T5370] loop0: detected capacity change from 0 to 32768 [ 86.597203][ T5370] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 86.597219][ T5370] allowing incompatible features above 0.0: (unknown version) [ 86.597225][ T5370] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.605146][ T10] cfg80211: failed to load regulatory.db [ 86.621262][ T5370] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 86.624883][ T5370] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.628306][ T5370] bcachefs (loop0): superblock requires following recovery passes to be run: [ 86.628306][ T5370] check_topology,alloc_read,stripes_read,initialize_subvolumes,snapshots_read,check_allocations,set_may_go_rw,journal_replay,check_alloc_info,check_lrus [ 86.642026][ T5370] bcachefs (loop0): Version upgrade required: [ 86.642026][ T5370] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 86.642026][ T5370] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 86.642026][ T5370] running recovery passes: check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 86.732891][ T5370] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 86.732913][ T5370] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 86.732918][ T5370] loop0 node offset 0/16: incorrect min_key: got 0:9:2751463424 should be POS_MIN [ 86.732922][ T5370] loop0 btree validate error [ 86.732926][ T5370] flagging btree extents lost data [ 86.732931][ T5370] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 86.732937][ T5370] ret btree_node_read_err_bad_node [ 86.761123][ T5370] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 86.778590][ T5370] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 86.778604][ T5370] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 86.778612][ T5370] loop0 node offset 0/24: got wrong btree node: got [ 86.778618][ T5370] btree=alloc level=0 seq 68dc7e261 1 [ 86.778623][ T5370] min: POS_MIN [ 86.778628][ T5370] max: SPOS_MAX [ 86.778633][ T5370] loop0 btree validate error [ 86.778638][ T5370] flagging btree alloc lost data [ 86.778643][ T5370] ret btree_node_read_err_bad_node [ 86.805655][ T5370] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 86.812673][ T5370] bcachefs (loop0): btree node read error at btree subvolumes level 0/0 [ 86.812682][ T5370] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 65296 min_key R 0:0:255 durability: 1 ptr: 0:35:0 gen 0 [ 86.812689][ T5370] loop0 node offset 16/65296: btree node data missing: expected 65296 sectors, found 16 [ 86.812695][ T5370] loop0 btree validate error [ 86.812725][ T5370] repair success (rewriting node) [ 86.840147][ T5370] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 86.840162][ T5370] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 86.840169][ T5370] loop0 node offset 0/32: incorrect min_key: got 0:227633266688:0 should be POS_MIN [ 86.844929][ T5370] loop0 btree validate error [ 86.844937][ T5370] flagging btree freespace lost data [ 86.844940][ T5370] ret btree_node_read_err_bad_node [ 86.865031][ T5370] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 86.871230][ T5370] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 86.871242][ T5370] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 86.871247][ T5370] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 4 too large: 0 + 1125899906842624 > 4294967295 [ 86.871252][ T5370] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:1125899906842624, 0:0 [ 86.871256][ T5370] loop0 btree validate error [ 86.871259][ T5370] flagging btree backpointers lost data [ 86.871263][ T5370] ret btree_node_read_err_bad_node [ 86.897700][ T5370] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 86.906805][ T5370] bcachefs (loop0): check_topology... [ 86.906897][ T5370] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 86.914408][ T5370] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 86.919657][ T5370] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 86.923662][ T5370] bcachefs (loop0): scan_for_btree_nodes... [ 86.936153][ T5370] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 86.944024][ T5370] done [ 86.945289][ T5370] bcachefs (loop0): check_topology... [ 86.945346][ T5370] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 86.951346][ T5370] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 86.955195][ T5370] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 0:9:2751463424 durability: 1 ptr: 0:27:0 gen 0 [ 86.966892][ T5370] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - 0:9:2751463423 [ 86.972516][ T5370] bcachefs (loop0): btree node with incorrect min_key at btree=extents level=1: [ 86.972539][ T5370] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 86.972546][ T5370] next: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 0:9:2751463424 durability: 1 ptr: 0:27:0 gen 0, fixing [ 86.987065][ T5370] bcachefs (loop0): set_node_min(): u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 0:9:2751463424 durability: 1 ptr: 0:27:0 gen 0 -> POS_MIN [ 87.004007][ T5370] done [ 87.005236][ T5370] bcachefs (loop0): accounting_read... done [ 87.008971][ T5370] bcachefs (loop0): alloc_read... done [ 87.013368][ T5370] bcachefs (loop0): stripes_read... done [ 87.016385][ T5370] bcachefs (loop0): initialize_subvolumes... done [ 87.019918][ T5370] bcachefs (loop0): snapshots_read... done [ 87.024316][ T5370] bcachefs (loop0): check_allocations... [ 87.026157][ T5370] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 87.026179][ T5370] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 87.042081][ T5370] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 87.042096][ T5370] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 87.056466][ T5370] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 87.056480][ T5370] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 87.069091][ T5370] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 87.069106][ T5370] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 87.098311][ T5370] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 87.098325][ T5370] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 87.125765][ T5370] ------------[ cut here ]------------ [ 87.128204][ T5370] kernel BUG at fs/bcachefs/btree_iter.c:633! [ 87.132501][ T5370] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 87.135183][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.138939][ T5370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.143396][ T5370] RIP: 0010:bch2_btree_path_level_init+0x9f9/0xa20 [ 87.146110][ T5370] Code: 91 fb ff ff e8 38 4f 97 fd 90 0f 0b e8 30 4f 97 fd 90 0f 0b e8 28 4f 97 fd 90 0f 0b e8 20 4f 97 fd 90 0f 0b e8 18 4f 97 fd 90 <0f> 0b e8 10 4f 97 fd 90 0f 0b e8 08 4f 97 fd 90 0f 0b e8 00 4f 97 [ 87.154101][ T5370] RSP: 0018:ffffc9000d3de4a0 EFLAGS: 00010293 [ 87.156616][ T5370] RAX: ffffffff84286ae8 RBX: ffff888052e38360 RCX: ffff888012144880 [ 87.159909][ T5370] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000000000 [ 87.163322][ T5370] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.166718][ T5370] R10: dffffc0000000000 R11: fffff52001a7bc88 R12: 0000000000000000 [ 87.170008][ T5370] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000000ff [ 87.173247][ T5370] FS: 00007fdfa3cfd6c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 87.176832][ T5370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.179519][ T5370] CR2: 00007fcfa5d909c0 CR3: 0000000012214000 CR4: 0000000000352ef0 [ 87.182993][ T5370] Call Trace: [ 87.184475][ T5370] [ 87.185831][ T5370] bch2_btree_path_traverse_one+0xfec/0x21d0 [ 87.188358][ T5370] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 87.191000][ T5370] ? bch2_check_allocations+0x120d/0x57b0 [ 87.193522][ T5370] ? bch2_btree_iter_verify+0x1d/0x360 [ 87.195809][ T5370] bch2_btree_iter_peek_max+0x9e8/0x58f0 [ 87.198178][ T5370] ? bch2_check_allocations+0x120d/0x57b0 [ 87.200577][ T5370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.202844][ T5370] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 87.205678][ T5370] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 87.208466][ T5370] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.210799][ T5370] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 87.213573][ T5370] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.216362][ T5370] ? mean_and_variance_weighted_get_mean+0x6f/0xc0 [ 87.219190][ T5370] ? __bch2_time_stats_update+0x2ec/0x390 [ 87.221575][ T5370] ? bch2_trans_begin+0x1a71/0x2310 [ 87.223722][ T5370] ? bch2_trans_node_iter_init+0x348/0x5e0 [ 87.226089][ T5370] ? bch2_trans_node_iter_init+0x406/0x5e0 [ 87.228682][ T5370] ? __pfx_bch2_trans_begin+0x10/0x10 [ 87.231462][ T5370] ? __pfx_bch2_trans_node_iter_init+0x10/0x10 [ 87.234689][ T5370] ? bch2_check_allocations+0x1aa1/0x57b0 [ 87.237602][ T5370] bch2_check_allocations+0x120d/0x57b0 [ 87.239888][ T5370] ? prb_read_valid+0x3c/0x60 [ 87.242247][ T5370] ? desc_read+0x1b8/0x3f0 [ 87.244308][ T5370] ? bch2_check_allocations+0xf41/0x57b0 [ 87.246988][ T5370] ? prb_first_seq+0xfd/0x1a0 [ 87.249287][ T5370] ? __pfx_prb_first_seq+0x10/0x10 [ 87.251815][ T5370] ? desc_read+0x1b8/0x3f0 [ 87.253949][ T5370] ? __pfx_bch2_check_allocations+0x10/0x10 [ 87.256671][ T5370] ? up+0xde/0x150 [ 87.258289][ T5370] ? __pfx__prb_read_valid+0x10/0x10 [ 87.260402][ T5370] ? __console_unlock+0x14c/0x1a0 [ 87.262551][ T5370] ? __pfx___console_unlock+0x10/0x10 [ 87.264863][ T5370] ? prb_read_valid+0x3c/0x60 [ 87.266842][ T5370] ? console_unlock+0x21b/0x270 [ 87.268663][ T5370] ? bch2_check_allocations+0x11c1/0x57b0 [ 87.271126][ T5370] ? irq_work_queue+0xc3/0x140 [ 87.273200][ T5370] ? bch2_check_allocations+0x1aa1/0x57b0 [ 87.275530][ T5370] ? __pfx_vprintk_emit+0x10/0x10 [ 87.277633][ T5370] ? do_raw_spin_lock+0x121/0x290 [ 87.279790][ T5370] ? __pfx___bch2_print+0x10/0x10 [ 87.281914][ T5370] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.284041][ T5370] __bch2_run_recovery_passes+0x3ba/0x1060 [ 87.286444][ T5370] bch2_run_recovery_passes+0x184/0x210 [ 87.288762][ T5370] bch2_fs_recovery+0x2690/0x3a50 [ 87.290792][ T5370] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 87.293002][ T5370] ? __lock_acquire+0xab9/0xd20 [ 87.295019][ T5370] ? __mutex_trylock_common+0x153/0x260 [ 87.297171][ T5370] ? __lock_acquire+0xab9/0xd20 [ 87.299119][ T5370] ? __lock_acquire+0xab9/0xd20 [ 87.301110][ T5370] ? bch2_fs_start+0xa0f/0xda0 [ 87.303192][ T5370] ? up_write+0x1c4/0x420 [ 87.305000][ T5370] ? bch2_fs_start+0x5e7/0xda0 [ 87.307006][ T5370] bch2_fs_start+0xaaf/0xda0 [ 87.309016][ T5370] ? bch2_fs_start+0x5e7/0xda0 [ 87.311035][ T5370] ? __pfx_bch2_fs_start+0x10/0x10 [ 87.313380][ T5370] ? sget+0x267/0x620 [ 87.315090][ T5370] bch2_fs_get_tree+0xb39/0x1520 [ 87.317110][ T5370] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 87.319378][ T5370] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 87.321813][ T5370] vfs_get_tree+0x8f/0x2b0 [ 87.323733][ T5370] do_new_mount+0x2a2/0x9e0 [ 87.325632][ T5370] ? ns_capable+0x8a/0xf0 [ 87.327403][ T5370] ? __pfx_do_new_mount+0x10/0x10 [ 87.329592][ T5370] ? path_mount+0x61c/0xfe0 [ 87.331525][ T5370] ? user_path_at+0x44/0x60 [ 87.333460][ T5370] __se_sys_mount+0x317/0x410 [ 87.335365][ T5370] ? __pfx___se_sys_mount+0x10/0x10 [ 87.337508][ T5370] ? do_syscall_64+0xbe/0x3b0 [ 87.339492][ T5370] ? __x64_sys_mount+0x20/0xc0 [ 87.341532][ T5370] do_syscall_64+0xfa/0x3b0 [ 87.343584][ T5370] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.345808][ T5370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.348442][ T5370] ? clear_bhb_loop+0x60/0xb0 [ 87.350468][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.353061][ T5370] RIP: 0033:0x7fdfa2d9066a [ 87.354963][ T5370] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.362902][ T5370] RSP: 002b:00007fdfa3cfce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.366332][ T5370] RAX: ffffffffffffffda RBX: 00007fdfa3cfcef0 RCX: 00007fdfa2d9066a [ 87.369547][ T5370] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fdfa3cfceb0 [ 87.372835][ T5370] RBP: 0000200000000040 R08: 00007fdfa3cfcef0 R09: 0000000000000002 [ 87.376035][ T5370] R10: 0000000000000002 R11: 0000000000000246 R12: 0000200000000000 [ 87.379356][ T5370] R13: 00007fdfa3cfceb0 R14: 0000000000005a2e R15: 0000200000000080 [ 87.382657][ T5370] [ 87.384013][ T5370] Modules linked in: [ 87.386602][ T5370] ---[ end trace 0000000000000000 ]--- [ 87.404072][ T5370] RIP: 0010:bch2_btree_path_level_init+0x9f9/0xa20 [ 87.406934][ T5370] Code: 91 fb ff ff e8 38 4f 97 fd 90 0f 0b e8 30 4f 97 fd 90 0f 0b e8 28 4f 97 fd 90 0f 0b e8 20 4f 97 fd 90 0f 0b e8 18 4f 97 fd 90 <0f> 0b e8 10 4f 97 fd 90 0f 0b e8 08 4f 97 fd 90 0f 0b e8 00 4f 97 [ 87.428450][ T5370] RSP: 0018:ffffc9000d3de4a0 EFLAGS: 00010293 [ 87.446294][ T5370] RAX: ffffffff84286ae8 RBX: ffff888052e38360 RCX: ffff888012144880 [ 87.450896][ T5370] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000000000 [ 87.454253][ T5370] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.458057][ T5370] R10: dffffc0000000000 R11: fffff52001a7bc88 R12: 0000000000000000 [ 87.462098][ T5370] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000000ff [ 87.465091][ T5370] FS: 00007fdfa3cfd6c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 87.468803][ T5370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.471908][ T5370] CR2: 00007fcfa5d909c0 CR3: 0000000012214000 CR4: 0000000000352ef0 [ 87.475297][ T5370] Kernel panic - not syncing: Fatal exception [ 87.478263][ T5370] Kernel Offset: disabled [ 87.480138][ T5370] Rebooting in 86400 seconds..