program: r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a008f35"], 0x20}}, 0x4040800) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/118, 0x76}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x7}], 0x3, 0x40000100, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x103a23b7a7fd06f, 0x0, 0xfffc, {0x4, 0x1}, {0x2a, 0x2}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {0x400, 0x0, 0x42}, 0x0, 0x0}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b45, 0x2) (async) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x800, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000499896fa4610f08a00000006004b00b1155e7adeb2000e0400000000000000000000000000000d04000000000000000000001004000000000000000000000903000000000000006100"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x1, 0x1, 0x7, 0x0, 0xf6}) (async) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x59fa, &(0x7f0000005b80)="$eJzs3X+QHNV9IPDXM7Pa0a5WWgkcZDDSIiOH4Nha8av8IxXLucROgUPJ5ZRjcbJhQSsiexEqSQQkkyBy4IMCu+yUU4mc/EFcmDpsxUUVJKBQJvw4ibOxKS4+6gpzZ9+B//AV4VAFUCgXl72anX6zM73T27Ozs/oBn09J29Nver7v9es3Pf19M7sTAAAAeFs4fOuuo5ee/js/+NPx12/63X+45uYwWJ4qr8YNhtPlDcerhRxL/ZWVU8vsuPjVL3775yNX/db37xv41huHtpy19Se/fcpVD3/+4oP7/+qx14Ye+LcXiuLG8XTu9HrychJC9XtH/vxLh546rVaWhBDKyfC+EJYnKx5bnmRCjP4yhLAlXVmZufP+18/fWlvefEd/S/myzHbG+9tbNR1ne49e/97w049uuuVHq7/7t30HXto3vUlSbRpPISy9ovnxfSGExen/mjja4niMg3ZjCGGg6XEfKGjXuzts/7qc9TPS5aJ0OVgQJ96/JrP+cma7Us7j+zLLgYL65iuvHd1uV2RJZj17MpqvvHbG8uXp8sF0ee4c45fj/ySUklBpNH8imR4joem4JSGZOpbVxnqpcWxDuv+Z9SSzXsqsl/sy+zVVbzrQyknSWh63y5TH03ElLT+r+Vzdxqdyyt+ZLqvpE/WNuB6yN+oGZ9xo7NeU2K4js7TlWCg1nYPalTcOfHowBtOywWTFjMdMNnvwf0wt4n2HNt25trz58cPDOe1I7kvS+Eln8VPxvr0/XL7kc9+5/brs63oj/hWlNH6pq/g/u+TpVy67/ZvfyI3/1Ri/3FX88x4ZePmSJ25dk9s/R2L/VLqKP/bCk19efeqVB3Lbf1eMX+0q/oaDT/cPHX3k0dz2j8b+WdxV/Oc//LEX7332oZdy44cYf6Cr+JsP7vhK/6qj5+TGfzT2z2B34+fVAxc9t6r6i5G8+M/E+ENdxb9n3/4P3b3sjotzj+/G2D/DXcX/xNkP37Lk6ENn5p07k7t69coJ8PZ0SnqNdVu63m2eOV9N+cJfjlTq13xL0v9Dvawoc/FZq2dpL+MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAjhHe/9Lx//358efrmSrvenN54v1ZexfFEIyeIQwq7dYzt3b9t+9cjnr71u5/axiZGx3SPj23fv3DNywa+P7BzfMTG2p3bv6PvOrz9uRUjqy+TMGXX3T05OloZby2J9/+7sAz9d+4H/888hjL7jx6sque1ft/+au09t8zMj2TD5kWuuu/THF/5Nul/DabuG27RrcnJyMuS06/9+5s27/+zIz88JYfRXZmvXk8//5j+2NGiqYDpOqtQf6g3qTwbatqPR6rQ9sb8qW7dNjI/O3r+1x5dz9uPff/GlX2694Wtv1vu3mrsfHfbv4g2TE6W/2PSJ//cXN9YLitrVm+PeN+fjXtTfcS9i+2L/VdP+Xpru19Kc/ark7NetP3r02e+dfvtr+8Jo5dXV2brfzOzXzJ996QDoS97ZUb2xhoFkeUt5Nd0+HvH4uHW7r9mxbteeve/bds3Y1eNXj2//4PoL1l80euFFF66b2vN1Pd7/WP97MjHy9v/YjKdlf7Tvwfizs/FU1K6i/qi1q7g/mluU9/wb+NSXvv7B/U9cWi8oGudx68b5JF0O1I7z+tA03mb2Vbv9KuqHEMJIu3545bWLw2n/fdstReeh5iPT/DMj2TD51Jp/+ZsP/PXK36gXHJPzfHODujzPN1o93Z6p/qqmx2PyBO3f/lBO92uwbbvWP/VE352H//mPG+1btCjcMLZ798719Z9L0pYuSc5o265sadyv1VM/yyHtltAYpm3Ga01fqLcve/6Mm2d7dTC9bzBZ0VTa37RnreIWhzbduba8+fHDeT2d3FevcXEYqi+Td+VsOZF5YLnR4Jm1T06eqM+/ovGx6uN//cCnH/j7C2aMj/PqP4v2K8nZr+8+e8/Xv/W1//j3vduvj//m08P/8j//cG294GQ5rzRanbYnaT6vnBdC0fNvdWi/H7nPv1L7/Sl6/mXrmd6+fbyRzPpgKLd5vta1e77E+857ZODlS564dU3u8/VIp8/XG1vWygXP1xNl/GSfX0mltR0L9/xqGSjJhsnv33bKvsdu2nh6vaBoXDe2rvfTnsnJyelxfX4H+UfOfv3jZc+tunbkP/y33p03vv3r91/+k7ENf1Iv6P64x7b05rhX0/6t5vRvo9Ux72w+b7z/qmsnttTLT9zr33RZkP/EU8muPXu/MDYxMb5zV2f71enraawn28vdvp7Gs9uKgv0qzdivhbvRSX91+nyL7d/SdX+1Pt8GQ9LV68LeHy5f8rnv3H7d8IxHpRVdUUrjl7qK/7NLnn7lstu/+Y3c+F+N8StdxR974ckvrz71ygO58e9K0vjVruJvOPh0/9DRRx7NjT8a27+4q/jPf/hjL9777EMv5cYPMf5gd/3/6oGLnlu16he58Z9J0npq10gh3P/6+Vvr60noS59vsR19Le0K2fUks17KrJeb10v1udZGBeUkaS2P26XlZzW1pZ0/yCmPV2HVlfXlG3E9ZG/MXn6iKTWd+9uVF12nAgC81cX3/+M1aHz/fzy9UMqfaYBp2Tys+Rq8kzxsZU7cmIdNz+csarl/ZRo/Pj7OV656fxitLW8eqV/oz/V9hPh8yM5zxnrOeXdrjG7nOYvm39dk1mO76vPllaY8NDUzr6mEDubfZ9Yz+/x7ZveL58dHbpvRrJGmeavs8etLZ8zafd4h095KLULe+MjOi8XPc6xaGjZO1dfh+Mh+jiYeh+znaGI9p2dOnN1+jma+4yM2e5bxMdXk4vc3Zh6/MEv/Th+/9tGyx28Ox7ta2779+7N1s51vOn1/Nn/ecHHbWuK9TfOGbU9px27ecGHfDzMvmRM/fYKd6POGsTzuR6XD+cRP55T3aj4xni5iu47M0pZjwXwi8FYV8//4GlHL/2sX4P+a2a7oOjR71Rjj5X5OqNy+Pa15x4sz7p/5Ob2Brl7HNx/c8ZX+VUfPyb3OebTTz/3saFkbKPjcT1E/rs2sF/ZjzgRNUb6Xraco38t+LmMwDHXV7/fs2/+hu5fdcXFuv2+sv5C26/fJm5q3/HrL44YK+v345Qsny+cM5Att4xfmC8kJ8TmGovmz45aPpB98Wqh85PdzyueajwzMuNHYryknXT7Sd2zbBQCcPGL+33j/LM3//1fcIL2OKMpbz82sx3i5eWvO9Ule3vp76fKGzPaD6W9UzPW6+RNnP3zLkqMPnZmbt9yVn4e2+k8ta8OFeej88ubcPGJjbz4vnnfZOJ1nzS9PzG1/I0+cX56eG7+Rp88vj87Nsxp59PzmAXLjN+YBTu73xQrn6zKVxdVO5+vesnl0+uuzC5VHfyqnfK559OCMG439miKPBgA4vmL+Hy/jYv7/RGa7+b7PnpsX9Oi6Pfv3QBrxnzlWeeVC530LnbcudF4/v3mJ3PYf9/d/e5UXL/S80MLOk73t8+K0UnkxAAAnspj/x99qzM//55eftMvf+lryE/l52/jy8xMkPz/Z57/k/94XLyb/BwB4a4v5f/y1x/j3//5zup79u/Xy9Jz4c8/T/3VSnt5x/LdPnt77ebbgcwDHdx5g8fT25gEAADge+qYypZm/Z//ZdJn9Pfu838u/LGf7TlXSy+Mrd+8cH7/8uh1bxnaPX7792i3juy6/fue23bvHt9e3m2/emJu3pHljX6ik/dF+u2zetiz9ewjLcv4eQnb7GPaMqRsz/x5CttrFBX9HYPr4ddbevONXmmX7duMj73jnxf+DnO2jxvG/6g/Pu3zrrsu3bd+2e9vYxLa9463b1bLWgTl8b2bsljl9X2rmR6uJqc6a6/d3NrejPga7aUfmjwuXav2dNI5/Nk+rtSPJtGN52pLled9/kNPuH/zXP/ujsyffvDeE0XeU3zWf/gvJhsm/+8z47+0+/OMdtfaXcsdvrT1/V+us2pZpu4q+r7QROX7Pcfxe+4lrd+1+79Zrr9ue/UbJ7sT5jFJjfYHmM9Knf7nD+YnNOeVz/ZxCecaNE1PH8xMAALSI7//H69n4/uHX0guoWD6Vp8X3sWbN0+f3/nFunj7aWZ6e/V6yojw9u33c307z9Oo88/Rs/UV5ervt2+XpeXl3Xvzfz9l+rjqfz5nf5zxyx8kVnY2T7PcZFI2T7PZzHSfJPMfJe4Za14vGSba9eeMk77jnxf9kzvZ5Oh8P8/tcTu54+Gpn4+HXMutF4yG7/VzHQ2me4yFbf9F4aLd9u/GQd3zz4l+as32nWsdHbWBMjYvxy6+/ducXmrZb6O+/KGpfzeztW9jv/+hW5/27sJ/76szMZ3Hn7V/Yz5V1q/P2z+9zZbntf2Z+M2Gdt39hv9+lW3Obr53aqrv52vTDZkWfPyuax92UUz7XedxFM26cmMzjwvET8//4dk/M/+9Il71+G+jk/560t+r3mPXq8/cLex1zzN5/PRFez5vebvd6DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDW0l9ZObU8fOuuo5ee/js/+NPx12/63X+45uZf/eK3fz5y1W99/76Bb71xaMtZW3/y26dc9fDnLz64/68ee23ogX97oTDw8NTPyrnpajWE5OUkhOr3jvz5lw49dVqtLAkhlJPhfSEsT1Y8tjzJRBj9ZQhhS6OdrXfe//r5W2vLm+/obylflgmS3a8wWI7taW5nCDcU7hEnoWo6zvYevf694acf3XTLj1Z/92/7Dry0b3qTpNo0nkJYekXz4/tCCIvT/zVxtK2MD06XG0MIA02P+0BBu97dYfvX5ayfkS4XpcvBgjjx/jWZ9VJmu+x61BeXaUcMFNQ3X3nt6Ha7Iksy69mTUVfemJycTG/mtTOWL0+XD6bLc+dYVTn+T0IpCZVG8yeS6TESmo5bEpKpY1ptrJcaxzik+59ZTzLrpcx6uS+zX1P1pgOtnCSt5XG7THk8HVfS8rOaz9VtfCqn/J3pspo+Ud+I6yF7o25wxo3Gfk2J7ToyS1uOhVLTOahdeePApwdjMC0bTFbMeMxkG/G+Q5vuXFve/Pjh4Zx2JPclafykq/h7f7h8yee+c/t1K/PiX1FK45e6iv+zS55+5bLbv/mN3PhfjfHLXcU/75GBly954tY1uf1zJPZPpav4Yy88+eXVp155ILf9d8X41a7ibzj4dP/Q0UcezW3/aOyfxV3Ff/7DH3vx3mcfeik3fojxB7qKv/ngjq/0rzp6Tm78R2P/DHY3fl49cNFzq1b9YiQv/jMx/lBIhuce/559+z9097I7Ls49vhtj/wx31f5PnP3wLUuOPnRm3rkzuatXr5wAb0+npNdYt6Xr3eaZ89WUL/zlSKV+zbck/T/Uy4oyavUsXcD4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8Nf3TjRd89jMf+eSmShJCkrPNZBvxvvKiDRtGuqh37IUnv7z61CsPNJet7CIOAAAAUCzm4aVGSTWsDNcni8MZbbePcwRnxLWktTw7hxDjZOcIuo1T6lGcco/iVOYWJ1ttI05fj9qzqEdx+nsUp1oQpxo6i7N4ljiV2qjosD0Ds7an8ziDPYqzpEdxhnoUZ2mP4izrUZzhWeN0Pg6X9yjOih7FOaVHcU7tUZx3dBWnfjobaIrzKz1qz2k9ipOdU57rOBxKtzw9L05S64VyYZxKUm7c0W4+/bS0njNnqSd0UM9gQT1DRa/HHdazuMN63p15XGmO9VQ7rOc986wn6bCeX5tnPaWCeuK4vSHbvlhPXOtw/O/pUZy9PYrzxR7FubFHcf64R3H+pEdxbppnHIBOxfx/Ot8bDv2V3wgD6RknOwsQ893VUz9nvt41brxxyf7ma8EY712ZeIvaxbutNB1vRsbcGm/1XNuXnUDIxFuTKe9riVdp5COzxKs2x1ububPt/jbHy04oZNp3bqa8vyhedmIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbQP914wWc/85FPbgpJqP1ra7KNeF950YYNI13Ue2jTnWvLmx8/3FzWX+kiEAAAAFAo5uF9jZJq6K+sD/3Jopbtquk8QDVdLw/Xl6uWho21ZTJSmlofSJbP+rjK1ONu/mh9bc/e9227Zuzq8avHt39w/QXrLxq98KIL123dNjE+Wv8ZQn9BvBDC1PTDrj17vzA2MTG+c1e9MNv+lenjVqbrSfq4Ve8Po1Nx0/avKKivNKO+hbtRePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+P7t2GyLXVQYA+NyZ2ZnptmlH+jUNzWbIF1GLJnGrqZbuBcFKm4QsBZmtriXYBIubJjRJiXVsArY1QRFaAiGSH0ZisbWI0A9bxH4QiNRowI1B2qL9oT+UVitpyQ9JHcnO3NmZ2ZnMdqrNh8/zY+6973nPee8ZSOA9OwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AGbrAyPl0dGxwajEKIQQrZDTrWDZCydjeNSH3W/9Nzm7+WGTi5tjuUyfW0BAAAA6CHpwwcakXzIZdIhHa6ZelpQC/67ve8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/0xWhsfLI6NjF0chRF1yqh0kY+lsHJf6qPv620988pWhob82x4p9rAMAAAD0lvThqUYkH4phYRiIrmnJS84G5rbNb89L1pk3y7z2s4NueQtnmbekOZgNMyR5H+6x3pr6dfvMJQAAAOC8k/T/mUakEHKZOV37/159fZI3vy0vXb/281sBAAAA4P1J+v9cI1IMuUyx0a/Ptt9f0JaXzO/1d/tk/uIu85f0mL+6fvV3egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4f0xWhsfLI6Nj6SiEqEtOtYNkLJ2N41IfdVc8P/j3Ww89uKA5lsv0sRAAAADQU9KHZ0I4VWvr8yGXGQwD4eKpvn/o5v1PfeGpZ4ZDCLU2P5sN29dt3XrPitpnkrf8yKGB7x5+85sz8pbXPs/yNgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+CycrweHlkdOyiKISoS061gxBCuj4cl/qo+9pnPvfnx44/+0ZzrNjHOgAAAEBvSR8+3fvnQzFkQzZcNfVU7/UbUm3zu50ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeOLV+/72vrJibW33Me3nz+0toezpX3cePmDDeZ+j+5c+V9etyczf+VAACA/4X5IQrV9+jqtWf7rQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPBZGV4vDwyOpaPQoi65FQ7SMbS2Tgu9VE3fu5obs7J519sjhX7WAcAAADoLenDo0wSyYdiGAgD4cqpp05nAlP9f+G9VqrueJ+vCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwjJivD4+WR0bE5UQhRl5xqw47GQzKWzsZxqY+6j+7c9+mDl33nluZYLtPHQgAAAEBPSR+ebUTyIZf5SMiFa+vPE60TonT92nwuMG163uaWaYOznldpmZfuOO9TPytsCVMnE9PzdrXtLFPfTW1ePlmvULs25pVmzis1zSuGRvlSy7ywp2XWnKn3TA4wZu4vAAAAwFmU9P+5RqQQcplcU5/745b8Qo8+/oN8dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3DJZGR4vj4yORVEIUZecagfJWDobx6VZVYp2Nj/d95sPXfLln+ze1hwr9rcFAAAAoIekD5/u/fOhGOaFS8O8qb4/FFrzk7x/lE8dfOSff1kawrKrjg1l2pf9QXLzq9dueqH9I4RUa3YqhMvq9aIu9X79u0fuXVQ99VgIy65MXzujXjhzvdYl4+rT5fWrtx4+trnHlwMAAAAXiKT/H2hECiGXubtr/5903j36/4apBvyye3f+/Ir6Z70jb5uRKtTrpbrU++yiJ/60eOXf3jzd/5+p3sf3bTx4RUvBWqRNFFdHNm5bc+z6A6lk17X66bb6yffyxW+88a8N2x8+VaufD/l6fG6mU/2Zn20uiqsTqb1jq97dW2mtn+my/wd/++LxX87d/c7p+m/PH2zUX3KG/Z+5/uBtD+25Yd+hNa31QwilTvXfeueWcPUf7nqgff+DbQs3f/PNn22iuHpkwYkDK/cXb2ytH7XVT77/nx5/dM+PHv72M0n95LciSxfOtn6qrf7Luy7f+dKOtXNb66e67P+F218Z2lT61u/b939ny6qZrm8xc/+PX/fkHa+ui+9vHwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiwTFaGx8sjo2OpKISoS061g2QsnY3jUh91X7/16Fu37/7h95tjxT7WAQAAAHpL+vDp3j8fiiEbsmFwqu9/urx+9dbDxzaHQm00ql8zE5u2bP3ohk3b7r7zLL05AAAAMFtJ/59pRAohl1kUBur9/8jGbWuOXX8glfT/qaT/33DXxPploZH38q7Ld760Y+3cxjlBCFM/C8ifzvvEdN7NNx0tnPjjVxd3zFsxnXdkwYkDK/cXb0zyQnPe8tA4n3j8uifveHVdfH/j/ZrzPvaVTRP144lk3cHbHtpzw75Daxr7qF8H6+smeROpvWOr3t1bSfLS9Wu+vm8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKbJyvB4eWR0LKRDiLrkVDtIxtLZOC71UXfVol88cMnJZ+c1x3KZPhYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+A87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2K+/EKmqOA7g58zMtuPOru5qkBWtqxWFPSQFEfVSUREaIfRkSFiaD1EQRBT20G5oZFb0EmS9SFRQbSEU5CaJFmv0T3rpoYIC6yEQaaFcpIeKnTl3nL3OdeoqQfX5wHDuOffe7/3de87e2QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgX6W/trTZHtz24Oxt59306eP3HHvslvfvn7jk0Td+HNt4wye7B149Pr1p+eZvblyyce+9q6d2vnTg16F3fz/cM/iRVrMydeshxKMxhPoHM88/Mf3ZOXNjMYRQjcPjIYzExQdGYi5h1W8hhE3tOufvfOfYlZvn2okd/fPGF+VC8vcVGtWsnpbh+fXy31JP62zL7MOXhe+uX7f1i2Vvv9U3eWT8xCGx3rGeQli4ofP8vhDCgvSZk622pdnJqV0bQhjoOO/qHnVd+Bfrv7ygf35qz0pto0dOtn9Frl/JHZfvZ/py7UCP652uojrKHtfLYK6ffxmdrqI6s/GR1L6X2pV/M7+afWKoxFBrl39fPLFGQse8xRCbc1lv9yvtuQ3p/nP9mOtXcv1qX+6+mtdNC60a4/zx7LjcePY6rqXx5Z3v6i5uLxg/N7X19Id6POuH/EZL46SN9n01ZXXNnKKWf0Kl4x3Ubbw98WkyGmmsERefdM4fXWT7ptc9fXF1/YcHhwvqiLtjyo+l8rd8PjJ455vbH1palL+hkvIrpfK/X3Po5zu2v/xiYf5zWX61VP4V+waOrvlo24rC5zOTPZ9aqfy7Dn/8zLKz757sNtfN/F1Zfr1U/nVTh/qHZvftL6x/VfZ8FpTK//bam394/as9RwrzQ5Y/UCp//dQDz/aPzl5amL+/9afQaK7QEuvnl8mrvh4d/WmsKP/L7PkPdcmPPfNfG995zSuLdqwuXJ9rs+czXKr+Wy/au3Vwds8FRe/OuOtMfXMC/D8tSf9jPZn6ZX9ndqiVKOOpjt8LL4zVWt9Ag+kzVCLwVCY6tueus/AM5wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sgMHJAAAAACC/r9uR6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBXAAAA//9khCEL") r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80, 0x2, 0x8, 0x8, 0x6, 0xafb8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x800, 0x3, 0x0, 0xfffffffe, 0x7}}}}]}, 0x4c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8a400, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000400000003000000a400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0c00000004000000040000005f0f000000000000", @ANYRES32=r12, @ANYBLOB="03000000000005000002000000fffffffb000000224bad6deabcf66ee95967975ce5b57a2daef8c6a1a00c8a17f722e831205ca3b38f50fe9328bd909daebe4b96ab2e53cebaad920ee0e3a44c9b1bd707b4411755fb78d8753e0bb528a2b864cdb1d4bdd14e0458e776264a26f53581b3914b8d6e8d3fe48132ac3d36b29c0f7f83c2021d05492ce5da22dad5ff75d1a7d854163cf6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r14 = dup2(r12, r11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f0000000000), &(0x7f0000000040)=r14}, 0x20) [ 75.376309][ T4670] Bluetooth: hci0: command tx timeout [ 75.756269][ T5316] loop0: detected capacity change from 0 to 32768 [ 75.841501][ T5316] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 75.896197][ T5316] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 75.896197][ T5316] allowing incompatible features above 0.0: (unknown version) [ 75.896197][ T5316] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.911204][ T5316] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.916012][ T5316] bcachefs (loop0): Version upgrade required: [ 75.916012][ T5316] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 75.916012][ T5316] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 75.916012][ T5316] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 76.011295][ T5316] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 76.011312][ T5316] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 76.011350][ T5316] loop0 node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 76.011356][ T5316] flagging btree extents lost data [ 76.011362][ T5316] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 76.011369][ T5316] ret btree_node_read_validate_error [ 76.037472][ T5316] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 76.050348][ T5316] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:27:0 len 0 ver 0: [ 76.050368][ T5316] gen 0 oldest_gen 0 data_type btree [ 76.050372][ T5316] journal_seq_nonempty 4 [ 76.050382][ T5316] journal_seq_empty 0 [ 76.050385][ T5316] need_discard 1 [ 76.050389][ T5316] need_inc_gen 1 [ 76.050392][ T5316] dirty_sectors 256 [ 76.050395][ T5316] stripe_sectors 0 [ 76.050399][ T5316] cached_sectors 0 [ 76.050404][ T5316] stripe 2571892736 [ 76.050409][ T5316] stripe_redundancy 0 [ 76.050414][ T5316] io_time[READ] 1 [ 76.050419][ T5316] io_time[WRITE] 256 [ 76.050424][ T5316] fragmentation 0 [ 76.050429][ T5316] bp_start 8 [ 76.050435][ T5316] [ 76.050439][ T5316] invalid data type (got 3 should be 7), deleting [ 76.096097][ T5316] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 76.096118][ T5316] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 76.096126][ T5316] loop0 node offset 0/16 bset u64s 0: invalid bkey format: incorrect number of fields: got 0, should be 6 [ 76.096133][ T5316] u64s 0 fields 0:0, 64:0, 32:0, 0:0, 0:0, 0:0 [ 76.096138][ T5316] flagging btree snapshots lost data [ 76.096143][ T5316] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 76.096150][ T5316] ret btree_node_read_validate_error [ 76.124056][ T5316] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 76.129639][ T5316] bcachefs (loop0): btree node read error at btree lru level 0/0 [ 76.129651][ T5316] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 76.129658][ T5316] loop0 node offset 0/16: incorrect min_key: got 0:0:6 should be POS_MIN [ 76.129664][ T5316] flagging btree lru lost data [ 76.129670][ T5316] ret btree_node_read_validate_error [ 76.147938][ T5316] bcachefs (loop0): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 76.153825][ T5316] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 76.153838][ T5316] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e8081ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 76.153847][ T5316] loop0 node offset 0/32: got wrong btree node: got [ 76.153853][ T5316] btree=freespace level=0 seq e81e1ed936acf3df 1 [ 76.153859][ T5316] min: POS_MIN [ 76.153863][ T5316] max: SPOS_MAX [ 76.153868][ T5316] flagging btree freespace lost data [ 76.153873][ T5316] ret btree_node_read_validate_error [ 76.182446][ T5316] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 76.189608][ T5316] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 76.189622][ T5316] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 76.189630][ T5316] loop0 node offset 0/24 bset u64s 0: incorrect max key 18446744073709551360:36028797018963967:U32_MAX [ 76.189638][ T5316] flagging btree backpointers lost data [ 76.189644][ T5316] ret btree_node_read_validate_error [ 76.210483][ T5316] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 76.217572][ T5316] bcachefs (loop0): scan_for_btree_nodes... [ 76.226023][ T5318] BUG: unable to handle page fault for address: ffffed110a788204 [ 76.231536][ T5318] #PF: supervisor read access in kernel mode [ 76.234076][ T5318] #PF: error_code(0x0000) - not-present page [ 76.236555][ T5318] PGD 5ffcd067 P4D 5ffcd067 PUD 0 [ 76.238736][ T5318] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 76.240947][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: read_btree_node Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 76.245946][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.250536][ T5318] RIP: 0010:__bch2_bkey_unpack_key+0x5b/0xe10 [ 76.253397][ T5318] Code: 42 0f b6 04 38 84 c0 0f 85 b2 09 00 00 48 89 5c 24 18 0f b6 1b 8d 43 ff 4c 8d 34 c5 00 00 00 00 4d 01 ee 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 66 5f 09 fe 4c 89 74 24 08 49 8b [ 76.262413][ T5318] RSP: 0018:ffffc9000d336a18 EFLAGS: 00010a02 [ 76.264841][ T5318] RAX: 1ffff1110a788204 RBX: 0000000000000000 RCX: ffff888035b42440 [ 76.268207][ T5318] RDX: 0000000000000000 RSI: ffff88805241d8c0 RDI: ffffc9000d336c90 [ 76.271551][ T5318] RBP: ffffc9000d336d28 R08: ffff888035b42440 R09: 0000000000000005 [ 76.274854][ T5318] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000d336c90 [ 76.278283][ T5318] R13: ffff888053c41028 R14: ffff888853c41020 R15: dffffc0000000000 [ 76.281338][ T5318] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 76.284546][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.287208][ T5318] CR2: ffffed110a788204 CR3: 0000000050afe000 CR4: 0000000000352ef0 [ 76.290658][ T5318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.293992][ T5318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.297475][ T5318] Call Trace: [ 76.299152][ T5318] [ 76.300426][ T5318] ? bch2_bkey_swab_key+0x129/0x180 [ 76.302699][ T5318] __bch2_bkey_compat+0x4db/0xbd0 [ 76.304921][ T5318] ? __pfx___bch2_bkey_compat+0x10/0x10 [ 76.307353][ T5318] ? kfree+0x18e/0x440 [ 76.309166][ T5318] ? bch2_btree_node_fill+0xd12/0x14f0 [ 76.311539][ T5318] ? bch2_btree_node_get_noiter+0xa2c/0x1000 [ 76.314107][ T5318] ? read_btree_nodes_worker+0x1319/0x1e20 [ 76.316645][ T5318] ? kthread+0x70e/0x8a0 [ 76.318555][ T5318] ? ret_from_fork+0x3fc/0x770 [ 76.320663][ T5318] ? ret_from_fork_asm+0x1a/0x30 [ 76.322858][ T5318] ? bch2_checksum_update+0x91/0x160 [ 76.324946][ T5318] ? bch2_checksum+0x36f/0x490 [ 76.326858][ T5318] ? __pfx_bch2_checksum+0x10/0x10 [ 76.328885][ T5318] validate_bset_keys+0x6c1/0x1390 [ 76.331168][ T5318] ? validate_bset+0x1420/0x1bd0 [ 76.333342][ T5318] ? __pfx_validate_bset_keys+0x10/0x10 [ 76.335802][ T5318] ? prt_str+0x439/0x760 [ 76.337650][ T5318] ? bch2_btree_node_read_done+0x17a0/0x4f60 [ 76.340327][ T5318] bch2_btree_node_read_done+0x18c8/0x4f60 [ 76.342938][ T5318] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 76.345615][ T5318] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 76.348021][ T5318] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 76.350422][ T5318] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 76.352826][ T5318] ? bch2_printbuf_make_room+0xdb/0x360 [ 76.355216][ T5318] ? enumerated_ref_put+0xbe/0x270 [ 76.357689][ T5318] btree_node_read_work+0x426/0xe30 [ 76.360238][ T5318] ? __pfx_btree_node_read_work+0x10/0x10 [ 76.362716][ T5318] ? bch2_latency_acct+0x436/0x520 [ 76.364843][ T5318] ? __pfx_bch2_latency_acct+0x10/0x10 [ 76.367223][ T5318] ? bio_associate_blkg+0x6d/0x230 [ 76.369370][ T5318] bch2_btree_node_read+0x887/0x29f0 [ 76.371736][ T5318] ? bch2_btree_node_fill+0x954/0x14f0 [ 76.374635][ T5318] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 76.377610][ T5318] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 76.380741][ T5318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.383821][ T5318] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 76.386575][ T5318] ? bch2_btree_node_mem_alloc+0xcd9/0x1820 [ 76.389251][ T5318] ? six_unlock_ip+0x302/0x430 [ 76.391700][ T5318] ? bch2_btree_node_fill+0xb47/0x14f0 [ 76.394596][ T5318] bch2_btree_node_fill+0xd12/0x14f0 [ 76.396911][ T5318] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 76.399472][ T5318] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 76.402435][ T5318] ? btree_cache_find+0xf4/0x2d0 [ 76.404470][ T5318] ? btree_cache_find+0xf4/0x2d0 [ 76.406597][ T5318] ? btree_cache_find+0x26f/0x2d0 [ 76.408760][ T5318] ? __pfx_btree_cache_find+0x10/0x10 [ 76.411055][ T5318] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 76.413550][ T5318] read_btree_nodes_worker+0x1319/0x1e20 [ 76.416142][ T5318] ? read_btree_nodes_worker+0xcef/0x1e20 [ 76.419072][ T5318] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 76.421705][ T5318] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 76.424261][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.426435][ T5318] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.429021][ T5318] ? __kthread_parkme+0x7b/0x200 [ 76.431112][ T5318] ? __kthread_parkme+0x1a1/0x200 [ 76.433262][ T5318] kthread+0x70e/0x8a0 [ 76.435060][ T5318] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 76.437702][ T5318] ? __pfx_kthread+0x10/0x10 [ 76.439784][ T5318] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.442026][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.444107][ T5318] ? __pfx_kthread+0x10/0x10 [ 76.445942][ T5318] ret_from_fork+0x3fc/0x770 [ 76.447784][ T5318] ? __pfx_ret_from_fork+0x10/0x10 [ 76.450247][ T5318] ? __pfx_kthread+0x10/0x10 [ 76.452177][ T5318] ret_from_fork_asm+0x1a/0x30 [ 76.454198][ T5318] [ 76.455518][ T5318] Modules linked in: [ 76.457157][ T5318] CR2: ffffed110a788204 [ 76.458876][ T5318] ---[ end trace 0000000000000000 ]--- [ 76.461196][ T5318] RIP: 0010:__bch2_bkey_unpack_key+0x5b/0xe10 [ 76.463666][ T5318] Code: 42 0f b6 04 38 84 c0 0f 85 b2 09 00 00 48 89 5c 24 18 0f b6 1b 8d 43 ff 4c 8d 34 c5 00 00 00 00 4d 01 ee 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 66 5f 09 fe 4c 89 74 24 08 49 8b [ 76.471729][ T5318] RSP: 0018:ffffc9000d336a18 EFLAGS: 00010a02 [ 76.474345][ T5318] RAX: 1ffff1110a788204 RBX: 0000000000000000 RCX: ffff888035b42440 [ 76.477633][ T5318] RDX: 0000000000000000 RSI: ffff88805241d8c0 RDI: ffffc9000d336c90 [ 76.481069][ T5318] RBP: ffffc9000d336d28 R08: ffff888035b42440 R09: 0000000000000005 [ 76.485325][ T5318] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000d336c90 [ 76.488816][ T5318] R13: ffff888053c41028 R14: ffff888853c41020 R15: dffffc0000000000 [ 76.492213][ T5318] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 76.496028][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.498775][ T5318] CR2: ffffed110a788204 CR3: 0000000050afe000 CR4: 0000000000352ef0 [ 76.502029][ T5318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.505416][ T5318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.508854][ T5318] Kernel panic - not syncing: Fatal exception [ 76.511763][ T5318] Kernel Offset: disabled [ 76.513562][ T5318] Rebooting in 86400 seconds..