program: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="d0187f0008021100000108041100000050505050505020000f", @ANYRES8=r0], 0x3c) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) ioctl$TIOCGPGRP(r2, 0x40086806, &(0x7f0000000100)) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1e, &(0x7f0000005b80)=ANY=[@ANYBLOB="6e6f7243636f766572792c6a6f75726e61696f6e5f6ead874047fdbbedd6616d65732c6572726f72733d636f6e74696e75652c00"/62], 0x9, 0x5a27, &(0x7f0000000140)="$eJzs3X+QHNV9IPDXM7O7o12ttBI4yGCkRaCEQGyt+FXYTsVKLrFTQCi5SDmIkw0LWhHZK6GShAFBgsiBDwpw4ZRTCU7+IBSmDltxUQUXUCgTfpzE2dgUFx91hakzd9h/+IpwqALoKJcvm9qdfrMzvdPbs7OzQoLPp2B735ueb3/79Zuefm96NQEAAIAPhIO37Tp88Ym/9/0/G3vn5t//h223hIHyVH01rjCULq9/rzLkSOrrXTG1zPaLX7vxWz8bvup3vvdw/zffPbD5lC0//t3jrnriixfsv/evn3578NF/fa0obuxPZ0yXkzeSEKrfPfQXXznw/AmTdUkIoZwM7Q1hWbL86WVJJsTIL0IIm9PCilBuevCRd87eMrm85c6+pvqlmSD6+wdbNe1new5fd2b4yW9vvPWHq77zdz37Xt87vUpSbehPISy5ovH5PSGERSGE4bQce9uK+OR0uSGE0N/wvPML8jq1zfzX5pRPSpe96XKgIE58fHWmXMqsly1HPZllf8H25isvj07XK7I4U86ejOYrL89YvyxdPpYuz5hj/HL8PwmlJFTq6Y8n030kNBy3JCRTx7JaL5fqxzak+58pJ5lyKVMu92T2a2q7aUcrJ0lzfVwvUx9Px5W0/pTGc3ULl+TUfzhdVtMX6ruxHLK/1AzM+KW+X1NiXodmyeVIKDWcg1rV1w98ejAG0rqBZPmM50y0EB87sPGuNeVNzxwcap1GT3g4SeMnHcXf84Nli7/w7TuuXZGzn8kVpTR+KRM/aSv+qxe+8OZld9z/jdz498T45anz+1zzP+vJ/jcufPa21TntE5JDsX0qHbXP6GvP3b3q+Cv35eZ/X4xf7Sj++v0v9A0efvKp3PxHYvss6ij+K5/89E8feunx16fjV5rjhxi/v6P4m/bv+GrfysOn5+b/VGyfgY7iv/rWvvNeXrny54114fTB6fgvxviDHcV/cO+9n3hg6Z0X5B7fDbF9hjqKf9FpT9y6+PDjJ+edO5P7uvXOCfDBdFx6jXV7Wu50nDlfDeOFvxqu1K6S+tJxzWA3N5S5+JzczpJuxgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMKHzvyvn/nfnxt6o5KW+9Jfqmk51veGkCwKIezaPbpz99btVw9/8Zprd24fHR8e3T08tn33zhuGz/mN4Z1jO8ZHb5h8dOSjZ9eetzwktWVy8oxt901MTJSGmuvi9v7daft+sub8//PPIYx86EcrK7n5r7132wPHt/iZkayf+NS2ay/+0bl/W6pVDKV5DbXIa2JiYiLk5PV/L/3lA39+6GenhzDyK7Pl9dwrv/WPTQlNVUzHSZX6Qi2hvqS/ZR71rNN8YntVtmwdHxuZvX0nn1/O2Y9/f+Prv9hy/dd+WWvfau5+tNm+i9ZPjJf+cuNF//8vb6pVzJJX78R7eNzT9i7ntXfci5hfbL9q2t6D6X4tyWnvSs5+3fbDp1767ol3vL03jFTeWjVz20X71ZN2gJ7kw21tN26hP1nWVF9N16+/vtPnrd29bcfaXTfs+ejWbaNXj109tv3j685Zd97Iueedu7Y/jI+NrE33f0mX9j9u/1fb3P+ift6d/rT0y3sfiz/b609FeRW1x2Rexe3RmFHe66//kq98/eP3PntxraLovBLXrp9P0mX/5HFeFxr628y2arVfRe0QQhhu1Q5vvn1BOOF/bL216DzUeGQaf2Yk6yeeX/0vf3v+36z4zVrFETnPNyY05/N831Qe9ayn85lqr2p6PCaO0vbtC+V0vwZa5rXu+Wd77jr4z39Sz6+3N1w/unv3znW1n4vTTBcnJ7XMK1sb92vV1M9ySJsl1Ltpi/46qSfU8sueP+Pq2VYdSB8bSJa33K+s+NiBjXetKW965mBeSycP17a4KAzWlslHctYczzyxXE+41faP1tdfUf9Y+Zm/efRzj/79OTP6x1m1n0X7leTs13deevDr3/zaf/z77u3XZ37rhaF/+Z9/vKZWcaTOKz0dn1dqedSzTvNJGs8rZ4VQ9PpbFVrvR+7rr9R6f2Z7/SUttjO9fut4w5nyQCh39Ho968n+Ny589rbVua/XQ+2+Xm9qKpULXq9Hy/tS9vWVVJrzWLjXV1NHSdZPfO/24/Y+ffOGE2sVRf26vnarfn128fVIKWe//vGyl1deM/wf/nv3zhvf+o1HLv/x6Po/rVV0ftxjLt057tW0fas57VvPOo47G9v3Y1ddM765Vj/f69/Kgl3/psuC8U88ley6Yc+XRsfHx3buam+/2n0/jdvJtnKn76fx7La8YL9KM/Zr4X5pp73afb3F/Dd33F7Nr7eBkHT0vrDnB8sWf+Hbd1w7NONZ6YauKKXxSx3Ff/XCF9687I77v5Eb/54Yv9JR/NHXnrt71fFX7suNf1+Sxq92FH/9/hf6Bg8/+VRu/JGY/6KO4r/yyU//9KGXHn89N36I8Qc6a/+39p338sqVP8+N/2KSbmfyGimER945e0utnISehvnRyTx6mvIK2XKSKZcy5XJjuVSba61voJwkzfVxvbT+lIZcWvmjnPp4FVZdUVu+G8sh+8vs9UebUsO5v1V90XUqAMD7Xfz8P16Dxs//x9ILpfyZBpg233HYipy4cRw2PZ/T2/T4ijR+fH6cB1z5sTAyubxluHahP9fPEeLrITvPGbdz+qnNMTqd5yyaf1+dKce8avPllYZxaGrmuKYS2vj8a+Z2Zp9/z+x+8fz48O0z0hpumLfKHr+edMas1f0OmXwrkxHy+kd2Xizez7FySdgwtb02+0f2Ppp4HLL30cTtnJg5cbZ3v0pPyN5HM9/+EdOepX9MpVz8+cbM4xdmad/p49c6Wvb4zeF4VyfXX+jPZ7swb9jylNbOvOGLS2Y5X7Y9b7iwn4eZl8yJn77AjvZ5w1gf96PS5nzi53Lqa6/avfVyp/OJ8XQR8zo0Sy5HQs58YsV8InCsi+P/+B4xOf6fvAD/f5n1iq5Ds1eNMV7ufULl1vkUjTtm3qfX39H7+Kb9O77at/Lw6bnXOU+1e9/PjqZSf8F9P0XtuCZTTttxee22hBbtmDNBUzTey26nqN2z92UMpHfCz7XdH9x77yceWHrnBbntvqH2Rlrc7l9vKg0WtPsxMF5oHf9I3WfQd8yPF6ZeCe/NeGHRjK3Ex47UfQxF82fv2XgkvfGpG+OR61u8Z/xhzn7P9f6G/hm/1PdrylE+Hpl5f0Pjwch7swUAPpDi+L/++Vk6/v9fcYX0OqJo3HpGphzj5Y7/e1rnkzdu/YN0eX1m/YH0Lyrmet180WlP3Lr48OMn545b7mt3HPqfmkpDhePQ+Y2bc8cRG7pzv3juOKI+zprfODE3//o4cX7j9Nz49XH6/MbRue1T/9xtfvMAufHr8wBH4nOxgYa/NGkvfvvj3IL5uszGYrHd+br37Tg6/fPZhfpc75Kc+rmOowdm/FLfrynH9jgaAODYF8f/8TIujv+fzaw338/Zc8cFXbpuz/57IPX4Lx6pceVCj/sWety60OP6WeYlWmwhPtb+vMSxfb/ows8LLew82Qd+XJxu1LgYAICjWRz/L0rL+eP/2vgk2dvZ+KTV+K2naXxyxMfnpXbiG593676BY318njf/1dtyK/HRo2f+y/jf5+LFjP8BAN7f4vg//tlj/Pf//ktazv679Uf/5+itrl6N098/4/TWo7XicXrlGLlPZX73AeQeX/cBNNUf0XmARdPrmwcAAOC90DM1Upr5d/afT5fZv7PP+7v8y3LWb1clvTy+cvfOsbHLr92xeXT32OXbr9k8tuvy63Zu3b17bHttvbbGjY/d/5EvpxXxsThuzB23pOPGnlBJ26P1etlx29LwWG2Z8+8hZNePYU+a+mXmv4eQ3eyign9HYPr4tZdv3vErzbJ+q/6Rd7zz4v9RzvpR/fhf9cdnXb5l1+Vbt2/dvXV0fOueseb1Jket/XP43szYLHP6vtTMjxlKc//+zu7kUZqRR0/aHnnfz55k8liWZrIs7/sPcvL+/n/78y+fNvHLh0IY+VD5I/Nqv2T9xH++dOwPdh/80Y7J/Euz5l9fM82r6PtKs+vH/amMX7Nr95lbrrl2e/YbJTsT5zNK9fICzWekL/9ym/MTm3Lq53qfQnnGL0entucnAABoEj//j9ez8fPDr6UXULG+/XH6/D4/zh2nj7Q3Tm/4XrIHGq8P88bp2e8xi/vb7ji9Os9xenb7ReP02vrrmtZvNU7PG3fnxf/DnPXnqv1+koTkrs7v88jtJ1e010+y32ewNP33LfP6SXb9ufaTpN1+0ttevkX9pNX6rfpJetyTdvvJZ9Nlu/2ksD+kCc/3vpzc/nBPe/3h1zPlov6QXX+u/aE0z/NGdvtF/aHV+q36Q97xzYt/cc767WruH5MdY6pfjF1+3TU7v9Sw3kJ//8X881vY7//oVPv5L+x9Xwuf/8L+/dfC5z+/+8py839xfjNh7ee/sN/v0qkjNl+bvm8X3X9WNI+7Mae+aR63IXDePG7vjF+OTuZx4b0Tx//x4544/r8zXXb7Y6Bj/nvSfO9x6/hd+h6zouuY9+X7eRufy854P2/9Zy7vOe/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3pq6yYWh68bdfhi0/8ve//2dg7N//+P2y75ddu/NbPhq/6ne893P/Ndw9sPmXLj3/3uKue+OIF++/966ffHnz0X18rDDw09bNyRlqshpC8kYRQ/e6hv/jKgedPmKxLQgjlZGhvCMuS5U8vSzIRRn4RQthcz7P5wUfeOXvL5PKWO/ua6pdmgmT3KwyUYz6NeYZwfeEecQyqpv1sz+Hrzgw/+e2Nt/5w1Xf+rmff63unV0mae9CSKxpLPSGERen/k+K6K+KT0+WGEEJ/w/POL8jr1DbzX5tTPild9qbLgYI48fHVmXIps162HPVklv0F25uvvDw6Xa/I4kw5ezKqqXQcPy/PWL8sXT6WLs+YY/xy/D8JpSRU6umPJ9N9JDQctyQkU8eyWi+X6sc2pPufKSeZcilTLvdk9mtqu2lHKydJc31cL1MfT8eVtP6UqRzLuft9SU79h9NlNX2hvhvLIftLzcCMX+r7NSXmdSg3kyOj1HAOalVfP/DpwRhI6waS5TOeM9FCfOzAxrvWlDc9c3AoJ4/k4SSNn3QUf88Pli3+wrfvuHZFXvwrSmn8UkfxX73whTcvu+P+b+TGvyfGL3cU/6wn+9+48NnbVue2z6HYPpWO4o++9tzdq46/cl9u/vfV4r8Uqh3FX7//hb7Bw08+lZv/SGyfRR3Ff+WTn/7pQy89/npu/BDj93cUf9P+HV/tW3n49Nz4T8X2H+is/7y177yXV678+XBe/Bdj/MGO4j+4995PPLD0zgtyj++G2D5DHcW/6LQnbl18+PGTq3nx7+vWOyfAB9Nx6TXW7Wl5tnFmtWHeIjvOnK+G8cJfDVdq13yL0/8Hu7mhRn217SxZqPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxv/dNN53z+0k99dmMlCSHJWWeihfhYuXf9+uEOtjv62nN3rzr+yn2NdSs6iAMAAAAUi+PwUr2mGlaE65JF4aSW68c5gpNiKWmuz84hxDjZOYJO45S6FKfcpTiVLsXpmRlnopM4vV3Kp69LcaoFcaqhvTiLZolTmewVbebTP2s+7ccZ6FKcxV2KM9ilOEu6FGdpl+IMzRqn/X64rEtxlncpznFdinN8UZxKe3E+1KV8fqWDOL0t4pzQpXyyc8pz7YeD6Zon5sWZ+qVcGKeSlOsPtJpPPyHdzsnz3M5AwXYGi96P29zOoja3c2rmeaU5bqfa5nZ+dZ7bSdrczq/Pczulgu3Efnt9Nr+4nVhqs//fMIc4923Oj7OnS/nc2KU4N3Upzp90Kc6fdinOzfOMA9CuOP6fHu8Nhb7Kb4b+9IyTnQWI491VUz9r73elxvNQzgkpxvtIpr63RbymMNmBeibeqjbya4qXnUDIxFudqe9pilepj0dmiVdtjLcm82Dh/mYnFDL5nZGp7yuKl51YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAF9E83nfP5Sz/12Y0hCZP/tTTRQnys3Lt+/XAH2z2w8a415U3PHGys66t0EAgAAAAoFMfhPfWaauirrAt9SW/TetV0HqCalstDteXwkjBxcwghGS5NlfuTZbM+r5I+b+3ubTvW7rphz0e3bhu9euzqse0fX3fOuvNGzj3v3LVbto6PjdR+htBXEG8yhckfu27Y86XR8fGxnbtqldn8V6TPW5GWk/R5Kz8WRiaXt6T5Ly/YXmnG9mb+0pP/0Jx+aePwAQAAAAAAAAAAAAAAAAAA/Bu7dhci11nGAfw9M7Mz021jVvo1Dc1myBdRiyZxK6mW7gHBQpuELAWZqa4l2ASLmya0SYl1bAO2NUERWgIhkgsjsdhavOmHLWI/CERqNODGIG3RXuiF0molLbmQlJHszJmdOTvjrGNpmvr7XZxz5j3P+z7nnYuF/9kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID31XRtbLIyPlEdjkKIQrZrTb2L5F42H8flAfp++bkd3y+MnlnVPlbIDbAQAAAA0FeSw4daI8VQyGVDNlw182lpaLsRZnM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2e6NjZZGZ+oXhyFEDWGMumaehfJvWw+jssD9H397Sc+88ro6F/bx0oD7QAAAADoJ8nhs6G/GEphWRiKruqoa74bCItS89N1yTqL51mXfnfQq27ZPOtWzrPuY33qNjbPuwMAAABc+JL8n2uNjIRCbkHP/J/k+mzz3KtuSapPUj/IbwUAAACA/02S/wutkVIo5EqtvN7v//hJ3l+aqkvm9/u/fTJ/RY/5K1ND6fkbmmf/pwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC8d0bWyyMj5RzUYhRD1q6l0k97L5OC4P0Hft88N/v/losWOskBtgIQAAAKCvRg5/cOls9C6GQm44DIWLZ3L/6I2HnvriU8+MhRAaMT+fD7s379x519rGMalbc/zo0PeOvfmtOXVrGsfztkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA9M10bm6yMT1QvikKIetTUu0juZfNxXB6g72uf+8KfHzv17BvtY6UB1gEAAAD6S3L4bPYvhlLIh3y4YuZTe9Y/J5Oa3+udAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDhcfc37v365qmpLXe5cOHCRevifP9lAgAA3mtLQhTq/6UrN53vpwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Ipmtjk5XxiWoxCiHqUVPvIrmXzcdxeYC+8XMnCgvOPP9i+1hpgHUAAACA/pIcPpv9i6EUhsJQuHzmU7d3AjP5f+R9fEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgA2W6NjZZGZ+oLohCiHrU1LtI7mXzcVweoO+jew5+9sjC797UPlbIDbAQAAAA0FeSw/OtkWIo5D4eCuHq5uepzglRtnnu/l5gdt6OjmnD855X65iXnfe8vamd5Zq7acwrJuuNNM6teeW588pt80qh1b7cMS/s75i1oM9zBgAAADiPkvxfaI2MhEKu0JZzf9JRPyLnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9TNfGJivjE9UoCiHqUVPvIrmXzcdxeYC+9/7mo5d85af7drWPlQZYBwAAAOgvyeGz2b8YSmFx+EhYPJP7w0hnfVL3j8rZI4/88y+rQlh9xcnRXHrZHyYXv3rthhfShxAyndWZEBY2+0U9+v36d4/cs7x+9rEQVl+evXpOv/Cf+3UuGdefrmzZsPPYyR19vpzW0wEAAMCFLcn/Q62RkVDI3dkz/yfJu0/+b5kJ4Avv2fPzy5rHZiJPzciMNPtlevT7/PIn/rRi3d/ePJf/0/2G264/dXDbkcs6GjZGUqK4Pr5t18aT1x7OJLtu9M+m+iffy5e++ca/tu5++GyjfzEUm+OLUhtpdJt7TLkork9lDlTXv3ug1tk/12P/D/72xVO/XLTvnXP9314y3Oq/MnTr377zXv2Hb3lo/3UHj27s7B9CKHfr/9Y7N4Ur/3DHA+n9D6cWbv/m248pUVw/vvT04XWHStd39o9S/ZPv/2enHt3/44e/80zSP/mtyKpl8+2fSfV/ee+le166f9Oizv6ZHvt/4dZXRreXv/379P5v71g11/Mp5u7/8WuevO3VzfF96VsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLtO1scnK+EQ1E4UQ9aipd5Hcy+bjuDxA39dvPvHWrft+9IP2sdIA6wAAAAD9JTl8NvsXQynkQz4Mz+T+pytbNuw8dnJHGGncjZrn3NT2u3d+Yuv2XXfefp6eHAAAAJivJP/nWiMjoZBbHoaa+X98266NJ689nEnyfybJ/1vvmNqyOrTqXt576Z6X7t+0qPWeIISZnwUUz9V9erbuxhtOjJz+49dWzNRdlKpbO1t3fOnpw+sOla5P1gvtdWtC6/3E49c8edurm+P7Ws/XXvfJr26far6eSNYdvuWh/dcdPLqxtY/mebi5blI3lTlQXf/ugVpSl22ei819AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdfGJivjE9WQDSHqUVPvIrmXzcdxeYC+65f/4oFLzjy7uH2skBtgIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV27Cc0jiqOA/h7uxuzzSZt0grGimlaFaUeLAoielFRkVak4KlSpNragygIIko9mEorlqp4EVq9FFFBjVJQsLFYWiUV/xUvHlRQqB6EUgxoQ/FgJNk3m82k46bTXtTPB5a3782b7/xm5u1sNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Kt21wZn26M7HJu9efvsXzzx46uk7P3pk+5VPvf3L8OZbP9/f88bp8S0rt35/27LNBx9aO7b31SN/9H3w1/GOwU82m9WpWw8hnowh1D+eePnZ8S8vmh6LIYRq7B8JYSAuPTIQcwlr/gwhbGnVOXfj+6eu2zrdbt/dPWd8SS4kf16hUc3qaeqfWy//LfW0zrZNPnF1+PGWDTu+XvHeu12jJ0Zmp8R623oKYfGm9v27QgiL0mtattoGs51Tuz6E0NO23w0d6rpsgfVfU9C/JLUXpLbRISfbvirXr+Tm5fuZrlzb0+F4s/YsX/DUBdRRdl4nvbl+/mF0rorqzMYHUvthalefZX41e8VQiaHWKv/hOLtGQtt9iyHO3Mt6q19p3duQzj/Xj7l+JdevduXOa+a4aaFVY5w7ns3LjWeP41oaX9n+rD6DewrGL05tPX1QT2f9kH/T1Jj3pnVeM7K6Jv6hlqS785TyKgUHyMZbNz7djEYaa8Sl8/aZmqc2lW0b3/D8FdWNnxztL6gj7o8pP55F/lQrf9tXA733vbPr8cGi/E2VlF8plf/TumO/3bvrtVcK81/K8qul8q891HNy3ac7VxVen4ns+tRK5d9//LMXVlz4wGjRYor7svx6qfybx451900eOlxY/5rs+iwqlf/DTXf8/Na3B04U5ocsv6dU/saxR1/sHpq8qjD/cPOj0JhZoSXWz++j1383NPTrcFH+N83rH0f6zpAfO+a/ObL3xteX7F5buD7XZ9env1T9d11+cEfv5IFLi56dcd/5+uYE+H9alv7Gei71y/7OPFdtvxf2DNea30C96dV3Pg+UM32cxel9/n8vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/swMHAgAAAACC/K0HuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA///KSxvl") [ 75.008846][ T5318] Bluetooth: hci0: command tx timeout [ 75.048370][ T5339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.078538][ T5339] capability: warning: `syz.0.0' uses deprecated v2 capabilities in a way that may be insecure [ 75.266854][ T5339] loop0: detected capacity change from 0 to 32768 [ 75.372924][ T5339] bcachefs (loop0): starting version 1.519: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=0,compression=lz4,nopromote_whole_extents,nojournal_transaction_names,allocator_stuck_timeout=3 [ 75.372943][ T5339] allowing incompatible features above 0.0: (unknown version) [ 75.372948][ T5339] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.394703][ T5339] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 75.398215][ T5339] bcachefs (loop0): invalid bkey in superblock btree=extents level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 360287970189639680:0:0 durability: 0 (invalid extent entry 000000000001b000) [ 75.398242][ T5339] invalid extent entry type (got 12, max 7), deleting [ 75.409097][ T5339] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.411996][ T5339] bcachefs (loop0): Version downgrade required: [ 75.416218][ T5339] bcachefs (loop0): Version upgrade required: [ 75.416218][ T5339] Version upgrade from 0.24: unwritten_extents to 1.519: (unknown version) incomplete [ 75.416218][ T5339] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 75.416218][ T5339] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 75.460021][ T5339] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 75.460049][ T5339] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key 0:262144:0 durability: 1 ptr: 0:32:0 gen 0 [ 75.460055][ T5339] loop0 node offset 0/16: incorrect min_key: got POS_MIN should be 0:262144:0 [ 75.460060][ T5339] loop0 btree validate error [ 75.460065][ T5339] flagging btree snapshots lost data [ 75.460071][ T5339] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 75.460078][ T5339] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 75.460085][ T5339] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 75.460093][ T5339] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 75.460100][ T5339] ret btree_node_read_err_bad_node [ 75.499651][ T5339] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 75.506938][ T5339] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 75.506951][ T5339] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 65535 min_key R 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 75.506960][ T5339] node offset 16/65535 bset u64s 13 bset byte offset 80: keys out of order: u64s 5 type set 3:29:0 len 1 ver 0 > u64s 5 type set 0:31:0 len 1 ver 0 [ 75.506969][ T5339] node offset 24/65535 bset u64s 24 bset byte offset 192: keys out of order: u64s 5 type deleted 50331648:38:0 len 0 ver 0 > u64s 5 type set 0:120:0 len 77 ver 0 [ 75.506979][ T5339] loop0 node offset 32/65535: btree node data missing: expected 65535 sectors, found 32 [ 75.506986][ T5339] loop0 btree validate error [ 75.506992][ T5339] repair success (rewriting node) [ 75.545733][ T5339] bcachefs (loop0): check_topology... [ 75.546361][ T5339] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 75.552549][ T5339] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 75.559023][ T5339] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 75.562308][ T5339] bcachefs (loop0): scan_for_btree_nodes... [ 75.572526][ T5339] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 75.579370][ T5339] done [ 75.580822][ T5339] bcachefs (loop0): check_topology... [ 75.581115][ T5339] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 75.588492][ T5339] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 75.592993][ T5339] done [ 75.595112][ T5339] bcachefs (loop0): accounting_read... done [ 75.598728][ T5339] bcachefs (loop0): alloc_read... done [ 75.601770][ T5339] bcachefs (loop0): snapshots_read... done [ 75.605918][ T5339] bcachefs (loop0): check_allocations... [ 75.609769][ T5339] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 75.609792][ T5339] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 75.626470][ T5339] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 75.626484][ T5339] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 75.640174][ T5339] bcachefs (loop0): bucket 0:38 gen 0 different types of data in same bucket: journal, btree [ 75.640185][ T5339] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 75.655218][ T5339] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 75.655235][ T5339] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 75.668661][ T5339] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 75.668672][ T5339] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 75.680260][ T5339] bcachefs (loop0): bucket 0:35 gen 0 different types of data in same bucket: journal, btree [ 75.680275][ T5339] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 75.695644][ T5339] ------------[ cut here ]------------ [ 75.698147][ T5339] kernel BUG at fs/bcachefs/btree_iter.c:633! [ 75.700831][ T5339] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 75.703533][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 75.708540][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.713328][ T5339] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 75.716385][ T5339] Code: fd 90 0f 0b e8 f0 7c 9e fd 90 0f 0b e8 e8 7c 9e fd 90 0f 0b e8 e0 7c 9e fd 90 0f 0b e8 d8 7c 9e fd 90 0f 0b e8 d0 7c 9e fd 90 <0f> 0b e8 c8 7c 9e fd 90 0f 0b e8 c0 7c 9e fd 90 0f 0b 66 66 66 66 [ 75.724655][ T5339] RSP: 0018:ffffc9000d736540 EFLAGS: 00010287 [ 75.727194][ T5339] RAX: ffffffff8421b6a0 RBX: ffff888053098360 RCX: 0000000000100000 [ 75.730741][ T5339] RDX: ffffc9000dffa000 RSI: 000000000008cb58 RDI: 000000000008cb59 [ 75.734016][ T5339] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 75.737289][ T5339] R10: dffffc0000000000 R11: fffff52001ae6c9c R12: 000d280000000000 [ 75.740888][ T5339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.744367][ T5339] FS: 00007f723004b6c0(0000) GS:ffff88808d21b000(0000) knlGS:0000000000000000 [ 75.748027][ T5339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.750800][ T5339] CR2: 00005640a4b3da28 CR3: 0000000043510000 CR4: 0000000000352ef0 [ 75.754153][ T5339] Call Trace: [ 75.755855][ T5339] [ 75.757191][ T5339] bch2_btree_path_traverse_one+0xfec/0x21d0 [ 75.759811][ T5339] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 75.762234][ T5339] ? bch2_check_allocations+0x120d/0x57b0 [ 75.764619][ T5339] ? bch2_btree_iter_verify+0x1d/0x360 [ 75.766854][ T5339] bch2_btree_iter_peek_max+0x9e8/0x58f0 [ 75.769116][ T5339] ? bch2_check_allocations+0x120d/0x57b0 [ 75.771354][ T5339] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 75.773666][ T5339] ? bch2_trans_begin+0xbe0/0x2310 [ 75.775942][ T5339] ? bch2_check_allocations+0x11cd/0x57b0 [ 75.778470][ T5339] ? bch2_trans_begin+0xbf5/0x2310 [ 75.780693][ T5339] ? bch2_trans_begin+0x1a71/0x2310 [ 75.782874][ T5339] ? bch2_trans_node_iter_init+0x348/0x5e0 [ 75.785419][ T5339] ? bch2_trans_node_iter_init+0x406/0x5e0 [ 75.787953][ T5339] ? __pfx_bch2_trans_begin+0x10/0x10 [ 75.790293][ T5339] ? __pfx_bch2_trans_node_iter_init+0x10/0x10 [ 75.792955][ T5339] ? bch2_check_allocations+0x1aa1/0x57b0 [ 75.795389][ T5339] bch2_check_allocations+0x120d/0x57b0 [ 75.797830][ T5339] ? prb_read_valid+0x3c/0x60 [ 75.799960][ T5339] ? desc_read+0x1b8/0x3f0 [ 75.802140][ T5339] ? bch2_check_allocations+0xf61/0x57b0 [ 75.804850][ T5339] ? prb_first_seq+0xfd/0x1a0 [ 75.807022][ T5339] ? __pfx_prb_first_seq+0x10/0x10 [ 75.809358][ T5339] ? desc_read+0x1b8/0x3f0 [ 75.811358][ T5339] ? __pfx_bch2_check_allocations+0x10/0x10 [ 75.813980][ T5339] ? up+0xde/0x150 [ 75.815754][ T5339] ? __pfx__prb_read_valid+0x10/0x10 [ 75.818076][ T5339] ? __console_unlock+0x14c/0x1a0 [ 75.820302][ T5339] ? __pfx___console_unlock+0x10/0x10 [ 75.822652][ T5339] ? prb_read_valid+0x3c/0x60 [ 75.824516][ T5339] ? console_unlock+0x21b/0x270 [ 75.826501][ T5339] ? bch2_check_allocations+0x11c1/0x57b0 [ 75.828793][ T5339] ? irq_work_queue+0xc3/0x140 [ 75.830866][ T5339] ? bch2_check_allocations+0x1aa1/0x57b0 [ 75.833149][ T5339] ? __pfx_vprintk_emit+0x10/0x10 [ 75.835393][ T5339] ? do_raw_spin_lock+0x121/0x290 [ 75.837623][ T5339] ? __pfx___bch2_print+0x10/0x10 [ 75.840147][ T5339] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.842447][ T5339] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.844426][ T5339] __bch2_run_recovery_passes+0x395/0x1010 [ 75.847291][ T5339] bch2_run_recovery_passes+0x184/0x210 [ 75.849662][ T5339] bch2_fs_recovery+0x2690/0x3a50 [ 75.851891][ T5339] ? check_noncircular+0xe0/0x160 [ 75.854321][ T5339] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.856519][ T5339] ? __lock_acquire+0xab9/0xd20 [ 75.858612][ T5339] ? __lock_acquire+0xab9/0xd20 [ 75.860729][ T5339] ? __lock_acquire+0xab9/0xd20 [ 75.862736][ T5339] ? bch2_fs_start+0xa0f/0xda0 [ 75.864845][ T5339] ? up_write+0x1c4/0x420 [ 75.866763][ T5339] ? bch2_fs_start+0x5e7/0xda0 [ 75.868987][ T5339] bch2_fs_start+0xaaf/0xda0 [ 75.871130][ T5339] ? bch2_fs_start+0x5e7/0xda0 [ 75.873377][ T5339] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.875605][ T5339] ? sget+0x267/0x620 [ 75.877481][ T5339] bch2_fs_get_tree+0xb39/0x1520 [ 75.879829][ T5339] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.882473][ T5339] ? aa_get_newest_label+0xf7/0x5d0 [ 75.884830][ T5339] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.887349][ T5339] ? apparmor_capable+0x137/0x1b0 [ 75.889637][ T5339] vfs_get_tree+0x92/0x2b0 [ 75.891717][ T5339] do_new_mount+0x24a/0xa40 [ 75.893919][ T5339] __se_sys_mount+0x317/0x410 [ 75.896035][ T5339] ? __pfx___se_sys_mount+0x10/0x10 [ 75.898250][ T5339] ? do_syscall_64+0xbe/0x3b0 [ 75.900433][ T5339] ? __x64_sys_mount+0x20/0xc0 [ 75.902699][ T5339] do_syscall_64+0xfa/0x3b0 [ 75.904725][ T5339] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.906986][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.909954][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 75.912512][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.915879][ T5339] RIP: 0033:0x7f722f1900ca [ 75.918203][ T5339] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.926457][ T5339] RSP: 002b:00007f723004ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.930075][ T5339] RAX: ffffffffffffffda RBX: 00007f723004aef0 RCX: 00007f722f1900ca [ 75.933551][ T5339] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007f723004aeb0 [ 75.937078][ T5339] RBP: 00002000000000c0 R08: 00007f723004aef0 R09: 000000000000001e [ 75.940593][ T5339] R10: 000000000000001e R11: 0000000000000246 R12: 0000200000000100 [ 75.944095][ T5339] R13: 00007f723004aeb0 R14: 0000000000005a27 R15: 0000200000005b80 [ 75.947339][ T5339] [ 75.948759][ T5339] Modules linked in: [ 75.951559][ T5339] ---[ end trace 0000000000000000 ]--- [ 75.967572][ T5339] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 75.970591][ T5339] Code: fd 90 0f 0b e8 f0 7c 9e fd 90 0f 0b e8 e8 7c 9e fd 90 0f 0b e8 e0 7c 9e fd 90 0f 0b e8 d8 7c 9e fd 90 0f 0b e8 d0 7c 9e fd 90 <0f> 0b e8 c8 7c 9e fd 90 0f 0b e8 c0 7c 9e fd 90 0f 0b 66 66 66 66 [ 75.988577][ T5339] RSP: 0018:ffffc9000d736540 EFLAGS: 00010287 [ 75.991322][ T5339] RAX: ffffffff8421b6a0 RBX: ffff888053098360 RCX: 0000000000100000 [ 75.995482][ T5339] RDX: ffffc9000dffa000 RSI: 000000000008cb58 RDI: 000000000008cb59 [ 75.999051][ T5339] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 76.002535][ T5339] R10: dffffc0000000000 R11: fffff52001ae6c9c R12: 000d280000000000 [ 76.006930][ T5339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.010540][ T5339] FS: 00007f723004b6c0(0000) GS:ffff88808d21b000(0000) knlGS:0000000000000000 [ 76.015760][ T5339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.018652][ T5339] CR2: 000055aff5ffe168 CR3: 0000000043510000 CR4: 0000000000352ef0 [ 76.022307][ T5339] Kernel panic - not syncing: Fatal exception [ 76.025374][ T5339] Kernel Offset: disabled [ 76.027356][ T5339] Rebooting in 86400 seconds..