program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'comedi_test\x00', [0x9e1, 0x2166, 0x0, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0x8, 0x344, 0x1, 0x7, 0x1, 0x9, 0x3, 0x9, 0xe, 0x100, 0x3, 0x80, 0x7ff, 0x1, 0x1, 0xb0c4, 0x7df, 0x8, 0x7, 0x1]}) ioctl$COMEDI_SETWSUBD(r3, 0x6411) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x1a8, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @void, @val={0x25, 0x3, {0x0, 0x24, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}]}]}]}, 0x90}}, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1e, &(0x7f0000005b80)={[{@errors_fix_safe}, {@erasure_code}, {@errors_continue}]}, 0x9, 0x5a27, &(0x7f0000000140)="$eJzs3X+QHNV9IPDXM7O7o12ttBI4yGCkRaCEQGyt+FXYTsVKLrFTQCi5SDmIkw0LWhHZK6GShAFBgsiBDwpw4ZRTCU7+IBSmDltxUQUXUCgTfpzE2dgUFx91hakzd9h/+IpwqALoKJcvm9qdfrMzvdPbs7OzQoLPp2B735ueb3/79Zuefm96NQEAAIAPhIO37Tp88Ym/9/0/G3vn5t//h223hIHyVH01rjCULq9/rzLkSOrrXTG1zPaLX7vxWz8bvup3vvdw/zffPbD5lC0//t3jrnriixfsv/evn3578NF/fa0obuxPZ0yXkzeSEKrfPfQXXznw/AmTdUkIoZwM7Q1hWbL86WVJJsTIL0IIm9PCilBuevCRd87eMrm85c6+pvqlmSD6+wdbNe1new5fd2b4yW9vvPWHq77zdz37Xt87vUpSbehPISy5ovH5PSGERSGE4bQce9uK+OR0uSGE0N/wvPML8jq1zfzX5pRPSpe96XKgIE58fHWmXMqsly1HPZllf8H25isvj07XK7I4U86ejOYrL89YvyxdPpYuz5hj/HL8PwmlJFTq6Y8n030kNBy3JCRTx7JaL5fqxzak+58pJ5lyKVMu92T2a2q7aUcrJ0lzfVwvUx9Px5W0/pTGc3ULl+TUfzhdVtMX6ruxHLK/1AzM+KW+X1NiXodmyeVIKDWcg1rV1w98ejAG0rqBZPmM50y0EB87sPGuNeVNzxwcap1GT3g4SeMnHcXf84Nli7/w7TuuXZGzn8kVpTR+KRM/aSv+qxe+8OZld9z/jdz498T45anz+1zzP+vJ/jcufPa21TntE5JDsX0qHbXP6GvP3b3q+Cv35eZ/X4xf7Sj++v0v9A0efvKp3PxHYvss6ij+K5/89E8feunx16fjV5rjhxi/v6P4m/bv+GrfysOn5+b/VGyfgY7iv/rWvvNeXrny54114fTB6fgvxviDHcV/cO+9n3hg6Z0X5B7fDbF9hjqKf9FpT9y6+PDjJ+edO5P7uvXOCfDBdFx6jXV7Wu50nDlfDeOFvxqu1K6S+tJxzWA3N5S5+JzczpJuxgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMKHzvyvn/nfnxt6o5KW+9Jfqmk51veGkCwKIezaPbpz99btVw9/8Zprd24fHR8e3T08tn33zhuGz/mN4Z1jO8ZHb5h8dOSjZ9eetzwktWVy8oxt901MTJSGmuvi9v7daft+sub8//PPIYx86EcrK7n5r7132wPHt/iZkayf+NS2ay/+0bl/W6pVDKV5DbXIa2JiYiLk5PV/L/3lA39+6GenhzDyK7Pl9dwrv/WPTQlNVUzHSZX6Qi2hvqS/ZR71rNN8YntVtmwdHxuZvX0nn1/O2Y9/f+Prv9hy/dd+WWvfau5+tNm+i9ZPjJf+cuNF//8vb6pVzJJX78R7eNzT9i7ntXfci5hfbL9q2t6D6X4tyWnvSs5+3fbDp1767ol3vL03jFTeWjVz20X71ZN2gJ7kw21tN26hP1nWVF9N16+/vtPnrd29bcfaXTfs+ejWbaNXj109tv3j685Zd97Iueedu7Y/jI+NrE33f0mX9j9u/1fb3P+ift6d/rT0y3sfiz/b609FeRW1x2Rexe3RmFHe66//kq98/eP3PntxraLovBLXrp9P0mX/5HFeFxr628y2arVfRe0QQhhu1Q5vvn1BOOF/bL216DzUeGQaf2Yk6yeeX/0vf3v+36z4zVrFETnPNyY05/N831Qe9ayn85lqr2p6PCaO0vbtC+V0vwZa5rXu+Wd77jr4z39Sz6+3N1w/unv3znW1n4vTTBcnJ7XMK1sb92vV1M9ySJsl1Ltpi/46qSfU8sueP+Pq2VYdSB8bSJa33K+s+NiBjXetKW965mBeSycP17a4KAzWlslHctYczzyxXE+41faP1tdfUf9Y+Zm/efRzj/79OTP6x1m1n0X7leTs13deevDr3/zaf/z77u3XZ37rhaF/+Z9/vKZWcaTOKz0dn1dqedSzTvNJGs8rZ4VQ9PpbFVrvR+7rr9R6f2Z7/SUttjO9fut4w5nyQCh39Ho968n+Ny589rbVua/XQ+2+Xm9qKpULXq9Hy/tS9vWVVJrzWLjXV1NHSdZPfO/24/Y+ffOGE2sVRf26vnarfn128fVIKWe//vGyl1deM/wf/nv3zhvf+o1HLv/x6Po/rVV0ftxjLt057tW0fas57VvPOo47G9v3Y1ddM765Vj/f69/Kgl3/psuC8U88ley6Yc+XRsfHx3buam+/2n0/jdvJtnKn76fx7La8YL9KM/Zr4X5pp73afb3F/Dd33F7Nr7eBkHT0vrDnB8sWf+Hbd1w7NONZ6YauKKXxSx3Ff/XCF9687I77v5Eb/54Yv9JR/NHXnrt71fFX7suNf1+Sxq92FH/9/hf6Bg8/+VRu/JGY/6KO4r/yyU//9KGXHn89N36I8Qc6a/+39p338sqVP8+N/2KSbmfyGimER945e0utnISehvnRyTx6mvIK2XKSKZcy5XJjuVSba61voJwkzfVxvbT+lIZcWvmjnPp4FVZdUVu+G8sh+8vs9UebUsO5v1V90XUqAMD7Xfz8P16Dxs//x9ILpfyZBpg233HYipy4cRw2PZ/T2/T4ijR+fH6cB1z5sTAyubxluHahP9fPEeLrITvPGbdz+qnNMTqd5yyaf1+dKce8avPllYZxaGrmuKYS2vj8a+Z2Zp9/z+x+8fz48O0z0hpumLfKHr+edMas1f0OmXwrkxHy+kd2Xizez7FySdgwtb02+0f2Ppp4HLL30cTtnJg5cbZ3v0pPyN5HM9/+EdOepX9MpVz8+cbM4xdmad/p49c6Wvb4zeF4VyfXX+jPZ7swb9jylNbOvOGLS2Y5X7Y9b7iwn4eZl8yJn77AjvZ5w1gf96PS5nzi53Lqa6/avfVyp/OJ8XQR8zo0Sy5HQs58YsV8InCsi+P/+B4xOf6fvAD/f5n1iq5Ds1eNMV7ufULl1vkUjTtm3qfX39H7+Kb9O77at/Lw6bnXOU+1e9/PjqZSf8F9P0XtuCZTTttxee22hBbtmDNBUzTey26nqN2z92UMpHfCz7XdH9x77yceWHrnBbntvqH2Rlrc7l9vKg0WtPsxMF5oHf9I3WfQd8yPF6ZeCe/NeGHRjK3Ex47UfQxF82fv2XgkvfGpG+OR61u8Z/xhzn7P9f6G/hm/1PdrylE+Hpl5f0Pjwch7swUAPpDi+L/++Vk6/v9fcYX0OqJo3HpGphzj5Y7/e1rnkzdu/YN0eX1m/YH0Lyrmet180WlP3Lr48OMn545b7mt3HPqfmkpDhePQ+Y2bc8cRG7pzv3juOKI+zprfODE3//o4cX7j9Nz49XH6/MbRue1T/9xtfvMAufHr8wBH4nOxgYa/NGkvfvvj3IL5uszGYrHd+br37Tg6/fPZhfpc75Kc+rmOowdm/FLfrynH9jgaAODYF8f/8TIujv+fzaw338/Zc8cFXbpuz/57IPX4Lx6pceVCj/sWety60OP6WeYlWmwhPtb+vMSxfb/ows8LLew82Qd+XJxu1LgYAICjWRz/L0rL+eP/2vgk2dvZ+KTV+K2naXxyxMfnpXbiG593676BY318njf/1dtyK/HRo2f+y/jf5+LFjP8BAN7f4vg//tlj/Pf//ktazv679Uf/5+itrl6N098/4/TWo7XicXrlGLlPZX73AeQeX/cBNNUf0XmARdPrmwcAAOC90DM1Upr5d/afT5fZv7PP+7v8y3LWb1clvTy+cvfOsbHLr92xeXT32OXbr9k8tuvy63Zu3b17bHttvbbGjY/d/5EvpxXxsThuzB23pOPGnlBJ26P1etlx29LwWG2Z8+8hZNePYU+a+mXmv4eQ3eyign9HYPr4tZdv3vErzbJ+q/6Rd7zz4v9RzvpR/fhf9cdnXb5l1+Vbt2/dvXV0fOueseb1Jket/XP43szYLHP6vtTMjxlKc//+zu7kUZqRR0/aHnnfz55k8liWZrIs7/sPcvL+/n/78y+fNvHLh0IY+VD5I/Nqv2T9xH++dOwPdh/80Y7J/Euz5l9fM82r6PtKs+vH/amMX7Nr95lbrrl2e/YbJTsT5zNK9fICzWekL/9ym/MTm3Lq53qfQnnGL0entucnAABoEj//j9ez8fPDr6UXULG+/XH6/D4/zh2nj7Q3Tm/4XrIHGq8P88bp2e8xi/vb7ji9Os9xenb7ReP02vrrmtZvNU7PG3fnxf/DnPXnqv1+koTkrs7v88jtJ1e010+y32ewNP33LfP6SXb9ufaTpN1+0ttevkX9pNX6rfpJetyTdvvJZ9Nlu/2ksD+kCc/3vpzc/nBPe/3h1zPlov6QXX+u/aE0z/NGdvtF/aHV+q36Q97xzYt/cc767WruH5MdY6pfjF1+3TU7v9Sw3kJ//8X881vY7//oVPv5L+x9Xwuf/8L+/dfC5z+/+8py839xfjNh7ee/sN/v0qkjNl+bvm8X3X9WNI+7Mae+aR63IXDePG7vjF+OTuZx4b0Tx//x4544/r8zXXb7Y6Bj/nvSfO9x6/hd+h6zouuY9+X7eRufy854P2/9Zy7vOe/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3pq6yYWh68bdfhi0/8ve//2dg7N//+P2y75ddu/NbPhq/6ne893P/Ndw9sPmXLj3/3uKue+OIF++/966ffHnz0X18rDDw09bNyRlqshpC8kYRQ/e6hv/jKgedPmKxLQgjlZGhvCMuS5U8vSzIRRn4RQthcz7P5wUfeOXvL5PKWO/ua6pdmgmT3KwyUYz6NeYZwfeEecQyqpv1sz+Hrzgw/+e2Nt/5w1Xf+rmff63unV0mae9CSKxpLPSGERen/k+K6K+KT0+WGEEJ/w/POL8jr1DbzX5tTPild9qbLgYI48fHVmXIps162HPVklv0F25uvvDw6Xa/I4kw5ezKqqXQcPy/PWL8sXT6WLs+YY/xy/D8JpSRU6umPJ9N9JDQctyQkU8eyWi+X6sc2pPufKSeZcilTLvdk9mtqu2lHKydJc31cL1MfT8eVtP6UqRzLuft9SU79h9NlNX2hvhvLIftLzcCMX+r7NSXmdSg3kyOj1HAOalVfP/DpwRhI6waS5TOeM9FCfOzAxrvWlDc9c3AoJ4/k4SSNn3QUf88Pli3+wrfvuHZFXvwrSmn8UkfxX73whTcvu+P+b+TGvyfGL3cU/6wn+9+48NnbVue2z6HYPpWO4o++9tzdq46/cl9u/vfV4r8Uqh3FX7//hb7Bw08+lZv/SGyfRR3Ff+WTn/7pQy89/npu/BDj93cUf9P+HV/tW3n49Nz4T8X2H+is/7y177yXV678+XBe/Bdj/MGO4j+4995PPLD0zgtyj++G2D5DHcW/6LQnbl18+PGTq3nx7+vWOyfAB9Nx6TXW7Wl5tnFmtWHeIjvOnK+G8cJfDVdq13yL0/8Hu7mhRn217SxZqPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxv/dNN53z+0k99dmMlCSHJWWeihfhYuXf9+uEOtjv62nN3rzr+yn2NdSs6iAMAAAAUi+PwUr2mGlaE65JF4aSW68c5gpNiKWmuz84hxDjZOYJO45S6FKfcpTiVLsXpmRlnopM4vV3Kp69LcaoFcaqhvTiLZolTmewVbebTP2s+7ccZ6FKcxV2KM9ilOEu6FGdpl+IMzRqn/X64rEtxlncpznFdinN8UZxKe3E+1KV8fqWDOL0t4pzQpXyyc8pz7YeD6Zon5sWZ+qVcGKeSlOsPtJpPPyHdzsnz3M5AwXYGi96P29zOoja3c2rmeaU5bqfa5nZ+dZ7bSdrczq/Pczulgu3Efnt9Nr+4nVhqs//fMIc4923Oj7OnS/nc2KU4N3Upzp90Kc6fdinOzfOMA9CuOP6fHu8Nhb7Kb4b+9IyTnQWI491VUz9r73elxvNQzgkpxvtIpr63RbymMNmBeibeqjbya4qXnUDIxFudqe9pilepj0dmiVdtjLcm82Dh/mYnFDL5nZGp7yuKl51YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAF9E83nfP5Sz/12Y0hCZP/tTTRQnys3Lt+/XAH2z2w8a415U3PHGys66t0EAgAAAAoFMfhPfWaauirrAt9SW/TetV0HqCalstDteXwkjBxcwghGS5NlfuTZbM+r5I+b+3ubTvW7rphz0e3bhu9euzqse0fX3fOuvNGzj3v3LVbto6PjdR+htBXEG8yhckfu27Y86XR8fGxnbtqldn8V6TPW5GWk/R5Kz8WRiaXt6T5Ly/YXmnG9mb+0pP/0Jx+aePwAQAAAAAAAAAAAAAAAAAA/Bu7dhci11nGAfw9M7Mz021jVvo1Dc1myBdRiyZxK6mW7gHBQpuELAWZqa4l2ASLmya0SYl1bAO2NUERWgIhkgsjsdhavOmHLWI/CERqNODGIG3RXuiF0molLbmQlJHszJmdOTvjrGNpmvr7XZxz5j3P+z7nnYuF/9kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID31XRtbLIyPlEdjkKIQrZrTb2L5F42H8flAfp++bkd3y+MnlnVPlbIDbAQAAAA0FeSw4daI8VQyGVDNlw182lpaLsRZnM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2e6NjZZGZ+oXhyFEDWGMumaehfJvWw+jssD9H397Sc+88ro6F/bx0oD7QAAAADoJ8nhs6G/GEphWRiKruqoa74bCItS89N1yTqL51mXfnfQq27ZPOtWzrPuY33qNjbPuwMAAABc+JL8n2uNjIRCbkHP/J/k+mzz3KtuSapPUj/IbwUAAACA/02S/wutkVIo5EqtvN7v//hJ3l+aqkvm9/u/fTJ/RY/5K1ND6fkbmmf/pwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC8d0bWyyMj5RzUYhRD1q6l0k97L5OC4P0Hft88N/v/losWOskBtgIQAAAKCvRg5/cOls9C6GQm44DIWLZ3L/6I2HnvriU8+MhRAaMT+fD7s379x519rGMalbc/zo0PeOvfmtOXVrGsfztkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA9M10bm6yMT1QvikKIetTUu0juZfNxXB6g72uf+8KfHzv17BvtY6UB1gEAAAD6S3L4bPYvhlLIh3y4YuZTe9Y/J5Oa3+udAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDhcfc37v365qmpLXe5cOHCRevifP9lAgAA3mtLQhTq/6UrN53vpwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Ipmtjk5XxiWoxCiHqUVPvIrmXzcdxeYC+8XMnCgvOPP9i+1hpgHUAAACA/pIcPpv9i6EUhsJQuHzmU7d3AjP5f+R9fEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgA2W6NjZZGZ+oLohCiHrU1LtI7mXzcVweoO+jew5+9sjC797UPlbIDbAQAAAA0FeSw/OtkWIo5D4eCuHq5uepzglRtnnu/l5gdt6OjmnD855X65iXnfe8vamd5Zq7acwrJuuNNM6teeW588pt80qh1b7cMS/s75i1oM9zBgAAADiPkvxfaI2MhEKu0JZzf9JRPyLnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9TNfGJivjE9UoCiHqUVPvIrmXzcdxeYC+9/7mo5d85af7drWPlQZYBwAAAOgvyeGz2b8YSmFx+EhYPJP7w0hnfVL3j8rZI4/88y+rQlh9xcnRXHrZHyYXv3rthhfShxAyndWZEBY2+0U9+v36d4/cs7x+9rEQVl+evXpOv/Cf+3UuGdefrmzZsPPYyR19vpzW0wEAAMCFLcn/Q62RkVDI3dkz/yfJu0/+b5kJ4Avv2fPzy5rHZiJPzciMNPtlevT7/PIn/rRi3d/ePJf/0/2G264/dXDbkcs6GjZGUqK4Pr5t18aT1x7OJLtu9M+m+iffy5e++ca/tu5++GyjfzEUm+OLUhtpdJt7TLkork9lDlTXv3ug1tk/12P/D/72xVO/XLTvnXP9314y3Oq/MnTr377zXv2Hb3lo/3UHj27s7B9CKHfr/9Y7N4Ur/3DHA+n9D6cWbv/m248pUVw/vvT04XWHStd39o9S/ZPv/2enHt3/44e/80zSP/mtyKpl8+2fSfV/ee+le166f9Oizv6ZHvt/4dZXRreXv/379P5v71g11/Mp5u7/8WuevO3VzfF96VsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLtO1scnK+EQ1E4UQ9aipd5Hcy+bjuDxA39dvPvHWrft+9IP2sdIA6wAAAAD9JTl8NvsXQynkQz4Mz+T+pytbNuw8dnJHGGncjZrn3NT2u3d+Yuv2XXfefp6eHAAAAJivJP/nWiMjoZBbHoaa+X98266NJ689nEnyfybJ/1vvmNqyOrTqXt576Z6X7t+0qPWeIISZnwUUz9V9erbuxhtOjJz+49dWzNRdlKpbO1t3fOnpw+sOla5P1gvtdWtC6/3E49c8edurm+P7Ws/XXvfJr26far6eSNYdvuWh/dcdPLqxtY/mebi5blI3lTlQXf/ugVpSl22ei819AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdfGJivjE9WQDSHqUVPvIrmXzcdxeYC+65f/4oFLzjy7uH2skBtgIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV27Cc0jiqOA/h7uxuzzSZt0grGimlaFaUeLAoielFRkVak4KlSpNragygIIko9mEorlqp4EVq9FFFBjVJQsLFYWiUV/xUvHlRQqB6EUgxoQ/FgJNk3m82k46bTXtTPB5a3782b7/xm5u1sNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Kt21wZn26M7HJu9efvsXzzx46uk7P3pk+5VPvf3L8OZbP9/f88bp8S0rt35/27LNBx9aO7b31SN/9H3w1/GOwU82m9WpWw8hnowh1D+eePnZ8S8vmh6LIYRq7B8JYSAuPTIQcwlr/gwhbGnVOXfj+6eu2zrdbt/dPWd8SS4kf16hUc3qaeqfWy//LfW0zrZNPnF1+PGWDTu+XvHeu12jJ0Zmp8R623oKYfGm9v27QgiL0mtattoGs51Tuz6E0NO23w0d6rpsgfVfU9C/JLUXpLbRISfbvirXr+Tm5fuZrlzb0+F4s/YsX/DUBdRRdl4nvbl+/mF0rorqzMYHUvthalefZX41e8VQiaHWKv/hOLtGQtt9iyHO3Mt6q19p3duQzj/Xj7l+JdevduXOa+a4aaFVY5w7ns3LjWeP41oaX9n+rD6DewrGL05tPX1QT2f9kH/T1Jj3pnVeM7K6Jv6hlqS785TyKgUHyMZbNz7djEYaa8Sl8/aZmqc2lW0b3/D8FdWNnxztL6gj7o8pP55F/lQrf9tXA733vbPr8cGi/E2VlF8plf/TumO/3bvrtVcK81/K8qul8q891HNy3ac7VxVen4ns+tRK5d9//LMXVlz4wGjRYor7svx6qfybx451900eOlxY/5rs+iwqlf/DTXf8/Na3B04U5ocsv6dU/saxR1/sHpq8qjD/cPOj0JhZoSXWz++j1383NPTrcFH+N83rH0f6zpAfO+a/ObL3xteX7F5buD7XZ9env1T9d11+cEfv5IFLi56dcd/5+uYE+H9alv7Gei71y/7OPFdtvxf2DNea30C96dV3Pg+UM32cxel9/n8vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/swMHAgAAAACC/K0HuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA///KSxvl") [ 87.817460][ T54] cfg80211: failed to load regulatory.db [ 87.831181][ T5317] Bluetooth: hci0: command tx timeout [ 87.941656][ T5339] comedi comedi3: comedi_test: 2529 microvolt, 8550 microsecond waveform attached [ 88.363366][ T5340] loop0: detected capacity change from 0 to 32768 [ 88.617123][ T5340] bcachefs (loop0): starting version 1.519: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=0,compression=lz4,erasure_code,nopromote_whole_extents,nojournal_transaction_names,allocator_stuck_timeout=3 [ 88.617147][ T5340] allowing incompatible features above 0.0: (unknown version) [ 88.617155][ T5340] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 88.641990][ T5340] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 88.645913][ T5340] bcachefs (loop0): invalid bkey in superblock btree=extents level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 360287970189639680:0:0 durability: 0 (invalid extent entry 000000000001b000) [ 88.645945][ T5340] invalid extent entry type (got 12, max 7), deleting [ 88.661163][ T5340] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 88.664865][ T5340] bcachefs (loop0): Version downgrade required: [ 88.668209][ T5340] bcachefs (loop0): Version upgrade required: [ 88.668209][ T5340] Version upgrade from 0.24: unwritten_extents to 1.519: (unknown version) incomplete [ 88.668209][ T5340] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 88.668209][ T5340] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 88.776374][ T5340] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 88.776414][ T5340] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key 0:262144:0 durability: 1 ptr: 0:32:0 gen 0 [ 88.776424][ T5340] loop0 node offset 0/16: incorrect min_key: got POS_MIN should be 0:262144:0 [ 88.776432][ T5340] loop0 btree validate error [ 88.776438][ T5340] flagging btree snapshots lost data [ 88.776444][ T5340] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 88.776452][ T5340] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 88.776461][ T5340] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 88.776468][ T5340] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 88.776476][ T5340] ret btree_node_read_err_bad_node [ 88.822901][ T5340] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 88.832690][ T5340] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 88.832710][ T5340] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 65535 min_key R 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 88.832724][ T5340] node offset 16/65535 bset u64s 13 bset byte offset 80: keys out of order: u64s 5 type set 3:29:0 len 1 ver 0 > u64s 5 type set 0:31:0 len 1 ver 0 [ 88.832738][ T5340] node offset 24/65535 bset u64s 24 bset byte offset 192: keys out of order: u64s 5 type deleted 50331648:38:0 len 0 ver 0 > u64s 5 type set 0:120:0 len 77 ver 0 [ 88.832750][ T5340] loop0 node offset 32/65535: btree node data missing: expected 65535 sectors, found 32 [ 88.832759][ T5340] loop0 btree validate error [ 88.832768][ T5340] repair success (rewriting node) [ 88.881738][ T5340] bcachefs (loop0): check_topology... [ 88.882072][ T5340] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 88.888672][ T5340] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 88.895409][ T5340] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 88.901352][ T5340] bcachefs (loop0): scan_for_btree_nodes... [ 88.913434][ T5340] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 88.921141][ T5340] done [ 88.922477][ T5340] bcachefs (loop0): check_topology... [ 88.922761][ T5340] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 88.929064][ T5340] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 88.936221][ T5340] done [ 88.937784][ T5340] bcachefs (loop0): accounting_read... done [ 88.943637][ T5340] bcachefs (loop0): alloc_read... done [ 88.947145][ T5340] bcachefs (loop0): snapshots_read... done [ 88.957659][ T5340] bcachefs (loop0): check_allocations... [ 88.971645][ T5340] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 88.971675][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 88.991026][ T5340] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 88.991044][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 89.004693][ T5340] bcachefs (loop0): bucket 0:38 gen 0 different types of data in same bucket: journal, btree [ 89.004709][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 89.022131][ T5340] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 89.022149][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 89.037238][ T5340] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 89.037255][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 89.049724][ T5340] bcachefs (loop0): bucket 0:35 gen 0 different types of data in same bucket: journal, btree [ 89.049739][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 89.063682][ T5340] ------------[ cut here ]------------ [ 89.066195][ T5340] kernel BUG at fs/bcachefs/btree_iter.c:633! [ 89.068861][ T5340] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 89.071639][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 89.076708][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.081625][ T5340] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 89.084805][ T5340] Code: fd 90 0f 0b e8 00 6d 9e fd 90 0f 0b e8 f8 6c 9e fd 90 0f 0b e8 f0 6c 9e fd 90 0f 0b e8 e8 6c 9e fd 90 0f 0b e8 e0 6c 9e fd 90 <0f> 0b e8 d8 6c 9e fd 90 0f 0b e8 d0 6c 9e fd 90 0f 0b 66 66 66 66 [ 89.093113][ T5340] RSP: 0018:ffffc9000d38e540 EFLAGS: 00010287 [ 89.096144][ T5340] RAX: ffffffff8421c430 RBX: ffff888053bec360 RCX: 0000000000100000 [ 89.099934][ T5340] RDX: ffffc9000e5ab000 RSI: 0000000000091db6 RDI: 0000000000091db7 [ 89.103342][ T5340] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 89.106144][ T5340] R10: dffffc0000000000 R11: fffff52001a71c9c R12: 000d280000000000 [ 89.109175][ T5340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.112429][ T5340] FS: 00007fedb9b556c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000 [ 89.116029][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.118834][ T5340] CR2: 00007f38751909c0 CR3: 000000004342a000 CR4: 0000000000352ef0 [ 89.122706][ T5340] Call Trace: [ 89.124577][ T5340] [ 89.125876][ T5340] bch2_btree_path_traverse_one+0xfec/0x21d0 [ 89.128489][ T5340] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 89.131151][ T5340] ? bch2_check_allocations+0x120d/0x57b0 [ 89.133566][ T5340] ? bch2_btree_iter_verify+0x1d/0x360 [ 89.135874][ T5340] bch2_btree_iter_peek_max+0x9e8/0x58f0 [ 89.138264][ T5340] ? bch2_check_allocations+0x120d/0x57b0 [ 89.140756][ T5340] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 89.143527][ T5340] ? bch2_trans_begin+0xbe0/0x2310 [ 89.145931][ T5340] ? bch2_check_allocations+0x11cd/0x57b0 [ 89.148357][ T5340] ? bch2_trans_begin+0xbf5/0x2310 [ 89.150596][ T5340] ? bch2_trans_begin+0x1a71/0x2310 [ 89.152817][ T5340] ? bch2_trans_node_iter_init+0x348/0x5e0 [ 89.155556][ T5340] ? bch2_trans_node_iter_init+0x406/0x5e0 [ 89.158256][ T5340] ? __pfx_bch2_trans_begin+0x10/0x10 [ 89.160780][ T5340] ? __pfx_bch2_trans_node_iter_init+0x10/0x10 [ 89.163731][ T5340] ? bch2_check_allocations+0x1aa1/0x57b0 [ 89.166626][ T5340] bch2_check_allocations+0x120d/0x57b0 [ 89.168989][ T5340] ? prb_read_valid+0x3c/0x60 [ 89.170981][ T5340] ? desc_read+0x1b8/0x3f0 [ 89.172855][ T5340] ? bch2_check_allocations+0xf01/0x57b0 [ 89.175239][ T5340] ? prb_first_seq+0xfd/0x1a0 [ 89.177517][ T5340] ? __pfx_prb_first_seq+0x10/0x10 [ 89.179865][ T5340] ? desc_read+0x1b8/0x3f0 [ 89.181909][ T5340] ? __pfx_bch2_check_allocations+0x10/0x10 [ 89.184657][ T5340] ? up+0xde/0x150 [ 89.186663][ T5340] ? __pfx__prb_read_valid+0x10/0x10 [ 89.189134][ T5340] ? __console_unlock+0x14c/0x1a0 [ 89.191390][ T5340] ? __pfx___console_unlock+0x10/0x10 [ 89.193689][ T5340] ? prb_read_valid+0x3c/0x60 [ 89.195715][ T5340] ? console_unlock+0x21b/0x270 [ 89.197803][ T5340] ? bch2_check_allocations+0x11c1/0x57b0 [ 89.200354][ T5340] ? irq_work_queue+0xc3/0x140 [ 89.202670][ T5340] ? bch2_check_allocations+0x1aa1/0x57b0 [ 89.205816][ T5340] ? __pfx_vprintk_emit+0x10/0x10 [ 89.209006][ T5340] ? do_raw_spin_lock+0x121/0x290 [ 89.211850][ T5340] ? __pfx___bch2_print+0x10/0x10 [ 89.214210][ T5340] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.216465][ T5340] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.218866][ T5340] __bch2_run_recovery_passes+0x395/0x1010 [ 89.221228][ T5340] bch2_run_recovery_passes+0x184/0x210 [ 89.223689][ T5340] bch2_fs_recovery+0x2690/0x3a50 [ 89.225852][ T5340] ? check_noncircular+0xe0/0x160 [ 89.228338][ T5340] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 89.230963][ T5340] ? __lock_acquire+0xab9/0xd20 [ 89.233244][ T5340] ? __lock_acquire+0xab9/0xd20 [ 89.235354][ T5340] ? __lock_acquire+0xab9/0xd20 [ 89.237454][ T5340] ? bch2_fs_start+0xa0f/0xda0 [ 89.239548][ T5340] ? up_write+0x1c4/0x420 [ 89.241467][ T5340] ? bch2_fs_start+0x5e7/0xda0 [ 89.243557][ T5340] bch2_fs_start+0xaaf/0xda0 [ 89.245571][ T5340] ? bch2_fs_start+0x5e7/0xda0 [ 89.247686][ T5340] ? __pfx_bch2_fs_start+0x10/0x10 [ 89.249978][ T5340] ? sget+0x267/0x620 [ 89.251928][ T5340] bch2_fs_get_tree+0xb39/0x1520 [ 89.254158][ T5340] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 89.256315][ T5340] ? aa_get_newest_label+0xf7/0x5d0 [ 89.258589][ T5340] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 89.261293][ T5340] ? apparmor_capable+0x137/0x1b0 [ 89.263772][ T5340] vfs_get_tree+0x92/0x2b0 [ 89.265720][ T5340] do_new_mount+0x24a/0xa40 [ 89.267604][ T5340] __se_sys_mount+0x317/0x410 [ 89.269959][ T5340] ? __pfx___se_sys_mount+0x10/0x10 [ 89.272305][ T5340] ? do_syscall_64+0xbe/0x3b0 [ 89.274414][ T5340] ? __x64_sys_mount+0x20/0xc0 [ 89.276573][ T5340] do_syscall_64+0xfa/0x3b0 [ 89.278809][ T5340] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.281444][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.284316][ T5340] ? clear_bhb_loop+0x60/0xb0 [ 89.286378][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.289010][ T5340] RIP: 0033:0x7fedb8d9014a [ 89.290893][ T5340] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.298857][ T5340] RSP: 002b:00007fedb9b54e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.303108][ T5340] RAX: ffffffffffffffda RBX: 00007fedb9b54ef0 RCX: 00007fedb8d9014a [ 89.306418][ T5340] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007fedb9b54eb0 [ 89.310204][ T5340] RBP: 00002000000000c0 R08: 00007fedb9b54ef0 R09: 000000000000001e [ 89.313694][ T5340] R10: 000000000000001e R11: 0000000000000246 R12: 0000200000000100 [ 89.317201][ T5340] R13: 00007fedb9b54eb0 R14: 0000000000005a27 R15: 0000200000005b80 [ 89.326253][ T5340] [ 89.328006][ T5340] Modules linked in: [ 89.330389][ T5340] ---[ end trace 0000000000000000 ]--- [ 89.337988][ T5340] RIP: 0010:bch2_btree_path_level_init+0xa01/0xa20 [ 89.344377][ T5340] Code: fd 90 0f 0b e8 00 6d 9e fd 90 0f 0b e8 f8 6c 9e fd 90 0f 0b e8 f0 6c 9e fd 90 0f 0b e8 e8 6c 9e fd 90 0f 0b e8 e0 6c 9e fd 90 <0f> 0b e8 d8 6c 9e fd 90 0f 0b e8 d0 6c 9e fd 90 0f 0b 66 66 66 66 [ 89.353709][ T5340] RSP: 0018:ffffc9000d38e540 EFLAGS: 00010287 [ 89.356411][ T5340] RAX: ffffffff8421c430 RBX: ffff888053bec360 RCX: 0000000000100000 [ 89.360247][ T5340] RDX: ffffc9000e5ab000 RSI: 0000000000091db6 RDI: 0000000000091db7 [ 89.364075][ T5340] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 89.367439][ T5340] R10: dffffc0000000000 R11: fffff52001a71c9c R12: 000d280000000000 [ 89.371910][ T5340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.375593][ T5340] FS: 00007fedb9b556c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000 [ 89.379760][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.382522][ T5340] CR2: 00007f38751909c0 CR3: 000000004342a000 CR4: 0000000000352ef0 [ 89.386191][ T5340] Kernel panic - not syncing: Fatal exception [ 89.389621][ T5340] Kernel Offset: disabled [ 89.391696][ T5340] Rebooting in 86400 seconds..