last executing test programs: 2m21.105132553s ago: executing program 2 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) 2m20.83024897s ago: executing program 2 (id=166): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 2m19.868479123s ago: executing program 2 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 2m19.505486842s ago: executing program 2 (id=176): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x100fbff}]) 2m18.72722088s ago: executing program 2 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='loop', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r1, 0x0, 0x0) 2m17.51340267s ago: executing program 2 (id=183): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 2m16.728287199s ago: executing program 32 (id=183): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) 57.180153756s ago: executing program 4 (id=611): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 56.781314915s ago: executing program 4 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 55.139460495s ago: executing program 4 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x63) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r2, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) 54.1194933s ago: executing program 4 (id=628): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c200000300000000000086dd63369fe000183afffe880000000000000000000000000101ff0200000000000000000000000000018803000000fe8000000000000000000000000000aaee5c3c632bb60c33a9b22aaa760030a9ef1775b3183389b5f4b47e5bbe99b09909ef2d0ea53424b5e08626508c9a9f989e8de0a9df8265c0ad0757ed8c6035b68c47d3d9c350d9cdc0dbec1a2e6ab54df9520da1d82c3a69cb0a6ebf02c0000000000000004e004b780b6701cbaec38509d543dcf8e269b60c1cc8b6c43cac3bd2e1d28e6330fa26caa4d64d4a80e215f381bd2dd01c08576fa33c"], 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22860, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x38) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x17, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b0000aa00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20542, 0x0) pwrite64(r5, &(0x7f0000000140), 0x0, 0xc00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 48.799759219s ago: executing program 4 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read(r2, &(0x7f0000001000)=""/8192, 0x2000) 45.905840459s ago: executing program 4 (id=655): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$inet(0xa, 0x801, 0x84) set_mempolicy(0x2, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='n', 0x1) 45.292262174s ago: executing program 33 (id=655): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$inet(0xa, 0x801, 0x84) set_mempolicy(0x2, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='n', 0x1) 5.855614329s ago: executing program 3 (id=910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 5.553605466s ago: executing program 3 (id=912): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x44080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x10000000000000ad, 0x0, [{0xc0010005, 0x0, 0x4}]}) 5.149787586s ago: executing program 3 (id=918): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) 4.668472547s ago: executing program 3 (id=921): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd', 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 4.345778515s ago: executing program 3 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e010000560100000100"/32) 4.127758781s ago: executing program 6 (id=926): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x50ed, &(0x7f00000051c0)="$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") mount(0x0, &(0x7f0000005140)='./file0\x00', 0x0, 0x20, &(0x7f0000005200)='compress=zstd:15\x00') r1 = openat(r0, &(0x7f0000000200)='file.txt\x00', 0x42, 0x1b6) write(r1, &(0x7f0000000300)="0006000000f6be0000000000fd00fb90ddf317", 0x13) fsync(r1) 3.989039094s ago: executing program 3 (id=927): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x125ac, &(0x7f0000037080)="$eJzs/Xv8cHO9Lvze43yXc0ghkkNFKHIq5FxRhETOUQ6hSAchEUpUpFKScighFVJIcgopREkikXMSJZGQ/ZrPvO41x17PWHM8z3zW3Hu89n6//5ifse7Jd/pj9bqu6xfuGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBjxozi+S/c+99O75fe+e+ne86MGd2e//4997/9j9l7f0z572fmC/4Xz+aPfc4Se7535z12eM97/+38l/769v3w/q/Z98P7/5f+3P8rXrXS3hue++qNjzm3et7lT667/oH/bf+HAAAA4P+Lsv/L3i/99H/6Q6oZM2Y+93/6tefNmDFz5owZZXnErz82//+T//tbbsH/X/v7/5P/3wMAAMD/Vdn/de9Xjun/r3OfN2PGIQf/n379f/zKzPbf/ufOB/71saHbs0D++AX+45fK/9PHf6N5c+fLnfWzi+f/v//1AQAAwP9vyf5ver/S3+yz/v7+F+YumLtQ7sK5L8pdJHfR3BfnLpb7ktzFc5fIXTJ3qdyX5r4s9+W5S+cuk/uK3GVzl8td/n/681+Vu0Luirmvzl0pd+XcVXJXzV0t9zW5r81dPXeN3DVzX5e7Vu7auevkrpu7Xu76uRvkvj73DblvzN0wd6PcN+W+OXfj3E1y35K7ae5muZvnvjV3i9y35W6Zu1Xu23O3zt0md9vc7XK3z90hd8fcd+TulLtzbv5Zkxnvyt0ld9fc3XJ3z3137qx/mCT/fMqMvXLfk/ve3L1z98l9X+6+ue/P/UDuB3M/lLtf7odzZ/2DKAfkzvrnRT6Se1DuR3Nn/YTskNyP5R6ae1ju4bkfz/1E7hG5n8w9Mveo3E/lfjr3M7lH5876Wd5nc4/N/Vzu53O/kHtc7hdzv5R7fO6Xc0/I/Uruiblfzf1a7km5J+eekntq7tdzv5F7Wu43c0/PPSP3zNxv5Z6V++3c7+R+N/fs3HNyz839Xu55ud/P/UHu+bkX5F6Y+8Pci3J/lHtx7o9zL8m9NPey3Mtzr8j9Se6VuVflXp076+/Fuib3Z7k/z70297rc63N/kXtD7o25v8z9Ve5Nub/OvTn3N7m35P4299bc23J/l3t77u9z78i9M/cPuXfl3p17T+69uffl3p/7QO4fcx/M/VPuQ7l/zn0495Hcv+T+NffR3L/lzsq6WX8X0uO5T+T+I/fJ3H/mPpX7dO4zuf/Kffbfz6wfnxf5KPIz7qLKzc/di+Rv0eZ2uTNzn5Obvw+vmC03/5xdMUfunLlz5c6dO0/u83Lzc/AiPwcv8nPwIj8HL/Jz8CL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XST/i+R/kfwvkv9F8r9I/hfJ/+KVucn/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyf9Z/l1ck/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8n7V1i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv+z/ivtMvlf5hfK5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H8533++/8v0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8ok4FlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5Qphck/mdU6QVVekGV/0WVXlAll6v0giq9oEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r0giq9oMrPBarkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/s/52+zr5Xyf/6+R/nT+gTv7Xyf86+V8n/+vkf538r5P/dfK/Tv7Xyf86+V8n/+t5/vP9X6cX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXWysU4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0glkx3KQXNOkFTXpBk17Q5A9s0gua9IImvaBJL2jSC5r0gia9oEkvaNILmvSCJr2gyc8FmuR/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/+bgf/8PfpP8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/xPnM9rkf5v8b5P/bfK/Tf63+RPa5H+b/G+T/23yv03+t8n/Nvnfzvmf7/82vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oM3PBdr0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaD9P3rBf/yLN9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9ok5n/I7/TC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9ILE+4wuvaDLf2S79IIuvaBLjnf5C+nyJ3bpBV16QZde0KUXdOkFXXpBl58LdMn/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O/+Pf9n/W0RM7rkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf9u1u9Zlfzvkv9d8r9L/nfJ/y753yX/Z/0+V13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+Xnwt0+blAl/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l58LdMn/LvnfJf+75H+X/O+S/13yv0v+d8n/Lvmf+J4xM/k/c9bvv5fEnJn8n5n8n5n8n5n8n5kHZib/Z/37/GfO9p/v/5npBTPTC2amF8xML5iZXjAzvWBmesHM9IKZ6QUz0wtmphfM9O/ZAwAAgP8Pyv6f+R+/Muufzfs/nH3wf/xLjGY89twLtzhrrgtvGHhm1r8n8Hn/jX+pAAAAwH/RyP4/p7f/i42v3ea0va/f6n0Dz8z6/QHsfwAAAJigkf1/bm//l1s/vv+jc+84+7sGnpn1+wLa/wAAADBBI/v/e739X935yi8V157856sHnsm/x8f+BwAAgCka2f/n9fZ//b6Prbr1jat/faOBZ/Lv77f/AQAAYIpG9v/3e/u/+el6t54xxzPr/3Hgmfy+ffY/AAAATNHI/v9Bb/+3vzvoqWf22nyefw08k9+v1/4HAACAKRrZ/+f39n+3ywUvnPOcY/+y7cAzi+ba/wAAADBBI/v/gt7+n/mSd1/83LXu/fvZA8/M+nPsfwAAAJigkf1/YW//P+dLZ+3w5FeWmG9o4y+Wa/8DAADABI3s/x/29v9zP3XcQd9++si1moFnXpJr/wMAAMAEjez/i3r7f7aV3/KV7V+80cnfHHhm8Vz7HwAAACZoZP//qLf/Z//6Xas3a9z8wDIDzyyRa/8DAADABI3s/4t7+3+ORZb4/eN/WOA5nxx4Zslc+x8AAAAmaGT//7i3/+d87iLPnnLIhdt9deCZpXLtfwAAAJigkf1/SW//z3X2LS/adLv9frT6wDMvzbX/AQAAYIJG9v+lvf0/91+2v/PrPzz0+o8PPPOyXPsfAAAAJmhk/1/W2//zbPilcstd1ll+iYFnXp5r/wMAAMAEjez/y3v7/3nb/3bxqn3ogBUHnll61h/z3/nXCgAAAPzXjOz/K3r7f9573nnZX25d9sufHXhm1u8JaP8DAADABI3s/5/09v98H7z5Hd+6+uxfvWjgmVfk2v8AAAAwQSP7/8re/p//2rkP3WqhfVa4ZOCZZXPtfwAAAJigkf1/VW//P/+WpU+Z/YA7djl94Jnlcu1/AAAAmKCR/X91b/8vsNNDaz37zUU+8dx//3++6bBtN/wff9zyufY/AAAATNDI/v9pb/+/YKk173nqnCv/vuzAM6/Mtf8BAABggkb2/zW9/f/Cr/yjnblXPd/RA8+8Ktf+BwAAgAka2f8/6+3/BY+4/KXbznHmWl8aeGaFXPsfAAAAJmhk//+8t/8XWqG+8rs37nHyawaeWTHX/gcAAIAJGtn/1/b2/8In/eBdj137+AM/GHjm1bn2PwAAAEzQyP6/rrf/X7Tg3p/o5l7lOfMNPLNSrv0PAAAAEzSy/6/v7f9F5tzwtM33Pn67auCZlXPtfwAAAJigkf3/i97+X/S8T6130llb/ejkgWdWybX/AQAAYIJG9v8Nvf3/4g2Wu2yHjU69fqGBZ1bNtf8BAABggkb2/429/b/Y0w8sftYXd1r+woFnVsu1/wEAAGCCRvb/L3v7/yUP/LL8xxPXHvCdgWdm/Z6A9j8AAABM0Mj+/1Vv/y++2Xx3zrbMHF+efeCZ1+ba/wAAADBBI/v/pt7+X+LS09Z6y8rH/OrggWdWz7X/AQAAYIJG9v+ve/t/yf13POXUBzdd4SUDz6yRa/8DAADABI3s/5t7+3+p92x96BNHPrvLSgPPrJlr/wMAAMAEjez/3/T2/0tv+so76ret+YkvDjzzulz7HwAAACZoZP/f0tv/Lztm4ytn7PXMQgsPPLNWrv0PAAAAEzSy/3/b2/8vX/qIl/7tnNX/+eOBZ9bOtf8BAABggkb2/629/b/0mue237zx2O+cMfDMOrn2PwAAAEzQyP6/rbf/lzns/fe8dY7NN5lt4Jl1c+1/AAAAmKCR/f+73v5/xfOvWm+uua9vPzHwzHq59j8AAABM0Mj+v723/5c9a8ZpT1871/1LDjyzfq79DwAAABM0sv9/39v/y13wmk+cftbJ31th4JkNcu1/AAAAmKCR/X9Hb/8vXz79rm323nGzYwaeeX2u/Q8AAAATNLL/7+zt/1cuuvozW3/xhBcvPfDMG3LtfwAAAJigkf3/h97+f9U3/rnoGRttfdkRA8+8Mdf+BwAAgAka2f939fb/CudcuuYzyzz2ha8NPLNhrv0PAAAAEzSy/+/u7f8VZ2t/N+cTK71/jYFnNsq1/wEAAGCCRvb/Pb39/+rjzztwiwdPX+OcgWfelGv/AwAAwASN7P97e/t/pcXf99XTVt79d/MOPPPmXPsfAAAAJmhk/9/X2/8rr/KGSx5929VH1APPbJxr/wMAAMAEjez/+3v7f5VPf2a74sh299MGntkk1/4HAACACRrZ/w/09v+q12z7ZPOV2xc6ZOCZt+Ta/wAAADBBI/v/j739v9q+X17o8bUW/ufiA89smmv/AwAAwASN7P8He/v/Nbue9JpTXnzud1498MxmufY/AAAATNDI/v9Tb/+/9vZdbtn06X03OW7gmc1z7X8AAACYoJH9/1Bv/6++yU37PfcPD7cLDjzz1lz7HwAAACZoZP//ubf/1/j787785BrL33/BwDNb5Nr/AAAAMEEj+//h3v5f8w8vu+jb2x3yve8OPPO2XPsfAAAAJmhk/z/S2/+v2+bht29/yFqbzTHwzJa59j8AAABM0Mj+/0tv/6/110sOe2CXi158/sAzW+Xa/wAAADBBI/v/r739v/ZGH95loR/uf9n8A8+8Pdf+BwAAgAka2f+P9vb/Ojus+/pNbr3pC+XAM1vn2v8AAAAwQSP7/2+9/b/uvYd/40ft/O8/aeCZbXLtfwAAAJigkf3/WG//r/ehVZr7FzpijVcMPLNtrv0PAAAAEzSy///e2//rX/fX++e7+o2/+8zAM9vl2v8AAAAwQSP7//He/t/gtz+/aq1v3n/E8QPPbJ9r/wMAAMAEjez/J3r7//U7z7HE9w5YavfXDjyzQ679DwAAABM0sv//0dv/b3jpHQeff+Sme/5m4Jkdc+1/AAAAmKCR/f9kb/+/8cQX7rTe24759AcGnnlHrv0PAAAAEzSy///Z2/8bfnLxdedeec3f7jTwzKxfs/8BAABggkb2/1O9/b/RiveefPeDz6566cAzO+fa/wAAADBBI/v/6d7+f9PJWxYXPLHTPm8aeOaduf+L/V/8b/vrBQAAAP7vG9n/z/T2/5sX+uzdGy1z6jEPDzzzrlz//T8AAABM0Mj+/1dv/28817cuX3SjOX7y5MAzu+Ta/wAAADBBI/v/2d7+3+T7e734oS9eu+Q2A8/smmv/AwAAwAT95/u/mNHb/285aaWT5t57lS3/MPDMbrn2PwAAAEzQyP4vevt/0wX/ts7dZz3+g3UHntk91/4HAACACRrZ/2Vv/2825zU7n3/tVne9deCZd+fa/wAAADBBI/u/6u3/zc+b65D15j6+enzgmT1y7X8AAACYoJH9X/f2/1uXunixReeoN9x/4Jk9c+1/AAAAmKCR/d/09v8WXzngioduvPJbtww8s1eu/Q8AAAATNLL/297+f9sRa991wTl7PPuLgWfek2v/AwAAwASN7P+ut/+3XOETMzba68xF9hp45r259j8AAABM0Mj+n9nb/1t9cIuvb3LAPntuOPDM3rn2PwAAAEzQyP5/Tm//v/3az23wo2+e/ekHBp7ZJ9f+BwAAgAka2f/P7e3/rW85Y9cHrl7kt88OPPO+XPsfAAAAJmhk/8/W2//b7PTewxda6I5Vtxt4Zt9c+x8AAAAmaGT/z97b/9v+5fYl12rX2efGgWfen2v/AwAAwASN7P85evt/uw0Xuvp7tx56zL4Dz3wg1/4HAACACRrZ/3P29v/22y923/0/XPYn7xx45oO59j8AAABM0Mj+n6u3/3e45/56vl0eWvKqgWc+lGv/AwAAwASN7P+5e/t/x+evf8ifDllgywMHntkv1/4HAACACRrZ//P09v87zjp05xdsd/MPfj/wzIdz7X8AAACYoJH9/7ze/t/pggvXedMa+911zcAz++fa/wAAADBBI/t/3t7+37n86EmX/OHCao+BZw7Itf8BAABggkb2/3y9/f/OY66bcc/TS2x4/8Azs/6dAPY/AAAATNDI/p+/t//ftfRsdy3w4nu/tf7AMx/Jtf8BAABggkb2//N7+3+XNV91xbprbfTsZgPPHJRr/wMAAMAEjez/BXr7f9fDnljs7K8cuchfBp75aK79DwAAABM0sv9f0Nv/u1265OHnrXLtVesNPHNwrv0PAAAAEzSy/1/Y2/+773/3rq//0xwvvW/gmUNy7X8AAACYoJH9v2Bv/7/7Pb/dYN6jTt33rwPPfCzX/gcAAIAJGtn/C/X2/x43Lfr1O7fc6djNB545NNf+BwAAgAka2f8L9/b/nht8u75ow2dvu2PgmcNy7X8AAACYoJH9/6Le/t/r6T3ue8Nxa77mIwPPHJ5r/wMAAMAEjez/RXr7/z0PbHr1wo8f8553Dzzz8Vz7HwAAACZoZP8v2tv/793si0s+svSmR/904JlP5Nr/AAAAMEEj+//Fvf2/9yZbXvzwdWc+876BZ47Itf8BAABggkb2/2K9/b/P3z+7w4vm2WPhGwae+WSu/Q8AAAATNLL/X9Lb/+/7w7cOeuM+V77h6oFnjsy1/wEAAGCCRvb/4r39v+82e33lh9+uz3jXwDNH5dr/AAAAMEEj+3+J3v5//zV3rP6Hs4+/848Dz3wq1/4HAACACRrZ/0v29v8H9n3h75+351bFRgPPfDrX/gcAAIAJGtn/S/X2/wd3XfzZDWZ/fIttB575TK79DwAAABM0sv9f2tv/H7r93hd9/4ZVzvvXwDNH59r/AAAAMEEj+/9lvf2/3/GrXHjOVQ9d9duBZ47Jtf8BAABggkb2/8t7+//Di/91m3UWXPalBww889lc+x8AAAAmaGT/L93b//uv8vP9n7//ofvuOfDMsbn2PwAAAEzQyP5fprf/D/j0HF+697R1jr1+4JnP5dr/AAAAMEEj+/8Vvf1/4KKXrPrji+64bZ2BZz6fa/8DAADABI3s/2V7+/8j3/jwrW/edZHX3DnwzBdy7X8AAACYoJH9v1xv/x90zrpPvbA7+z1PDDxzXK79DwAAABM0sv+X7+3/j852+AsfvG2fo7cYeOaLufY/AAAATNDI/n9lb/8fPPcK779+9SOfeWTgmS/l2v8AAAAwQSP7/1W9/X/ImY8dt8adGy385oFnjs+1/wEAAGCCRvb/Cr39/7EfX3/+7gff+4atB575cq79DwAAABM0sv9X7O3/Q+uZW3x52yXO+MfAMyfk2v8AAAAwQSP7/9W9/X/YcT/8+2VrX3jn+wee+Uqu/Q8AAAATNLL/V+rt/8NfceACK5y4X3HzwDMn5tr/AAAAMEEj+3/l3v7/+KobrLzLMzdvcdnAM1/Ntf8BAABggkb2/yq9/f+Jjx180xcWW+C8nQee+Vqu/Q8AAAATNLL/V+3t/yOu2mzvz96w4zlHDzxzUq79DwAAABM0sv9X6+3/Tx74+WN3mv3ktyw78MzJufY/AAAATNDI/n9Nb/8fudt3vrfynnPVrxl45pRc+x8AAAAmaGT/v7a3/4/65W6bXnn29fd+aeCZU3PtfwAAAJigkf2/em//f2qtW//61W9vftZ8A898Pdf+BwAAgAka2f9r9Pb/p/+58Lx77XPsm38w8Mw3cu1/AAAAmKCR/b9mb/9/5uGlVlhtntVfePLAM6fl2v8AAAAwQSP7/3W9/X/0W++84WfXPfOPauCZb+ba/wAAADBBI/t/rd7+P2a+XZZ93dLtkRcOPHN6rv0PAAAAEzSy/9fu7f/PfuekX1z7+NV7LDTwzBm59j8AAABM0Mj+X6e3/4/94Zcf/tJxu79u9oFnzsy1/wEAAGCCRvb/ur39/7kZ286+x4an//47A898K9f+BwAAgAka2f/r9fb/5499+KxXbrnSF18y8MxZufY/AAAATNDI/l+/t/+/8LKXbXzFUY998OCBZ76da/8DAADABI3s/w16+/+41Z/33i/+aeuXfHHgmVn/TID9DwAAABM0sv9f39v/X/z4TZ9+5yonXLHSwDPfzbX/AQAAYIJG9v8bevv/S5e3L99xsbXOGdr4Z+fa/wAAADBBI/v/jb39f/x+l/78c88c8pazB545J9f+BwAAgAka2f8b9vb/l/f854NXn7h8/c2BZ87Ntf8BAABggkb2/0a9/X/CzavPfPXaD9/bDDzzvVz7HwAAACZoZP+/qbf/v7LeZ05/77b7nvXJgWfOy7X/AQAAYIJG9v+be/v/xH+9YcOvHHzum5cZeOb7ufY/AAAATNDI/t+4t/+/+uD79vjpnQu/cPWBZ36Qa/8DAADABI3s/016+/9rbznvk69d/fZ/fHXgmfNz7X8AAACYoJH9/5be/j/plOfP/pPbljpyiYFnLsi1/wEAAGCCRvb/pr39f/ILbnh4le7+PT4+8MyFufY/AAAATNDI/t+st/9Pmf3BX+y86xtf99mBZ36Ya/8DAADABI3s/817+//UH7xi2WMuOuL3Kw48c1Gu/Q8AAAATNLL/39rb/19f4quf/vlp83/xkoFnfpRr/wMAAMAEjez/LXr7/xtf3eq9q+5/0wdfNPDMxbn2PwAAAEzQyP5/W2//n3bkThvvueD+L3nuwDM/zrX/AQAAYIJG9v+Wvf3/zVd+/ayvXXXRFacPPDPrnwmw/wEAAGCCRvb/Vr39f/r7PzjzhGf222HxgWcuzbX/AQAAYIJG9v/be/v/jOvPfnC3xS788SEDz1yWa/8DAADABI3s/617+//MW4/8+eprL/DgcQPPXJ5r/wMAAMAEjez/bXr7/1s7vunlvzjx5tlePfDMFbn2PwAAAEzQyP7ftrf/z3r0X5/8/MEbrXPBwDM/ybX/AQAAYIJG9v92vf3/7Tesuseu2x556oIDz1yZa/8DAADABI3s/+17+/8725Ybrrj6Ek/MMfDMVbn2PwAAAEzQyP7fobf/v3vfT06/9M57n//dgWeuzrX/AQAAYIJG9v+Ovf1/9lP1Ky/rFnnn/APP/DTX/gcAAIAJGtn/7+jt/3PWvvyXK9x2x+HnDzxzTa79DwAAABM0sv936u3/c7f4x992uWifG08aeOZnufY/AAAATNDI/t+5t/+/98ia83xh17NfWQ488/Nc+x8AAAAmaGT/v7O3/8/7yKfOuX7/ZT/8mYFnrs21/wEAAGCCRvb/u3r7//tXb7j5Gqc99KVXDDxzXa79DwAAABM0sv936e3/H/xq7/ftftU617524Jnrc+1/AAAAmKCR/b9rb/+fv/sPjvnygocue/zAM7/Itf8BAABggkb2/269/X/Bsu989Vdn32qHHw88c0Ou/Q8AAAATNLL/d+/t/wu/eMrNe91w/I8XHnjmxlz7HwAAACZoZP+/u7f/f3jol55Y7exVHpxt4Jlf5tr/AAAAMEEj+3+P3v6/aLXt5//Zno/PdsbAM7/Ktf8BAABggkb2/569/f+jbz30/c/us8c6Sw48c1Ou/Q8AAAATNLL/9+rt/4vnWXrLnb595qmfGHjm17n2PwAAAEzQyP5/T2///7iZ+4MrX1c/cczAMzfn2v8AAAAwQSP7/729/X/JJTd//sp5rnz+CgPP/CbX/gcAAIAJGtn/e/f2/6Xzf+KN+z6+5juPGHjmllz7HwAAACZoZP/v09v/l3137W8dvPSzhy898Mxvc+1/AAAAmKCR/f++3v6//KIDjrxpw01vXGPgmVtz7X8AAACYoJH9v29v/19RXLzbS4875pVfG3jmtlz7HwAAACZoZP+/v7f/f/K5uX564FFzfHjegWd+l2v/AwAAwASN7P8P9Pb/lS+/Zumjt7z2S+cMPHN7rv0PAAAAEzSy/z/Y2/9XrfG32W5bZadrTxt45ve59j8AAABM0Mj+/1Bv/1/9iZX++LI/nbpsPfDMHbn2PwAAAEzQyP7fr7f/f3rF/W9+xYI3veyBgWfuzLX/AQAAYIJG9v+He/v/mg8v9t07rpr/mg0HnvlDrv0PAAAAEzSy//fv7f+f7bXQZ4467aITtxt45q5c+x8AAAAmaGT/H9Db/z//ze177rf//gc+O/DM3bn2PwAAAEzQyP4/sLf/r13/vdcuvuv9K+078Mw9ufY/AAAATNDI/v9Ib/9f9+wZy91w0VI33TjwzL259j8AAABM0Mj+P6i3/6//0+fmOuy2Iw6+auCZ+3LtfwAAAJigkf3/0d7+/8WmW/z5Q90b3/HOgWfuz7X/AQAAYIJG9v/Bvf1/w7d2uO3dd5477+8Hnnkg1/4HAACACRrZ/4f09v+N8xy/2vGr7/vogQPP/DHX/gcAAIAJGtn/H+vt/182p77gum1vP22PgWcezLX/AQAAYIJG9v+hvf3/q0ve9c81D1749dcMPPOnXPsfAAAAJmhk/x/W2/83Lfubrd914iFzrj/wzEO59j8AAABM0Mj+P7y3/3/9xXkuOG7ttR65f+CZP+fa/wAAADBBI/v/4739f/Ohyxx/+WIPX/SXgWcezrX/AQAAYIJG9v8nevv/N6v9+YBXPbP81psNPPNIrv0PAAAAEzSy/4/o7f9bPvK6O1b602Mv+8DAM7P+ngD7HwAAACZoZP9/srf/f3v1k2tctcpK1/xm4Jm/5tr/AAAAMEEj+//I3v6/9VdXLHzslieceOnAM4/m2v8AAAAwQSP7/6je/r9t9+Zf7zhq6wN3Gnjmb7n2PwAAAEzQyP7/VG///+6p87d/zXFXr/TwwDOP5dr/AAAAMEEj+//Tvf1/+9r7/OiaDdub3jTwzN9z7X8AAACYoJH9/5ne/v/9FhudeOLSpx+8zcAzj+fa/wAAADBBI/v/6N7+v+ORT3/0PY/v/o4nB555Itf+BwAAgAka2f/H9Pb/nS9a/p+fnefYedcdeOYfufY/AAAATNDI/v9sb///4Zt/fMFO123+6B8Gnpn19wTY/wAAADBBI/v/2N7+v+t7v1pt5W8/c9rjA8/8M9f+BwAAgAka2f+f6+3/u58z/21X7rP669868MxTufY/AAAATNDI/v98b//fc8I3D/jqnifPecvAM0/n2v8AAAAwQSP7/wu9/X/vYu84fq+zd3xk/4Fnnsm1/wEAAGCCRvb/cb39f99K21yw2g3XX7TXwDP/yrX/AQAAYIJG9v8Xe/v//qNP3Ppns8+19S8Gnnk21/4HAACACRrZ/1/q7f8Hfr7Jv66/596P/3zglVkf9j8AAABM0Mj+P763//+4zycXXmPVJXbdfeCVWX+M/Q8AAAATNLL/v9zb/w++63tr7L7VkSseNPBKmQ/7HwAAACZoZP+f0Nv/f7rjA3d8+bCNfvm7gVeqfNj/AAAAMEEj+/8rvf3/0Juv/uhlx998wlsGXqnzYf8DAADABI3s/xN7+//PTxQnrrD+Avs/OvBKkw/7HwAAACZoZP9/tbf/H777tT/aZckLl7t34JU2H/Y/AAAATNDI/v9ab/8/8vZntv/Ck/v94vUDr3T5sP8BAABggkb2/0m9/f+X9da46vOLHHrxMwOvzPrz7X8AAACYoJH9f3Jv///1X08tsevl62y7w8Arz8mH/Q8AAAATNLL/T+nt/0cfvKxZ8ZSHZr5h4JXn5sP+BwAAgAka2f+n9vb/397S3X/pQcv+8cGBV2bLh/0PAAAAEzSy/7/e2/+PXf7915+w89kn7TLwyuz5sP8BAABggkb2/zd6+//v++37jd0u2Wftnwy8Mkc+7H8AAACYoJH9f1pv/z++5xsPW/2OO+b/1cArc+bD/gcAAIAJGtn/3+zt/yduPnqXX1SLPLbPwCtz5cP+BwAAgAka2f+n9/b/P47d7vKfz3/lx9828Mrc+bD/AQAAYIJG9v8Zvf3/5MtOePGq19S7Pjbwyjz5sP8BAABggkb2/5m9/f/P1U8u9jzjzBXvHnhl1u63/wEAAGCCRvb/t3r7/6mP73r31z6wxy/XHnhl3nzY/wAAADBBI/v/rN7+f3q+X6/7k90eP+G6gVfmy4f9DwAAABM0sv+/3dv/z3xn3pNXOW+V/d878Mr8+bD/AQAAYIJG9v93evv/Xz98+cE733T8cvsNvZIP+x8AAAAmaGT/f7e3/5+d8chOx8zc6he3DryyQD7sfwAAAJigkf1/9n/s/2LGDfXv5nnk1It3HHjlBfmw/wEAAGCCRvb/Ob39X7z78jXvWnGnbS8feOWF+bD/AQAAYIJG9v+5vf1fHvSPRX+w+bUzfz3wyoL5sP8BAABggkb2//d6+7/6yZrPrH/0HH/80MArC+XD/gcAAIAJGtn/5/X2f/22T223yLHHnPTUwCsL58P+BwAAgAka2f/f7+3/5qENL/nzxpuu/faBV16UD/sfAAAAJmhk//+gt//bf+z91QuXe3b+jQdeWSQf9j8AAABM0Mj+P7+3/7t1fnDgho+u+dhDA68smg/7HwAAACZoZP9f0Nv/M9sZc/+vXpn159j/AAAAMEEj+//C3v5/zo9Oec3Fdxwx9ykDryyWD/sfAAAAJmhk//+wt/+fe/qXFvrjJUut9/2BV16SD/sfAAAAJmhk/1/U2/+zPW/7Jxfc+f5vLDDwyuL5sP8BAABggkb2/496+3/2gx96+9oH7f/QCQOvLJEP+x8AAAAmaGT/X9zb/3O8ZumLzj3lojlWG3hlyXzY/wAAADBBI/v/x739P+dyc3/5vsvnf/tyA68slQ/7HwAAACZoZP9f0tv/c33+5v3mX+SmCz418MpL82H/AwAAwASN7P9Le/t/7pvecvidTy7/s5UHXnlZPux/AAAAmKCR/X9Zb//P857jdp13yYeX+fzAKy/Ph/0PAAAAEzSy/y/v7f/n7X/WBq9ff62PHjrwytL5sP8BAABggkb2/xW9/T/vpe/++nnHH/LVxQZeWSYf9j8AAABM0Mj+/0lv/8+32S31I4ct/JtvD7zyinzY/wAAADBBI/v/yt7+n/+BRe5beKvbV55r4JVl82H/AwAAwASN7P+revv/+U8vcfUbVt13pxcMvLJcPux/AAAAmKCR/X91b/8vsMFdS150z7mH/nDgleXzYf8DAADABI3s/5/29v8Lylcecsmju//1xIFXXpkP+x8AAAAmaGT/X9Pb/y+84PGd37Tc6XO/buCVV+XD/gcAAIAJGtn/P+vt/wXPunadF2zcrveygVdWyIf9DwAAABM0sv9/3tv/Cz3/uSf96dirv3HkwCsr5sP+BwAAgAka2f/X9vb/woddMOPso7d+qB145dX5sP8BAABggkb2/3W9/f+iNQ+6a93NT5jj6wOvrJQP+x8AAAAmaGT/X9/b/4ssvd4VC6y40tu/N/DKyvmw/wEAAGCCRvb/L3r7f9FjPrbYPY88dsE8A6+skg/7HwAAACZoZP/f0Nv/L97pxV9faOZcP/vWwCur5sP+BwAAgAka2f839vb/Yrfct8EDN12/zHMGXlktH/Y/AAAATNDI/v9lb/+/5Nrf7fqj83b86CIDr7wmH/Y/AAAATNDI/v9Vb/8v/sEFD99kt5O/+qOBV16bD/sfAAAAJmhk/9/U2/9L3HP6kvN9YPXfvHLgldXzYf8DAADABI3s/1/39v+S27/n6vvPeGblYwdeWSMf9j8AAABM0Mj+v7m3/5fa8K33fe+azXc6fOCVNfNh/wMAAMAEjez/3/T2/0v/cmy91vzHHvrSgVdelw/7HwAAACZoZP/f0tv/LztvrZPWW27TRc8aeGWtfNj/AAAAMEEj+/+3vf3/8jk/vs75jx7zrzkHXlk7H/Y/AAAATNDI/r+1t/+XXvBHO9997JpnvnDglXXyYf8DAADABI3s/9t6+3+Zk/Y/ZO6Nn93oooFX1s2H/Q8AAAATNLL/f9fb/69Y4aeLbbT5TuUqA6+slw/7HwAAACZoZP/f3tv/yx4x5xUXHH3q3V8YeGX9fNj/AAAAMEEj+//3vf2/3FdefddDj8xx/scGXtkgH/Y/AAAATNDI/r+jt/+XX+rRGYuueO3bXjzwyuvzYf8DAADABI3s/zt7+/+Vr13hS4vctMoSXx545Q35sP8BAABggkb2/x96+/9Vhzy2/59nPn7lqgOvvDEf9j8AAABM0Mj+v6u3/1f4wvXbXLjbVp9dfuCVDfMxtP+frf43/zUDAAAA//eM7P+7e/t/xeVnXrjhecfv/emBVzbKh//+HwAAACZoZP/f09v/r774hy+c54x6tWLglTflw/4HAACACRrZ//f29v9K3YFP3fWBK285deCVN+fD/gcAAIAJGtn/9/X2/8rzbnDrD+bf41PnDbyycT7sfwAAAJigkf1/f2//r3LGwauuf82Zez1/4JVN8mH/AwAAwASN7P8Hevt/1T9v9pW179hn0VcNvPKWfNj/AAAAMEEj+/+Pvf2/2pafP+jc6ux/fW7glU3zYf8DAADABI3s/wd7+/81635nh/t2XuTMwwZe2Swf9j8AAABM0Mj+/1Nv/7/2yd0unv+SOzZaauCVzfNh/wMAAMAEjez/h3r7f/U9bn3RxqesU5458Mpb82H/AwAAwASN7P8/9/b/Gjcu/OzFBx1698yBV7bIh/0PAAAAEzSy/x/u7f81r1zq939cZNnzFx145W35sP8BAABggkb2/yO9/f+6j965+oKXP/S2iwde2TIf9j8AAABM0Mj+/0tv/6/163P+cNaSCyzRDbyyVT7sfwAAAJigkf3/197+X/u9H6p2ePLmK78x8Mrb82H/AwAAwASN7P9He/t/nQPe/JLZjt/vs+cOvLJ1Pux/AAAAmKCR/f+33v5f97KjLv3H+hfuPffAK9vkw/4HAACACRrZ/4/19v96m6+246lbLbHaVwZe2TYf9j8AAABM0Mj+/3tv/6//x2c/9pbD7r1lzYFXtsuH/Q8AAAATNLL/H+/t/w2eufLU+p6NPvXygVe2z4f9DwAAABM0sv+f6O3/17++WvuJVY/c66iBV3bIh/0PAAAAEzSy///R2/9vqG6892/XPLPbrgOv7JgP+x8AAAAmaGT/P9nb/2+8cIFuxvyrf/LKgVfekQ/7HwAAACZoZP//s7f/N/z2sku99QPH3v7LgVd2yof9DwAAABM0sv+f6u3/jRb400++ecbmq+898MrO+bD/AQAAYIJG9v/Tvf3/psPf/s6nz7v+A08PvPLOfNj/AAAAMEEj+/+Z3v5/8+u+9vG5dpvr89sPvPKufNj/AAAAMEEj+/9fvf2/8TLf+OY2M0++9I0Dr+ySD/sfAAAAJmhk/z/b2/+bfHbn9U+/acfF/jTwyqzfE9D+BwAAgAn6z/d/OaO3/99yyCPf+c2KJ2y+6cAru+XD/gcAAIAJGtn/RW//b/ral79piUe2PvdvA6/sng/7HwAAACZoZP+Xvf2/2fLz7rX30Y/dd8/AK+/Oh/0PAAAAEzSy/6ve/t/8C78++tDNV+o2GHhlj3zY/wAAADBBI/u/7u3/t3a7Ln/Lxqdv/LOBV/bMh/0PAAAAEzSy/5ve/t/i4pOvW+bY3b+728Are+XD/gcAAIAJGtn/bW//v+2MEx766KNXP/XRgVfekw/7HwAAACZoZP93vf2/5bzbzfmp5doFbx945b35sP8BAABggkb2/8ze/t9qy6PPPGLV23f758Are+fD/gcAAIAJGtn/z+nt/7f/+Y1vOOCehT+51cAr++TD/gcAAIAJGtn/z+3t/62f3Hf35Q879/ZNBl55Xz7sfwAAAJigkf0/W2//b7Pu94/63Vb7rv7ngVf2zYf9DwAAABM0sv9n7+3/bW/slvnE+g9/4B0Dr7w/H/Y/AAAATNDI/p+jt/+32+Oya95//PKfv2LglQ/kw/4HAACACRrZ/3P29v/2H33qgRc/ecilNw288sF82P8AAAAwQSP7f67e/t/hyjWe+6sl11rsgwOvfCgf9j8AAABM0Mj+n7u3/3dc5WtHv+Lyiza/duCV/fJh/wMAAMAEjez/eXr7/x2ffvtedyyy/7nvGXjlw/mw/wEAAGCCRvb/83r7f6fjd37TUQfddN+HB17ZPx/2PwAAAEzQyP6ft7f/d178G9/Z75T5u9sGXjkgH/Y/AAAATNDI/p+vt//fec4Ccy5+yREbbznwyoH5sP8BAABggkb2//y9/f+u2W586Iad3/jdvw+88pF82P8AAAAwQSP7//m9/b/Lon+67rDq/qfuGnjloHzY/wAAADBBI/t/gd7+3/Ubyy7/oTuWWnCtgVc+mg/7HwAAACZoZP+/oLf/d/vDs0ft+/4dL39s4JWD82H/AwAAwASN7P8X9vb/7tustvvBp5+8+NsGXjkkH/Y/AAAATNDI/l+wt//fvUn1hpt+OteH1h545WP5sP8BAABggkb2/0K9/b/H368886XzXX/c3QOvHJoP+x8AAAAmaGT/L9zb/3vu+qHnHvicze9478Arh+XD/gcAAIAJGtn/L+rt/71uP+eBo3997JrXDbxyeD7sfwAAAJigkf2/SG//v+eao6657furv/vWgVc+ng/7HwAAACZoZP8v2tv/7933zcu8bPdnjtpv4JVP5MP+BwAAgAka2f8v7u3/vd/z6e+9/DPtk5cPvHJEPux/AAAAmKCR/b9Yb//vc9NGm9662dUv2HHglU/mw/4HAACACRrZ/y/p7f/3XbrP3p9ZYfc3fWjglSPzYf8DAADABI3s/8V7+3/f/c8/9iMPn/7tXw+8clQ+7H8AAACYoJH9v0Rv/7//gWaFpf620j1vH3jlU/mw/wEAAGCCRvb/kr39/4HNrrjh18s/1jw18Mqn82H/AwAAwASN7P+levv/gxs8+ddDNtl604cGXvlMPux/AAAAmKCR/f/S3v7/0NOvm/d9nzvh7I0HXjk6H/Y/AAAATNDI/n9Zb//vd8Gfz//g4WtdvvvAK8fkw/4HAACACRrZ/y/v7f8Pl8tscfjbD1n85wOvfDYf9j8AAABM0Mj+X7q3//d//jzvv3G15T/0u4FXjs2H/Q8AAAATNLL/l+nt/wPO+s1xL7n34eMOGnjlc/mw/wEAAGCCRvb/K3r7/8A137Xyh/+x7x2PDrzy+XzY/wAAADBBI/t/2d7+/8hhp9505BLnrvmWgVe+kA/7HwAAACZoZP8v19v/Bx1z/N9/v97C7379wCvH5cP+B4D/F3t3GnX1GMf7n982RSEZkilkzJTM85BZZmXIlHlIogwhUxlCKEqUIZIhhAoZQoYkZB4yRaZCCZHCf/3/5+p/rrWufc61zlrnwfXg9Xr0bXfvz7qfvu+9730DABQo0/8bR/1/yfrHrLDhrZ9f+22dlQHh0P8AAABQoEz/bxL1/6Wtfuje4JK15xxTZ+XWcOh/AAAAKFCm/1tF/X/ZtRvd+vc93zf9p87KwHDofwAAAChQpv83jfr/8juXffqRcXvtO63Oym3h0P8AAABQoEz/t476/4q13j3yqNWufnjPOiu3h0P/AwAAQIEy/b9Z1P89nzx27iLVclNfrrMyKBz6HwAAAAqU6f/No/7v1ei+Ff/44v2FT6qzMjgc+h8AAAAKlOn/LaL+v3LFQVvd/Xz3A7vUWbkjHPofAAAACpTp/y2j/r/qniM+PajjMyPeq7NyZzj0PwAAABQo0/9bRf1/9fdX92jXb+KoHeus3BUO/Q8AAAAFyvT/1lH/X3PUfoOG7t/okMF1Vu4Oh/4HAACAAmX6f5uo/3vv1fW5Xze+Z4HedVaGhEP/AwAAQIEy/b9t1P/X/vb4MdVvHaesW2flnnDofwAAAChQpv+3i/r/uuMW+O/wX/67/946K/Mf0/8AAABQoEz/bx/1//WTX13lwU132GuROitDw6H/AQAAoECZ/t8h6v8+b8/b7t+DblylcZ2V+8Kh/wEAAKBAmf7fMer/G7pt80WjPgfOe6LOyrBw6H8AAAAoUKb/d4r6/8bNn13zr1Mf7NOgzsr94dD/AAAAUKBM/+8c9f9NN3R/cYlRp3d+qM7KA+HQ/wAAAFCgTP/vEvV/39t3+uqYD17Z9tk6Kw+GQ/8DAABAgTL9v2vU//1Wv7Ia3mChT1etszL/PQH6HwAAAAqU6f82Uf/f/MRmQ/5cdmC/vnVWhodD/wMAAECBMv2/W9T/tzSYtdNC4w87e5M6Kw+HQ/8DAABAgTL9v3vU//1XGX/cAffPXnudOiuPhEP/AwAAQIEy/b9H1P8Dhi15xT1dt3ytV52VR8Oh/wEAAKBAmf7fM+r/W7/5bJ1hHX8aNaTOyohw6H8AAAAoUKb/94r6f+DhzV455PkND6m38lg49D8AAAAUKNP/e0f9f1vb5lMX+OKKBVaos/J4OPQ/AAAAFCjT//tE/X/7n98t8lu1y5RRdVaeCIf+BwAAgAJl+n/fqP8HnXjIffevtnDdlZHh0P8AAABQoEz/t436f/CXfdscOW7VvW6vszL/PQH6HwAAAAqU6f/9ov6/4437T1zqnhGrXFdnZXQ49D8AAAAUKNP/+0f9f2eXM6+ad0mXeRvVWXkyHPofAAAACpTp/wOi/r/riolV7dbefW6us/JUOPQ/AAAAFCjT/wdG/X/31ot/NbPNPp23qLPydDj0PwAAABQo0/8HRf0/ZMNNXry3xbfbrl5nZUw49D8AAAAUKNP/B0f9f8+A2Wu2/6vFp1fUWXkmHPofAAAACpTp/0Oi/r934TZXNPz26X5L1Vl5Nhz6HwAAAAqU6f9Do/4fOvby4/7b+vyzH66z8lw49D8AAAAUKNP/7aL+v++hp3Z66PAP1x5TZ+X5cOh/AAAAKFCm/9tH/T+scY8hh/Va4bWmdVbGhkP/AwAAQIEy/X9Y1P/3Hzp8kQ7Pv39kvzorL4RD/wMAAECBMv1/eNT/D8w4beqjHZcb06rOyovh0P8AAABQoEz/HxH1/4NzD3hlbvXML2vXWXkpHPofAAAACpTp/yOj/n9o5/7rLPZF96V61lkZFw79DwAAAAXK9H+HqP+Hv9fiqoPHfb/7YnVWXg6H/gcAAIACZfr/qKj/Hz716xPvWm3tYQ/WWXklHPofAAAACpTp/6Oj/n/k4o/b/H7J1b89V2fl1XDofwAAAChQpv+Pifr/0ddWvW/Re/ZaZrU6K6+FQ/8DAABAgTL9f2zU/yM+/WKHRdo8fuzQOivjw6H/AQAAoECZ/j8u6v/Hjm362R+3nnPZonVWXg+H/gcAAIACZfq/Y9T/j3dd45+7//r8g6XrrEwIh/4HAACAAmX6//io/594a+pqB7VYebPH66y8EQ79DwAAAAXK9P8JUf+P7NBubIOtL7t4hzorE8Oh/wEAAKBAmf4/Mer/Ud/deNTf3+40aFCdlTfDof8BAACgQJn+Pynq/9GzHrzokV6/jL+2zspb4dD/AAAAUKBM/58c9f+Te55xx1GHb7zeenVW3g6H/gcAAIACZfr/lKj/n2r4/DaH7//7kUvWWZkUDv0PAAAABcr0/6lR/z89+vyPH+y3+ZjhdVbeCYf+BwAAgAJl+v+0qP/HDNllzr+/3f7LM3VW3g2H/gcAAIACZfr/9Kj/n2nac6VGGx+x1Ip1Vt4Lh/4HAACAAmX6/4yo/5/tvcUz7TZ9bfdb6qy8Hw79DwAAAAXK9H+nqP+f22Tm4UN/WWTYlnVWPgiH/gcAAIACZfr/zKj/n28x4fxf+9z/W/M6Kx+GQ/8DAABAgTL93znq/7F3NLytOujUZS6vs/JROPQ/AAAAFCjT/2dF/f/CZkftMXJU32O3qrPycTj0PwAAABQo0/9dov5/sc/tQ/c49eDLbquz8kk49D8AAAAUKNP/Z0f9/9Jtd/ds0uCfD66vs/JpODL9P++//xvfMwAAAPB/JtP/50T9P675ySd99cF2m21cZ2VyOLz+DwAAAAXK9H/XqP9ffvyDV58Zf/fF99RZ+Swc+h8AAAAKlOn/blH/v7JYkxZ7LnvsoAXrrHweDv0PAAAABUr7//Xof6tzo/5/deX1Fl6561vjl6+z8kU49D8AAAAUKPP6/3lR/79234zvZ9y/1Hoj66x8GQ79DwAAAAXK9P/5Uf+P/3r7Xacffv4Gh9VZ+Soc+h8AAAAKlOn/C6L+f/2wuXc37fX0m3/XWZkSDv0PAAAABcr0f/eo/yfs++Kl+367wsCf66x8HQ79DwAAAAXK9P+FUf+/MXvRjmO3/vD8/eusfBMO/Q8AAAAFyvT/RVH/Tzxh1EtTW+zTalydlanh0P8AAABQoEz/Xxz1/5tfnNN8hb96Tzquzsq34dD/AAAAUKBM//eI+v+tCXstuOutLXqeW2flu3DofwAAAChQpv8vifr/7bNu+GZEm29PfL/Oyvfh0P8AAABQoEz/Xxr1/6TevT54+J5VVzizzsoP4dD/AAAAUKBM/18W9f87m+y65dGXfDl7Yp2VH8Oh/wEAAKBAmf6/POr/d1tcsPziq3UZMrnOyrRw6H8AAAAoUKb/r4j6/707xv4+Z9yIXS+oszI9HPofAAAACpTp/55R/7/fsNEhQ77YcPE/6qz8FA79DwAAAAXK9H+vqP8/GP3G6AOrn6a3r7Pyczj0PwAAABQo0/9XRv3/4ZBfByzccZexO9VZ+SUc+h8AAAAKlOn/q6L+/6jplt1mP3/F0V/XWZkRDv0PAAAABcr0/9VR/3/c4dt3Zt1/2Aav1FmZGQ79DwAAAAXK9P81Uf9/8t2arRfsOvDNk+us/BoO/Q8AAAAFyvR/76j/P5214jKHLrvlwLPqrMwKh/4HAACAAmX6/9qo/yfv+eXM+8bPPv/dOiu/hUP/AwAAQIEy/X9d1P+ffdrpgH8+OL3V0XVWfg+H/gcAAIACZfr/+qj/Pz/2oceXbPDgpHl1Vv4Ih/4HAACAAmX6v0/U/190vanfEacu1HN6nZXZ4dD/AAAAUKBM/98Q9f+Xb7Xv8sCoV07cq87Kn+HQ/wAAAFCgTP/fGPX/V9v98Xu7g3ZY4bc6K3+FQ/8DAABAgTL9f1PU/1OubL380D7/zT6wzsqccOh/AAAAKFCm//tG/f913wZb/vrLgUN2r7Pydzj0PwAAABQo0//9ov7/Zt23P6g2vXHXqXVW5oZD/wMAAECBMv1/c9T/U8dc3O3wjRstfkqdlfl/E1D/AwAAQIEy/X9L1P/fLvDMgAd/mzh9Qp2Vf8Kh/wEAAKBAmf7vH/X/d8teNvrffh3Hfl5n5d9w6H8AAAAoUKb/B0T9//0jexzSaP97jr6kzsp/4dD/AAAAUKBM/98a9f8P026Z2aB542tXSleq+Yf+BwAAgAJl+n9g1P8/HnDwMn/Pm3Ta0+lKFb5G/wMAAECJMv1/W9T/09qc2vqRQT12eCRdqea/AUD/AwAAQIEy/X971P/T/330naN2Gvtlw3SlqoVD/wMAAECBMv0/KOr/n85YpcsiR63R/9J0pVooHPofAAAACpTp/8FR///84eR+f1z2zXlrpCvVwuHQ/wAAAFCgTP/fEfX/Ly9NefzuKW3X3DxdqRYJh/4HAACAAmX6/86o/2ecv84BB21/3UsD0pVq0XDofwAAAChQpv/vivp/5onfjz/40/NGbJiuVPOfr/8BAACgQJn+vzvq/1+/XH39uxYZfeAN6UrVIBz6HwAAAAqU6f8hUf/PemOlJX4/qenCt6Yr1eLh0P8AAABQoEz/3xP1/29dPv9x0TGfTN0mXamWCIf+BwAAgAJl+v/eqP9//6bzXh2GtXl4dLpSNQyH/gcAAIACZfp/aNT/fxz+wEOPXthr32XTlapROPQ/AAAAFCjT//dF/T+7bb/ec1dq2bSWrlRLhkP/AwAAQIEy/T8s6v8//zz0lMVemzbn7nSlWioc+h8AAAAKlOn/+6P+/+uJqyY2fKfVtVemK9XS4dD/AAAAUKBM/z8Q9f+cBjtv9F+jmae1SFeqxuHQ/wAAAFCgTP8/GPX/36tcuNRDnY7eoXW6Us3vfv0PAAAABcr0/0NR/88d9tzPhz1255c3pStVk3DofwAAAChQpv+HR/0/b/Ol2taGV/1XSVeq+X8TUP8DAABAgTL9/3DU///c8PqjM88ad97YdKVaLhz6HwAAAAqU6f9Hov7/9/bf+ty7dKc1709XquXDof8BAACgQJn+fzTq//9W3/yM9hOHv7R4ulKtEA79DwAAAAXK9P+I/9n/1QLPLn/O5y3bjxiRrlRNw6H/AQAAoECZ/n8s6v8FF5l000Z/9j+wTuNXK4ZD/wMAAECBMv3/eNT/1TLTRnQfsNXCC6crVbNw6H8AAAAoUKb/n4j6v3b/Bgdds8+cqcPSlWqlcOh/AAAAKFCm/0dG/b/QNnfMerfdCQ+3TFeqlcOh/wEAAKBAmf4fFfX/wpcetvTqvYfue026Uq0SDv0PAAAABcr0/+io/xe5uWOrbtOWaHpHulKtGg79DwAAAAXK9P+TUf8vutG97125xYQ526Ur1Wrh0P8AAABQoEz/PxX1/2KnnXve5a89N29SulLNf47+BwAAgAJl+v/pqP8bTBpxS5eVLlrl7HSlWj0c+h8AAAAKlOn/MVH/L/5y75FrXfjuXiemK9Ua4dD/AAAAUKBM/z8T9f8SPfZt9+GwJve/lq5Ua4ZD/wMAAECBMv3/bNT/DX/6d/b1Y/pM2SddqVqEQ/8DAABAgTL9/1zU/43abbVsj5P2X+DHdKVaKxz6HwAAAAqU6f/no/5fcpdq8/UXmXLIv+lKtXY49D8AAAAUKNP/Y6P+X+qvlz/65NPmozqkK9U64dD/AAAAUKBM/78Q9f/ST+2y/gbbT37tu3SlWjcc+h8AAAAKlOn/F6P+b1z1HP/llGZrt0lXqvXCof8BAACgQJn+fynq/2WWf/7Hay8befbB6Uq1fjj0PwAAABQo0//jov5vMvz8Jc4/qlu/X9OVqmU49D8AAAAUKNP/L0f9v+wOEx5ac6cfPr04Xak2CIf+BwAAgAJl+v+VqP+X69lwr0mD1tv2y3Sl2jAc+h8AAAAKlOn/V6P+X/7GLU7pOe+qzuPTlWqjcOh/AAAAKFCm/1+L+n+F9Wf2Pq/57n1OS1eqjcOh/wEAAKBAmf4fH/V/0zPX2OicLQbPa5uuVJuEQ/8DAABAgTL9/3rU/yu+P3XipdM6rDIjXalahUP/AwAAQIEy/T8h6v9mL3zx8/u9Z+31V7pSbRoO/Q8AAAAFyvT/G1H/r9S96VLrtGt9/xHpStU6HPofAAAACpTp/4lR/6/8w4OPXrTPI1M+TFeqzcKh/wEAAKBAmf5/M+r/VQ46o+0NAzov0DVdqTYPh/4HAACAAi34P8r/f9X/b0X9v+ru7c6Y/OeLhxyfrlRbhEP/AwAAQIEyr/+/HfX/avNu7LNuywVGvZiuVFuGQ/8DAABAgTL9Pynq/+ZLbrrERxPnvnZhulJtFQ79DwAAAAXK9P87Uf+vPvL3H1ssvc3an6Qr1dbh0P8AAABQoEz/vxv1/xp3vTX+rLNuPvutdKXaJhz6HwAAAAqU6f/3ov5fs9li618x/NB+Z6Qr1bbh0P8AAABQoEz/vx/1f4urx/T++LHxn36VrlTbhUP/AwAAQIEy/f9B1P9rbXrRKS07Ndh2l3Sl2j4c+h8AAAAKlOn/D6P+X3vt3fe6pNGwzoemK9UO4dD/AAAAUKBM/38U9f86gy596Lp3TurzZ7pS7RgO/Q8AAAAFyvT/x1H/r/vxQUtdPW3oMhelK9VO4dD/AAAAUKBM/38S9f96HW/++cItTvjti3Sl2jkc+h8AAAAKlOn/T6P+X//cRyZu3G7CsNfTlWr+ZwLqfwAAAChQpv8nR/3fcuIpG33We4ndT09Xql3DUa//F/y//C0DAAAA/4cy/f9Z1P8bHP1pn6sG9F/q+3SlahMOr/8DAABAgTL9/3nU/xtOXfmMrvu0/2W3dKWa/5j+BwAAgAJl+v+LqP83mrl22+Yt54w5KF2pdg+H/gcAAIACZfr/y6j/N977q0ff+3OrI2emK9Ue4dD/AAAAUKBM/38V9f8m7Ztv+e7S49bbO12p9gyH/gcAAIACZfp/StT/rX7+7oPVJ1bjf0hXqr3Cof8BAACgQJn+/zrq/03nfPZ7t+HDB/2XrlTz3xOg/wEAAKBAmf7/Jur/1rs2W/7KszpdfFS6Uu0TDv0PAAAABcr0/9So/zd75/7Rn3eaudk76Uq1bzj0PwAAABQo0//fRv2/+elnHrLRY60+OCddqdqGQ/8DAABAgTL9/13U/1tccki37u/cedkJ6Uq1Xzj0PwAAABQo0//fR/2/5St9B1zT6OhjX01Xqv3Dof8BAACgQJn+/yHq/60u26n19Sv1WmZKulIdEA79DwAAAAXK9P+PUf9vve2V7/R4rc1vu6Yr1YHh0P8AAABQoEz/T4v6f5uNn525/rBpww5JV6qDwqH/AQAAoECZ/p8e9f+2t3Rf5pMLW+4+O12pDg6H/gcAAIACZfr/p6j/t1t0/OOXnzR6qe7pSjX/PQH6HwAAAAqU6f+fo/7f/rklD+gy5rxfPk5XqkPDof8BAACgQJn+/yXq/x0e2KzLWp9+MubtdKVqFw79DwAAAAXK9P+MqP93bDKr34eLND2yU7pStQ+H/gcAAIACZfp/ZtT/Oz19z37HTvlmvY/SleqwcOh/AAAAKFCm/3+N+n/n2onD+22/xvhu6Up1eDj0PwAAABQo0/+zov7fZYVjrn/tqOsGdUxXqiPCof8BAACgQJn+/y3q/10fHth5s8vaXvxCulIdGQ79DwAAAAXK9P/vUf+32bHl250HTdps33Sl6hAO/Q8AAAAFyvT/H1H/79br5w0H7dT4g1/SleqocOh/AAAAKFCm/2dH/b/7TR81HN987GVz0pXq6HDofwAAAChQpv//jPp/j5aNf9l2Xo9jj0xXqmPCof8BAACgQJn+/yvq/z07j9t7x0YNTnwyXamODYf+BwAAgAJl+n9O1P97fbDw/RPfGd9zuXSlOi4c+h8AAAAKlOn/v6P+3/vFHa+59bGTJlXpStUxHPofAAAACpTp/7lR/+9z4ZzTT+80rNVd6Up1fDj0PwAAABQo0//zov7f98d93tjkrG3O3yBdqU4Ih/4HAACAAmX6/5+o/9sefP1644bPHdgnXalODIf+BwAAgAJl+v/fqP/32+PJxQZMPPTNgelKdVI49D8AAAAUKNP//0X9v/8/XaadsPTNG2ybrlQnh0P/AwAAQIH+9/1fWyDq/wN+WO+0W//sfPRl6Up1Sjj0PwAAABQo0/8LRv1/4EEzrj695SNj10xXqlPDof8BAACgQJn+r6L+P2j3Dx7YcZ8Fpm+WrlSnhUP/AwAAQIEy/V+L+v/geU32mTjgxcX7pyvV6eHQ/wAAAFCgTP8vFPX/IWfePX1A7w67NktXqjPCof8BAACgQJn+Xzjq/0PfP7nBCe0GD3kqXak6hUP/AwAAQIEy/b9I1P/tXjhq3U22aD370XSlOjMc+h8AAAAKlOn/RaP+b9/99gnjps1aoVG6UnUOh/4HAACAAmX6f7Go/w/bYa8zX5u33onrpyvVWeHQ/wAAAFCgTP83iPr/8J43XLdZ8x96Xp2uVF3Cof8BAACgQJn+Xzzq/yNuHPXwsTvtPunOdKU6Oxz6HwAAAAqU6f8lov4/cv1z9u836KpW26cr1Tnh0P8AAABQoEz/N4z6v8NTL84Yf1mz8x9LV6qu4dD/AAAAUKBM/zeK+v+oatFG2x41eWCTdKXqFg79DwAAAAXK9P+SUf8fvfz2G3TevtubC6Ur1bnh0P8AAABQoEz/LxX1/zHD5741aMrIDe5LV6rzwqH/AQAAoECZ/l866v9jjz58n+MX2f/oldOV6vxw6H8AAAAoUKb/G0f9f9zUOx+48dM+Y59PV6oLwqH/AQAAoECZ/l8m6v+OM4de/fKY5tMfSFeq7uHQ/wAAAFCgTP83ifr/+L2PP23Lk6YsvkS6Ul0YDv0PAAAABcr0/7JR/5/w8TsTzrjwol2vSleqi8Kh/wEAAKBAmf5fLur/EzuusO6dw54bsla6Ul0cDv0PAAAABcr0//JR/5907oYN3nityexN05WqRzj0PwAAABQo0/8rRP1/8sTp07da6d0VbkxXqkvCof8BAACgQJn+bxr1/ylXb73/diNufrtFulJdGg79DwAAAAXK9P+KUf+fuul/D799xqEbXZmuVJeFQ/8DAABAgTL93yzq/9PWfuW62xvO7X5TulJdHg79DwAAAAXK9P9KUf+fPqh25imTtrm9dbpSXREO/Q8AAAAFyvT/ylH/n7HkY2+1fnPYu2PTlapnOPQ/AAAAFCjT/6tE/d9p5HkbvND4pNarpCtVr3DofwAAAChQpv9Xjfr/zLvaNrq5y/iTF09XqvmfCaj/AQAAoECZ/l8t6v/Oza6dcfLDDa68P12prgqH/gcAAIACZfq/edT/Zy26z3kn7T3r9zqNX10dDv0PAAAABcr0/+pR/3d57vpbbunferkR6Up1TTj0PwAAABQo0/9rRP1/9gNPjnxx9uCdh6UrVe9w6H8AAAAoUKb/14z6/5wmXdptun6HuxZOV6prw6H/AQAAoECZ/m8R9X/Xy8bNPnXLF3+8Jl2prguH/gcAAIACZfp/raj/u2278LK3TV9gsZbpSnV9OPQ/AAAAFCjT/2tH/X/uxjtu/ta1j3TYLl2p+oRD/wMAAECBMv2/TtT/590y56Pt23d+7o50pbohHPofAAAACpTp/3Wj/j//nZbnbL3zyLefTleqG8Oh/wEAAKBAmf5fL+r/C07/+aYJg7tttFK6Ut0UDv0PAAAABcr0//pR/3e/5KMRd/wzuXvDdKXqGw79DwAAAAXK9H/LqP8vfKXxQZ1Wb3b7I+lK1S8c+h8AAAAKlOn/DaL+v6j9PbO22O6qd9dIV6qbw6H/AQAAoECZ/t8w6v+Lfz5x6Ve+2r31pelKdUs49D8AAAAUKNP/G0X932POMa1uuvSHkwekK1X/cOh/AAAAKFCm/zeO+v+SXQe+17HDeldunq5U838moP8BAACgQJn+3yTq/0sP2+j53Z959/cb0pXq1nDofwAAAChQpv9bRf1/2dc/dBh1cpPlNkxXqoHh0P8AAABQoEz/bxr1/+Wz3714yqLP7bxNulLdFg79DwAAAAXK9H/rqP+v2HfZO5eZfNFdt6Yr1e3h0P8AAABQoEz/bxb1f88v7ttxr1en/LhsulINCof+BwAAgAJl+n/zqP97nXDs52OaNV9sdLpSDQ6H/gcAAIACZfp/i6j/rzzriHm/dO/T4e50pbojHPofAAAACpTp/y2j/r9qwqBVV7lv/+dq6Up1Zzj0PwAAABQo0/9bRf1/dZ/9xqzYfqunZqQr1V3h0P8AAABQoEz/bx31/zWbXX3YtGvnHN42Xanm/06A/gcAAIACZfp/m6j/ezd//ILnp7dvdES6Ug0Jh/4HAACAAmX6f9uo/6+9revtbbfs/9Nf6Up1Tzj0PwAAABQo0//bRf1/3WKvbrv8+ksM7ZquVPcu8Nd/C+h/AAAAKFOm/7eP+v/6xxf45NvZE9p8mK5UQ8Oh/wEAAKBAmf7fIer/Pvdt89dj/U9Y+sV0pbovHPofAAAACpTp/x2j/r9h5XnNdtl76K/HpyvVsHDofwAAAChQpv93ivr/xg7dv3/y4aOv+CRdqe4Ph/4HAACAAmX6f+eo/2/67tmF23S5s+OF6Ur1QDj0PwAAABQo0/+7RP3fd9aVLZZu3GqLM9KV6sFw6H8AAAAoUKb/d436v9+eO736zZszP3orXakeCof+BwAAgAJl+r9N1P83fzrrpKcmdbpjl3SlGh4O/Q8AAAAFyvT/blH/33LsZj33aTj8kq/SlerhcOh/AAAAKFCm/3eP+r9/1yWHrnZG1fLPdKV6JBz6HwAAAAqU6f89ov4f8Nb4PX4aMW7CoelK9Wg49D8AAAAUKNP/e0b9f2vvZt/8cF/Tp85OV6oR4dD/AAAAUKBM/+8V9f/ATT5bcKXunxw+KV2pHguH/gcAAIACZfp/76j/b2vxXfP9m53X6LV0pXo8HPofAAAACpTp/32i/r/9juYvPfvq6J9OTFeqJ8Kh/wEAAKBAmf7fN+r/QQ37dvx+csuhP6Yr1chw6H8AAAAoUKb/20b9P3j0IZcuu+i0NvukK9WocOh/AAAAKFCm//eL+v+OIWfevdPJbZbukK5Uo8Oh/wEAAKBAmf7fP+r/O5vev+sTz/T69d90pXoyHPofAAAACpTp/wOi/r9r2uKv7tuhxxVt0pXqqXDofwAAAChQpv8PjPr/7gMmthh76diO36Ur1dPh0P8AAABQoEz/HxT1/5A2sxee/lXjLX5NV6ox4dD/AAAAUKBM/x8c9f89/27yfdPtJn10cLpSPRMO/Q8AAAAFyvT/IVH/33vG5XvsunrbO75MV6pnw6H/AQAAoECZ/j806v+hH7YZOuKf6y65OF2pnguH/gcAAIACZfq/XdT/973Uo+fUwWu0PC1dqZ4Ph/4HAACAAmX6v33U/8POf+qkFXb+ZsL4dKUaGw79DwAAAAXK9P9hUf/fv91pLzXp3rzdrulK9UI49D8AAAAUKNP/h0f9/8CVw5t/dd+UJ6ekK9WL4dD/AAAAUKBM/x8R9f+DffsvOPLV/b+Zna5UL4VD/wMAAECBMv1/ZNT/D617wDd7NOtTHZKuVOPCof8BAACgQJn+7xD1//AxX++68qJN9vk4XaleDof+BwAAgAJl+v+oqP8fXqDF3TMmv/tg93SleiUc+h8AAAAKlOn/o6P+f2TZVS995pmL/u2UrlSvhkP/AwAAQIEy/X9M1P+PPvJxxz1Pfm61t9OV6rVw6H8AAAAoUKb/j436f8QTTf/e69LdO3VLV6rx4dD/AAAAUKBM/x8X9f9jDb5oOqbDVdd9lK5Ur4dD/wMAAECBMv3fMer/x1eZuvUv26338QvpSjUhHPofAAAACpTp/+Oj/n9i2BqTV/nqh607pivVG+HQ/wAAAFCgTP+fEPX/yM1vvHD3f7qd9Uu6Uk0Mh/4HAACAAmX6/8So/0fd0G7gqNVH3rRvulK9GQ79DwAAAAXK9P9JUf+Pvv2Mp6bs3OyVI9OV6q1w6H8AAAAoUKb/T476/8nVHzximcGTW8xJV6q3w6H/AQAAoECZ/j8l6v+nTjz/3+WvXaDdF+lKNSkc+h8AAAAKlOn/U6P+f/rL51f+tv2LT16UrlTvhEP/AwAAQIEy/X9a1P9j3ui5/WNbdv7m9HSlejcc+h8AAAAKlOn/06P+f6bLLl/uMv2R6vV0pXovHPofAAAACpTp/zOi/n/2m5mXrDi79T67pSvV++HQ/wAAAFCgTP93ivr/ucO3GDxt/VkPfp+uVB+EQ/8DAABAgTL9f2bU/8+3bfjs83t3+HdmulJ9GA79DwAAAAXK9H/nqP/H/jnh6Lb9B692ULpSfRQO/Q8AAAAFyvT/WVH/v3DU7VfM7XJSpx/SlerjcOh/AAAAKFCm/7tE/f/i90cdt9jDw67bO12pPgmH/gcAAIACZfr/7Kj/X/rt5J06vNng46PSlerTcOh/AAAAKFCm/8+J+n/cXncPebTx+K3/S1eqyeHQ/wAAAFCgTP93jfr/5clNqt8bHnrWOelK9Vk49D8AAAAUKNP/3aL+f+W4D75adNLNN72TrlSfh0P/AwAAQIEy/X9u1P+vdpvx4sEjtnnl1XSl+iIc+h8AAAAKlOn/86L+f+3t9da864y5LU5IV6ovw6H/AQAAoECZ/j8/6v/x18696t7B161+dbpSfRUO/Q8AAAAFyvT/BVH/v95q+xPb79z2hfXTlWpKOPQ/AAAAFCjT/92j/p+w1qJtaqt/c/P26Ur1dTj0PwAAABQo0/8XRv3/xp0v3jfznzW63ZmuVN+EQ/8DAABAgTL9f1HU/xMbnbPIQ1+N3a5JulJNDYf+BwAAgAJl+v/iqP/ffHLU1MO26/H5Y+lK9W049D8AAAAUKNP/PaL+f+ueG15p2GHSNfelK9V34dD/AAAAUKBM/18S9f/bK+61zn+XNj5loXSl+j4c+h8AAAAKlOn/S6P+n/TNro2/Pnlas+fTleqHcOh/AAAAKFCm/y+L+v+dw3v91viZlnNXTleqH8Oh/wEAAKBAmf6/POr/d9uOfXe3yb0eXSJdqaaFQ/8DAABAgTL9f0XU/+/9ecEmoxdts98D6Uo1PRz6HwAAAAqU6f+eUf+/f+IbN/7c7JNF10pXqp/Cof8BAACgQJn+7xX1/wdfNjp71VebfndVulL9HA79DwAAAAXK9P+VUf9/+MaWB+993+jHb0xXql/Cof8BAACgQJn+vyrq/4+6/PrY093PO3jTdKWaEQ79DwAAAAXK9P/VUf9/vPmayz13xvDVl0tXqpnh0P8AAABQoEz/XxP1/yc3fPvnfiM6vfBkulL9Gg79DwAAAAXK9H/vqP8/vf3LD5tNGnfzXelKNSsc+h8AAAAKlOn/a6P+n7z6ipv92LDqVqUr1W/h0P8AAABQoEz/Xxf1/2dPPHTz443v3K5PulL9Hg79DwAAAAXK9P/1Uf9/3qDTuTu/efTnG6Qr1R/h0P8AAABQoEz/94n6/4tV2rdf7uGZ12ybrlSzw6H/AQAAoECZ/r8h6v8vh9006rsurU4ZmK5Uf4ZD/wMAAECBMv1/Y9T/Xx3aepMV+09otma6Uv0VDv0PAAAABcr0/01R/0+Z8ce70/ZeYu5l6Uo1Jxz6HwAAAAqU6f++Uf9/Pfft355ff+ij/dOV6u9w6H8AAAAoUKb/+0X9/83ODRq3nX3CfpulK9XccOh/AAAAKFCm/2+O+n/qe888tvz0OYs+la5U88Kh/wEAAKBAmf6/Jer/b0+9+OBvt9zqu2bpSvVPOPQ/AAAAFCjT//2j/v/u4j3Ofqx9/8cbpSvVv+HQ/wAAAFCgTP8PiPr/+9cuu3GXa9sf/Gi6Uv0XDv0PAAAABcr0/61R//9wxcGb7X78czc8lK7U5h/6HwAAAAqU6f+BUf//uPUtH44ae9GZDdKVWvga/Q8AAAAlyvT/bVH/T9vw0T+nfPnuNqumK7UqHPofAAAACpTp/9uj/p8+4NTllqk1mfxsulKb/wsA+h8AAAAKlOn/QVH//7Tw5FF7rdqn7ybpSm2hcOh/AAAAKFCm/wdH/f/z2FXaj3lp/3P6piu1hcOh/wEAAKBAmf6/I+r/Xx5a59xfhkxZp1e6UlskHPofAAAACpTp/zuj/p/ReMrNq/Ro/uo66Upt0XDofwAAAChQpv/vivp/ZsPVG648cPLIwelKbf7z9T8AAAAUKNP/d0f9/+vo73+ZsVuzQ3dMV2oNwqH/AQAAoECZ/h8S9f+sIZ+//cxaIxdcN12pLR4O/Q8AAAAFyvT/PVH//9Z0pQ33nNPtq97pSm2JcOh/AAAAKFCm/++N+v/33g9c32TqDw8skq7UGoZD/wMAAECBMv0/NOr/Pzbp3Pmrrdbb8950pdYoHPofAAAACpTp//ui/p/d4tD9Rh521cpPpCu1JcOh/wEAAKBAmf4fFvX/n3f0G75Hz93/aZyu1JYKh/4HAACAAmX6//6o///6dOfFdu07+IYt0pXa0uHQ/wAAAFCgTP8/EPX/nGOvmjZivw5n3pyu1Oa/J0D/AwAAQIEy/f9g1P9/d33ujakbzdrminSlNr/79T8AAAAUKNP/D0X9P/etC9dbYVbryaunK7Um4dD/AAAAUKBM/w+P+n9eh9ev2XfGI30fTldqy4ZD/wMAAECBMv3/cNT//3y31OljW3c+Z6l0pbZcOPQ/AAAAFCjT/49E/f/vrM33nn7wi+s0TVdqy4dD/wMAAECBMv3/aNT//+352/1Nb1jg1THx8xf9H1+3Qvin/gcAAIACZfp/xP/s/9oCtzZdfuApc0fWWanNf0+A/gcAAIACZfr/saj/F1zji99PG7nNoUPSldqK4dD/AAAAUKBM/z8e9X+1xdQPdnj/5gVHpSu1ZuHQ/wAAAFCgTP8/EfV/7bo1tnxzsUO/WiFdqa0UDv0PAAAABcr0/8io/xda9cYB/Zcb/8Dt6Upt5XDofwAAAChQpv9HRf2/8L3tup34eoM9t05XaquEQ/8DAABAgTL9Pzrq/0VGnHFIqweGrbxRulJbNRz6HwAAAAqU6f8no/5fdPEHR7/U7aR/rktXaquFQ/8DAABAgTL9/1TU/4vtd/4yr/Zs/Nex6cr//xz9DwAAAAXK9P/TUf83+P35mZsfNmnFl9KV2urh0P8AAABQoEz/j4n6f/Gver5z3FY92n6QrtTWCIf+BwAAgAJl+v+ZqP+XOGKX1n2njh1+XrpSWzMc+h8AAAAKlOn/Z6P+bzh+Zr/X56zx7dx0pdYiHPofAAAACpTp/+ei/m909hZdtlnrm4UOT1dqa4VD/wMAAECBMv3/fNT/S57U8IAzd2t7wH7pSm3tcOh/AAAAKFCm/8dG/b/UZxMeHzzwusd+Sldq64RD/wMAAECBMv3/QtT/Sw/ad/9Tepw3rl26Uls3HPofAAAACpTp/xej/m+8du+Hbx8yeo3f05XaeuHQ/wAAAFCgTP+/FPX/MpuOuO7tl5qe+026Uls/HPofAAAACpTp/3FR/ze5+twzt1v1kwE7pyu1luHQ/wAAAFCgTP+/HPX/ss1efuvkWpsv3kxXahuEQ/8DAABAgTL9/0rU/8vdVW1w85e9duycrtQ2DIf+BwAAgAJl+v/VqP+XH7lVoxfGtjz9/HSltlE49D8AAAAUKNP/r0X9v8KS/85offy03p+mK7WNw6H/AQAAoECZ/h8f9X/TvTfYZ8turf76J12pbRIO/Q8AAAAFyvT/61H/rzhz2gMvPzBzxWPSlVqrcOh/AAAAKFCm/ydE/d9s6qSrb3z96LZ7piu1TcOh/wEAAKBAmf5/I+r/lY5e/rTjl7tz+LR0pdY6HPofAAAACpTp/4lR/6888d4JWy1WfXtSulLbLBz6HwAAAAqU6f83o/5f5dyO677x/riFXk5XapuHQ/8DAABAgTL9/1bU/6t2PKzBnSM7HfBeulLbIhz6HwAAAAqU6f+3o/5f7eM7pp9xyvDHuqQrtS3Dof8BAACgQJn+nxT1f/P1tzuz3w3tx72RrtS2Cof+BwAAgAJl+v+dqP9Xv/Hv6449uP8ap6Yrta3Dof8BAACgQJn+fzfq/zV6vvDwZq23OrdHulLbJhz6HwAAAAqU6f/3ov5fc4dF9n9txpwBn6UrtW3Dof8BAACgQJn+fz/q/xbDR84YNOuELw5IV2rbhUP/AwAAQIEy/f9B1P9rLX92o84bDd1xVrpS2z4c+h8AAAAKlOn/D6P+X7vac4Nt91vi9G/TldoO4dD/AAAAUKBM/38U9f86T/V5a3zfCb33SFdqO4ZD/wMAAECBMv3/cdT/687rcNrEBxosPzFdqe0UDv0PAAAABcr0/ydR/6+3+21X79ht/J9npiu1ncOh/wEAAKBAmf7/NOr/9Q+664HTlzvpngvSldou4dD/AAAAUKBM/0+O+r/lDyftc+vrw3aZnK7Udg2H/gcAAIACZfr/s6j/N+j+/vRx72+zRPt0pdYmHPofAAAACpTp/8+j/t/whWUabLLY3Gl/pCu13cKh/wEAAKBAmf7/Iur/jd5fd90TTjn0+a/Tldru4dD/AAAAUKBM/38Z9f/GZ/4yYcDIm4/ZKV2p7REO/Q8AAAAFyvT/V1H/b3LORgf1P7jzhn+nK7U9w6H/AQAAoECZ/p8S9X+r138YceINj0w8LF2p7RUO/Q8AAAAFyvT/11H/b/r5uze1mrHArfunK7W9w6H/AQAAoECZ/v8m6v/WJy97zkutX7zg53Sltk849D8AAAAUKNP/U6P+3+yP+94buFGHTY5LV2r7hkP/AwAAQIEy/f9t1P+b739sq9NmDX5nXLpSaxsO/Q8AAAAFyvT/d1H/b3HkEUvv0Ld1r/fTldp+4dD/AAAAUKBM/38f9f+WUwbNenO/WSecm67U5n8moP4HAACAAmX6/4eo/7caul+71w9bb/kD05XaAeHQ/wAAAFCgTP//GPX/1qtdPXKbnj/8+Vu6Upv/MwH9DwAAAAXK9P+0qP+3WeLxW86cuvs9U9OV2kHh0P8AAABQoEz/T4/6f9vHup43eKurdtk9XakdHA79DwAAAAXK9P9PUf9vt+arH726VrMlJqQrtUPCof8BAACgQJn+/znq/+0HLrD55nMmTzslXakdGg79DwAAAAXK9P8vUf/vcP02yx43sNvzl6QrtXbh0P8AAABQoEz/z4j6f8ct583uu9vIYz5PV2rtw6H/AQAAoECZ/p8Z9f9Ogx9u2WLI/huenK7UDguH/gcAAIACZfr/16j/d17n9Nc/6tFn4ivpSu3wcOh/AAAAKFCm/2dF/b9L6wN/uGLV5re+m67UjgiH/gcAAIACZfr/t6j/d71mwOJnvTTlgrPSldqR4dD/AAAAUKBM//8e9X+bldZ6sOWXF20yL12pdQiH/gcAAIACZfr/j6j/d7v7mz0/rj33ztHpSu2ocOh/AAAAKFCm/2dH/b/7qE9Ove74Jr32Sldq838moP8BAACgQJn+/zPq/z2WWu3aS8a+e8L0dKV2TDj0PwAAABQo0/9/Rf2/5z5vbnzhfkOPWzRdqR0bDv0PAAAABcr0/5yo//f6dYk3r+57wqVD05XaceHQ/wAAAFCgTP//HfX/3t+2+umzWRPefzxdqXUMh/4HAACAAmX6f27U//sc8+eSG2+0xOZLpyu148Oh/wEAAKBAmf6fF/X/vm/u9kjX1v0vGpSu1E4Ih/4HAACAAmX6/5+o/9ued8W+V81oP3iHdKV2Yjj0PwAAABQo0///Rv2/3/FPd3rvhjmvr5eu1E4Kh/4HAACAAmX6/7+o//f/5JIbmh+81brXpiu1k8Oh/wEAAKBA//v+X2iBqP8PeOnIJw4fOe6IVulK7ZRw6H8AAAAoUKb/F4z6/8DzBx/44CnVM/3Sldqp4dD/AAAAUKBM/1dR/x90xrCz/l1s+Iye6UrttHDofwAAAChQpv9rUf8f/OFxfRu932nJtdOV2unh0P8AAABQoEz/LxT1/yFt3tu03esz93gwXamdEQ79DwAAAAXK9P/CUf8f+u9yk4Yu1+q+xdKVWqdw6H8AAAAoUKb/F4n6v920jX/9tduds1ZLV2pnhkP/AwAAQIEy/b9o1P/tD/ixSfXA0U2eS1dqncOh/wEAAKBAmf5fLOr/w5bd9slFxvY67rZ0pXZWOPQ/AAAAFCjT/w2i/j/8kX8O/eP4Npdula7UuoRD/wMAAECBMv2/eNT/R4x5revdtWnvb5yu1M4Oh/4HAACAAmX6f4mo/49cYMH+B33ZcvPr05XaOeHQ/wAAAFCgTP83jPq/Q98ntmjw0uiLFkxXal3Dof8BAACgQJn+bxT1/1Hrdnv/71XPG3xPulLrFg79DwAAAAXK9P+SUf8fvd3+fzzS45PXR6YrtXPDof8BAACgQJn+X+r/7f//av/f48dcec0KRw1puu7y6UrtvHDofwAAAChQpv+Xjl7/P7Zry75DdvvmiOHpSu38cOh/AAAAKFC9/m+y+Px7ocZR/x/31s9nHThwjWeWTFdqF4RD/wMAAECBMq//LxP1f8dPPzpw4TnXzVgxXal1D4f+BwAAgAJl+r9J1P/HH9v4idlrtV3ymXSldmE49D8AAAAUKNP/y0b9f8Kse5o8vNWkPbZMV2oXhUP/AwAAQIEy/b9c1P8n7nnir0dPbXzfLelK7eJw6H8AAAAoUKb/l4/6/6QOx0xavOfYWZenK7Ue4dD/AAAAUKBM/68Q9f/J3w3cdM5hPZo0T1dql4RD/wMAAECBMv3fNOr/U4bs0/+f37Z64+Z0pXZpOPQ/AAAAFCjT/ytG/X9q0+u7LrnxnPW3SFdql4VD/wMAAECBMv3fLOr/0xo+eegR+7fvsXq6Upv/mQD6HwAAAAqU6f+Vov4/fXSXJx/o1//OK9KV2vzH9D8AAAAUKNP/K0f9f0aLcSvM6rPEh0ulK7We4dD/AAAAUKBM/68S9X+nOxb+Y8GDJmz5cLpS6xUO/Q8AAAAFyvT/qlH/n9l7x/cP3fSE48ekK7Urw6H/AQAAoECZ/l8t6v/Om8zZ4r5fhl7eNF2pXRUO/Q8AAAAFyvR/86j/z9pw60eGNTh65pB0pXZ1OPQ/AAAAFCjT/6tH/d9lwH/7HvLBnY3rrNSuCYf+BwAAgAJl+n+NqP/PvuKVTguMarXbCulKrXc49D8AAAAUKNP/a0b9f87WtRt+O3XmvaPSldq14dD/AAAAUKBM/7eI+r/rQ49tfH/XTj9vna7UrguH/gcAAIACZfp/raj/uzU+780j7x/e8PZ0pXZ9OPQ/AAAAFCjT/2tH/X/uwm1/Wmp8ddh16UqtTzj0PwAAABQo0//rRP1/3thrl5y37LinN0pXajeEQ/8DAABAgTL9v27U/+fPPfzBv6qmbzRIV2o3hkP/AwAAQIEy/b9e1P8X7Hznnkt88cn6D6UrtZvCof8BAACgQJn+Xz/q/+6HDj31mOfP6/FsulLrGw79DwAAAAXK9H/LqP8vnHH8tcM7jr5z1XSl1i8c+h8AAAAKlOn/DaL+v+jid1r+eUnLD/umK7Wbw6H/AQAAoECZ/t8w6v+LX1vh9YXumbblJulK7ZZw6H8AAAAoUKb/N4r6v8d7G/5wwLg2x6+TrtT6h0P/AwAAQIEy/b9x1P+XnDp98XtW63V5r3SlNiAc+h8AAAAKlOn/TaL+v/TsDidf9VePmTumK7Vbw6H/AQAAoECZ/m8V9f9l42/r1bXF2MaD05XawHDofwAAAChQpv83jfr/8s/uurd5m8a79f5/2Pvz6KvH/+//xn7tCMlQ+BgyJWTInCFkHkIUSkIyRoYkUkgyJCQZkymhzEnGzFOGZEqGJPMsJBHFtc61Dus8vtfxvc7j+q7f71zr+ON2++tZ770fa/97X/u99ztdqV0fDv0PAAAABcr0/2ZR/w865pjd3rnuzdvWTVdqI8Oh/wEAAKBAmf7fPOr/8+dM/WrwBfv8eFu6UrshHPofAAAACpTp/y2i/r9g32Wr/gdfumSDdKX273cC6H8AAAAoUKb/t4z6/8Iu667daus1Oy+TrtRuCof+BwAAgAJl+r911P8XfTJr0kdffv7Yg+lK7eZw/Nf+r/6vvGQAAADgfyjT/1tF/T/4tjZHvt/kqicOT1dqt4TD+/8AAABQoEz/bx31/8XN/hy4/ssHHrogXamNCof+BwAAgAJl+n+bqP+HLP7MLQPG/tXwu3Sldms49D8AAAAUKNP/20b9f8m4Bjtdeto23+yRrtRGh0P/AwAAQIEy/d8m6v9L15zw2Xs9xox6IV2p3RYO/Q8AAAAFyvT/dlH/X3bdqQs1f+iYtsekK7Xbw6H/AQAAoECZ/t8+6v+hl+6xxinvvtykV7pSuyMc+h8AAAAKlOn/HaL+v3zLoc8Patjwt3fSldqYcOh/AAAAKFCm/9tG/T/s9MW2P33W7It6pCu1seHQ/wAAAFCgTP/vGPX/FZOnfHTBppsd81q6UrszHPofAAAACpTp/52i/h/+/pwFb3W4cdOP0pXaXeHQ/wAAAFCgTP/vHPX/ld03XW3NoV3fOSddqd0dDv0PAAAABcr0/y5R/1/187lPn3nls9fPTldq94RD/wMAAECBMv2/a9T/V++126FD2i/Uf790pXZvOPQ/AAAAFCjT/7tF/X/NYWed9XGr+1rtnq7U7guH/gcAAIACZfp/96j/r/3i8Zs2/PXkKV+mK7X7w6H/AQAAoECZ/t8j6v/rbjlum/W+nPDEc+lKbVw49D8AAAAUKNP/e0b9P2Kl+97/cOs+h3ZLV2oPhEP/AwAAQIEy/b9X1P/XL3XVvKEHT294RrpSGx8O/Q8AAAAFyvR/u6j/R07osPLZF6z0zbvpSu3BcOh/AAAAKFCm//eO+v+GFp9MbHHdRaMOTldqE8Kh/wEAAKBAmf7fJ+r/G29ocfC7u+zW9q90pfZQOPQ/AAAAFCjT//tG/X/T4FX6Dmz+TZMf0pXaw+HQ/wAAAFCgTP+3j/r/5k0/vP7UP9b7bd90pfZIOPQ/AAAAFCjT//tF/X/LM31Xu2y1ty+ak67UHg2H/gcAAIACZfp//6j/R/V7asE5zy93zEHpSu2xcOh/AAAAKFCm/ztE/X/rSed/1HL0k5vumK7UHg+H/gcAAIACZfq/Y9T/o6futP0HA8565/N0pTYxHPofAAAACpTp/wOi/r9tt59vOq/7p9efnK7UngiH/gcAAIACZfr/wKj/b5+/5Vm9nlq9/+vpSu3JcOh/AAAAKFCm/w+K+v+Ob5Y8dO2Ph7b6MF2pPRUO/Q8AAAAFyvR/p6j/x3R49elpi7Sf0jddqT0dDv0PAAAABcr0f+eo/8cuv+LKb299aYdf05XaM+HQ/wAAAFCgTP8fHPX/nfd8PG+NL/d5cP90pfZsOPQ/AAAAFCjT/12i/r/r0S/e73PB51/vlq7UnguH/gcAAIACZfr/kKj/715kzW0uPHjNBl+kK7Xnw6H/AQAAoECZ/u8a9f89w4ZdP2OXp9sfl67UXgiH/gcAAIACZfr/0Kj/7215UN+NrjvnvlfTldqL4dD/AAAAUKBM/x8W9f992/c8uN8fb/45I12pvRQO/Q8AAAAFyvT/4VH/33/+XRMvbr7MygPSldqkcOh/AAAAKFCm/7tF/T9uxPFrDX7+ux4vpiu1l8Oh/wEAAKBAmf4/Iur/B9a659n+q60/+Nh0pfZKOPQ/AAAAFCjT/92j/h/f+ppPWg244KNT0pXav98JqP8BAACgQJn+PzLq/wcv22+Rj0bvst3b6UrttXDofwAAAChQpv+Pivp/wv/vldrkcOh/AAAAKFCm/4+O+v+h25u3Pa37ilfPT1dqr4dD/wMAAECBMv1/TNT/Dz/Q7IjVF3n42e/TldqUcOh/AAAAKFCm/4+N+v+RJd4f9M7HZ6y+Z7pSeyMc+h8AAAAKlOn/46L+f7T94uu89/I9HU5KV2pvhkP/AwAAQIEy/d8j6v/Hfpv8YvMmJz44OV2pvRUO/Q8AAAAFyvT/8VH/P/7p3C9OOe35r6enK7V//yag/gcAAIACZfr/hKj/Jx6ycYNBYxdpcGa6UnsnHPofAAAACpTp/55R/z/xynl3vP/Qze1/S1dqU8Oh/wEAAKBAmf4/Mer/J3vvssv6PQ67r1O6Uns3HPofAAAACpTp/5Oi/n/q2HOOHtDw5z/bpiu1aeHQ/wAAAFCgTP+fHPX/0zMevejSdzdZ+bN0pfZeOPQ/AAAAFCjT/6dE/f/MGd922WbTV3t0Tldq74dD/wMAAECBMv3fK+r/Z19v9egrs5YY/Ge6UvsgHPofAAAACpTp/1Oj/n/ug6Yjbhx6+0c/piu1D8Oh/wEAAKBAmf7vHfX/80e+0/+kDkdt1z5dqU0Ph/4HAACAAmX6/7So/1/45YjpW7Sfd9rz6Urto3DofwAAAChQpv/7RP3/YrsxW7905VZXH5Gu1GaEQ/8DAABAgTL9f3rU/y8dfuOKw3+95tnT05Xax+HQ/wAAAFCghZfftNF//Z//0v9nRP0/6ctD/jyiVafVp6YrtZnh0P8AAABQoMz7/32j/n951MWHHf3x6mtvla7UPgmH/gcAAIACZfr/zKj/X1m5/RPXLPLpC9enK7VPw6H/AQAAoECZ/u8X9f+rjfvc+Fz39sMuS1dqn4VD/wMAAECBMv3fP+r/1x56cMAmTw3t1SpdqX0eDv0PAAAABcr0/1lR/09eZ+GZx49ebqvR6Urti3DofwAAAChQpv/Pjvr/9RsnbTdiwNsfLJyu1L4Mh/4HAACAAmX6/5yo/6dcvGCV11c767Ll05XaV+HQ/wAAAFCgTP8PiPr/jc22/Xv755/sOSFdqX0dDv0PAAAABcr0/7lR/7/5yiYvr9V8t2ZLpSu1b8Kh/wEAAKBAmf4fGPX/W71/b/nmHxf9c0+6Uvs2HPofAAAACpTp//Oi/n/72NeXOP+69e6emK7UvguH/gcAAIACZfp/UNT/78xY4tszdvlmr/+kK7Xvw6H/AQAAoECZ/j8/6v+p7R/bc4OD+9SuTldqP4RD/wMAAECBMv1/QdT/7/424O6ZF0z4rHW6UvsxHPofAAAACpTp/wuj/p/26a5DLvlypYdXT1dqs8Kh/wEAAKBAmf6/KOr/9w4ZdFzfrad3Oi9dqf0UDv0PAAAABcr0/+Co/99fbf/JZ7VaaO3b05Xaz+HQ/wAAAFCgTP9fHPX/B7dfu9Hlvz77wqLpSu2XcOh/AAAAKFCm/4dE/f/hA/c2nn7lycOWTldqs8Oh/wEAAKBAmf6/JOr/6Uuc8OO67e/rNT5dqf0aDv0PAAAABcr0/6VR/3804oN9enfYbKvt05XanHDofwAAAChQpv8vi/p/xlqr3X/u0Nkf3JCu1H4Lh/4HAACAAmX6f2jU/x+3Xnvo1FldL7skXanNDcf/X/2/8P+zlwwAAAD8D2X6//Ko/2de9nnPdTa9sed66Urt93B4/x8AAAAKlOn/YVH/fzJgx2/ff/eYZlemK7U/wqH/AQAAoECZ/r8i6v9PX7xoifUbjvlnk3SlNi8c+h8AAAAKlOn/4VH/f/bWky0H9Gh4d4t0pfZnOPQ/AAAAFCjT/1dG/f/5Cf1fvvShl/c6P12p/RUO/Q8AAAAFyvT/VVH/fzHvlePeG3tgbbF0pTY/HP+r/8cu8X/5NQMAAAD/M5n+vzrq/y93bjyk+WlXfXZXulJbEA7v/wMAAECBMv1/TdT/X3Xa4u5Tmmzz8JPpSu3vcOh/AAAAKFCm/6+N+v/rH3/dc9DLf3VaLV2p/RMO/Q8AAAAFyvT/dVH/f3PnGj9edE/Tr/ZKV6p/D/0PAAAABcr0/4io/79d7uvGp50yddFv0pUqPEb/AwAAQIky/X991P/fLTpjo9WX7tfxn3SlWiQc+h8AAAAKlOn/kVH/f//kypPfmTxx/KHpSlULh/4HAACAAmX6/4ao/39odWfPwW+1+OutdKX69wsA9D8AAAAUKNP/N0b9/+PVJw/t3+jrlXqnK1U9HPofAAAACpTp/5ui/p818MD7W524575HpStVg3DofwAAAChQpv9vjvr/p22v3OejBwbf/1K6Ui0aDv0PAAAABcr0/y1R///couO7Mw7qPeOsdKX69/n6HwAAAAqU6f9RUf//csPVrTcaMr7Nx+lK1TAc+h8AAAAKlOn/W6P+nz34/uX7fbfKca+kK9Xi4dD/AAAAUKBM/4+O+v/XTXvMuXjLGRefkK5US4RD/wMAAECBMv1/W9T/c26ZfsDb67d95ut0pVoyHPofAAAACpTp/9uj/v9tpVUfXuP3gWvsmq5UjcKh/wEAAKBAmf6/I+r/uUutc22fa1v16RB++M/C//txS4VD/wMAAECBMv0/Jur/3yd82ufCdrOu+jldqRqHQ/8DAABAgTL9Pzbq/z9+3uyt8w7d4qv3/utC7X89bunwD/0PAAAABcr0/51R/8/b67fNeg2cs2ifdKVaJhz6HwAAAAqU6f+7ov7/87A3ll370y4du6cr1b/dr/8BAACgQJn+vzvq/7++aPjztO1Gjn8mXamWC4f+BwAAgAJl+v+eqP/nnz5xv8tWb/DX3ulK1SQc+h8AAAAKlOn/e6P+XzD57PHnzJ+00qx0pWoaDv0PAAAABcr0/31R///9/u5Xtryhx77z0pVq+XDofwAAAChQpv/vj/r/n+4De33Qduz9h6Qr1Qrh0P8AAABQoEz/j/vf/V8tdNRmG+w6puOMT9OVasVw6H8AAAAoUKb/H4j6f+GPf5vycP/hbXZOV6r/hEP/AwAAQIEy/T8+6v9FXn3jp89WbnPcAelKtVI49D8AAAAUKNP/D0b9XzulYaNlJi24eG66Uq0cDv0PAAAABcr0/4So/6vPJt6714fdnumXrlSrhEP/AwAAQIEy/f9Q1P/1zme3f6zBqDXeT1eqVcOh/wEAAKBAmf5/OOr/BnvvftKPxzTu80a6UjULh/4HAACAAmX6/5Go/xedO/DSZo9PuerEdKVaLRz6HwAAAAqU6f9Ho/5fbHzHdVdq99gVA9OV6t/n6H8AAAAoUKb/H4v6v+FiV7/67bV9T1krXanWCIf+BwAAgAJl+v/xqP8XX+X+75/8fVrzzdOVas1w6H8AAAAoUKb/J0b9v8QdPRruu/4KL16TrlT//k6A/gcAAIACZfr/iaj/l9x8+p1Ntxxy6UrpStU8HPofAAAACpTp/yej/m80dNV2X33X7sRH05Vq7XDofwAAAChQpv+fivp/qevXOX78kC+3vj9dqVqEQ/8DAABAgTL9/3TU/41X/3Twjgc1f79RulKtEw79DwAAAAXK9P8zUf8v3e3YPhMemHnXI+lKtW449D8AAAAUKNP/z0b9v8yHo67d/cRm7ZqmK9V64dD/AAAAUKBM/z8X9f+yU0Y+vFyjcastkq5ULcOh/wEAAKBAmf5/Pur/5U479IBP3ur19y3pSrV+OPQ/AAAAFCjT/y9E/d/kq5/mTJz8wyMbpCvVv/+n/wEAAKBAmf5/Mer/pl3XW36PpTc8aGi6Um0YDv0PAAAABcr0/0tR/y+/x3KtVzll0CIj0pVqo3DofwAAAChQpv8nRf2/wux33/3pnp0+3zZdqVqFQ/8DAABAgTL9/3LU/ys+vGiv7x8fccUq6Uq1cTj0PwAAABQo0/+vRP3/nyWfvXLFYzqf8lS6Um0SDv0PAAAABcr0/6tR/6+04l/j924wt/md6Uq1aTj0PwAAABQo0/+vRf2/8q3b7ff0h61fXCJdqTYLh/4HAACAAmX6f3LU/6tsfPnPX0y669KL0pVq83DofwAAAChQpv9fj/p/1SF7LrvCyiecuHa6Um0RDv0PAAAABcr0/5So/5vd1Huznfu/uPWm6Uq1ZTj0PwAAABQo0/9vRP2/WvOH3ho3pnp/WLpStQ6H/gcAAIACZfr/zaj/V5+2wgHt2/5zV8t0pdoqHPofAAAACpTp/7ei/l+j51sPP3HD9u0GpyvV1uHQ/wAAAFCgTP+/HfX/mn2/v/ab+cNWuzldqbYJh/4HAACAAmX6/52o/9d6bsM+K6++/9/bpSvVtuHQ/wAAAFCgTP9Pjfq/+X43v9t2u8mPPJCuVG3Cof8BAACgQJn+fzfq/7W/O7j1g582Omi5dKX693cC9D8AAAAUKNP/06L+b/H3kct/PXD0IlW6Um0fDv0PAAAABcr0/3tR/6+zy+1zmhza/fM70pVqh3DofwAAAChQpv/fj/p/3YXO2G/pY0YN2DBdqdqGQ/8DAABAgTL9/0HU/+s9/sD4zx/vdtPl6Uq1Yzj0PwAAABQo0/8fRv3f8r5LrnzkwymvXpeuVDuFQ/8DAABAgTL9Pz3q//Wb7NNrlwaN198mXal2Dof+BwAAgAJl+v+jqP83uPCft1ZbeXj3h9OVapdw6H8AAAAoUKb/Z0T9v2GbrTf7YVLHQU3SlWrXcOh/AAAAKFCm/z+O+n+jdWvLPjpmwXu1dKXaLRz6HwAAAAqU6f+ZUf+3Gv7iz+36t9lyVLpS7R4O/Q8AAAAFyvT/J1H/b3x5/bi9bpi0y8rpSrVHOPQ/AAAAFCjT/59G/b/JFs8Peaxtg9sfS1eqPcOh/wEAAKBAmf7/LOr/TdeYd/ePq4/95b50pdorHPofAAAACpTp/8+j/t9s5A57NpvfY+kl05WqXTj0PwAAABQo0/9fRP2/ecPLvt310zkHn5uuVHuHQ/8DAABAgTL9/2XU/1s82G6Jh7fb4tE105Vqn3DofwAAAChQpv+/ivp/yzG9Wn526MgftkhXqn3Dof8BAACgQJn+/zrq/9arPvLyMgO7NLo2Xanah0P/AwAAQIEy/f9N1P9bHXx0z6bXDhwwLl2p9guH/gcAAIACZfr/26j/t/589NCv2rW96b9p/Gr/cOh/AAAAKFCm/7+L+n+b30fcP379Wa/W05WqQzj0PwAAABQo0//fR/2/7T6H77Pj763WH5OuVB3Dof8BAACgQJn+/yHq/zYzf/xxpe/Gd18/XakOCIf+BwAAgAJl+v/HqP+3O3r9xt9u2XvQxelKdWA49D8AAAAUKNP/s6L+377XMhs9edCM925KV6qDwqH/AQAAoECZ/v8p6v8dXntv8r5DVtmyTbpSdQqH/gcAAIACZfr/56j/2x5x4TJ/nPj1LhemK1XncOh/AAAAKFCm/3+J+n/H6W1/XeKBFrc3T1eqg8Oh/wEAAKBAmf6fHfX/Tm/0e/vwtwb/slm6UnUJh/4HAACAAmX6/9eo/3fu88TG9zTac+kr0pXqkHDofwAAAChQpv/nRP2/y9dLDft96akHr5quVF3Dof8BAACgQJn+/y3q/10PffnUanLTR59OV6pDw6H/AQAAoECZ/p8b9f9ue87uuN89E38Ym65Uh4VD/wMAAECBMv3/e9T/u/+6+QOjT+nXaPF0pTo8HPofAAAACpTp/z+i/t/jka+ajhnYaLGv0pWqWzj0PwAAABQo0//zov7fs9Hqvx9w6ORvd0lXqiPCof8BAACgQJn+/zPq/73+s9K0hbbr/mTHdKXqHg79DwAAAAXK9P9fUf+3G/3R5r9+OrrrL+lKdWQ49D8AAAAUKNP/86P+33uTk64aO3/7pmenK9VR4dD/AAAAUKBM/y+I+n+fS8aefsjq/8yZma5UR4dD/wMAAECBMv3/d9T/+948vFPjtvvf8nK6Uh0TDv0PAAAABcr0/z9R/7df+4CH5t8wbMfj05Xq2HDofwAAACjQ/7n/6wtF/b/fxktusVD/EzZ7M12pjguH/gcAAIACZfp/4aj/9x/y6nu/jrnr7VPTlapHOPQ/AAAAFCjT/4tE/d/hpp/njplUXXh0ulL9+5kA/Q8AAAAFyvR/Ler/js23bHLAyi8eOyldqU4Ih/4HAACAAmX6v4r6/4CHz5/QuEHnjdqlK1XPcOh/AAAAKFCm/+tR/x+45E4Hzf9wxBvfpivVieHQ/wAAAFCgTP83iPr/oBX7njH28dYj/05XqpPCof8BAACgQJn+XzTq/063PnX1IcfM7dc1XalODof+BwAAgAJl+n+xqP87f9Vzk8NP2XCx/ulKdUo49D8AAAAUKNP/DaP+P7jrXe/cc88P336QrlS9wqH/AQAAoECZ/l886v8uewyb/cfknZ6ckq5Up4ZD/wMAAECBMv2/RNT/h8w+aOkllh7UtWe6UvUOh/4HAACAAmX6f8mo/7t2+2Lcfo2aNf0kXalOC4f+BwAAgAJl+r9R1P+Hfrhmh9FvzZyzU7pS9QmH/gcAAIACZfp/qaj/D5uyYu/fH+h1y4HpSnV6OPQ/AAAAFCjT/42j/j/8tI+vqE4ct+Pv6Up1Rjj0PwAAABQo0/9LR/3f7cKzmvw1pN1m+6QrVd9w6H8AAAAoUKb/l4n6/4g2j89d7KAhb/+UrlRnhkP/AwAAQIEy/b9s1P/d1z33va5bNr/wj3Sl6hcO/Q8AAAAFyvT/clH/Hzl8ty3u/+7LY7ukK1X/cOh/AAAAKFCm/5tE/X/UQnOunvN7342mpSvVWeHQ/wAAAFCgTP83jfr/6Mc3PWPR9R9747R0pTo7HPofAAAACpTp/+Wj/j/mvsUO6thuhZFHpivVOeHQ/wAAAFCgTP+vEPX/sU2mTLjl2mn9nk1XqgHh0P8AAABQoEz/rxj1/3H7rbL0bW2G3donXanODYf+BwAAgAJl+v8/Uf/3+O7D2Z0+2X/n99KVamA49D8AAAAUKNP/K0X9f/zfn7xTO/efFZ5JV6rzwqH/AQAAoECZ/l856v8Tdmmxyc9dt5/bPV2pBoVD/wMAAECBMv2/StT/PadddcXdO45+ela6Up0fDv0PAAAABcr0/6pR/5/Ys0Pvzjd2P2zvdKW6IBz6HwAAAAqU6f9mUf+f1Pe4DksumLz4IelKdWE49D8AAAAUKNP/q0X9f/Jz9437Z41G389LV6qLwqH/AQAAoECZ/l896v9TZp607t8vzR2xc7pSDQ6H/gcAAIACZfp/jaj/ex099tVGK7Xu+2m6Ul0cDv0PAAAABcr0/5pR/5/aa/j3B/cbscHcdKUaEg79DwAAAAXK9P9aUf/3fu2Ahnfd0fn1A9KV6pJw6H8AAAAoUKb/m0f9f9rBX935y8QXz38/XakuDYf+BwAAgAJl+n/tqP/7fL56u0WOrY7ul65Ul4VD/wMAAECBMv3fIur/039f6fiDFr1rkxPTlWpoOPQ/AAAAFCjT/+tE/X/GPh8Nvn36CW++ka5Ul4dD/wMAAECBMv2/btT/fRsutcGo18fd+k26Ug0Lh/4HAACAAmX6f72o/8988OUpHZbptfNe6Up1RTj0PwAAABQo0/8to/7vN2b2Tw16zVzh0HSlGh4O/Q8AAAAFyvT/+lH/919180a/3dts7j/pSnVlOPQ/AAAAFCjT/xtE/X/W5Rfee9+4QU/3Tleqq8Kh/wEAAKBAmf7fMOr/s7do2/7Qnjsd9la6Ul0dDv0PAAAABcr0/0ZR/5+zRr+TGi75w+IvpSvVNeHQ/wAAAFCgTP+3ivp/wMgnLv3zzQ2/Pypdqa4Nh/4HAACAAmX6f+Oo/889d4lPP249bcTH6Up1XTj0PwAAABQo0/+bRP0/cJvXaxt+v0Lfs9KVakQ49D8AAAAUKNP/m0b9f95Gv6955iWPbXBCulJdHw79DwAAAAXK9P9mUf8PumqTZ4Z06vv6K+lKNTIc+h8AAAAKlOn/zaP+P7/BoG5v7fXl+bumK9UN4dD/AAAAUKBM/28R9f8FT+x63prXND/663SlujEc+h8AAAAKlOn/LaP+v3DsgNGnzx2yyc/pSnVTOPQ/AAAAFCjT/62j/r9o2cd2vKBluzc7pCvVzeHQ/wAAAFCgTP9vFfX/4INO+HLg9DbvPpWuVLeEQ/8DAABAgTL9v3XU/xf/cO+ipy66YPNV0pVqVDj0PwAAABQo0//bRP0/5I9rW7Q4tmO3JdKV6tZw6H8AAAAoUKb/t436/5Kd9n/h3YnDB96ZrlSjw6H/AQAAoECZ/m8T9f+lb35+1NA7Gr+8drpS3RYO/Q8AAAAFyvT/dlH/X3b82hee3W/KehelK9Xt4dD/AAAAUKBM/28f9f/Qc1Ybs95K3c4elq5Ud4RD/wMAAECBMv2/Q9T/l7/wwa4fvjTqhk3TlWpMOPQ/AAAAFCjT/22j/h92/uGPtlqjy6zB6Uo1Nhz6HwAAAAqU6f8do/6/YvsRXT5aMLJxy3Sl+vdvAuh/AAAAKFCm/3eK+n94y9H9B9+4xSHbpSvVXeHQ/wAAAFCgTP/vHPX/lcOOHtF/xzmP35yuVHeHQ/8DAABAgTL9v0vU/1ct8t7Wq3ft8ety6Up1Tzj0PwAAABQo0/+7Rv1/9aPLTH/n3LHLPpCuVPeGQ/8DAABAgTL9v1vU/9fcs/6fF33SYLc70pXqvnDofwAAAChQpv93j/r/2uV/XPG0NpPGVOlKdX849D8AAAAUKNP/e0T9f12HHZ44peUq766VrlTjwqH/AQAAoECZ/t8z6v8R38w7bNDcGZsPTFeqf78TQP8DAABAgTL9v1fU/9fPf37Ae9f07nZNulKND4f+BwAAgAJl+r9d1P8jd6vf2Hyv8QM3T1eqB8Oh/wEAAKBAmf7fO+r/G6Y+st2ATq1efjRdqSaEQ/8DAABAgTL9v0/U/zee1GvmpZfMWm+ldKV6KBz6HwAAAAqU6f99o/6/qV+7v9//vu3ZjdKV6uFw6H8AAAAoUKb/20f9f/Mzl62yfuuBN9yfrlSPhEP/AwAAQIEy/b9f1P+3bNpqxNQ3+81qmq5U/34ngP4HAACAAmX6f/+o/0cN/rb/OktObPxIulI9Fg79DwAAAAXK9H+HqP9vveGdLr17Nj3klnSlejwc+h8AAAAKlOn/jlH/j27R9NFzx019fJF0pZoYDv0PAAAABcr0/wFR/982YcyK0+/d89eh6Ur1RDj0PwAAABQo0/8HRv1/+1JH/Llur8HLbpCuVE+GQ/8DAABAgTL9f1DU/3esdMj0s5Zpsdu26Ur1VDj0PwAAABQo0/+dov4fc8uNW1/++tdjRqQr1dPh0P8AAABQoEz/d476f+wX7W+8ZG7zbf+bxq+eCYf+BwAAgAJl+v/gqP/vPOziAX1bfvnhuHSlejYc+h8AAAAKlOn/LlH/37XXg4dtsFe7oWPSleq5cOh/AAAAKFCm/w+J+v/un/s8MfOaISfX05Xq+XDofwAAAChQpv+7Rv1/T/dJq5x/yQotLk5XqhfCof8BAACgQJn+PzTq/3vfX/jvMzpNm7R+ulK9GA79DwAAAAXK9P9hUf/fN3nbmWu17ntlm3Sleikc+h8AAAAKlOn/w6P+v//0Bdu9+f1jp96UrlSTwqH/AQAAoECZ/u8W9f+4E7a7/a0ld1qoebpSvRwO/Q8AAAAFyvT/EVH/P/DWX7uv+eagTy9MV6pXwqH/AQAAoECZ/u8e9f/4F5895vRxGz50RbpSvRoO/Q8AAAAFyvT/kVH/Pzhg0fMv6PnDAZulK9Vr4dD/AAAAUKBM/x8V9f+EHx9q/nGvXqs+na5Uk8Oh/wEAAKBAmf4/Our/hzr1fmnDe8fNXzVdqV4Ph/4HAACAAmX6/5io/x/eec+vz3y92djF05VqSjj0PwAAABQo0//HRv3/yLzL60OWmbnn2HSleiMc+h8AAAAKlOn/46L+f/TJQ0cNXbTa9vJ0pXozHPofAAAACpTp/x5R/z+26Midz57+4ocbpivVW+HQ/wAAAFCgTP8fH/X/48uN6r7exBOGbpOuVG+HQ/8DAABAgTL9f0LU/xPvPPbcD4+96+Tr0pXqnXDofwAAAChQpv97Rv3/xLbvrj6wX+sWTdKVamo49D8AAAAUKNP/J0b9/+TA5Z479Y65kx5OV6p3w6H/AQAAoECZ/j8p6v+nrl7v8xYvdb5yVLpSTQuH/gcAAIACZfr/5Kj/n27108LvrjTi1Fq6Ur0XDv0PAAAABcr0/ylR/z9zwVMfHbmg+0KPpSvV++HQ/wAAAFCgTP/3ivr/2R36bj9sjdGfrpyuVB+EQ/8DAABAgTL9f2rU/8+tv9NqL+zY6KEl05Xqw3DofwAAAChQpv97R/3//BXnL2h94+QD7ktXqunh0P8AAABQoEz/nxb1/wu1LQ/tee7+q66ZrlQfhUP/AwAAQIEy/d8n6v8XH/v56Zu7Dpt/brpSzQiH/gcAAIACZfr/9Kj/X7r31Ztea7P92GvTlerjcOh/AAAAKFCm/8+I+n/SCkuetdUn/+y5RbpSzQyH/gcAAIACZfq/b9T/L3f8+P02ywze+4N0pfokHPofAAAACpTp/zOj/n/l2xW3eeP1Pe/tn65Un4ZD/wMAAECBMv3fL+r/VxesufLIe7+e1zNdqT4Lh/4HAACAAmX6v3/U/6/t/sW843q1WHFKulJ9Hg79DwAAAAXK9P9ZUf9PfveggzfrOXH/ndKV6otw6H8AAAAo0P9X/y/yX39aPzvq/9dPHjbxmXH9xn2SrlRfhkP/AwAAQIEy7/+fE/X/lP53XX/Vm1O/+D1dqb4Kh/4HAACAAmX6f0DU/28827PvsUs2rR+YrlRfh0P/AwAAQIEy/X/uuQsttGj4x5vbHrNvv+9nnfFTulJ9Ew79DwAAAAXK9P/A6P3/twbecs/FrVtds0+6Un0bDv0PAAAABcr0/3lR/7999fWXzeg08Lku6Ur1XTj0PwAAABQo0/+Dov5/p1XXkze6pO1af6Qr1ffh0P8AAABQoEz/nx/1/9QnZ73R55oZx5+WrlQ/hEP/AwAAQIEy/X9B1P/vLrruhhfutcol09KV6sdw6H8AAAAoUKb/L4z6f9pyyy75dsvxM59NV6pZ4dD/AAAAUKBM/18U9f97d06dtcbc3tsfma5U//5NQP0PAAAABcr0/+Co/9//scFea38ydu9d0pXq53DofwAAAChQpv8vjvr/g07PjJ3Wpse9X6Ur1S/h0P8AAABQoEz/D4n6/8Od/7z4vK6T5v2SrlSzw6H/AQAAoECZ/r8k6v/p89qc0OvcBit2TFeqX8Oh/wEAAKBAmf6/NOr/j04Y+lrLG0fuPzNdqeaEQ/8DAABAgTL9f1nU/zPe2mO9D3bsMu7sdKX6LRz6HwAAAAqU6f+hUf9//OKpi122xpwvjk9Xqrnh0P8AAABQoEz/Xx71/8wBE747Z8EW9ZfTler3cOh/AAAAKFCm/4dF/f/JZcufPHClKWecmq5Uf4RD/wMAAECBMv1/RdT/n7Z+87JTX2p8zZvpSjUvHPofAAAACpTp/+FR/3+21nf3tLhj1HOT0pXqz3DofwAAAChQpv+vjPr/8xEb7Ptuv25rHZ2uVH+FQ/8DAABAgTL9f1XU/18scdOsoccuOP7bdKWaHw79DwAAAAXK9P/VUf9/+UDnJc+e2OaSdulKtSAc+h8AAAAKlOn/a6L+/+r27huuN334zK7pSvV3OPQ/AAAAFCjT/9dG/f/1are98eGiHbf/O12p/gmH/gcAAIACZfr/uqj/vznk9BM+/umxz/5MV+r/HvofAAAACpTp/xFR/3/76biLN9ysb61zulIPj9H/AAAAUKJM/18f9f93vw0Ze2bHaZ3apyv1RcLx3/V/g/+XXzIAAADwP5Tp/5FR/3/ffu+9hly+wsM/piv1Wji8/w8AAAAFyvT/DVH//zDj7+/eGj7knyPSlXoVDv0PAAAABcr0/41R//947FaLrblvu2bPpyv1f78AUP8DAABAgTL9f1PU/7N6L7Le6Rt9udfUdKX+72f89T8AAAAUKNP/N0f9/9MrL7x2wezmd5+ertQXDYf+BwAAgAJl+v+WqP9/nlp1PL/pzA8mpyv1f5+v/wEAAKBAmf4fFfX/Lyc998AZrzTb6qR0pd4wHPofAAAACpTp/1uj/p/d749ha905rueZ6Up98XDofwAAAChQpv9HR/3/6zPbn/pmn16XTU9X6kuEQ/8DAABAgTL9f1vU/3M6XPr2Jcf98EKndKW+ZDj0PwAAABQo0/+3R/3/2zd7bdx3woZr/5au1BuFQ/8DAABAgTL9f0fU/3Pnn7LMBlMH9fosXakvFQ79DwAAAAXK9P+YqP9/3+3hX2cuttOwtulKvXE49D8AAAAUKNP/Y6P+/2ORozpNbzbis2PTlfrS4dD/AAAAUKBM/98Z9f+8R299aN3nOtdeTFfqy4RD/wMAAECBMv1/V9T/f95z3VVn3Tq309vpSv3f7tf/AAAAUKBM/98d9f9fyx92+uXntH74lHSlvlw49D8AAAAUKNP/90T9P//8H6ZNPfKuf+anK/Um4dD/AAAAUKBM/98b9f+C7Vtuvs7TJzQ7LF2pNw2H/gcAAIACZfr/vqj//265dNPeM1/ca890pb58OPQ/AAAAFCjT//dH/f/PsGm/n1ur7v4+XamvEA79DwAAAAXK9P+4/93/9YXabrfnwl/888H+6Up9xXDofwAAAChQpv8fiPp/4T//unv2Vttv9Wu6Uv9POPQ/AAAAFCjT/+Oj/l9k1rND7ug8rOcX6Up9pXDofwAAAChQpv8fjPq/dsCixx14/v6X7Zau1FcOh/4HAACAAmX6f0LU/9VLD7281IjJL7yartRXCYf+BwAAgAJl+v+hqP/rZ/VuuWDXRmsfl67UVw2H/gcAAIACZfr/4aj/Gxy35xJ3rj2614B0pd4sHPofAAAACpTp/0ei/l/07cu/7TKv+7AZ6Up9tXDofwAAAChQpv8fjfp/sWsO3eewxZpevUm6Uv/3OfofAAAACpTp/8ei/m+4wcj775069bQr05X6GuHQ/wAAAFCgTP8/HvX/4luNGjpvQr/Vz09X6muGQ/8DAABAgTL9PzHq/yXOO7bn4sdNfLZFulJfKxz6HwAAAAqU6f8nov5fcul3J+/fp8Xgu9KVevNw6H8AAAAoUKb/n4z6v9Fdy210651f91gsXamvHQ79DwAAAAXK9P9TUf8v9dR6jee+sud2q6Ur9X8/E6D/AQAAoECZ/n866v/G1U8/1psO/ujJdKW+Tjj0PwAAABQo0//PRP2/9C49lv55du/7Fk1X6uuGQ/8DAABAgTL9/2zU/8v8ff/s2kbj29+ertTXC4f+BwAAgAJl+v+5qP+X/e7qdzrtu8rK49OVestw6H8AAAAoUKb/n4/6f7n9Om5y2/AZfy6drtTXD4f+BwAAgAJl+v+FqP+bPPfpFf9c3vbBG9KV+gbh0P8AAABQoEz/vxj1f9O+6/ResuPADtunK/UNw6H/AQAAoECZ/n8p6v/le67aofNmrRqsl67UNwqH/gcAAIACZfp/UtT/K0ybPu7un2Z9fUm6Um8VDv0PAAAABcr0/8tR/684vGGT++dtcfU96Up943DofwAAAChQpv9fifr/P+u+Mbfr2nNOWypdqW8SDv0PAAAABcr0/6tR/6/U5rf3Ftu1y+r/SVfqm4ZD/wMAAECBMv3/WtT/K1+42RZ/jRj57MR0pb5ZOPQ/AAAAFCjT/5Oj/l+lycCrbzm/weDW6Up983DofwAAAChQpv9fj/p/1ft2P6Nj50k9rk5X6luEQ/8DAABAgTL9PyXq/2aPn33Qolv12O68dKW+ZTj0PwAAABQo0/9vRP2/2kITJ8z5YuxHq6cr9X8/E6D/AQAAoECZ/n8z6v/VZ/9nkyVqHe+7Pl2pbxUO/Q8AAAAFyvT/W1H/r7HHzHf+mDm8/VbpSn3rcOh/AAAAKFCm/9+O+n/Nrl/OvufpNiu3Slfq24RD/wMAAECBMv3/TtT/a3211tKHH7ngz8vSlfq24dD/AAAAUKBM/0+N+r/5aVeMq87p9uDC6Uq9TTj0PwAAABQo0//vRv2/9pROHX6/dVSH0elKfbtw6H8AAAAoUKb/p0X93+LDE3uPfq5xgwnpSn37cOh/AAAAKFCm/9+L+n+dbndfsV+zKV8vn67UdwiH/gcAAIACZfr//aj/121+5hYHrN2o/43pSr1tOPQ/AAAAFCjT/x9E/b/eTU+/N2be5Ot3SFfqO4ZD/wMAAECBMv3/YdT/LYdcMPfXEd2nrJuu1HcKh/4HAACAAmX6f3rU/+tvvHOThXYd3WpIulLfORz6HwAAAAqU6f+Pov7f4NZfJhzSeftjGqQr9V3Cof8BAACgQJn+nxH1/4Yrtj5o7Pn/XHRbulLfNRz6HwAAAAqU6f+Po/7faMlGZ8z/Yv93HkxX6ruFQ/8DAABAgTL9PzPq/1YPv3Z1462GbbpMulLfPRz6HwAAAAqU6f9Pov7f+O4lGi0184S2d6cr9T3Cof8BAACgQJn+/zTq/02Wef2nBbW7RjVMV+p7hkP/AwAAQIEy/f9Z1P+b1n+fcueR1W/N0pX6XuHQ/wAAAFCgTP9/HvX/Zk9vskGXp19s8kS6Um8XDv0PAAAABcr0/xdR/2++4aBLF76186Ebpyv1vcOh/wEAAKBAmf7/Mur/La7d9aTZ54x4Yni6Ut8nHPofAAAACpTp/6+i/t9y0ID2dzRr/c0F6Up933DofwAAAChQpv+/jvq/9daP3Xvgc3MbrpOu1NuHQ/8DAABAgTL9/03U/1udfULD/adu2P+/WanvFw79DwAAAAXK9P+3Uf9vPene729d7Ifrb01X6vuHQ/8DAABAgTL9/13U/9u8c+2rc4/bacpD6Uq9Qzj0PwAAABQo0//fR/2/bY/9161PGNRqhXSl3jEc+h8AAAAKlOn/H6L+b/PX54MPu7PZMSPTlfoB4dD/AAAAUKBM//8Y9f92O659/L19Zl60dbpSPzAc+h8AAAAKlOn/WVH/b3/gau3mNe31zkbpSv2gcOh/AAAAKFCm/3+K+n+Hnz64c/FXxm16abpS7xQO/Q8AAAAFyvT/z1H/t9118GlPbNSu7ZbpSr1zOPQ/AAAAFCjT/79E/b/jP/te0372kFFXpSv1g8Oh/wEAAKBAmf6fHfX/Tt+f9sjKw5v/NihdqXcJh/4HAACAAmX6/9eo/3fef/yB3+z7ZZM10pX6IeHQ/wAAAFCgTP/Pifp/l+cX+u3Bjn0PvTddqXcNh/4HAACAAmX6/7eo/3c986UV2l7+2BON05X6oeHQ/wAAAFCgTP/Pjfp/txPnb9nkpxW+WTFdqR8WDv0PAAAABcr0/+9R/+/+3jZTv95sWsPH05X64eHQ/wAAAFCgTP//EfX/Hld+c8rnz41a8qB0pd4tHPofAAAACpTp/3lR/++53kbDl27W7cc56Ur9iHDofwAAAChQpv//jPp/r+2aPLjLOVMe+zxdqXcPh/4HAACAAmX6/6+o/9td9Pb+j9zauPOO6Ur9yHDofwAAAChQpv/nR/2/d9Nuv/zw9PBlXk9X6keFQ/8DAABAgTL9vyDq/33uv2O51Y7s+PPJ6Ur96HDofwAAAChQpv//jvp/34k3bNqutuC2vulK/Zhw6H8AAAAoUKb//4n6v/3CXd58dGabXT9MV+rHhkP/AwAAQIH+z/3fYKGo//dbZtq2k7aa1LpbulI/Lhz6HwAAAAqU6f+Fo/7f/+6lP9j8iwbTnktX6j3Cof8BAACgQJn+XyTq/w5Pt/yj2/ljz3s3XakfHw79DwAAAAXK9H8t6v+O9R9WurJzjyPPSFfqJ4RD/wMAAECBMv1fRf1/wLWHPf7yrnNa/pWu1HuGQ/8DAABAgTL9X4/6/8ANr+u87YgtXjs4XamfGA79DwAAAAXK9H+DqP8P2vrWM0+eN/LmfdOV+knh0P8AAABQoEz/Lxr1f6dBR428Ye0u5/yQrtRPDof+BwAAgAJl+n+xqP87T3p4h+s2G7jka+lK/ZRw6H8AAAAoUKb/G0b9f/DZp8w44ae2P/ZIV+q9wqH/AQAAoECZ/l886v8uPfaav8Plsx47J12pnxoO/Q8AAAAFyvT/ElH/H/LOpc0md2zV+aN0pd47HPofAAAACpTp/yWj/u+64/ZPXbvv+GX2S1fqp4VD/wMAAECBMv3fKOr/Q//6o+tRw3v/PDtdqfcJh/4HAACAAmX6f6mo/w/76bmzN54947Yv05X66eHQ/wAAAFCgTP83jvr/8AOrm5/faJVdd09X6meEQ/8DAABAgTL9v3TU/93G3LFSm1e+br0gXan3DYf+BwAAgAJl+n+ZqP+PWLXbH280bTHt8HSlfmY49D8AAAAUKNP/y0b9371hlw9G9hl83h7pSr1fOPQ/AAAAFCjT/8tF/X/kgzdse9ydex75XbpS7x8O/Q8AAAAFyvR/k6j/j1pjo5GbTZja8ph0pX5WOPQ/AAAAFCjT/02j/j965DdnPnNc09deSFfqZ4dD/wMAAECBMv2/fNT/x1z+duerFpt48zvpSv2ccOh/AAAAKFCm/1eI+v/YLZo8fuzUfuf0SlfqA8Kh/wEAAKBAmf5fMer/43q91OzIAW3ueDFdqZ8bDv0PAAAABcr0/3+i/u/x2kLzh41esPux6Up9YDj0PwAAABQo0/8rRf1//MxtZrzwfMflTklX6ueFQ/8DAABAgTL9v3LU/yccPX+H1qsNn/12ulIfFA79DwAAAAXK9P8qUf/3/H3fm3su0njiYelK/fxw6H8AAAAoUKb/V436/8R9Bp9988dTusxPV+oXhEP/AwAAQIEy/d8s6v+TDh7f9bWnui31fbpSvzAc+h8AAAAKlOn/1aL+P/nz057aqvuon/ZMV+oXhUP/AwAAQIEy/b961P+n/D2hxdYXdLnx13SlPjgc+h8AAAAKlOn/NaL+77XLqS+8evDIs/ZPV+oXh0P/AwAAQIEy/b9m1P+n7rfHlzdtvcW6u6Ur9SHh0P8AAABQoEz/rxX1f+/vhi564pdzXvkiXalfEg79DwAAAAXK9H/zqP9P69tmzJZ/9Dj3uHSlfmk49D8AAAAUKNP/a0f93+e5P3d9sfnYI15NV+qXhUP/AwAAQIEy/d8i6v/Tpz1z1BW7NNhiRrpSHxoO/Q8AAAAFyvT/OlH/n9GzwYXdr5s0dUC6Ur88HPofAAAACpTp/3Wj/u+77tQ1jxm6yh2d05X6sHDofwAAAChQpv/Xi/r/zOHLPnN1hxm7/5mu1K8Ih/4HAACAAmX6v2XU//0uXPfTZzftvdyP6Up9eDj0PwAAABQo0//rR/3fv82s2qazxs9un67UrwyH/gcAAIACZfp/g6j/z7qv6+gev7aa+Hy6Ur8qHPofAAAACpTp/w2j/j+7yfU7Xt9qVpcj0pX61eHQ/wAAAFCgTP9vFPX/OQvd0m1K+7ZLnZ6u1K8Jh/4HAACAAmX6v1XU/wMeP+a87a4c+NPUdKV+bTj0PwAAABQo0/8bR/1/7qi3fvrPaf1uPCldqV8XDv0PAAAABcr0/yZR/w9ceYVG342deNbkdKU+Ihz6HwAAAAqU6f9No/4/r/GGGzz1ctN1p6cr9evDof//P+zdefTV49/3/cT+bMmUMZmSeQyhJHNCJHOGZErmWWYZkzF+hgbKUJLIEOmHJGQoMmQmQ1EkUzImw73u6z66z+O6jnNdxzrPtc61jj8ej7/efX33a+1/n9+9fDYAAAAUKNP/raL+v/zxb17vtNw7k85LV2q3h0P/AwAAQIEy/b9F1P9XrHvwKSs02v2SX9KV2qBw6H8AAAAoUKb/t4z6v/fgO6+b+e5VR3ZJV2qDw6H/AQAAoECZ/t8q6v8rrx724KjH19lyh3Sldkc49D8AAAAUKNP/raP+79Pq6M47Hf/VO5+nK7U7w6H/AQAAoECZ/m8T9f9V54z6psOAG6csma7U7gqH/gcAAIACZfp/66j/r37tnEaPt99n05HpSu3ucOh/AAAAKFCm/9tG/X/Nh53Wm77WP93Hpiu1IeHQ/wAAAFCgTP9vE/X/tUdf+8oyv2/Xe6V0pTY0HPofAAAACpTp/3ZR/1/349Yn7D5z6ORb05XaPeHQ/wAAAFCgTP9vG/X/9Xv8c9VTWx+1cet0pTYsHPofAAAACpTp/+2i/u97+Isjvj948nnN05XaveHQ/wAAAFCgTP9vH/X/DTMX3mPV3ksMuCxdqQ0Ph/4HAACAAmX6f4eo/28c1nvMrKN+nd0mXandFw79DwAAAAXK9P+OUf//a/Wd91/5mdaNb0tXaiPCof8BAACgQJn+3ynq/5san9ez86cDD78+XandHw79DwAAAAXK9P/OUf/fPGp8/6cbHvRMy3Sl9kA49D8AAAAUKNP/7aP+v2XNJVp/tfqLvw1NV2ojw6H/AQAAoECZ/t8l6v9bB7767nITFllhoXSl9mA49D8AAAAUKNP/HaL+73f9jz/vMPT+nVZIV2oPhUP/AwAAQIEy/b9r1P/9W7de4bGLTxw6Ol2pPRwO/Q8AAAAFyvT/blH/Dzhz5qP/Pv6RKTenK7VHwqH/AQAAoECZ/t896v+Bk9bcu/3jp2+6WbpSGxUO/Q8AAAAFyvR/x6j/b/tkpdOXfvez7uukK7VHw6H/AQAAoECZ/t8j6v/bj/3s5i8ardb7inSl9lg49D8AAAAUKNP/e0b9P+iXk1s9sdzlkxdNV2oLngmo/wEAAKBAmf7vFPX/4M4PTNlj4k4b35+u1B4Ph/4HAACAAmX6f6+o/+849F9zVr/v2/PGpSu1MeHQ/wAAAFCgTP93jvr/zuldlvn2rI0HrJ6u1P4dDv0PAAAABcr0/95R/9+17C/9l735vdnD0pXaE+HQ/wAAAFCgTP/vE/X/3SNa9ZzWecXG9XSl9mQ49D8AAAAUKNP/+0b9P2Rco/1Ht3zy8KXTldpT4dD/AAAAUKBM/+8X9f/Q+htjdv3p3GceTVdqY8Oh/wEAAKBAmf7fP+r/e269aIVVvp/523bpSu3pcOh/AAAAKFCm/w+I+n9Yy7E//7D5WisMSldqC74TUP8DAABAgTL9f2DU//duc+m7Y/e9Zqdr05XaM+HQ/wAAAFCgTP93ifp/+KW7tt6t7x5D109XauPDof8BAACgQJn+Pyjq//tevPXmPR+/avsh6Urt2XDofwAAAChQpv8Pjvp/xMX7nT7++N0//U9Was+FQ/8DAABAgTL9f0jU//efePze3zT66poV05Xa8+HQ/wAAAFCgTP8fGvX/A1MefrTpu+uc+Hi6UpsQDv0PAAAABcr0f9eo/0fuvOoyO08c22LrdKX2Qjj0PwAAABQo0/+HRf3/4Lypcx5Z7vwJt6crtRfDof8BAACgQJn+7xb1/0PfTZ8y46x3+l+XrtReCof+BwAAgAJl+v/wqP8f7rJuqxXvW/7sTdKV2svh0P8AAABQoEz/HxH1/yMdv3pghc7fL3JLulKbGA79DwAAAAXK9P+RUf+PmrPG7jNvbjlzq3SlNikc+h8AAAAKlOn/o6L+f3TGyseN+unSUWukK7VXwqH/AQAAoECZ/j866v/Hun1yzU4td9j78nSl9mo49D8AAAAUKNP/3aP+Hz351A1W2vyTlZZKV2qTw6H/AQAAoECZ/j8m6v/Hzx4xcfb3q/z+YLpSey0c+h8AAAAKlOn/HlH/jznq5q+f6fvoyKfSldrr4dD/AAAAUKBM/x8b9f+/Pzigcad9z+zUNF2pvREO/Q8AAAAFyvT/cVH/PzGoz8O7t79v++3Tldqb4dD/AAAAUKBM/x8f9f+T6+zY6akBx386OF2pTQmH/gcAAIACZfr/hKj/n9r8gpO+//3la65JV2pvhUP/AwAAQIEy/X9i1P9jrxrXd9W1qhPXS1dqb4dD/wMAAECBMv1/UtT/TzdbapMOW9/e4p50pfZOOPQ/AAAAFCjT/ydH/T/urkmTH595yIQqXam9Gw79DwAAAAXK9P8pUf8/M/qn76b3/rl/k3Sl9l449D8AAAAUKNP/p0b9P37JLZda5uAtz34sXam9Hw79DwAAAAXK9P9pUf8/e0/3t+555vVFGqUrtQ/Cof8BAACgQJn+Pz3q/+dWG7Jpl6OWmvlAulL7MBz6HwAAAAqU6f8zov5/frEBTRZuePeop9OV2kfh0P8AAABQoEz/nxn1/4RHuv0059Mj9l4tXalNDYf+BwAAgAJl+v+sqP9faPHtfg9M+Gulmxo0aNDwf1+pfRwO/Q8AAAAFyvR/z6j/XxywwaiDVm/3+6bpSu2TcOh/AAAAKFCm/8+O+v+l65a+cfGLbxq5brpS+zQc+h8AAAAKlOn/c6L+f3mr9874Z+h+nXqnK7XPwqH/AQAAoECZ/j836v+JZyzy3vx919rt+HSlNi0c+h8AAAAKlOn/86L+nzTx+S0W7TtzxKvpSm16OPQ/AAAAFCjT/+dH/f/Kx78v3/X7Pf76OF2pfR4O/Q8AAAAFyvT/BVH/v9pju98e3vyaVXqlK7UvwqH/AQAAoECZ/r8w6v/JP1/X5eeWKx4wN12pzQiH/gcAAIACZfr/oqj/X9ur4+P1n94bvXe6UpsZDv0PAAAABcr0f6+o/18/5LRb9rv53Gm7piu1L8Oh/wEAAKBAmf6/OOr/N6aNOfuuzk8uNDNdqX0VDv0PAAAABcr0/yVR/7/Z7Okdxt2305mHpyu1WeHQ/wAAAFCgTP9fGvX/lLvOH7LXWZff9Fe6Uvs6HPofAAAACpTp/8ui/n9r9A6XN1tu45dmpyu1BT/T/wAAAFCgTP9fHvX/20teeeTXE79dd7d0pfZNOPQ/AAAAFCjT/1dE/f/OoC2ee/Td0095IV2pfRsO/Q8AAAAFyvR/76j/311n7po7Nnrkhh7pSu27cOh/AAAAKFCm/6+M+v+9zSc2XP741aaenq7Uvg+H/gcAAIACZfq/T9T/71+15LQvH/+s7dvpSu2HcOh/AAAAKFCm/6+K+v+DyR+3/3zoIrv9nK7U5oRD/wMAAECB4v5v+L9+8r/1/9VR/394drN7m1z84ogD05Xaj+HQ/wAAAFCgzOf/10T9/9FRzfvssvqJf+2YrtTmhkP/AwAAQIEy/X9t1P9TP/jymDET7l/li3Sl9lM49D8AAAAUKNP/10X9/3HH/V/87tPWB5yartQWPBNA/wMAAECBMv1/fdT/n8y5ad3VGv46+rV0pfZLOPQ/AAAAFCjT/32j/v90xn1Vx6MOmvZRulL7NRz6HwAAAAqU6f8bov7/rNspM558ZuBC56Yrtd/Cof8BAACgQJn+vzHq/2kjJx/Z4eCjznw+Xan9Hg79DwAAAAXK9P+/ov6fvsJilz/ee+hNR6QrtXnh0P8AAABQoEz/3xT1/+cNNx0yfeYSL52TrtT+CIf+BwAAgAJl+v/mqP+/eOLXHZbZevK676Yrtfnh0P8AAABQoEz/3xL1/4wN2k/bfa19Tjk4Xan9GQ79DwAAAAXK9P+tUf/PvPGyhk/9fuMN89OV2l/h0P8AAABQoEz/94v6/8srnljz+wHbTf02Xan9HQ79DwAAAAXK9H//qP+/2q7Xc6u2/6ftXulK7Z9w6H8AAAAoUKb/B0T9P+v8kcestGGnHzZIV6oFh/4HAACAAmX6f2DU/18/e0Kf2b9dt+RV6UoVfkf/AwAAQIky/X9b1P+z39n73mf6tzjkznSlahgO/Q8AAAAFyvT/7VH/f3NKv/ad9vhi7LbpSrVwOPQ/AAAAFCjT/4Oi/v/2z7VmrHBgr7mj0pVqkXDofwAAAChQpv8HR/3/XYfPq5nXjF922XSlqoVD/wMAAECBMv1/R9T/3+/7wbqjZjfZdZF0pVrwBQD6HwAAAAqU6f87o/7/YdZqL+601Zv33puuVPVw6H8AAAAoUKb/74r6f84vnx6285QN31klXakWvF7/AwAAQIEy/X931P8/dm46/pElZm/5TLpSNQqH/gcAAIACZfp/SNT/cw9tcceMk9sfOSJdqRYLh/4HAACAAmX6f2jU/z9Nn3HhiqN6X9I4XakW/Ez/AwAAQIEy/X9P1P8/n3ngx3uObDqpT7pSLR4O/Q8AAAAFyvT/sKj/f5l043bjT/twvbXTlWqJcOh/AAAAKFCm/++N+v/XT+5f/Zulz7lw83SlWjIc+h8AAAAKlOn/4VH//3bsSX81nTxm8I3pSrVUOPQ/AAAAFCjT//dF/f/7ms8cvMpHJ//w73SlWjoc+h8AAAAKlOn/EVH/zxt47tgfqpFLLp+uVE3Cof8BAACgQJn+vz/q/z+u3+m2sT0aHtIwXakWdL/+BwAAgAJl+v+BqP/nt77i3N2emjD2rnSlWjYc+h8AAAAKlOn/kVH//zlsqw+WHd5t7kbpSrVcOPQ/AAAAFCjT/w9G/f/X6nPaTrvgzmX7pivVgmcC6H8AAAAoUKb/H4r6/+/Gr6w8euXNdh2YrlQrhEP/AwAAQIEy/f9w1P//jFp83q4vz7l3m3SlWjEc+h8AAAAKlOn/R/6j/6sGG7X88rXmjd+5NF2pmoZD/wMAAECBMv0/Kur/hfp9vch2f76y5ZrpSrVSOPQ/AAAAFCjT/49G/d/wsrfXPmFQ9yO3SFeqZuHQ/wAAAFCgTP8/FvX/wm2Wf3ngDsMu6ZeuVCuHQ/8DAABAgTL9Pzrq/0XuH37s84e1mdQsXalWCYf+BwAAgAJl+v/xqP9rSx/Ze7NL5633RLpSrRoO/Q8AAAAFyvT/mKj/q0UOveeY6V0ufDhdqVYLh/4HAACAAmX6/99R/9efGdyh37b9Bi+RrlSrh0P/AwAAQIEy/f9E1P+L/tH585smTx8wPV2pFrxG/wMAAECBMv3/ZNT/jXa4usGRSzc/b+d0pVojHPofAAAACpTp/6ei/l9s/8fW2PK0vhvvn65ULcKh/wEAAKBAmf4fG/V/4+97TnhpZOfJv6Yr1Zrh0P8AAABQoEz/Px31/+IXvnz04FFv9T4/XanWCof+BwAAgAJl+n9c1P9LvLTQpaecvGz3D9KVau1w6H8AAAAoUKb/n4n6f8m3trmr7RLjNn0jXanWCYf+BwAAgAJl+n981P9LHffXTpOmXDjl5HSlWjcc+h8AAAAKlOn/Z6P+X3q9C8a326rP0PfTlWq9cPxH/1/yP/aWAQAAgP+iTP8/F/V/k5vGHfbG7A479UxXqvXD4fN/AAAAKFCm/5+P+n+ZK/tcePs1s1Y4Kl2pNgiH/gcAAIACZfp/QtT/y7bb8Y7jDlz/t2fTlWrDcOh/AAAAKFCm/1+I+n+5h37artUeo5/ZM12pNlow9z/8dgEAAID/hkz/vxj1//LLbfnxs/17Hv59ulJtHA6f/wMAAECBMv3/UtT/KzRY6q9bfpvaeF66Um0SDv0PAAAABcr0/8tR/6/41KTVj92w2exD05WqZTj0PwAAABQo0/8To/5v+vfKY4/e9rkBF6Yr1abh0P8AAABQoEz/T4r6f6X2nxx84/QG532arlSbhUP/AwAAQIEy/f9K1P/N9v7q3BcufWjjSelKtXk49D8AAAAUKNP/r0b9v/LsNW5rfdipk09MV6pW4dD/AAAAUKBM/0+O+n+Vc29ue9IOc3t/la5UW4RD/wMAAECBMv3/WtT/qz5/wAd3DmrVfZd0pdoyHPofAAAACpTp/9ej/l/tvVPnvfrn4E33TVeqrcKh/wEAAKBAmf5/I+r/1U8asXKb5l2nzElXqtbh0P8AAABQoEz/vxn1f/M7Gt/x8svDh3ZMV6o24dD/AAAAUKBM/0+J+n+NtV67cIuVe+w0K12ptg6H/gcAAIACZfr/raj/W2z622FHXDBxhX/SlaptOPQ/AAAAFCjT/29H/b/mNZuNv3l4o98OS1eqbcKh/wEAAKBAmf5/J+r/tZpevvrEp255Zkq6UrULh/4HAACAAmX6/92o/9cesstf2/Q44PAz05Vq23DofwAAAChQpv/fi/p/nTEXf3xqNb9x93Sl2i4c+h8AAAAKlOn/96P+X3fxJ7cb9FHb2S+lK9X24dD/AAAAUKBM/38Q9f96u51424Dp887ulK5UO4RD/wMAAECBMv3/YdT/68998NwTt23T/4d0pdoxHPofAAAACpTp/4+i/t/gy/4Hb39Yvwm/pyvVTuHQ/wAAAFCgTP9Pjfp/w677jJ18aZcWh6Qr1c7h0P8AAABQoEz/fxz1/0avf7Fy/0GvnPheulK1D4f+BwAAgAJl+v+TqP83Pmvted13aHzNWelKtUs49D8AAAAUKNP/n0b9v8kRq3+wafNhnx6drlQdwqH/AQAAoECZ/v8s6v+WH33YdsKf3bd/Ll2pdg2H/gcAAIACZfp/WtT/m7680pDnV76z0wXpSrVbOPQ/AAAAFCjT/9Oj/t/sos922OzlbiM/TFeq3cOh/wEAAKBAmf7/POr/zY+feeQxw+f8/nq6UnUMh/4HAACAAmX6/4uo/1u9vebl/S7YbKWT0pVqj3DofwAAAChQpv9nRP2/xY7/WvO1HiP3npauVHuGQ/8DAABAgTL9PzPq/y3nd3luu6dOHrVTulJ1Cof+BwAAgAJl+v/LqP+3+uHkaSd8NGHmAelKtVc49D8AAAAUKNP/X0X93/qABxoOrBou8lu6UnUOh/4HAACAAmX6f1bU/22anHfv4KU/PPvNdKXaOxz6HwAAAAqU6f+vo/7f+oHx7U+Z3LT/GelKtU849D8AAAAUKNP/s6P+bzu+9zFtR46ZcEy6Uu0bDv0PAAAABcr0/zdR/29T27nPpNPOafFyulLtFw79DwAAAAXK9P+3Uf+36//jujedPPvEPdKVav9w6H8AAAAoUKb/v4v6f9uNW7945KgNr/k6XakWfCeg/gcAAIACZfr/+6j/t9t6iRlbTun96d/pSnVgOPQ/AAAAFCjT/z9E/b/95a9WLy3Rfvuu6UrVJRz6HwAAAAqU6f85Uf/vsP5tU0+bPb7Tl+lKdVA49D8AAAAUKNP/P0b9v+PNXbe+fKteI9unK9XB4dD/AAAAUKBM/8+N+n+nPj2avn/gm7/vl65Uh4RD/wMAAECBMv3/U9T/O2971x9rXdNkpR/TlerQcOh/AAAAKFCm/3+O+r/9w8sccnH/6/a+KF2pFjwTUP8DAABAgTL9/0vU/7ss/84T1+3RadRn6Up1WDj0PwAAABQo0/+/Rv3fYaHvB36w4RczJ6YrVbdw6H8AAAAoUKb/f4v6f9ex612w4W8tFjkhXakOD4f+BwAAgAJl+v/3qP93++ePz1pWByx0ZbpSHREO/Q8AAAAFyvT/vKj/d9+l3bYff3TLtLXSlerIcOh/AAAAKFCm//+I+r/jPtUqVz3VdnSrdKU6Khz6HwAAAAqU6f/5Uf/v8c2zf1/QY/4B/0pXqqPDof8BAACgQJn+/zPq/z3PO6Nb8wt6rLJqulJ1D4f+BwAAgAJl+v+vqP87TRj99NvDh/81Pl2pjgmH/gcAAIACZfr/76j/93q/7+A+LzcacV+6UvUIh/4HAACAAmX6/5+o/zufvNvFZ608cbfF0pXq2HDofwAAACjQ/73/6w2i/t/73KX/uerPVm0fSVeq48Kh/wEAAKBAmf5fKOr/fZ5/b9ULms+d+p80fnV8OPQ/AAAAFCjT/w2j/t/3vW/btdyh6w21dKU6IRz6HwAAAAqU6f+Fo/7f76QNPv140OBThqcr1Ynh0P8AAABQoEz/LxL1//5/D+jV59IG626YrlQnhUP/AwAAQIEy/V+L+v+A9t0GnXXYcy9dna5UJ4dD/wMAAECBMv1fRf1/4N7dxzXf9tSb7khXqlPCof8BAACgQJn+r0f932X2kMPfnv7Qme3SlerUcOh/AAAAKFCm/xeN+v+gh06b//5vPRdaOV2pTguH/gcAAIACZfq/UdT/By83ZqW1Nhw97cl0pTo9HPofAAAACpTp/8Wi/j+kwXVtTtuj2eiH0pXqjHDofwAAAChQpv8bR/1/6FMdP7q8/9QDFk9XqjPDof8BAACgQJn+Xzzq/67r/X7+B9d0WOWSdKU6Kxz6HwAAAAqU6f8lov4/7KbtBmx4YJ+/WqQrVc9w6H8AAAAoUKb/l4z6v9uVizx58Vbrj9gyXanODof+BwAAgAJl+n+pqP8Pb/f8odfNnrVb/3SlOicc+h8AAAAKlOn/paP+P+L1Iz49c4ll226crlTnhkP/AwAAQIEy/d8k6v8jz7q33SVT3pp6Q7pSnRcO/Q8AAAAFyvT/MlH/H3XEoFXfGXXhDQPSler8cOh/AAAAKFCm/5eN+v/ojw75Z92Tx53SNl2pLgiH/gcAAIACZfp/uaj/u+826/ALT2u+7ph0pbowHPofAAAACpTp/+Wj/j9m7ibjbhg5/aXl0pXqonDofwAAAChQpv9XiPq/x5fLDZo6ufNNC6crVa9w6H8AAAAoUKb/V4z6/9iub/Vab+m+Z96drlQXh0P/AwAAQIEy/d806v/jmjb4aKOxEx9YPl2pLgmH/gcAAIACZfp/paj/jx/yUpvPjm3U8d/pSnVpOPQ/AAAAFCjT/82i/j9hzJ8rXVsfvtpd6Up1WTj0PwAAABQo0/8rR/1/4uJt5587tcc/DdOV6vJw6H8AAAAoUKb/V4n6/6Q7rjp0zZfmj+mbrlRXhEP/AwAAQIEy/b9q1P8nr7XXk282a9tlo3Sl6h0O/Q8AAAAFyvT/alH/n7LpWQOuOP+WhbdJV6orw6H/AQAAoECZ/l896v9Tr3n0/HPuPeDzgelK1Scc+h8AAAAKlOn/5lH/n9b/jM/P3vGhG9dMV6qrwqH/AQAAoECZ/l8j6v/TNx7doPfgU0+/NF2prg6H/gcAAIACZfq/RdT/Z2zdd40pfz23dr90pbomHPofAAAACpTp/zWj/j/z8t0mtFijwQtbpCvVteHQ/wAAAFCgTP+vFfX/WU3+OPq8doOvfyJdqa4Lh/4HAACAAmX6f+2o/3s+0O7Sa6Z1PalZulJdHw79DwAAAAXK9P86Uf+fPb6669NL5rZZIl2p+oZD/wMAAECBMv2/btT/59Se3Wnjrq0+fDhdqW4Ih/4HAACAAmX6f72o/8/dcZkv1+8464Gr0pXqxnDofwAAAChQpv/Xj/r/vPnvLPJRv/U7bpCuVP8Kh/4HAACAAmX6f4Oo/8//4fu1+/7aZ7Vt05XqpnDofwAAAChQpv83jPr/ggPWe/miDTr8c2e6Ut0cDv0PAAAABcr0/0ZR/1/48m3HrtN66phl05XqlnDofwAAAChQpv83jvr/oou69n73m2ZdRqUr1a3h0P8AAABQoEz/bxL1f6/je9xz6bWjF743Xan6hUP/AwAAQIEy/d8y6v+L376rwxlden6+SLpS9Q+H/gcAAIACZfp/06j/L5m44oYHPtL3xmfSlWpAOPQ/AAAAFCjT/5tF/X/pGVMmDTup8+mrpCvVwHDofwAAAChQpv83j/r/sh7fzPpx8elrN05XqtvCof8BAACgQJn+bxX1/+Ufb7xYwzebvzAiXaluD4f+BwAAgAJl+n+LqP+v2OvO+w9+bdz1a6cr1aBw6H8AAAAoUKb/t4z6v/fPB+92f5MLT+qTrlSDw6H/AQAAoECZ/t8q6v8rpx19/N+nv9XmxnSluiMc+h8AAAAKlOn/1lH/9zlk2LVLPLjsh5unK9Wd4dD/AAAAUKBM/7eJ+v+q1c5p2ahr948/TVequ8Kh/wEAAKBAmf7fOur/q+8Z9doflwzb9sJ0pbo7HPofAAAACpTp/7ZR/1/zyLXfPjSt8fEnpivVkHDofwAAAChQpv+3ifr/2sU6LXlYu1eumpSuVEPDof8BAACgQJn+bxf1/3UD/nmoWqPLc7ukK9U94dD/AAAAUKBM/28b9f/1Lbbe85e/+jX/Kl2phoVD/wMAAECBMv2/XdT/fbda+OS7B7c5a066Ut0bDv0PAAAABcr0//ZR/99w3Ys37LvjvFv3TVeq4eHQ/wAAAFCgTP/vEPX/jZN3PmP4vQ2/mpWuVPeFQ/8DAABAgTL9v2PU//86u/eN+58/oeqYrlQjwqH/AQAAoECZ/t8p6v+bjho/qkGzk/c9LF2p7g+H/gcAAIACZfp/56j/b/7gvP1+emnkY/+kK9UD4dD/AAAAUKBM/7eP+v+Wjq/+dN/Uzf44M12pRoZD/wMAAECBMv2/S9T/t85Zosmh9TkrT0lXqgfDof8BAACgQJn+7xD1f78ZrTdd6thunV9KV6qHwqH/AQAAoECZ/t816v/+3X5868+xdz7UPV2pHg6H/gcAAIACZfp/t6j/BzRb8+zfH2z/8c7pSvVIOPQ/AAAAFCjT/7tH/T/wrpm3ND6997bT05VqVDj0PwAAABQo0/8do/6/bfRnjx/eZMPjf01XqkfDof8BAACgQJn+3yPq/9uXXKnLyNdmX7V/ulI9Fg79DwAAAAXK9P+eUf8PGvTAb7+9ec5zH6Qr1ehw6H8AAAAoUKb/O0X9P3idk5dfZPExzc9PV6rHw6H/AQAAoECZ/t8r6v87Nu+yxd4nNT3r5HSlGhMO/Q8AAAAFyvR/56j/77zqX+8NfeTDW99IV6p/h0P/AwAAQIEy/b931P93nd9qv65dWnzVM12pngiH/gcAAIACZfp/n6j/7372l1EPX/tF9X66Uj0ZDv0PAAAABcr0/75R/w95540b53/Tad9n05XqqXDofwAAAChQpv/3i/p/6CmNzli09XWPHZWuVGPDof8BAACgQJn+3z/q/3v+HPvWfhs0+eP7dKV6Ohz6HwAAAAqU6f8Dov4f1uGiTe/69c2V90xXqnHh0P8AAABQoEz/Hxj1/7377trk5369Oh+arlTPhEP/AwAAQIEy/d8l6v/hsy79qd5x/EPz0pVqfDj0PwAAABQo0/8HRf1/38j9uix8+oWbn5GuVAu+E0D/AwAAQIEy/X9w1P8jVrj18TkPjnv7zXSlei4c+h8AAAAKlOn/Q6L+v7/hw7fc89qyfV5OV6rnw6H/AQAAoECZ/j806v8Hnjj+7C5N3upxTLpSTQiH/gcAAIACZfq/a9T/IzeY+t7ii3du+XW6Ur0QDv0PAAAABcr0/2FR/z9446pb/PNm39f3SFeqF8Oh/wEAAKBAmf7vFvX/Q1esu/wDjzS/rev/9+8TopXqpXDofwAAAChQpv8Pj/r/4e2m/3bQSdMv+DtdqRY8E1D/AwAAQIEy/X9E1P+PrLnGqQdf26xR+3SlmhgO/Q8AAAAFyvT/kVH/jxr41fX3d5k668t0pZoUDv0PAAAABUr7v1H0X+tHRf3/6PWfjPy7dc+nf0xXqlfCof8BAACgQJnP/4+O+v+x1ivvtcQ3ow/bL12pXg2H/gcAAIACZfq/e9T/o4eN+P7AX9df7rN0pZocDv0PAAAABcr0/zFR/z+++qmLD9tg1i8XpSvVa+HQ/wAAAFCgTP/3iPp/TOMDNv6xY4e7T0hXqtfDof8BAACgQJn+Pzbq/3+PuvmNhv367DAxXaneCIf+BwAAgAJl+v+4qP+f+GXHE6tLum7+Q7pSvRkO/Q8AAAAFyvT/8VH/P9m5z9W/dB38dqd0pZoSDv0PAAAABcr0/wlR/z916Lj77m7Xqs8h6Ur1Vjj0PwAAABQo0/8nRv0/dvoFHfedNrfH7+lK9XY49D8AAAAUKNP/J0X9//SZk2Y3+uvUlmelK9U74dD/AAAAUKBM/58c9f+4SUst+scaD73+XrpSvRsO/Q8AAAAFyvT/KVH/P/PJlus/tGOD255LV6oFfxPQ/wAAAFCgTP+fGvX/+GN/evWwwc9dcHS6Ur0fDv0PAAAABcr0/2lR/z/72pAVvjm/baMP05Xqg3DofwAAAChQpv9Pj/r/uXO6/9z03vmzLkhXqgV/E9D/AAAAUKBM/58R9f/zR3d7d8+XDnj6pHSl+igc+h8AAAAKlOn/M6P+n/DhgNbjm91y2OvpSjU1HPofAAAACpTp/7Oi/n9hjw36z6g3Wm6ndKX6OBz6HwAAAAqU6f+eUf+/+OO3PVecOvGXaelK9Uk49D8AAAAUKNP/Z0f9/9LM9/bfeWyPu39LV6pPw6H/AQAAoECZ/j8n6v+XD196zCPHDt/hgHSl+iwc+h8AAAAKlOn/c6P+n7jy88uM7vfmLk+mK9WC/ydA/wMAAECBMv1/XtT/k+5eZM6uHZvcs3K6Uk0Ph/4HAACAAmX6//yo/195fLspy24wfs7i6Ur1eTj0PwAAABQo0/8XRP3/6lK/t5r2a68mD6Ur1Rfh0P8AAABQoEz/Xxj1/+TBHW8e+80XB7VIV6oZ4dD/AAAAUKBM/18U9f9r6153+m6tWzx5SbpSzQyH/gcAAIACZfq/V9T/r7cas/cqXa77rn+6Un0ZDv0PAAAABcr0/8VR/79x9WmP/nBtp8W3TFeqr8Kh/wEAAKBAmf6/JOr/N888/4q5J43pdUO6Us0Kh/4HAACAAmX6/9Ko/6dMerrHQo+cc+fG6Ur1dTj0PwAAABQo0/+XRf3/1idX7nrAmx++2jZdqWaHQ/8DAABAgTL9f3nU/28fu8OwexdvusGAdKX6Jhz6HwAAAAqU6f8rov5/55e5tb+a9D56uXSl+jYc+h8AAAAKlOn/3lH/v9t5i6+WfK39ZWPSleq7cOh/AAAAKFCm/6+M+v+9Q5d86ZAHZ793d7pSfR8O/Q8AAAAFyvR/n6j/358+ca0Rp2/YeuF0pfohHPofAAAACpTp/6ui/v9gWLNLHjx2zi5rpSvVnHDofwAAAChQpv+vjvr/w9U/Pqrb2M3uuTJdqX4Mx//b/0v8D79lAAAA4L8o0//XRP3/UeMvd15s6p1z/pWuVHPD4fN/AAAAKFCm/6+N+n/qqOZ3z6t3a9IqXal+Cof+BwAAgAJl+v+6qP8/XvOmhYY0m3DQ+HSl+jkc+h8AAAAKlOn/66P+/2Tg/l/s81LDJ1dNV6pfwqH/AQAAoECZ/u8b9f+n15/yfO3ekd8tlq5Uv4ZD/wMAAECBMv1/Q9T/n7W+r/mv55+8+H3pSvVbOPQ/AAAAFCjT/zdG/T/txcWGNRrcr9d/0vjV7+HQ/wAAAFCgTP//K+r/6RdP3vWPHbvc+Ui6Us0Lh/4HAACAAmX6/6ao/z8/8dceD60x79Xh6Ur1Rzj0PwAAABQo0/83R/3/xZRNrzjsrzYb1NKVan449D8AAAAUKNP/t0T9P2Pny9aqpg07+up0pfozHPofAAAACpTp/1uj/p85r/1Lv7TrftmG6Ur1Vzj0PwAAABQo0//9ov7/8rteX93d9ZX32qUr1d/h0P8AAABQoEz/94/6/6suT9T2vaRx6zvSleqfcOh/AAAAKFCm/wdE/T9r2RPuPvC46d/clq7UFxz6HwAAAAqU6f+BUf9/PWLkzsNGN1+sTbpSD7+j/wEAAKBEmf6/Ler/2eP6HfXjO327tUxX6g3Dof8BAACgQJn+vz3q/2/qe1/ScNHO469PV+oLh0P/AwAAQIEy/T8o6v9vb/28+cHLv/XrQulKfZFw6H8AAAAoUKb/B0f9/13LtZ6/f9KyKw5NV+q1cOh/AAAAKFCm/++I+v/7bVb74u8R43Yena7Uq3DofwAAAChQpv/vjPr/h0s/WGiJnhcOWSFdqS/4AkD9DwAAAAXK9P9dUf/PGdR04OI39XlzZLpSX/B6/Q8AAAAFyvT/3VH//7jOpxf8s1eHzZZMV+qNwqH/AQAAoECZ/h8S9f/czWcc8sAms45ZKV2pLxYO/Q8AAAAFyvT/0Kj/f7qqxRMHzV3/irHpSr1xOPQ/AAAAFCjT//dE/f9zsxubLvzD6Ndapyv1xcOh/wEAAKBAmf4fFvX/L3cd+MecVj03ujVdqS8RDv0PAAAABcr0/71R//86+qSp9+w39dzL0pX6gmcC6n8AAAAoUKb/h0f9/9uS92/d5YZmA5s3+GiT/2OlvlQ49D8AAAAUKNP/90X9/3vHcwfvN/C5b+rpSn3pcOh/AAAAKFCm/0dE/T9vzjMX37VLg8WGpSv1JuHQ/wAAAFCgTP/fH/X/HzOu6Pbz2g91ezRdqS/ofv0PAAAABcr0/wNR/8/vttPT9Xmnjl86XakvGw79DwAAAAXK9P/IqP//nDxnla4z5v46KF2pLxcO/Q8AAAAFyvT/g1H//3X2Vn8/3KbVitulK/Xlw6H/AQAAoECZ/n8o6v+/j1r8s/kHDd55/XSlvkI49D8AAAAUKNP/D0f9/88Hr2y76BVdh1ybrtRXDIf+BwAAgAJl+v+R/+j/eoNF17j86qOHv7lZulJvGg79DwAAAAXK9P+oqP8XevSrI88f32Ozm9OV+krh0P8AAABQoEz/Pxr1f8N7P9lhk88mHnNFulJvFg79DwAAAAXK9P9jUf8vvMrKQz5ZuNEV66Qr9ZXDof8BAACgQJn+Hx31/yJ9RzS8crVbXrs/XamvEg79DwAAAAXK9P/jUf/Xtjh1Ws/nD9ho0XSlvmo49D8AAAAUKNP/Y6L+r5of8NwaQ+afu3q6Ul8tHPofAAAACpTp/39H/V+/7eY13+rVduC4dKW+4G8C+h8AAAAKlOn/J6L+X/TTHfu8d0OnQfukK/UFr9H/AAAAUKBM/z8Z9X+j7n2OWXu/6y76KV2prxEO/Q8AAAAFyvT/U1H/L3bauPant2qx/ox0pd4iHPofAAAACpTp/7FR/zd+5YJ7L/vhi4kd0pX6muHQ/wAAAFCgTP8/HfX/4gdNqj6c2+vSV9KV+lrh0P8AAABQoEz/j4v6f4nPl5qxwSbjjzguXamvHQ79DwAAAAXK9P8zUf8v+euWL/baq8kWF6cr9XXCof8BAACgQJn+Hx/1/1J7/rTu9Te9+e4n6Up93XDofwAAAChQpv+fjfp/6cV7fnRuzw2HH5uu1NcLh/4HAACAAmX6/7mo/5uMeazNtSNmd3gxXamvHw79DwAAAAXK9P/zUf8vM+TqlT6b1H6Zt9KV+gbh0P8AAABQoEz/T4j6f9mmnedvtHzvn05LV+obhkP/AwAAQIEy/f9C1P/LXfPXoecs2vSpP9OV+kbh0P8AAABQoEz/vxj1//KbbvPkFe98eGi3dKW+cTj0PwAAABQo0/8vRf2/wloLDXhz9DlL7Z6u1DcJh/4HAACAAmX6/+Wo/1e84+Xz1zxuzPffpCv1luHQ/wAAAFCgTP9PjPq/6UfLf7pur5MHTU5X6puGQ/8DAABAgTL9Pynq/5WOeLvdO0NGXnRKulLfLBz6HwAAAAqU6f9Xov5vdtbXq17yfMP1z0tX6puHQ/8DAABAgTL9/2rU/yu/3vKfM1ebMHFqulJvFQ79DwAAAAXK9P/kqP9X6Tr48PUW7nZpl3SlvkU49D8AAAAUKNP/r0X9v+qXh46b+tmdR/ySrtS3DIf+BwAAgAJl+v/1qP9Xm3vkoBvGb7bF5+lKfatw6H8AAAAoUKb/34j6f/Xdhve68Og57+6QrtRbh0P/AwAAQIEy/f9m1P/Nn6rNv/yKxsP/SFfqbcKh/wEAAKBAmf6fEvX/Gg0mrHTaQa90OChdqW8dDv0PAAAABcr0/1tR/7dYbl6btdp0X6ZzulJvGw79DwAAAAXK9P/bUf+v+dD2H70/Y9hP36Ur9W3Cof8BAACgQJn+fyfq/7XaXX/+dfPaPHVkulJvFw79DwAAAAXK9P+7Uf+vfeUeAy5ee96hE9KV+rbh0P8AAABQoEz/vxf1/zo3nf7khrt0WeqddKW+XTj0PwAAABQo0//vR/2/7nr/PvSDgf2+PztdqW8fDv0PAAAABcr0/wdR/6930jH/fDzkgDP+SlfqO4RD/wMAAECBMv3/YdT/6783dNWWvW65+fB0pb5jOPQ/AAAAFCjT/x9F/b/B8wPbXbBa25d3S1fqO4VD/wMAAECBMv0/Ner/Dc89/NOrnp+/zux0pb5zOPQ/AAAAFCjT/x9H/b/R7O96vf1Zj1N7pCv19uHQ/wAAAFCgTP9/EvX/xntvOKj5wsP7vpCu1HcJh/4HAACAAmX6/9Oo/zdp32TcWUc3+ujtdKXeIRz6HwAAAAqU6f/Pov5v+ff7h/cZP3Gb09OV+q7h0P8AAABQoEz/T4v6f9MvVnz5yoNa7f5qulJf8J0A+h8AAAAKlOn/6VH/b3bwlLV7XjH3vuPTlfru4dD/AAAAUKBM/38e9f/mnb5ZZI0ZXf/sla7UO4ZD/wMAAECBMv3/RdT/rX7b+Mu32gxe9eN0pb5HOPQ/AAAAFCjT/zOi/t/imDs7XL12g/33Tlfqe4ZD/wMAAECBMv0/M+r/LT87+J7z5z33+Nx0pd4pHPofAAAACpTp/y+j/t/q1aN7bzLw1Okz05X6XuHQ/wAAAFCgTP9/FfV/69OHHfvJLg812DVdqXcOh/4HAACAAmX6f1bU/222PGfCh/v1POOIdKW+4JkA+h8AAAAKlOn/r6P+3/qGUWtscMPom59PV+r7hEP/AwAAQIEy/T876v+2t1/boNcPzV5+N12p7xsO/Q8AAAAFyvT/N1H/b7NGp8+vbzV1nXPSlfp+4dD/AAAAUKBM/38b9X+7x/7Z6b1NOpw6P12p7x8O/Q8AAAAFyvT/d1H/b9to67vWntun78HpSv2AcOh/AAAAKFCm/7+P+n+7VRe+9PSb1v9or3SlfmA49D8AAAAUKNP/P0T9v/3wF4++bK9Z23ybrtS7hEP/AwAAQIEy/T8n6v8dlrjlmS1GLLv7gelK/aBw6H8AAAAoUKb/f4z6f8d/79v15Z5v3fdzulJf8EwA/Q8AAAAFyvT/3Kj/dxp63EU3L3/hn1+kK/VDwqH/AQAAoECZ/v8p6v+dV3roziMmjVt1x3Slfmg49D8AAAAUKNP/P0f93/7aVbbf5p3m+7+WrtS7hkP/AwAAQIEy/f9L1P+7bPbRJxMXnf74qelK/bBw6H8AAAAoUKb/f436v8Pa0/4cdFzn6eemK/Vu4dD/AAAAUKBM//8W9f+ud66z2qmj+zb4KF2pHx4O/Q8AAAAFyvT/71H/7zb156dO3GVebat0pX5EOPQ/AAAAFCjT//Oi/t/9yM0PGjCwzYxb0pX6keHQ/wAAAFCgTP//EfV/x56Lnjd5Xr9HLk9X6keFQ/8DAABAgTL9Pz/q/z3eeP327dfuss8a6Ur96HDofwAAAChQpv//jPp/z8Mu3KZ7m1eaPpiu1LuHQ/8DAABAgTL9/1fU/52+eurD/jMaz1sqXakfEw79DwAAAAXK9P/fUf/v9dMlv0+4YtiDTdOVeo9w6H8AAAAoUKb//4n6v/PuHZptelD3PZ9KV+rHhkP/AwAAQIH+7/3foEHU/3vve9Q6u4+/c7v/ZKV+XDj0PwAAABQo0/8LRf2/z6x7Xnjq6G6fDUlX6seHQ/8DAABAgTL93zDq/33/vGPm9wvPufbxdKV+Qjj+S/1f/2+9YwAAAOC/KtP/C0f9v1+Hg+qrfrbZCSumK/UTw+HzfwAAAChQpv8Xifp//3dmD+/w/Mg1b09X6ieFQ/8DAABAgTL9X4v6/4BTNtrl8dVOfn7rdKV+cjj0PwAAABQo0/9V1P8Hnr9C9+m9JvTbJF2pnxIO/Q8AAAAFyvR/Per/Ls++eeUyQxqec126Uj81HPofAAAACpTp/0Wj/j/oioYtVhj9Ye2BdKV+Wjj0PwAAABQo0/+Nov4/eLsXnp15XNMZjdKV+unh0P8AAABQoEz/Lxb1/yEb/D191KJjHlktXamfEQ79DwAAAAXK9H/jqP8PvbHNwju9c84+T6cr9TPDof8BAACgQJn+Xzzq/64Nrxm60qTZTTdNV+pnhUP/AwAAQIEy/b9E1P+HPbHnjrOX33DeTelKvWc49D8AAAAUKNP/S0b9323k2Uc807P3g73TlfrZ4dD/AAAAUKBM/y8V9f/hKzxyWacR7fdcN12pnxMO/Q8AAAAFyvT/0lH/HzFjmfqje43fbnC6Uj83HPofAAAACpTp/yZR/x/Z7Z2ZO97U67Pt05X6eeHQ/wAAAFCgTP8vE/X/UR2/f2H5uW9eu166Uj9/we//z75bAAAA4L8j0//LRv1/9Jz11vlykyYnXJOu1C8Ih/4HAACAAmX6f7mo/7sfdduV41pdt2aVrtQvDIf+BwAAgAJl+n/5qP+P+aBr971+6PT8PelK/aJw6H8AAAAoUKb/V4j6v8fkHrs0u+GLfo/9r382ilfqvcKh/wEAAKBAmf5fMer/Y8++a/jX+7U4p0m6Ur84HPofAAAACpTp/6ZR/x+3+RkLf/d794eHpSv1S8Kh/wEAAKBAmf5fKer/468aPX21tYbtVU9X6peGQ/8DAABAgTL93yzq/xMG9X22Y/vGzZZOV+qXhUP/AwAAQIEy/b9y1P8nrrNbiycHvDL/0XSlfnk49D8AAAAUKNP/q0T9f9LoPy77vHeXR7dLV+pXhEP/AwAAQIEy/b9q1P8nL9nuiCYH99tvULpS7x0O/Q8AAAAFyvT/alH/n9Ks2nGXrdvUr01X6leGQ/8DAABAgTL9v3rU/6fe9ezQMTPnfbl+ulLvEw79DwAAAAXK9H/zqP9PG9dgm383bHjLzelK/apw6H8AAAAoUKb/14j6//T6Sx+2/3RCz83SlfrV4dD/AAAAUKBM/7eI+v+MZf/8felnTl5jnXSlfk049D8AAAAUKNP/a0b9f+aIts2+OGrks1ekK///MwH1PwAAABQo0/9rRf1/1jZXPfXExZtdvWi6Ur8uHPofAAAACpTp/7Wj/u956V4H7TF0znH3pyv168Oh/wEAAKBAmf5fJ+r/s28967zVJ3RrNy5dqfcNh/4HAACAAmX6f92o/89p+ejt365+5yerpyv1G8Kh/wEAAKBAmf5fL+r/c088YvtZjdo/3CZdqd8YDv0PAAAABcr0//pR/5835d5PVn639163pSv1f4VD/wMAAECBMv2/QdT/57846M/Oj2/Y7Pp0pX5TOPQ/AAAAFCjT/xtG/X/BxYes9vTxs+e3TFfqN4dD/wMAAECBMv2/UdT/F34365mvzjrn0aHpSv2WcOh/AAAAKFCm/zeO+v+iLpt0Xe6+MfstlK7Ubw2H/gcAAIACZfp/k6j/e+283EU7TGxaXyFdqfcLh/4HAACAAmX6v2XU/xfPe+vOx5b78MvR6Uq9fzj0PwAAABQo0/+bRv1/yefHzO3/U4tblkxX6gPCof8BAACgQJn+3yzq/0sPGrp095Zf9ByZrtQHhkP/AwAAQIEy/b951P+X7Tlws007d1pjbLpSvy0c+h/g/2HvzsPtnM+Fjy8xPGsbElqUGmKITk4JMQVFnFSNNbSGnGMKghCJaFJDkRJDpcQQxJRQMzHPNQUxRMQ8zyRmEkOCGPNeuBO/eOQ82kb7XL/38/mj97131r6zl+s6R7722tkAAFBDFf3fIen//h9s9/CIQUfesmD5SnFqLPofAAAAaqii/1dI+v+Qncb94aSB8xxxQvlKcVos+h8AAABqqKL/V0z6/9Dnlj52980e2HXl8pViSCz6HwAAAGqoov9XSvr/sFHzXLbm8geuvlj5SjE0Fv0PAAAANVTR/ysn/X/4no9vNnr88GcPLl8pTo9F/wMAAEANVfT/Kkn//2WFWT8Y2XbkEz3LV4ozYtH/AAAAUEMV/d8x6f8jBo6Yd7URLR1Hl68Uf4tF/wMAAEANVfT/qkn/DzjloxV7nXXeHk+XrxRnxqL/AQAAoIYq+n+1pP//utiaj5/Wb+cj9y1fKc6KRf8DAABADVX0/+pJ/x95xVF737XDJ3e8X75SnB2L/gcAAIAaquj/XyX9f1RzgxNWuHnVdluWrxTnxKL/AQAAoIYq+n+NpP8HLtz7qu2fO37PtcpXinNj0f8AAABQQxX9v2bS/0efe+0Wg1ptfuyY8pXivFj0PwAAANRQRf+vlfT/Ma8sN2znly8Zu1X5SnF+LPofAAAAaqii/zsl/X/s1h+ud0LHXq0+Ll8pLohF/wMAAEANVfT/2kn/H7fuvbve2uXWLcaVrxQXxqL/AQAAoIYq+v+/k/4f9N4cA5Y/tHHtxuUrxbBY9D8AAADUUEX/d076//jt//6L7icN+XxE+UpxUSz6HwAAAGqoov9/nfT/CU/1G3lK563bdi1fKS6ORf8DAABADVX0/zpJ/594369fv6/dexv8sXyluCQW/Q8AAAA1VNH/v0n6f3Cf/nP8alKHCx8pXykujUX/AwAAQA1V9P+6Sf+f1H7TSzuOf+2JCeUrxWWx6H8AAACooYr+Xy/p/5MHDN5o1PI/77hp+UpxeSz6HwAAAGqoov/XT/r/lKEX9xi62eF7rFO+UlwRi/4HAACAGqro/w2S/j+13e4D9xi4zpEvla8UV8ai/wEAAKCGKvp/w6T/T7vmyWVWGvT0HbuWrxRXxaL/AQAAoIYq+n+jpP+HzNl29B0b/7jdqPKV4upY9D8AAADUUEX//zbp/6ELLDXu2GWv2vPZ8pXimlj0PwAAANRQRf9vnPT/6WeObbPDhL7H9itfKa6NRf8DAABADVX0/yZJ/5+xSacBQ+YdOPaO8pXiulj0PwAAANRQRf9vmvT/3944fNeeIzdutUv5SvH3WPQ/AAAA1FBF/2+W9P+Zn9+03qrnv7jFnuUrxfWx6H8AAACooYr+/13S/2d1/tOwu/ssdu1D5SvFDbHofwAAAKihiv7/fdL/Zz929xzHdb/p823LV4obY9H/AAAAUEMV/b950v/n9Gjzeter92/7aflKcVMs+h8AAABqqKL/t0j6/9x9Vhy54qMPbfBm+Upxcyz6HwAAAGqoov+3TPr/vNsm/OLOlh9euF75SjE8Fv0PAAAANVTR/1sl/X/+YYsPvG35B1a6rXyluCUW/Q8AAAA1VNH/XZL+v2D1V3ssN36ex7cvXylujUX/AwAAQA1V9P//JP1/4c+e3ajbwOH99y5fKaa8JkD/AwAAQA1V9P//Jv0/7LiFLj1xswN3eLR8pRgRi/4HAACAGqro/62T/r+ocUGbezceu3SX8pXi9lj0PwAAANRQRf9vk/T/xdf3GrfGoCVGfVK+UtwRi/4HAACAGqro/22T/r/kks1H7zbhyKFvla8Ud8ai/wEAAKCGKvp/u6T/L5130DInL7tRv9+WrxR3xaL/AQAAoIYq+n/7pP8va/ndNSeNvGauieUrxchY9D8AAADUUEX/d036//IrT/j97vPu/dYW5SvF3bHofwAAAKihiv7fIen/K867tO+afZ68rlP5SjEqFv0PAAAANVTR/zsm/X/lIt0Hjz5/gS5jy1eKe2LR/wAAAFBDFf2/U9L/Vx399MqDrz507l7lK8XoWPQ/AAAA1FBF/3dL+v/qFRd5dKfund+9t3ylmPI+/Q8AAAA1VNH/Oyf9f83iP53YvuWNc54qXynui0X/AwAAQA1V9P8uSf9fe+qL8494dOnO+5SvFPfHov8BAACghir6f9ek/697vsMVd414Z6XtyleKB2LR/wAAAFBDFf3fPen/v3d7f5MV2i73+GflK8WDseh/AAAAqKGK/t8t6f/re9/fe/t+p/d/o3yleCgW/Q8AAAA1VNH/uyf9f8M9LYMGnbXtDuuWrxQPx6L/AQAAoIYq+r9H0v83drmhw8ibRyx9e/lK8Ugs+h8AAABqqKL/90j6/6axBzy42g6tRu1cvlI8Gov+BwAAgBqq6P+eSf/f/OFv3unV6qKhvctXisdi0f8AAABQQxX93yvp/+EbHfSD057bo9/D5SvF47HofwAAAKihiv7fM+n/W1594P5fdDxxru7lK8UTseh/AAAAqKGK/u+d9P+t28z/yydf3vKte8pXiidj0f8AAABQQxX9v1fS/7et919zHnXoR9c9U75SPBWL/gcAAIAaquj/PyT9P2LCG+MP7LJKlwPLV4qnY9H/AAAAUEMV/d8n6f/bu27126U6nzP3e+UrxZTXBOh/AAAAqKGK/u+b9P8dTw+96LGTdnp3k/KV4tlY9D8AAADUUEX//zHp/zvvP/uogyeNOuc35SvFc7HofwAAAKihiv7fO+n/u/ru0Kt3uzk6v1y+Ujwfi/4HAACAGqro/32S/h+53GX39H10/04t5SvFC7HofwAAAKihiv7fN+n/u//6x58f1nLTGcPKV4oXY9H/AAAAUEMV/b9f0v+jTt+w+VD3H068sXylGBOL/gcAAIAaquj/PyX9f89SA95Y/OqH5lu0fKUYG4v+BwAAgBqq6P/9k/4ffe0q6+93/sZbH1c6Ukzd9D8AAADUUEX/H5D0/71zfX7+EX0G3tS+fKWY8jMB9D8AAADUUEX/H5j0/30L3n7Es/Mu9vpPy1eKV2LR/wAAAFBDFf3fL+n/+89qtfsyI19sHlq+Urwai/4HAACAGqro/z8n/f9Al+Y2HZb98X5rlq8Ur8Wi/wEAAKCGKvr/oKT/Hxx73/BbJjx96pDyleL1WPQ/AAAA1FBF/x+c9P9DH04cevygvvcPKF8p3ohF/wMAAEANVfR//6T/H95o+f132fiqZX5WvlK8GYv+BwAAgBqq6P9Dkv5/5Pk/P7P6Zj/f5ezyleKtWPQ/AAAA1FBF/x+a9P+j3dZZ4/6Brx02W/lKMS4W/Q8AAAA1VNH/hyX9/1jv/dueOn6dh+YpXynGx6L/AQAAoIYq+v/wpP8fv+f6z3Zd/vAOV5avFG/Hov8BAACghir6/y9J/z9x9K5derTbutPx5SvFO7HofwAAAKihiv4/Iun/J1e85IbTJw05Y6XyleLdWPQ/AAAA1FBF/w9I+v+pxY8/5Z6TOkxcvHyleC8W/Q8AAAA1VNH/f036/+lTN9tnlc7vzde/fKWYEIv+BwAAgBqq6P8jk/5/puWFJ3bs0mvrNuUrxcRY9D8AAADUUEX/H5X0/7NX/mTVYw695KaLy1eK92PR/wAAAFBDFf0/MOn/585beKHbX268fn35SvFBLPofAAAAaqii/49O+v/5RZ76aOWOtzYXKF8pPoxF/wMAAEANVfT/MUn/v/D2PvuPfG7V/c4sXykmxaL/AQAAoIYq+v/YpP9f3Pzmoau1+uTUb7lSfBSL/gcAAIAaquj/45L+H9PpkOG9dtj8/h+VrxQfx6L/AQAAoIYq+n9Q0v9jP1l7m9NuPn6Zq8tXik9i0f8AAABQQxX9f3zS/y91f+ezu85q2aVj+UrxaSz6HwAAAGqoov9PSPr/5YdXartCv5GHfctfAFB8Fov+BwAAgBqq6P8Tk/5/5a4519i+7c4PHVm+Unwei/4HAACAGqro/8FJ/796wKhnBo04r8My5SvF5Fj0PwAAANRQRf+flPT/ax0X2Gfw5e+uv2D5ytQP1/8AAABQQxX9f3LS/6/3f+6UnfZoP+yG8pVmPEb/AwAAQB1V9P8pSf+/MfilG9rPNXTyReUrzVax6H8AAACooYr+PzXp/zd/uUSXEQ9ut2jr8pXmzLHofwAAAKihiv4/Len/t4Yf89FJo2/b8uDyleYsseh/AAAAqKGK/h+S9P+4WbdYaPe5Z75msfKV5qyx6H8AAACooYr+H5r0//h5eqy65p4Xj1m5fKU5Wyz6HwAAAGqoov9PT/r/7WEXPjH6oh4zn1C+0ixi0f8AAABQQxX9f0bS/+9cs9ta924wuPey5SvNKR+v/wEAAKCGKvr/b0n/vzvnRWeuMXiLY44qX2m2xKL/AQAAoIYq+v/MpP/fW+DE/rt9OOn2U8pXmrPHov8BAACghir6/6yk/yecuUnXk5fuuNQq5SvNOWLR/wAAAFBDFf1/dtL/E9uPufW2lc7ucVX5SnPOWPQ/AAAA1FBF/5+T9P/7A9otudwb3Y6av3ylOVcs+h8AAABqqKL/z036/4Ohi7bqNuCeJ2cqX2m2jkX/AwAAQA1V9P95Sf9/2O6JF07cYvZVzipfabaJRf8DAABADVX0//lJ/0/afvbOx6314PqHlK80545F/wMAAEANVfT/BUn/f/TU6HO7njb3sJ+UrzTniUX/AwAAQA1V9P+FSf9/fN8Hh6/46c2TlytfaU7pfv0PAAAANVTR/8OS/v+kT/tudy7Wb9FB5SvNH8ai/wEAAKCGKvr/oqT/P33l4DuG/GrMlm3LV5rzxqL/AQAAoIYq+v/ipP8/27rzT3u+uOQ1N5WvNOeLRf8DAABADVX0/yVJ/3++7oGzrXrQUWMuLF9pzh+L/gcAAIAaquj/S5P+n/zedS/dvc2GMzfLV5o/ikX/AwAAQA1F/8+SvOeY5JdbfTWaCzQancYl74/Ht1lgygd98T877v/uxG+bX2suMO388reYqdGY5bJvfFrf8t8YZoipz6f1I2PWbrRvzJQ+8y8sM53Hn9icf+FG+0ar0uOn/YCZ4/ELbvvpIv0b7RuzffPxu3XvuVO3faa+Gb/aXHjdnuOXb7RvNL/5+D277bVdz147dYs3459Ly2KX7zukb6N9Y5Zv/pPq3rPvHsmbLTEW//Hb7QZ++fl84/F/6NO1z85/mPrm7PH4JeJ+6fF7Tfv5zxGPX7LHwm3GzTWyMeuC0z680btvrz5dGwAAAPynVfT/1J5tNDrdkrw/uvgf7v8Fp52N6fX/zP/as5quqc/ne+r/eK1E4wef7v3rN1tf12h+s59369V3r55de7SfAc8FAAAAAAAAAKaKr/+3St418ut1tse/fg15qrlwo1G80GjMNGmrlz9+5l/5/Sdv/i+a/H29VAAAAADyUfH6/6nfnz6DXv+/8LSzMb3X/8/6rz2r6Zr6fL6n1//H591c5MXPDn+gsUpjjm/7/vzt9urac5du03wLwGzxcYvOcePL+zZWabT+9u/T327HXaf90CI+ru0BH2x6eut1G3N98+O+/P770ocBAADw/5uK/p/as43GQX9OPyzm3Onb36H/F5l2NqL/AQAAgO9TRf9P/br0dPr/H/36/6LTzsb/0f+z/XNPCAAAACip6P+pry//1v6fe+qb37H/W9p+fW+KVtPe/F41F4u5eMwlYi4Zs13MpWL+JOZPY/4s5s9j/iLm0jH/K+YvY8Z3BzSXjRkvwW8uF3P5mB1irhBzxZgrxVw55ioxO8ZcNeZqMVeP+auYa8RcM+ZaMTvFXDvmf8fsHPPXMdeJ+ZuY68ZcL+b6MTeIuWHMjWL+NubGMTeJuWnMzWL+LubvY24ec4uYW8bcKmaXmP8T839jbh1zm5jbxtwu5vYx40cSNneIuWPMnWLGz1ts7hxzl5i7xuwec7eYu8fsETN+BmOzZ8xeMfeM2TvmXjHjJzA2+8TsG/OPMfeOGT95sblvzP1i/inm/jEPiHlgzH4x4/+GmwfFPDhm/5iHxDw05mExD4/5l5hHxBwQ868xj4x5VMyBMY+OGf+/pXlszONiDop5fMwTYp4Yc3DMk2KeHPOUmKfGPC3mkJhDY54e84yYf4t5ZsyzYp4d85yY58Y8L+b5MS+IeWHMYTEvinlxzEtiXhozvs+peXnMK2JeGfOqmFfHvCbmtTGvi/n3mNfHvCHmjTFvinlzzOEx43u4mrfGvC3miJi3x7wj5p0x74oZfzdM8+6Yo2LeE3N0zHtj3hfz/pgPxHww5kMxH475SMxHYz4W8/GYT8R8MuZTMZ+OGX8XTfPZmM/FfD7mCzFfjDkm5tiYL8V8OeYrMV+N+VrM12O+EfPNmG/FjJ+V2xwf8+2Y78R8N+Z7MSfEjH9fNt+P+UHMD2NOivlRzI9jfhLz05ifxfw85uSv5pS/yqcl/l3bEv/ybYm/RKcl/hzQEq/7a4n/CN8Sfw5omfLzZ6f8XNkpPy92ys+BnTPmXDFbx2wTM/7E0DJPzB/E/GHMeWPOF3P+mD+KGV9vaImfH9Ty45gLxYzvK2yJ1xe2xNcZWpI/bwAA0f+tv37PrPv8Jz8fAAAAYMbT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD5m9r/vae8R/8DAABAbnz9HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/0+//mf9jnxMAAAAwY/n6PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkL/p/luQ9xyS/3PxqtCzWaBz05/TDpv31r97ecf93J37b/NoXd9L5hVYzzbAnU22uf+PvBQAAALVR0f8tMRafTv8vkL79Hfp/8Wln49/c/21e+2rO9ni8Y85/3+8NAAAA/zkV/T/7V6Nlien0/y3p29+h/5eYdjai/2fZcIY9of/bPMnn/oUfNBrNZqPRqtWMOd9cKLn/xc2FG43ihUZjpkkz5j4AAAD8cyr6f44v/7elZcnp9P9l6dvfof+XnHY2ov9nfWbGPaN/yExdZjn/0c79Go3ttxz+5Xzt5fO+nFO9vtmtHfqN7jblzSmPe2G+4dM+7t9zFwAAAP4pFf0fr49vaddodBqXvD++Xt7mH339f7tpZ+PzyZMnz9RozHLZNz6tGfT1+JKpz6f1I2PWbrRvzJQ+8y8sM53Hn9icf+HWrzValR6/zPf0mQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmCgAA//+iStCI") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 3.826500998s ago: executing program 5 (id=929): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x44080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x10000000000000ad, 0x0, [{0xc0010005, 0x0, 0x4}]}) 3.396916489s ago: executing program 5 (id=933): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040addeefbe0001010203010902270001010080fa"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/r8152/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='dead beef', 0x9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.168916154s ago: executing program 0 (id=934): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000011c0)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4d2, @local}, 0x10) 3.012857867s ago: executing program 1 (id=935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 2.90709848s ago: executing program 0 (id=936): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.734490614s ago: executing program 1 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e010000560100000100"/32) 2.669073596s ago: executing program 6 (id=938): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd', 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) eventfd(0x22222222) r3 = eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000018), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 2.420340742s ago: executing program 6 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}]}}]}, 0x3c}}, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 2.316659825s ago: executing program 1 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7970") pwrite64(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35, 0x1000000) ioctl(r0, 0xc138fd09, 0x0) 1.800305177s ago: executing program 1 (id=941): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='tcp', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='127.0.0.1', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='8009', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='ipv4', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=t', 0x31) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) 1.701804029s ago: executing program 0 (id=942): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008ffff0f0000000000") 1.564084353s ago: executing program 5 (id=943): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xa, 0xffff}}}, 0x24}}, 0x44080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x10000000000000ad, 0x0, [{0xc0010005, 0x0, 0x4}]}) 1.323501819s ago: executing program 0 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) 1.217365881s ago: executing program 6 (id=945): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f7031203132382030", 0x45) ioctl(r0, 0xc138fd09, 0x0) 1.122853363s ago: executing program 0 (id=946): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x14, 0x0, 0xf800) 947.572658ms ago: executing program 5 (id=947): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) 787.964682ms ago: executing program 0 (id=948): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 780.138132ms ago: executing program 6 (id=949): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=+x1111111111111111', 0x17) 708.342783ms ago: executing program 1 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e010000560100000100"/32) 609.323616ms ago: executing program 5 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7970") pwrite64(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35, 0x1000000) ioctl(r0, 0xc138fd09, 0x0) 255.180974ms ago: executing program 6 (id=952): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 171.755776ms ago: executing program 1 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040addeefbe0001010203010902270001010080fa"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/r8152/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='dead beef', 0x9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=954): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008ffff0f0000000000") kernel console output (not intermixed with test programs): 9762][ T4510] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 153.982873][ T4510] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.012758][ T4510] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.063343][ T4305] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 154.084396][ T4305] XFS (loop0): page discard on page ffffea00013291c0, inode 0x2a, pos 64512. [ 154.125582][ T4327] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 154.138077][ T4327] XFS (loop0): Unmount and run xfs_repair [ 154.143874][ T4327] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 154.151745][ T4327] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 154.162444][ T4327] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 154.171830][ T4327] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 154.181029][ T4327] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 154.190839][ T4327] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 154.201979][ T4327] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 154.211658][ T4327] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.222189][ T4327] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.246674][ T4305] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 154.267769][ T4305] XFS (loop0): page discard on page ffffea0001328100, inode 0x2a, pos 65536. [ 154.299140][ T4282] XFS (loop0): Unmounting Filesystem [ 154.893075][ T5361] binder: 5360:5361 ioctl c0306201 2000000003c0 returned -14 [ 154.911355][ T57] team0 (unregistering): Port device team_slave_1 removed [ 155.022607][ T57] team0 (unregistering): Port device team_slave_0 removed [ 155.115249][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.216957][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.874065][ T57] bond0 (unregistering): Released all slaves [ 155.979368][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.989346][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.998903][ T5118] device bridge_slave_0 entered promiscuous mode [ 156.006396][ T4327] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.024599][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.046539][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.056044][ T5118] device bridge_slave_1 entered promiscuous mode [ 156.113098][ T5326] device syzkaller0 entered promiscuous mode [ 156.199071][ T4327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.227481][ T4327] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.254848][ T4327] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.283842][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.326275][ T4327] usb 5-1: config 0 descriptor?? [ 156.553743][ T4327] usb 5-1: USB disconnect, device number 3 [ 157.140736][ T4327] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.350257][ T4327] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.369497][ T4327] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.380118][ T4327] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 157.390979][ T4327] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.426797][ T4327] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 157.445498][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.454584][ T4327] usb 5-1: Product: syz [ 157.459188][ T4327] usb 5-1: Manufacturer: syz [ 157.465157][ T4327] usb 5-1: SerialNumber: syz [ 157.701718][ T4326] usb 5-1: USB disconnect, device number 4 [ 158.823259][ T5403] loop4: detected capacity change from 0 to 32768 [ 158.883647][ T5403] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.904225][ T5403] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 158.916502][ T5403] BTRFS info (device loop4): setting nodatacow, compression disabled [ 158.926171][ T5403] BTRFS info (device loop4): force zlib compression, level 3 [ 158.935278][ T5403] BTRFS info (device loop4): force clearing of disk cache [ 158.945444][ T5403] BTRFS info (device loop4): enabling ssd optimizations [ 158.953273][ T5403] BTRFS info (device loop4): using spread ssd allocation scheme [ 158.970817][ T5403] BTRFS info (device loop4): turning on sync discard [ 158.982512][ T5403] BTRFS info (device loop4): turning on flush-on-commit [ 158.990384][ T5403] BTRFS info (device loop4): not using ssd optimizations [ 158.998195][ T5403] BTRFS info (device loop4): not using spread ssd allocation scheme [ 159.007087][ T5403] BTRFS info (device loop4): using free space tree [ 159.078911][ T5403] BTRFS info (device loop4): rebuilding free space tree [ 159.500697][ T4275] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.944071][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.041781][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.266833][ T5118] team0: Port device team_slave_0 added [ 160.319098][ T5118] team0: Port device team_slave_1 added [ 160.415287][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.424397][ T4608] nvmet: connect request for invalid subsystem test! [ 160.448480][ T5430] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test" [ 160.516867][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.645431][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.707695][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.745444][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.756465][ T4608] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.840088][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.003114][ T5118] device hsr_slave_0 entered promiscuous mode [ 161.026123][ T5118] device hsr_slave_1 entered promiscuous mode [ 161.042175][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.058380][ T4608] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.077086][ T5118] Cannot create hsr debugfs directory [ 161.083330][ T4608] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.108056][ T4608] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.132286][ T4608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.168890][ T4608] usb 5-1: config 0 descriptor?? [ 161.427652][ T4608] usb 5-1: USB disconnect, device number 5 [ 161.635051][ T5118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.669469][ T5118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.709959][ T5118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.733339][ T5118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.932358][ T5473] device syzkaller0 entered promiscuous mode [ 162.025671][ T4608] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.218576][ T4608] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.229797][ T4608] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.242756][ T4608] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 162.255255][ T4608] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.309037][ T4608] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 162.330354][ T4608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.339634][ T4608] usb 5-1: Product: syz [ 162.345503][ T4608] usb 5-1: Manufacturer: syz [ 162.351695][ T4608] usb 5-1: SerialNumber: syz [ 162.587014][ T22] usb 5-1: USB disconnect, device number 6 [ 164.509951][ T130] nvmet: connect request for invalid subsystem test! [ 164.528665][ T5514] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test" [ 164.832624][ T5522] i2c i2c-0: delete_device: Can't find device in list [ 165.159160][ T130] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 165.361579][ T130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.381320][ T130] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.407895][ T130] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.429505][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.467107][ T130] usb 1-1: config 0 descriptor?? [ 165.481691][ T130] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 165.720158][ T4326] usb 1-1: USB disconnect, device number 4 [ 165.960571][ T5542] Bluetooth: ISO socket layer initialized [ 166.109163][ T27] audit: type=1800 audit(1785919808.578:55): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.320" name="streaming_maxpacket" dev="configfs" ino=38092 res=0 errno=0 [ 166.325450][ T4326] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.428174][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.513700][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.531940][ T4326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.570658][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.585797][ T4326] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.611538][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.625645][ T4326] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 166.650343][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.666495][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.675916][ T4326] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.691359][ T5548] binder: 5547:5548 ioctl c0306201 200000000080 returned -14 [ 166.712054][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.721244][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.734516][ T5548] binder: 5547:5548 ioctl 4018620d 0 returned -22 [ 166.754181][ T4326] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 166.784945][ T5548] binder: 5547:5548 ioctl c0306201 2000000003c0 returned -14 [ 166.802621][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.831042][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.851472][ T4326] usb 1-1: Product: syz [ 166.860682][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.875522][ T4326] usb 1-1: Manufacturer: syz [ 166.894147][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.903677][ T4326] usb 1-1: SerialNumber: syz [ 166.925571][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.934129][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.032723][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.077967][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.118961][ T4507] usb 1-1: USB disconnect, device number 5 [ 167.128093][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.175851][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.223828][ T5546] loop4: detected capacity change from 0 to 32768 [ 167.234582][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.277235][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.319834][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.358528][ T5546] XFS (loop4): Mounting V5 Filesystem [ 167.371437][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.442441][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.538648][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.577015][ T5546] XFS (loop4): Ending clean mount [ 167.617475][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.680771][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.723674][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.836372][ T4275] XFS (loop4): Unmounting Filesystem [ 168.035597][ T27] audit: type=1800 audit(1785919810.498:56): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.330" name="streaming_maxpacket" dev="configfs" ino=37438 res=0 errno=0 [ 168.353189][ T5587] device syzkaller0 entered promiscuous mode [ 168.643278][ T5601] binder: 5600:5601 ioctl c0306201 200000000080 returned -14 [ 168.703740][ T5604] binder: 5600:5604 ioctl 4018620d 0 returned -22 [ 168.802883][ T5601] binder: 5600:5601 ioctl c0306201 2000000003c0 returned -14 [ 169.428243][ T4324] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.474488][ T5614] loop1: detected capacity change from 0 to 32768 [ 169.595720][ T5614] XFS (loop1): Mounting V5 Filesystem [ 169.629271][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.653711][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.690546][ T5614] XFS (loop1): Ending clean mount [ 169.707458][ T4324] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.755997][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.807751][ T4324] usb 5-1: config 0 descriptor?? [ 169.843049][ T4324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 169.932959][ T4277] XFS (loop1): Unmounting Filesystem [ 170.041080][ T4325] usb 5-1: USB disconnect, device number 7 [ 170.148670][ T27] audit: type=1800 audit(1785919812.618:57): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.342" name="streaming_maxpacket" dev="configfs" ino=37481 res=0 errno=0 [ 170.592006][ T5633] syz.1.341 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 170.609145][ T5633] CPU: 1 PID: 5633 Comm: syz.1.341 Not tainted syzkaller #0 [ 170.624468][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.639491][ T5633] Call Trace: [ 170.643717][ T5633] [ 170.647503][ T5633] dump_stack_lvl+0x188/0x24e [ 170.655509][ T5633] ? ___ratelimit+0x14e/0x610 [ 170.661266][ T5633] ? show_regs_print_info+0x12/0x12 [ 170.668826][ T5633] ? load_image+0x410/0x410 [ 170.675920][ T5633] ? ___ratelimit+0x474/0x610 [ 170.681992][ T5633] ? radix_tree_cpu_dead+0x160/0x160 [ 170.691226][ T5633] dump_header+0xd8/0x820 [ 170.696899][ T4325] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.698465][ T5633] oom_kill_process+0x361/0x550 [ 170.716338][ T5633] out_of_memory+0xe25/0x1220 [ 170.722145][ T5633] ? print_unlock_imbalance_bug+0x160/0x160 [ 170.731686][ T5633] ? mutex_lock_nested+0x10/0x10 [ 170.737766][ T5633] ? unregister_oom_notifier+0x20/0x20 [ 170.744555][ T5633] mem_cgroup_out_of_memory+0x2c0/0x390 [ 170.752201][ T5633] ? mem_cgroup_oom_trylock+0x210/0x210 [ 170.760534][ T5633] ? do_raw_spin_unlock+0x11d/0x230 [ 170.767053][ T5633] try_charge_memcg+0xc9d/0x17c0 [ 170.775077][ T5633] ? percpu_ref_put+0x180/0x180 [ 170.781340][ T5633] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 170.790330][ T5633] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 170.798143][ T5633] ? percpu_ref_tryget+0x15/0x180 [ 170.806736][ T5633] ? percpu_ref_tryget+0x15/0x180 [ 170.813774][ T5633] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 170.823300][ T5633] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 170.830434][ T5633] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 170.838763][ T5633] obj_cgroup_charge+0x36a/0x620 [ 170.845018][ T5633] ? obj_cgroup_charge+0xe9/0x620 [ 170.853866][ T5633] ? mod_objcg_mlstate+0x320/0x320 [ 170.859362][ T5633] ? get_obj_cgroup_from_current+0xd0/0x280 [ 170.867814][ T5633] ? get_obj_cgroup_from_current+0xd0/0x280 [ 170.877535][ T5633] slab_pre_alloc_hook+0x2e2/0x300 [ 170.884115][ T5633] kmem_cache_alloc_node+0x5a/0x310 [ 170.892673][ T5633] ? lock_chain_count+0x20/0x20 [ 170.899276][ T5633] ? dup_task_struct+0x57/0x6b0 [ 170.904553][ T5633] dup_task_struct+0x57/0x6b0 [ 170.910674][ T5633] ? lockdep_hardirqs_on+0x94/0x140 [ 170.917340][ T5633] copy_process+0x621/0x40c0 [ 170.922856][ T5633] ? schedule_preempt_disabled+0x20/0x20 [ 170.930634][ T5633] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 170.938142][ T5633] ? _raw_spin_unlock+0x40/0x40 [ 170.944337][ T5633] ? preempt_schedule_thunk+0x16/0x18 [ 170.952254][ T5633] ? try_to_wake_up+0x6c1/0x10b0 [ 170.956987][ T4325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.958787][ T5633] ? idle_dummy+0x10/0x10 [ 170.978231][ T5633] ? wake_up_q+0x8c/0xc0 [ 170.983288][ T5633] kernel_clone+0x24b/0x900 [ 170.983315][ T4325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.988752][ T5633] ? futex_wake_mark+0x150/0x150 [ 170.988791][ T5633] ? create_io_thread+0x170/0x170 [ 170.988821][ T5633] ? do_futex+0x2e2/0x320 [ 170.988849][ T5633] __x64_sys_clone+0x1a7/0x220 [ 171.027716][ T5633] ? __ia32_sys_vfork+0x140/0x140 [ 171.034748][ T5633] ? lock_chain_count+0x20/0x20 [ 171.040901][ T4325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 171.041509][ T5633] ? lockdep_hardirqs_on+0x94/0x140 [ 171.064827][ T5633] do_syscall_64+0x4c/0xa0 [ 171.075255][ T5633] ? clear_bhb_loop+0x60/0xb0 [ 171.081969][ T5633] ? clear_bhb_loop+0x60/0xb0 [ 171.084289][ T4325] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.092052][ T5633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.092174][ T5633] RIP: 0033:0x7f0c1879e019 [ 171.092202][ T5633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.092225][ T5633] RSP: 002b:00007f0c195d6fd8 EFLAGS: 00000206 [ 171.146049][ T4325] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 171.149330][ T5633] ORIG_RAX: 0000000000000038 [ 171.149348][ T5633] RAX: ffffffffffffffda RBX: 00007f0c18a25fa0 RCX: 00007f0c1879e019 [ 171.162892][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.167587][ T5633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000 [ 171.167614][ T5633] RBP: 00007f0c1883500c R08: 0000000000000000 R09: 0000000000000000 [ 171.167658][ T5633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.167672][ T5633] R13: 00007f0c18a26038 R14: 00007f0c18a25fa0 R15: 00007ffd4b3bf7c8 [ 171.167707][ T5633] [ 171.199187][ T5633] memory: usage 4kB, limit 8kB, failcnt 22 [ 171.254720][ T5633] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 171.278401][ T5633] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 171.288911][ T4325] usb 5-1: Product: syz [ 171.294845][ T4325] usb 5-1: Manufacturer: syz [ 171.304619][ T5633] Memory cgroup stats for /syz1/test [ 171.318312][ T4325] usb 5-1: SerialNumber: syz [ 171.329423][ T5633] : [ 171.331527][ T5633] anon 0 [ 171.331527][ T5633] file 0 [ 171.331527][ T5633] kernel 4096 [ 171.331527][ T5633] kernel_stack 0 [ 171.331527][ T5633] pagetables 0 [ 171.331527][ T5633] sec_pagetables 0 [ 171.331527][ T5633] percpu 0 [ 171.331527][ T5633] sock 0 [ 171.331527][ T5633] vmalloc 0 [ 171.331527][ T5633] shmem 0 [ 171.331527][ T5633] zswap 0 [ 171.331527][ T5633] zswapped 0 [ 171.331527][ T5633] file_mapped 0 [ 171.331527][ T5633] file_dirty 0 [ 171.331527][ T5633] file_writeback 0 [ 171.331527][ T5633] swapcached 4096 [ 171.331527][ T5633] anon_thp 0 [ 171.331527][ T5633] file_thp 0 [ 171.331527][ T5633] shmem_thp 0 [ 171.331527][ T5633] inactive_anon 0 [ 171.331527][ T5633] active_anon 0 [ 171.331527][ T5633] inactive_file 0 [ 171.331527][ T5633] active_file 0 [ 171.331527][ T5633] unevictable 0 [ 171.331527][ T5633] slab_reclaimable 384 [ 171.331527][ T5633] slab_unreclaimable 2272 [ 171.331527][ T5633] slab 2656 [ 171.331527][ T5633] workingset_refault_anon 0 [ 171.468997][ T5633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.341,pid=5632,uid=0 [ 171.502729][ T5633] Memory cgroup out of memory: Killed process 5633 (syz.1.341) total-vm:102244kB, anon-rss:1424kB, file-rss:22620kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 171.671405][ T4510] usb 5-1: USB disconnect, device number 8 [ 172.008637][ T5641] binder: 5640:5641 ioctl c0306201 200000000080 returned -14 [ 172.027230][ T5641] binder: 5640:5641 ioctl c0306201 0 returned -14 [ 172.536791][ T4325] nvmet: connect request for invalid subsystem testnq! [ 172.546092][ T5647] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnq" [ 172.944901][ T27] audit: type=1800 audit(1785919815.408:58): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.352" name="streaming_maxpacket" dev="configfs" ino=37505 res=0 errno=0 [ 172.988251][ T5650] loop1: detected capacity change from 0 to 32768 [ 173.109231][ T5660] ip_tables: iptables: counters copy to user failed while replacing table [ 173.149485][ T5650] XFS (loop1): Mounting V5 Filesystem [ 173.345593][ T5650] XFS (loop1): Ending clean mount [ 173.556520][ T4277] XFS (loop1): Unmounting Filesystem [ 173.700424][ T5670] binder: 5669:5670 ioctl c0306201 200000000080 returned -14 [ 173.746924][ T5670] binder: 5669:5670 ioctl c0306201 0 returned -14 [ 173.913961][ T27] audit: type=1800 audit(1785919816.378:59): pid=5672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.358" name="attr_allow_any_host" dev="configfs" ino=37524 res=0 errno=0 [ 174.522046][ T27] audit: type=1800 audit(1785919816.988:60): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.362" name="streaming_maxpacket" dev="configfs" ino=38296 res=0 errno=0 [ 174.603995][ T5686] ip_tables: iptables: counters copy to user failed while replacing table [ 175.036343][ T5697] binder: 5696:5697 ioctl c0306201 200000000080 returned -14 [ 175.077023][ T5697] binder: 5696:5697 ioctl c0306201 0 returned -14 [ 175.432084][ T5695] loop4: detected capacity change from 0 to 32768 [ 175.532282][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.562413][ T5695] XFS (loop4): Mounting V5 Filesystem [ 175.575664][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.595267][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.886431][ T5695] XFS (loop4): Ending clean mount [ 176.143590][ T27] audit: type=1800 audit(1785919818.608:61): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.373" name="streaming_maxpacket" dev="configfs" ino=38345 res=0 errno=0 [ 176.211272][ T4275] XFS (loop4): Unmounting Filesystem [ 176.266218][ T5724] ip_tables: iptables: counters copy to user failed while replacing table [ 176.539726][ T5734] binder: 5732:5734 ioctl c0306201 200000000080 returned -14 [ 177.183035][ T5749] device syzkaller0 entered promiscuous mode [ 178.030342][ T5767] nvme_fcloop: unknown parameter or missing value 'lpw' [ 178.070166][ T27] audit: type=1800 audit(1785919820.538:62): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.386" name="streaming_maxpacket" dev="configfs" ino=38402 res=0 errno=0 [ 178.597384][ T5777] binder: 5776:5777 ioctl c0306201 200000000080 returned -14 [ 178.681516][ T5763] loop0: detected capacity change from 0 to 32768 [ 178.833323][ T5763] XFS (loop0): Mounting V5 Filesystem [ 178.997957][ T5763] XFS (loop0): Ending clean mount [ 179.115534][ T4507] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 179.244150][ T4282] XFS (loop0): Unmounting Filesystem [ 179.349318][ T4507] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.386927][ T4507] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.405593][ T4507] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.418083][ T4507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.433070][ T4507] usb 2-1: config 0 descriptor?? [ 179.495533][ T4507] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 179.681952][ T4510] usb 2-1: USB disconnect, device number 2 [ 180.316299][ T4510] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 180.559010][ T4510] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 180.591874][ T4510] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 180.615158][ T4510] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.649575][ T4510] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 180.669781][ T4510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.689012][ T4510] usb 2-1: Product: syz [ 180.695265][ T4510] usb 2-1: Manufacturer: syz [ 180.702651][ T4510] usb 2-1: SerialNumber: syz [ 180.931496][ T4322] usb 2-1: USB disconnect, device number 3 [ 181.269331][ T5799] loop0: detected capacity change from 0 to 65536 [ 181.371439][ T5799] XFS (loop0): Mounting V5 Filesystem [ 181.505199][ T5799] XFS (loop0): Ending clean mount [ 181.530524][ T5799] XFS (loop0): Quotacheck needed: Please wait. [ 181.560106][ T4510] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x8002 [ 181.624795][ T4510] XFS (loop0): Unmount and run xfs_repair [ 181.656107][ T5809] nvme_fcloop: unknown parameter or missing value 'lpw' [ 181.656922][ T4510] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 181.682019][ T4510] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 181.696411][ T4510] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 181.717545][ T4510] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 181.731269][ T4510] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 181.765447][ T4510] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 181.792628][ T4510] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 181.806587][ T4510] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 181.834256][ T4510] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 181.847998][ T11] XFS (loop0): metadata I/O error in "xfs_read_agi+0x2a2/0x660" at daddr 0x8002 len 1 error 74 [ 181.872476][ T4507] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 181.916277][ T4507] XFS (loop0): Unmount and run xfs_repair [ 181.936745][ T4507] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 181.987844][ T4507] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 182.012834][ T4507] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 182.033459][ T27] audit: type=1800 audit(1785919824.468:63): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.397" name="streaming_maxpacket" dev="configfs" ino=38445 res=0 errno=0 [ 182.055955][ T4507] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 182.129348][ T4507] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 182.142835][ T4507] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 182.155019][ T4507] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 182.168212][ T4507] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.187926][ T4507] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.212453][ T4305] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 182.247802][ T5799] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 182.416832][ T4510] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 182.443453][ T4510] XFS (loop0): Unmount and run xfs_repair [ 182.457336][ T4510] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 182.466372][ T4510] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 182.478374][ T4510] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 182.493954][ T4510] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 182.512598][ T4510] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 182.538748][ T4510] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 182.580830][ T4510] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 182.631961][ T4510] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.655436][ T4510] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.677559][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 182.698637][ T11] XFS (loop0): page discard on page ffffea00014a7640, inode 0x2a, pos 64512. [ 182.714184][ T4510] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 182.728182][ T4510] XFS (loop0): Unmount and run xfs_repair [ 182.737055][ T4510] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 182.746063][ T4510] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 182.758797][ T4510] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 182.771570][ T4510] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 182.794081][ T4510] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 182.815476][ T4510] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 182.835913][ T4510] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 182.846380][ T4510] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.866786][ T4510] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.882137][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 182.896309][ T11] XFS (loop0): page discard on page ffffea00014a7600, inode 0x2a, pos 65536. [ 182.912471][ T4282] XFS (loop0): Unmounting Filesystem [ 182.976488][ T5818] binder: 5817:5818 ioctl c0306201 200000000080 returned -14 [ 183.942160][ T5833] nvme_fcloop: unknown parameter or missing value 'lpwwpn' [ 184.137227][ T27] audit: type=1800 audit(1785919826.608:64): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.407" name="streaming_maxpacket" dev="configfs" ino=37685 res=0 errno=0 [ 184.372061][ T5843] binder: 5842:5843 ioctl c0306201 200000000080 returned -14 [ 184.530348][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.564536][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.632409][ T5848] syz.1.412 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 184.677725][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.688235][ T5848] CPU: 1 PID: 5848 Comm: syz.1.412 Not tainted syzkaller #0 [ 184.688909][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.688923][ T5848] Call Trace: [ 184.688932][ T5848] [ 184.688943][ T5848] dump_stack_lvl+0x188/0x24e [ 184.688978][ T5848] ? ___ratelimit+0x14e/0x610 [ 184.689014][ T5848] ? show_regs_print_info+0x12/0x12 [ 184.689045][ T5848] ? load_image+0x410/0x410 [ 184.689066][ T5848] ? ___ratelimit+0x474/0x610 [ 184.719944][ T5848] ? radix_tree_cpu_dead+0x160/0x160 [ 184.761457][ T5848] dump_header+0xd8/0x820 [ 184.765114][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.768986][ T5848] oom_kill_process+0x361/0x550 [ 184.769027][ T5848] out_of_memory+0xe25/0x1220 [ 184.791695][ T5848] ? print_unlock_imbalance_bug+0x160/0x160 [ 184.800870][ T5848] ? mutex_lock_nested+0x10/0x10 [ 184.808289][ T5848] ? unregister_oom_notifier+0x20/0x20 [ 184.816114][ T5848] mem_cgroup_out_of_memory+0x2c0/0x390 [ 184.823833][ T5848] ? mem_cgroup_oom_trylock+0x210/0x210 [ 184.834043][ T5848] ? do_raw_spin_unlock+0x11d/0x230 [ 184.842467][ T5848] try_charge_memcg+0xc9d/0x17c0 [ 184.849160][ T5848] ? percpu_ref_put+0x180/0x180 [ 184.855681][ T5848] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 184.863151][ T5848] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.871214][ T5848] ? percpu_ref_tryget+0x15/0x180 [ 184.871263][ T5848] ? percpu_ref_tryget+0x15/0x180 [ 184.871313][ T5848] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 184.895861][ T5848] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 184.895909][ T5848] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 184.895944][ T5848] obj_cgroup_charge+0x36a/0x620 [ 184.895980][ T5848] ? obj_cgroup_charge+0xe9/0x620 [ 184.896004][ T5848] ? mod_objcg_mlstate+0x320/0x320 [ 184.912651][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.916823][ T5848] ? get_obj_cgroup_from_current+0xd0/0x280 [ 184.916863][ T5848] ? get_obj_cgroup_from_current+0xd0/0x280 [ 184.916897][ T5848] slab_pre_alloc_hook+0x2e2/0x300 [ 184.961167][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.964078][ T5848] ? _raw_spin_unlock_irq+0x2a/0x40 [ 184.981714][ T5848] ? copy_ipcs+0x12e/0x500 [ 184.986750][ T5848] __kmem_cache_alloc_node+0x4f/0x270 [ 184.997344][ T5848] ? copy_ipcs+0x12e/0x500 [ 185.002736][ T5848] kmalloc_trace+0x26/0xe0 [ 185.008313][ T5848] copy_ipcs+0x12e/0x500 [ 185.014075][ T5848] create_new_namespaces+0x212/0x700 [ 185.020835][ T5848] unshare_nsproxy_namespaces+0x116/0x160 [ 185.025570][ T5118] device veth0_vlan entered promiscuous mode [ 185.027341][ T5848] ksys_unshare+0x4f6/0x8e0 [ 185.039721][ T5848] ? sighand_ctor+0x40/0x40 [ 185.044626][ T5848] ? lock_chain_count+0x20/0x20 [ 185.050179][ T5848] ? syscall_enter_from_user_mode+0x21/0x80 [ 185.050224][ T5848] __x64_sys_unshare+0x34/0x40 [ 185.050250][ T5848] do_syscall_64+0x4c/0xa0 [ 185.063232][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 185.074360][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 185.074427][ T5848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.087717][ T5848] RIP: 0033:0x7f0c1879e019 [ 185.087770][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.087788][ T5848] RSP: 002b:00007f0c195d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 185.118775][ T5848] RAX: ffffffffffffffda RBX: 00007f0c18a25fa0 RCX: 00007f0c1879e019 [ 185.118801][ T5848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 185.118815][ T5848] RBP: 00007f0c1883500c R08: 0000000000000000 R09: 0000000000000000 [ 185.118828][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.118842][ T5848] R13: 00007f0c18a26038 R14: 00007f0c18a25fa0 R15: 00007ffd4b3bf7c8 [ 185.138996][ T5848] [ 185.225819][ T5848] memory: usage 4kB, limit 8kB, failcnt 59 [ 185.233412][ T5848] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 185.278330][ T5118] device veth1_vlan entered promiscuous mode [ 185.305522][ T5848] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 185.361920][ T5848] Memory cgroup stats for /syz1/test: [ 185.362091][ T5848] anon 0 [ 185.362091][ T5848] file 0 [ 185.362091][ T5848] kernel 4096 [ 185.362091][ T5848] kernel_stack 0 [ 185.362091][ T5848] pagetables 0 [ 185.362091][ T5848] sec_pagetables 0 [ 185.362091][ T5848] percpu 0 [ 185.362091][ T5848] sock 0 [ 185.362091][ T5848] vmalloc 0 [ 185.362091][ T5848] shmem 0 [ 185.362091][ T5848] zswap 0 [ 185.362091][ T5848] zswapped 0 [ 185.362091][ T5848] file_mapped 0 [ 185.362091][ T5848] file_dirty 0 [ 185.362091][ T5848] file_writeback 0 [ 185.362091][ T5848] swapcached 4096 [ 185.362091][ T5848] anon_thp 0 [ 185.362091][ T5848] file_thp 0 [ 185.362091][ T5848] shmem_thp 0 [ 185.362091][ T5848] inactive_anon 0 [ 185.362091][ T5848] active_anon 0 [ 185.362091][ T5848] inactive_file 0 [ 185.362091][ T5848] active_file 0 [ 185.362091][ T5848] unevictable 0 [ 185.362091][ T5848] slab_reclaimable 0 [ 185.362091][ T5848] slab_unreclaimable 112 [ 185.362091][ T5848] slab 112 [ 185.362091][ T5848] workingset_refault_anon 0 [ 185.536009][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.583976][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.678953][ T5858] nvme_fcloop: unknown parameter or missing value 'lpwwpn' [ 185.704182][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.746397][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.793590][ T5118] device veth0_macvtap entered promiscuous mode [ 185.849440][ T5118] device veth1_macvtap entered promiscuous mode [ 185.924222][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.971138][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.992688][ T5873] device-mapper: ioctl: unable to find target [ 186.018075][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.048037][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.076980][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.097302][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.110986][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.147550][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.189652][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.241528][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.282686][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.326444][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.359696][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.386839][ T5878] binder: 5877:5878 ioctl c0306201 200000000080 returned -14 [ 186.398915][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.435379][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.455410][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.472227][ T5848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.412,pid=5847,uid=0 [ 186.500136][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.521478][ T5848] Memory cgroup out of memory: Killed process 5848 (syz.1.412) total-vm:102244kB, anon-rss:1424kB, file-rss:22608kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 186.552911][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.581244][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.617318][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.665535][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.719099][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.771884][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.817556][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.878472][ T5118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.893553][ T27] audit: type=1800 audit(1785919829.358:65): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.422" name="zoned" dev="configfs" ino=38619 res=0 errno=0 [ 186.919184][ T5118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.026240][ T5118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.036397][ T27] audit: type=1800 audit(1785919829.358:66): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.422" name="memory_backed" dev="configfs" ino=38620 res=0 errno=0 [ 187.036446][ T27] audit: type=1800 audit(1785919829.408:67): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.422" name="zone_nr_conv" dev="configfs" ino=38621 res=0 errno=0 [ 187.036483][ T27] audit: type=1800 audit(1785919829.408:68): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.422" name="power" dev="configfs" ino=38622 res=0 errno=0 [ 187.153992][ T5118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.627814][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.702891][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.845045][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.038771][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.041070][ T5912] nvme_fcloop: unknown parameter or missing value 'lpwwpn' [ 188.136349][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.180913][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.464125][ T5919] overlayfs: upper fs does not support file handles, falling back to index=off. [ 188.691575][ T5930] binder: 5927:5930 ioctl c0306201 200000000080 returned -14 [ 188.726053][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.761972][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.795030][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.826538][ T5926] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 189.783353][ T5957] nvme_fcloop: unknown parameter or missing value 'lpwwpn=' [ 190.219387][ T5966] binder: 5965:5966 ioctl c0306201 200000000080 returned -14 [ 190.273619][ T5966] binder: 5965:5966 ioctl c0306201 2000000003c0 returned -14 [ 190.283836][ T5939] loop4: detected capacity change from 0 to 16 [ 190.303651][ T5966] binder: 5965:5966 ioctl c0306201 0 returned -14 [ 190.399927][ T5939] erofs: (device loop4): mounted with root inode @ nid 36. [ 190.577156][ T5939] syz.4.436: attempt to access beyond end of device [ 190.577156][ T5939] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 190.662452][ T5939] syz.4.436: attempt to access beyond end of device [ 190.662452][ T5939] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 190.739656][ T5939] syz.4.436: attempt to access beyond end of device [ 190.739656][ T5939] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 190.827750][ T27] audit: type=1800 audit(1785919833.298:69): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.436" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 191.351307][ T5960] loop3: detected capacity change from 0 to 32768 [ 191.463466][ T5960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.443 (5960) [ 191.573230][ T5960] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.625482][ T5960] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 191.686297][ T5960] BTRFS info (device loop3): allowing degraded mounts [ 191.765564][ T5960] BTRFS info (device loop3): turning on flush-on-commit [ 191.827632][ T5960] BTRFS info (device loop3): max_inline at 0 [ 191.856188][ T5960] BTRFS info (device loop3): setting nodatasum [ 191.890080][ T5960] BTRFS info (device loop3): turning on sync discard [ 191.926916][ T5960] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 192.048477][ T5960] BTRFS info (device loop3): trying to use backup root at mount time [ 192.118752][ T5960] BTRFS info (device loop3): using free space tree [ 192.406191][ T5960] BTRFS info (device loop3): enabling ssd optimizations [ 192.458197][ T6031] binder: 6030:6031 ioctl c0306201 200000000080 returned -14 [ 192.471298][ T6029] fuse: Bad value for 'fd' [ 192.479662][ T6031] binder: 6030:6031 ioctl c0306201 2000000003c0 returned -14 [ 192.577623][ T6032] binder: 6030:6032 ioctl c0306201 0 returned -14 [ 192.765156][ T6038] device-mapper: ioctl: name not supplied when creating device [ 193.137120][ T6045] fuse: root generation should be zero [ 193.213533][ T4286] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.113784][ T27] audit: type=1800 audit(1785919836.578:70): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.469" name="zone_nr_conv" dev="configfs" ino=40074 res=0 errno=0 [ 194.556742][ T6083] device-mapper: ioctl: name not supplied when creating device [ 194.557168][ T6082] binder: 6079:6082 ioctl c0306201 200000000080 returned -14 [ 194.677995][ T6088] kAFS: Invalid Command on /proc/fs/afs/cells file [ 194.688309][ T6082] binder: 6079:6082 ioctl c0306201 2000000003c0 returned -14 [ 194.728621][ T6082] binder: 6079:6082 ioctl c0306201 0 returned -14 [ 195.022665][ T6093] bcache: register_bcache() error : failed to open device [ 195.317010][ T6066] loop5: detected capacity change from 0 to 32768 [ 195.382182][ T6066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.468 (6066) [ 195.520222][ T6066] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.609645][ T6066] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 195.685598][ T6066] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 195.765291][ T6066] BTRFS info (device loop5): trying to use backup root at mount time [ 195.818318][ T6066] BTRFS info (device loop5): using free space tree [ 195.861988][ T6114] ip_tables: iptables: counters copy to user failed while replacing table [ 196.022737][ T6125] device-mapper: ioctl: name not supplied when creating device [ 196.141066][ T4332] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 196.300484][ T6066] BTRFS warning (device loop5): couldn't read tree root [ 196.338559][ T6066] BTRFS warning (device loop5): try to load backup roots slot 1 [ 196.391279][ T6144] kAFS: Invalid Command on /proc/fs/afs/cells file [ 196.419541][ T6066] BTRFS info (device loop5): enabling ssd optimizations [ 196.461493][ T6066] BTRFS info (device loop5): rebuilding free space tree [ 196.792305][ T4325] yenta_cardbus 0000:00:00.0: no bus associated! (try 'pci=assign-busses') [ 196.917400][ T6059] BTRFS info (device loop5): balance: start -d -m [ 196.933556][ T6059] BTRFS info (device loop5): relocating block group 8519680 flags data|metadata [ 197.251408][ T6105] loop1: detected capacity change from 0 to 40427 [ 197.310049][ T6105] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x3ffff [ 197.751629][ T6059] BTRFS info (device loop5): balance: canceled [ 197.932835][ T5118] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.405030][ T6173] kAFS: Invalid Command on /proc/fs/afs/cells file [ 198.608719][ T6171] loop0: detected capacity change from 0 to 4096 [ 198.698792][ T6171] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 198.874358][ T6171] ntfs3: loop0: Failed to load $Extend. [ 199.169728][ T6183] device-mapper: ioctl: name not supplied when creating device [ 199.477107][ T6192] netlink: 'syz.1.508': attribute type 2 has an invalid length. [ 199.563698][ T6192] syz.1.508 uses obsolete (PF_INET,SOCK_PACKET) [ 199.638898][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.648915][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.152608][ T6187] zswap: compressor zs not available [ 200.590467][ T6220] kAFS: bad VL server IP address [ 200.716234][ T6222] socket: no more sockets [ 200.779143][ T6222] Failed to initialize the IGMP6 autojoin socket (err -23) [ 201.113116][ T6233] device-mapper: ioctl: name not supplied when creating device [ 201.947768][ T4325] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.076756][ T6261] kAFS: bad VL server IP address [ 202.098029][ T6263] nvme_fcloop: unknown parameter or missing value 'lpwwn' [ 202.198853][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.220446][ T4325] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.277564][ T4325] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 202.357303][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.382146][ T4325] usb 1-1: Product: syz [ 202.398428][ T6265] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 202.426137][ T4325] usb 1-1: Manufacturer: syz [ 202.445272][ T4325] usb 1-1: SerialNumber: syz [ 202.633977][ T6271] device-mapper: ioctl: name not supplied when creating device [ 202.799813][ T27] audit: type=1800 audit(1785919845.268:71): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.535" name="attr_allow_any_host" dev="configfs" ino=39262 res=0 errno=0 [ 202.892142][ T27] audit: type=1800 audit(1785919845.328:72): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.536" name="addr_trsvcid" dev="configfs" ino=39263 res=0 errno=0 [ 202.985736][ T4507] usb 1-1: USB disconnect, device number 6 [ 203.235550][ T4322] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.441682][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.481181][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.527264][ T4322] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.567976][ T6294] nvme_fcloop: unknown parameter or missing value 'lpwwn' [ 203.578659][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.631812][ T4322] usb 4-1: config 0 descriptor?? [ 203.820769][ T6298] kAFS: bad VL server IP address [ 203.902294][ T4322] usbhid 4-1:0.0: can't add hid device: -71 [ 203.927898][ T4322] usbhid: probe of 4-1:0.0 failed with error -71 [ 203.995607][ T4322] usb 4-1: USB disconnect, device number 7 [ 204.008350][ T27] audit: type=1800 audit(1785919846.478:73): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.544" name="size" dev="configfs" ino=39297 res=0 errno=0 [ 204.455411][ T4322] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.673303][ T4322] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 204.715501][ T4322] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 204.776228][ T4322] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.858110][ T4322] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 204.889673][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.918040][ T4322] usb 4-1: Product: syz [ 204.936137][ T4322] usb 4-1: Manufacturer: syz [ 204.967289][ T4322] usb 4-1: SerialNumber: syz [ 205.216199][ T4322] usb 4-1: USB disconnect, device number 8 [ 205.300755][ T6329] nvme_fcloop: unknown parameter or missing value 'lpwwnn=' [ 205.700990][ T6342] syz.5.558 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 205.705975][ T130] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 205.745528][ T6342] CPU: 0 PID: 6342 Comm: syz.5.558 Not tainted syzkaller #0 [ 205.755307][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.767078][ T6342] Call Trace: [ 205.771374][ T6342] [ 205.775848][ T6342] dump_stack_lvl+0x188/0x24e [ 205.781764][ T6342] ? ___ratelimit+0x14e/0x610 [ 205.787257][ T6342] ? show_regs_print_info+0x12/0x12 [ 205.792932][ T6342] ? load_image+0x410/0x410 [ 205.799938][ T6342] ? ___ratelimit+0x474/0x610 [ 205.805299][ T6342] ? radix_tree_cpu_dead+0x160/0x160 [ 205.814171][ T6342] dump_header+0xd8/0x820 [ 205.821481][ T6342] oom_kill_process+0x361/0x550 [ 205.830113][ T6342] out_of_memory+0xe25/0x1220 [ 205.838294][ T6342] ? print_unlock_imbalance_bug+0x160/0x160 [ 205.847913][ T6342] ? mutex_lock_nested+0x10/0x10 [ 205.856603][ T6342] ? unregister_oom_notifier+0x20/0x20 [ 205.864362][ T6342] mem_cgroup_out_of_memory+0x2c0/0x390 [ 205.871477][ T6342] ? mem_cgroup_oom_trylock+0x210/0x210 [ 205.878038][ T6342] ? do_raw_spin_unlock+0x11d/0x230 [ 205.884100][ T6342] try_charge_memcg+0xc9d/0x17c0 [ 205.889416][ T6342] ? percpu_ref_put+0x180/0x180 [ 205.898161][ T6342] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 205.909050][ T6342] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 205.919492][ T6342] ? percpu_ref_tryget+0x15/0x180 [ 205.926779][ T6342] ? percpu_ref_tryget+0x15/0x180 [ 205.932481][ T6342] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 205.938955][ T6342] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 205.950497][ T6342] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 205.959423][ T6342] obj_cgroup_charge+0x36a/0x620 [ 205.970604][ T6342] ? obj_cgroup_charge+0xe9/0x620 [ 205.974323][ T130] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.980146][ T6342] ? mod_objcg_mlstate+0x320/0x320 [ 205.980188][ T6342] ? percpu_ref_tryget+0x15/0x180 [ 205.980222][ T6342] ? get_obj_cgroup_from_current+0xd0/0x280 [ 205.980259][ T6342] slab_pre_alloc_hook+0x2e2/0x300 [ 206.027748][ T6342] ? alloc_fs_context+0x63/0x7d0 [ 206.035517][ T6342] __kmem_cache_alloc_node+0x4f/0x270 [ 206.044192][ T6342] ? alloc_fs_context+0x63/0x7d0 [ 206.049564][ T6342] kmalloc_trace+0x26/0xe0 [ 206.056347][ T6342] alloc_fs_context+0x63/0x7d0 [ 206.060666][ T130] usb 1-1: not running at top speed; connect to a high speed hub [ 206.062322][ T6342] ? __se_sys_fsopen+0x91/0x2c0 [ 206.085624][ T6342] ? __kmem_cache_free+0xb6/0x200 [ 206.091351][ T6342] __se_sys_fsopen+0xa0/0x2c0 [ 206.098813][ T6342] do_syscall_64+0x4c/0xa0 [ 206.104669][ T6342] ? clear_bhb_loop+0x60/0xb0 [ 206.113361][ T6342] ? clear_bhb_loop+0x60/0xb0 [ 206.120347][ T6342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.127622][ T6342] RIP: 0033:0x7f322479e019 [ 206.134757][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.160488][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 206.164951][ T6342] RSP: 002b:00007f32256ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 206.164987][ T6342] RAX: ffffffffffffffda RBX: 00007f3224a25fa0 RCX: 00007f322479e019 [ 206.165004][ T6342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 206.165150][ T6342] RBP: 00007f322483500c R08: 0000000000000000 R09: 0000000000000000 [ 206.165166][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.232597][ T6342] R13: 00007f3224a26038 R14: 00007f3224a25fa0 R15: 00007fffabbc3b58 [ 206.243229][ T6342] [ 206.317024][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 206.390220][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 206.429308][ T130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 206.469524][ T130] usb 1-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 206.494917][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.533781][ T130] usb 1-1: Product: syz [ 206.548593][ T6354] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.570896][ T130] usb 1-1: Manufacturer: syz [ 206.578821][ T130] usb 1-1: SerialNumber: syz [ 206.617620][ T6335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.636174][ T6335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.841976][ T6354] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 206.867316][ T130] usb 1-1: Unknown version 0x0000 [ 206.945598][ T130] usb 1-1: USB disconnect, device number 7 [ 206.955881][ T6354] device-mapper: ioctl: error adding target to table [ 207.076978][ T6342] memory: usage 0kB, limit 0kB, failcnt 59 [ 207.084038][ T6342] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 207.187172][ T6342] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 207.245571][ T6342] Memory cgroup stats for /syz5/test: [ 207.245756][ T6342] anon 0 [ 207.245756][ T6342] file 0 [ 207.245756][ T6342] kernel 0 [ 207.245756][ T6342] kernel_stack 0 [ 207.245756][ T6342] pagetables 0 [ 207.245756][ T6342] sec_pagetables 0 [ 207.245756][ T6342] percpu 0 [ 207.245756][ T6342] sock 0 [ 207.245756][ T6342] vmalloc 0 [ 207.245756][ T6342] shmem 0 [ 207.245756][ T6342] zswap 0 [ 207.245756][ T6342] zswapped 0 [ 207.245756][ T6342] file_mapped 0 [ 207.245756][ T6342] file_dirty 0 [ 207.245756][ T6342] file_writeback 0 [ 207.245756][ T6342] swapcached 0 [ 207.245756][ T6342] anon_thp 0 [ 207.245756][ T6342] file_thp 0 [ 207.245756][ T6342] shmem_thp 0 [ 207.245756][ T6342] inactive_anon 0 [ 207.245756][ T6342] active_anon 0 [ 207.245756][ T6342] inactive_file 0 [ 207.245756][ T6342] active_file 0 [ 207.245756][ T6342] unevictable 0 [ 207.245756][ T6342] slab_reclaimable 0 [ 207.245756][ T6342] slab_unreclaimable 0 [ 207.245756][ T6342] slab 0 [ 207.245756][ T6342] workingset_refault_anon 0 [ 207.764677][ T6342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.558,pid=6340,uid=0 [ 207.859777][ T6342] Memory cgroup out of memory: Killed process 6340 (syz.5.558) total-vm:102376kB, anon-rss:1400kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 208.657959][ T6365] loop4: detected capacity change from 0 to 32768 [ 208.725191][ T6365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.566 (6365) [ 208.967738][ T6365] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.023617][ T6365] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 209.095061][ T6365] BTRFS info (device loop4): using free space tree [ 209.627078][ T6365] BTRFS info (device loop4): enabling ssd optimizations [ 209.636371][ T130] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 209.819363][ T130] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.846240][ T130] usb 4-1: not running at top speed; connect to a high speed hub [ 209.915520][ T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 210.015479][ T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 210.099446][ T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 210.174354][ T130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 210.188537][ T6431] BTRFS info (device loop4): balance: start -dconvert=raid0 -mconvert=raid0 [ 210.219570][ T130] usb 4-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 210.241646][ T6398] loop1: detected capacity change from 0 to 32768 [ 210.297465][ T6398] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.573 (6398) [ 210.317417][ T130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.375484][ T130] usb 4-1: Product: syz [ 210.380824][ T130] usb 4-1: Manufacturer: syz [ 210.419562][ T130] usb 4-1: SerialNumber: syz [ 210.432243][ T6431] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 210.481693][ T6411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.527932][ T6411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.621590][ T6437] socket: no more sockets [ 210.789133][ T6431] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 210.793643][ T130] usb 4-1: Unknown version 0x0000 [ 210.873717][ T130] usb 4-1: USB disconnect, device number 9 [ 211.006430][ T4440] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4440) [ 211.037986][ T6431] BTRFS info (device loop4): balance: canceled [ 211.353772][ T4275] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.909149][ T27] audit: type=1800 audit(1785919854.378:74): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.586" name="zone_nr_conv" dev="configfs" ino=40558 res=0 errno=0 [ 211.965716][ T4295] Bluetooth: hci3: command 0x0406 tx timeout [ 211.974697][ T4295] Bluetooth: hci0: command 0x0406 tx timeout [ 211.982214][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 211.990970][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 214.475577][ T2166] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.705890][ T2166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.756778][ T2166] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.823717][ T6529] fuse: Bad value for 'group_id' [ 214.825685][ T2166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.926151][ T2166] usb 4-1: config 0 descriptor?? [ 215.170922][ T2166] usbhid 4-1:0.0: can't add hid device: -71 [ 215.197060][ T2166] usbhid: probe of 4-1:0.0 failed with error -71 [ 215.245834][ T2166] usb 4-1: USB disconnect, device number 10 [ 215.261583][ T6538] overlayfs: upper fs does not support file handles, falling back to index=off. [ 215.627005][ T6546] binder: 6545:6546 ioctl c0306201 200000000080 returned -14 [ 215.684732][ T6546] binder: BINDER_SET_CONTEXT_MGR already set [ 215.744045][ T6546] binder: 6545:6546 ioctl 4018620d 200000000040 returned -16 [ 215.808943][ T6548] binder: 6545:6548 ioctl c0306201 2000000003c0 returned -14 [ 216.248406][ T6559] jffs2: notice: (6559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 216.271287][ T27] audit: type=1800 audit(1785919858.738:75): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.618" name="addr_trtype" dev="configfs" ino=39570 res=0 errno=0 [ 216.349030][ T6560] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 216.376436][ T27] audit: type=1800 audit(1785919858.778:76): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.618" name="addr_traddr" dev="configfs" ino=39571 res=0 errno=0 [ 216.532292][ T27] audit: type=1800 audit(1785919858.778:77): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.618" name="addr_trsvcid" dev="configfs" ino=39574 res=0 errno=0 [ 216.700904][ T27] audit: type=1800 audit(1785919858.778:78): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.618" name="addr_adrfam" dev="configfs" ino=39575 res=0 errno=0 [ 216.877189][ T6570] syz.5.621 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 216.898199][ T94] nvmet: connect request for invalid subsystem t! [ 216.957208][ T6560] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 216.988437][ T6560] nvme nvme0: failed to connect queue: 0 ret=16770 [ 217.035621][ T6570] CPU: 0 PID: 6570 Comm: syz.5.621 Not tainted syzkaller #0 [ 217.045684][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.061257][ T6570] Call Trace: [ 217.064770][ T6570] [ 217.068539][ T6570] dump_stack_lvl+0x188/0x24e [ 217.074532][ T6570] ? ___ratelimit+0x14e/0x610 [ 217.080901][ T6570] ? show_regs_print_info+0x12/0x12 [ 217.087979][ T6570] ? load_image+0x410/0x410 [ 217.093460][ T6570] ? ___ratelimit+0x474/0x610 [ 217.099504][ T6570] ? radix_tree_cpu_dead+0x160/0x160 [ 217.106894][ T6570] dump_header+0xd8/0x820 [ 217.114647][ T6570] oom_kill_process+0x361/0x550 [ 217.120492][ T6570] out_of_memory+0xe25/0x1220 [ 217.126920][ T6570] ? print_unlock_imbalance_bug+0x160/0x160 [ 217.135065][ T6570] ? mutex_lock_nested+0x10/0x10 [ 217.140695][ T6570] ? unregister_oom_notifier+0x20/0x20 [ 217.147779][ T6570] mem_cgroup_out_of_memory+0x2c0/0x390 [ 217.155319][ T6570] ? mem_cgroup_oom_trylock+0x210/0x210 [ 217.161630][ T6570] ? do_raw_spin_unlock+0x11d/0x230 [ 217.168526][ T6570] try_charge_memcg+0xc9d/0x17c0 [ 217.175032][ T6570] ? percpu_ref_put+0x180/0x180 [ 217.181462][ T6570] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 217.188927][ T6570] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.196341][ T6570] ? percpu_ref_tryget+0x15/0x180 [ 217.203145][ T6570] ? percpu_ref_tryget+0x15/0x180 [ 217.210732][ T6570] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 217.219974][ T6570] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 217.227391][ T6570] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 217.233835][ T6570] obj_cgroup_charge+0x36a/0x620 [ 217.239034][ T6570] ? obj_cgroup_charge+0xe9/0x620 [ 217.246524][ T6570] ? mod_objcg_mlstate+0x320/0x320 [ 217.254693][ T6570] ? percpu_ref_put+0x12/0x100 [ 217.261661][ T6570] ? percpu_ref_put+0x12/0x100 [ 217.269841][ T6570] slab_pre_alloc_hook+0x2e2/0x300 [ 217.275260][ T6570] ? slab_pre_alloc_hook+0xb1/0x300 [ 217.281574][ T6570] kmem_cache_alloc_lru+0x49/0x2e0 [ 217.287762][ T6570] ? sock_alloc_inode+0x24/0xc0 [ 217.293766][ T6570] sock_alloc_inode+0x24/0xc0 [ 217.299076][ T6570] ? sockfs_init_fs_context+0xa0/0xa0 [ 217.306702][ T6570] new_inode_pseudo+0x5f/0x1c0 [ 217.312899][ T6570] __sock_create+0x129/0x940 [ 217.318410][ T6570] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.326725][ T6570] __sys_socket+0xc4/0x190 [ 217.333035][ T6570] __x64_sys_socket+0x76/0x80 [ 217.338335][ T6570] do_syscall_64+0x4c/0xa0 [ 217.343237][ T6570] ? clear_bhb_loop+0x60/0xb0 [ 217.348934][ T6570] ? clear_bhb_loop+0x60/0xb0 [ 217.355261][ T6570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.362893][ T6570] RIP: 0033:0x7f322479e019 [ 217.368966][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.394509][ T6570] RSP: 002b:00007f32256ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 217.405755][ T6570] RAX: ffffffffffffffda RBX: 00007f3224a25fa0 RCX: 00007f322479e019 [ 217.415926][ T6570] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 217.424215][ T6570] RBP: 00007f322483500c R08: 0000000000000000 R09: 0000000000000000 [ 217.434411][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.443582][ T6570] R13: 00007f3224a26038 R14: 00007f3224a25fa0 R15: 00007fffabbc3b58 [ 217.452688][ T6570] [ 217.699246][ T6570] memory: usage 0kB, limit 0kB, failcnt 131 [ 217.725465][ T6570] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 217.775832][ T6570] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 217.785186][ T6570] Memory cgroup stats for /syz5/test: [ 217.805516][ T6570] anon 0 [ 217.805516][ T6570] file 0 [ 217.805516][ T6570] kernel 0 [ 217.805516][ T6570] kernel_stack 0 [ 217.805516][ T6570] pagetables 0 [ 217.805516][ T6570] sec_pagetables 0 [ 217.805516][ T6570] percpu 0 [ 217.805516][ T6570] sock 0 [ 217.805516][ T6570] vmalloc 0 [ 217.805516][ T6570] shmem 0 [ 217.805516][ T6570] zswap 0 [ 217.805516][ T6570] zswapped 0 [ 217.805516][ T6570] file_mapped 0 [ 217.805516][ T6570] file_dirty 0 [ 217.805516][ T6570] file_writeback 0 [ 217.805516][ T6570] swapcached 0 [ 217.805516][ T6570] anon_thp 0 [ 217.805516][ T6570] file_thp 0 [ 217.805516][ T6570] shmem_thp 0 [ 217.805516][ T6570] inactive_anon 0 [ 217.805516][ T6570] active_anon 0 [ 217.805516][ T6570] inactive_file 0 [ 217.805516][ T6570] active_file 0 [ 217.805516][ T6570] unevictable 0 [ 217.805516][ T6570] slab_reclaimable 0 [ 217.805516][ T6570] slab_unreclaimable 0 [ 217.805516][ T6570] slab 0 [ 217.805516][ T6570] workingset_refault_anon 0 [ 218.191216][ T6591] binder: 6589:6591 ioctl c0306201 200000000080 returned -14 [ 218.252813][ T6591] binder: 6589:6591 ioctl c0306201 2000000003c0 returned -14 [ 218.853324][ T6601] loop1: detected capacity change from 0 to 32768 [ 218.883113][ T6601] JBD2: Ignoring recovery information on journal [ 218.943127][ T6601] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 218.969836][ T4332] (kworker/u4:6,4332,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 219.074363][ T4332] (kworker/u4:6,4332,1):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 219.129045][ T4332] (kworker/u4:6,4332,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 219.276138][ T4277] ocfs2: Unmounting device (7,1) on (node local) [ 219.498997][ T6570] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.621,pid=6568,uid=0 [ 219.664144][ T6570] Memory cgroup out of memory: Killed process 6568 (syz.5.621) total-vm:102376kB, anon-rss:1404kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 219.740181][ T6592] loop4: detected capacity change from 0 to 32768 [ 219.893677][ T6592] JBD2: Ignoring recovery information on journal [ 220.023689][ T6598] loop3: detected capacity change from 0 to 40427 [ 220.060460][ T6592] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 220.111415][ T6598] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 220.192227][ T6598] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 220.251363][ T6598] F2FS-fs (loop3): build fault injection attr: rate: 6, type: 0x3ffff [ 220.296316][ T6598] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x3 [ 220.369361][ T6598] F2FS-fs (loop3): invalid crc value [ 220.425021][ T6598] F2FS-fs (loop3) : inject kmalloc in f2fs_kmalloc of f2fs_create_flush_cmd_control+0xf1/0x380 [ 220.509789][ T6598] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 220.675972][ T27] audit: type=1804 audit(1785919863.148:79): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.628" name="/newroot/149/file1/file1" dev="loop4" ino=17060 res=1 errno=0 [ 220.777522][ T6570] socket: no more sockets [ 220.840612][ T27] audit: type=1804 audit(1785919863.308:80): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.628" name="/newroot/149/file1/file1" dev="loop4" ino=17060 res=1 errno=0 [ 221.575464][ T6640] loop4: detected capacity change from 32768 to 64 [ 222.094420][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 222.094420][ T6617] loop4: rw=2049, sector=31104, nr_sectors = 1 limit=64 [ 222.158606][ T6617] Buffer I/O error on dev loop4, logical block 31104, lost async page write [ 222.201321][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 222.201321][ T6617] loop4: rw=2049, sector=31105, nr_sectors = 1 limit=64 [ 222.295139][ T6617] Buffer I/O error on dev loop4, logical block 31105, lost async page write [ 222.348917][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 222.348917][ T6617] loop4: rw=2049, sector=31106, nr_sectors = 1 limit=64 [ 222.434704][ T6617] Buffer I/O error on dev loop4, logical block 31106, lost async page write [ 222.520040][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 222.520040][ T6617] loop4: rw=2049, sector=31107, nr_sectors = 1 limit=64 [ 222.591145][ T6617] Buffer I/O error on dev loop4, logical block 31107, lost async page write [ 222.631793][ T6641] loop0: detected capacity change from 0 to 32768 [ 222.664586][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 222.664586][ T6617] loop4: rw=2049, sector=31108, nr_sectors = 1 limit=64 [ 222.695747][ T6641] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.641 (6641) [ 222.776774][ T6617] Buffer I/O error on dev loop4, logical block 31108, lost async page write [ 222.815470][ T6641] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.845402][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 222.845402][ T6617] loop4: rw=2049, sector=31109, nr_sectors = 1 limit=64 [ 222.886823][ T6641] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 222.913537][ T27] audit: type=1804 audit(1785919865.378:81): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.628" name="/newroot/149/file1/file1" dev="loop4" ino=17060 res=1 errno=0 [ 222.942492][ T6617] Buffer I/O error on dev loop4, logical block 31109, lost async page write [ 222.956792][ T6641] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 223.002563][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 223.002563][ T6617] loop4: rw=2049, sector=31110, nr_sectors = 1 limit=64 [ 223.034408][ T6641] BTRFS info (device loop0): trying to use backup root at mount time [ 223.068818][ T27] audit: type=1804 audit(1785919865.378:82): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.628" name="/newroot/149/file1/file1" dev="loop4" ino=17060 res=1 errno=0 [ 223.105745][ T6617] Buffer I/O error on dev loop4, logical block 31110, lost async page write [ 223.140088][ T6641] BTRFS info (device loop0): using free space tree [ 223.149261][ T6617] jbd2/loop4-75: attempt to access beyond end of device [ 223.149261][ T6617] loop4: rw=2049, sector=31111, nr_sectors = 1 limit=64 [ 223.252442][ T6617] Buffer I/O error on dev loop4, logical block 31111, lost async page write [ 223.281358][ T4275] syz-executor: attempt to access beyond end of device [ 223.281358][ T4275] loop4: rw=0, sector=17057, nr_sectors = 1 limit=64 [ 223.303938][ T4275] (syz-executor,4275,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 223.306223][ T6592] syz.4.628 (6592) used greatest stack depth: 18688 bytes left [ 223.318211][ T4275] syz-executor: attempt to access beyond end of device [ 223.318211][ T4275] loop4: rw=0, sector=17057, nr_sectors = 1 limit=64 [ 223.344647][ T4275] (syz-executor,4275,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 223.384914][ T6617] Buffer I/O error on dev loop4, logical block 31112, lost async page write [ 223.397818][ T6617] Buffer I/O error on dev loop4, logical block 31113, lost async page write [ 223.452474][ T4332] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 223.476798][ T6617] Aborting journal on device loop4-75. [ 223.487386][ T6617] JBD2: I/O error when updating journal superblock for loop4-75. [ 223.497746][ T6617] JBD2: Detected IO errors while flushing file data on loop4-75 [ 223.497846][ T6641] BTRFS warning (device loop0): couldn't read tree root [ 223.558820][ T6617] JBD2: Detected IO errors while flushing file data on loop4-75 [ 223.568099][ T40] (kworker/u4:2,40,1):__ocfs2_flush_truncate_log:6033 ERROR: status = -5 [ 223.595614][ T6641] BTRFS warning (device loop0): try to load backup roots slot 1 [ 223.645760][ T40] (kworker/u4:2,40,1):ocfs2_truncate_log_worker:6091 ERROR: status = -5 [ 223.701490][ T6641] BTRFS info (device loop0): enabling ssd optimizations [ 223.748152][ T6641] BTRFS info (device loop0): rebuilding free space tree [ 224.036763][ T6654] loop1: detected capacity change from 0 to 32768 [ 224.132283][ T6654] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.646 (6654) [ 224.341673][ T4282] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.527757][ T4275] (syz-executor,4275,0):__ocfs2_flush_truncate_log:6033 ERROR: status = -5 [ 224.672409][ T4275] (syz-executor,4275,0):ocfs2_sync_fs:404 ERROR: status = -5 [ 224.786490][ T4275] (syz-executor,4275,0):ocfs2_start_trans:381 ERROR: status = -30 [ 224.831345][ T4440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4440) [ 224.905637][ T4275] OCFS2: abort (device loop4): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 224.995456][ T4275] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 225.065468][ T4275] OCFS2: File system is now read-only. [ 225.100490][ T4275] (syz-executor,4275,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 225.165095][ T4275] (syz-executor,4275,0):__ocfs2_flush_truncate_log:6033 ERROR: status = -5 [ 225.221756][ T4275] (syz-executor,4275,0):ocfs2_truncate_log_shutdown:6322 ERROR: status = -5 [ 225.324748][ T4275] (syz-executor,4275,0):ocfs2_write_block:78 ERROR: status = -5 [ 225.425534][ T4275] (syz-executor,4275,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 225.486220][ T4275] (syz-executor,4275,0):ocfs2_put_slot:517 ERROR: status = -5 [ 225.529848][ T4275] (syz-executor,4275,0):ocfs2_journal_shutdown:1075 ERROR: status = -5 [ 225.615054][ T4275] journal_release_journal_head: freeing b_frozen_data [ 225.660208][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 225.693167][ T4673] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.042637][ T6693] device syzkaller0 entered promiscuous mode [ 226.967397][ T6725] file system registered [ 227.104581][ T6725] ffs_data_put(): freeing [ 228.047385][ T6738] nvme nvme0: failed to connect socket: -111 [ 228.155013][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.196526][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.227053][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.262726][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.273813][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.285833][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.559370][ T6734] loop1: detected capacity change from 0 to 32768 [ 228.621882][ T6734] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.655591][ T6734] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 228.669556][ T6734] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 228.725253][ T6734] BTRFS info (device loop1): trying to use backup root at mount time [ 228.745879][ T6734] BTRFS info (device loop1): using free space tree [ 228.874467][ T4346] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 228.905812][ T6734] BTRFS warning (device loop1): couldn't read tree root [ 228.924941][ T6734] BTRFS warning (device loop1): try to load backup roots slot 1 [ 229.118024][ T6734] BTRFS info (device loop1): enabling ssd optimizations [ 229.149777][ T6734] BTRFS info (device loop1): rebuilding free space tree [ 229.198539][ T6772] fuse: Unknown parameter 'grou00000000000000000000' [ 229.794406][ T4277] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.360011][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 232.444094][ T4295] Bluetooth: hci0: command 0x041b tx timeout [ 232.890636][ T4673] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.948835][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.671'. [ 233.119873][ T4673] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.219621][ T27] audit: type=1800 audit(1785919875.688:83): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.682" name="streaming_maxpacket" dev="configfs" ino=40998 res=0 errno=0 [ 233.344108][ T4673] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.453892][ T6815] fuse: Unknown parameter 'group_i00000000000000000000' [ 233.517658][ T6814] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.578802][ T6814] device-mapper: table: 248:3: thin-pool: Error creating metadata object (-EIO) [ 233.588562][ T6814] device-mapper: ioctl: error adding target to table [ 233.955508][ T6803] loop1: detected capacity change from 0 to 32768 [ 233.992967][ T6803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.681 (6803) [ 234.074191][ T6803] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.142176][ T6803] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 234.225724][ T6803] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 234.305972][ T6803] BTRFS info (device loop1): trying to use backup root at mount time [ 234.365884][ T6803] BTRFS info (device loop1): using free space tree [ 234.508087][ T40] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 234.525565][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 234.597565][ T6803] BTRFS warning (device loop1): couldn't read tree root [ 234.615562][ T6803] BTRFS warning (device loop1): try to load backup roots slot 1 [ 234.668371][ T6742] chnl_net:caif_netlink_parms(): no params data found [ 234.704833][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.691'. [ 234.735109][ T6803] BTRFS info (device loop1): enabling ssd optimizations [ 234.747227][ T6855] nvme_fcloop: unknown parameter or missing value 'l' [ 234.813146][ T6803] BTRFS info (device loop1): rebuilding free space tree [ 235.257700][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.265171][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.314885][ T6742] device bridge_slave_0 entered promiscuous mode [ 235.323101][ T6873] fuse: Unknown parameter 'group_id00000000000000000000' [ 235.563924][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.597248][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.626632][ T6742] device bridge_slave_1 entered promiscuous mode [ 235.824856][ T4277] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.940715][ T27] audit: type=1800 audit(1785919878.408:84): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.701" name="streaming_maxpacket" dev="configfs" ino=41138 res=0 errno=0 [ 235.987596][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.013941][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.225106][ T4369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4369) [ 236.447465][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.5.702'. [ 236.595694][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 236.632659][ T6742] team0: Port device team_slave_0 added [ 236.753663][ T6901] fuse: Unknown parameter 'group_id00000000000000000000' [ 236.816263][ T6742] team0: Port device team_slave_1 added [ 236.857936][ T6903] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 236.904372][ T6903] device-mapper: ioctl: error adding target to table [ 237.139680][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.152615][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.286505][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.373937][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.412134][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.511558][ T27] audit: type=1800 audit(1785919879.978:85): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.714" name="zone_nr_conv" dev="configfs" ino=42063 res=0 errno=0 [ 237.575566][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.851770][ T6929] fuse: Unknown parameter 'group_id00000000000000000000' [ 238.052960][ T4673] device hsr_slave_0 left promiscuous mode [ 238.091114][ T4673] device hsr_slave_1 left promiscuous mode [ 238.117674][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.128591][ T6935] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 238.154031][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.190819][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.200416][ T6935] device-mapper: ioctl: error adding target to table [ 238.224784][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.259386][ T4673] device bridge_slave_1 left promiscuous mode [ 238.272775][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.324161][ T4673] device bridge_slave_0 left promiscuous mode [ 238.363060][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.576212][ T4673] device veth1_macvtap left promiscuous mode [ 238.583231][ T4673] device veth0_macvtap left promiscuous mode [ 238.634338][ T4673] device veth1_vlan left promiscuous mode [ 238.671928][ T4673] device veth0_vlan left promiscuous mode [ 238.928307][ T6963] syz.5.731 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 239.057355][ T6963] CPU: 1 PID: 6963 Comm: syz.5.731 Not tainted syzkaller #0 [ 239.067070][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.067187][ T6963] Call Trace: [ 239.067199][ T6963] [ 239.067209][ T6963] dump_stack_lvl+0x188/0x24e [ 239.078090][ T6963] ? ___ratelimit+0x14e/0x610 [ 239.078133][ T6963] ? show_regs_print_info+0x12/0x12 [ 239.102309][ T6963] ? load_image+0x410/0x410 [ 239.107158][ T6963] ? ___ratelimit+0x474/0x610 [ 239.112252][ T6963] ? radix_tree_cpu_dead+0x160/0x160 [ 239.112304][ T6963] dump_header+0xd8/0x820 [ 239.112339][ T6963] oom_kill_process+0x361/0x550 [ 239.130384][ T6963] out_of_memory+0xe25/0x1220 [ 239.135160][ T6963] ? mutex_lock_nested+0x10/0x10 [ 239.142509][ T6963] ? unregister_oom_notifier+0x20/0x20 [ 239.148782][ T6963] mem_cgroup_out_of_memory+0x2c0/0x390 [ 239.154762][ T6963] ? mem_cgroup_oom_trylock+0x210/0x210 [ 239.160495][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 239.166310][ T6963] try_charge_memcg+0xc9d/0x17c0 [ 239.172398][ T6963] ? percpu_ref_put+0x180/0x180 [ 239.177318][ T6963] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 239.183114][ T6963] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 239.189170][ T6963] ? percpu_ref_tryget+0x15/0x180 [ 239.194993][ T6963] ? percpu_ref_tryget+0x15/0x180 [ 239.200364][ T6963] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 239.206283][ T6963] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 239.214642][ T6963] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 239.221647][ T6963] obj_cgroup_charge+0x36a/0x620 [ 239.227194][ T6963] ? obj_cgroup_charge+0xe9/0x620 [ 239.232546][ T6963] ? mod_objcg_mlstate+0x320/0x320 [ 239.239129][ T6963] ? percpu_ref_tryget+0x15/0x180 [ 239.244498][ T6963] ? get_obj_cgroup_from_current+0xd0/0x280 [ 239.251124][ T6963] ? get_obj_cgroup_from_current+0xd0/0x280 [ 239.258413][ T6963] slab_pre_alloc_hook+0x2e2/0x300 [ 239.264993][ T6963] ? __split_vma+0x4f0/0x4f0 [ 239.269779][ T6963] kmem_cache_alloc+0x56/0x2f0 [ 239.269813][ T6963] ? vm_area_dup+0x23/0x1a0 [ 239.269842][ T6963] vm_area_dup+0x23/0x1a0 [ 239.279640][ T6963] __split_vma+0xb9/0x4f0 [ 239.279685][ T6963] do_mas_align_munmap+0x7b8/0x12d0 [ 239.279755][ T6963] ? do_mas_munmap+0x2b0/0x2b0 [ 239.289293][ T6963] ? mtree_range_walk+0x664/0x780 [ 239.289351][ T6963] ? mas_walk+0x15f/0x180 [ 239.300095][ T6963] ? mas_find+0x1ba/0x220 [ 239.300139][ T6963] do_mas_munmap+0x240/0x2b0 [ 239.300178][ T6963] mmap_region+0x7ab/0x1c50 [ 239.310368][ T6963] ? file_mmap_ok+0x170/0x170 [ 239.321230][ T6963] ? validate_mm+0x23f/0x2e0 [ 239.331294][ T6963] ? arch_get_unmapped_area+0x640/0x640 [ 239.342557][ T6963] ? cap_mmap_addr+0x153/0x2c0 [ 239.342641][ T6963] do_mmap+0x9ce/0x10d0 [ 239.351563][ T6963] ? mlock_future_check+0x100/0x100 [ 239.351603][ T6963] ? ima_file_mmap+0xf7/0x140 [ 239.362915][ T6963] ? ima_file_free+0x3e0/0x3e0 [ 239.363004][ T6963] vm_mmap_pgoff+0x1c1/0x2d0 [ 239.363049][ T6963] ? account_locked_vm+0xe0/0xe0 [ 239.373415][ T6963] ? ksys_mmap_pgoff+0xef/0x720 [ 239.383531][ T6963] ? lockdep_hardirqs_on+0x94/0x140 [ 239.383576][ T6963] do_syscall_64+0x4c/0xa0 [ 239.394668][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 239.394717][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 239.404244][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.404286][ T6963] RIP: 0033:0x7f322479e019 [ 239.414949][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.414976][ T6963] RSP: 002b:00007f32256ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 239.444140][ T6963] RAX: ffffffffffffffda RBX: 00007f3224a25fa0 RCX: 00007f322479e019 [ 239.444168][ T6963] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 239.460726][ T6963] RBP: 00007f322483500c R08: ffffffffffffffff R09: 0000000000000000 [ 239.460749][ T6963] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 239.460763][ T6963] R13: 00007f3224a26038 R14: 00007f3224a25fa0 R15: 00007fffabbc3b58 [ 239.460798][ T6963] [ 239.545459][ T6963] memory: usage 0kB, limit 0kB, failcnt 184 [ 239.552030][ T6963] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 239.608020][ T6963] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 239.641598][ T6963] Memory cgroup stats for /syz5/test: [ 239.642063][ T6963] anon 0 [ 239.642063][ T6963] file 0 [ 239.642063][ T6963] kernel 0 [ 239.642063][ T6963] kernel_stack 0 [ 239.642063][ T6963] pagetables 0 [ 239.642063][ T6963] sec_pagetables 0 [ 239.642063][ T6963] percpu 0 [ 239.642063][ T6963] sock 0 [ 239.642063][ T6963] vmalloc 0 [ 239.642063][ T6963] shmem 0 [ 239.642063][ T6963] zswap 0 [ 239.642063][ T6963] zswapped 0 [ 239.642063][ T6963] file_mapped 0 [ 239.642063][ T6963] file_dirty 0 [ 239.642063][ T6963] file_writeback 0 [ 239.642063][ T6963] swapcached 0 [ 239.642063][ T6963] anon_thp 0 [ 239.642063][ T6963] file_thp 0 [ 239.642063][ T6963] shmem_thp 0 [ 239.642063][ T6963] inactive_anon 0 [ 239.642063][ T6963] active_anon 0 [ 239.642063][ T6963] inactive_file 0 [ 239.642063][ T6963] active_file 0 [ 239.642063][ T6963] unevictable 0 [ 239.642063][ T6963] slab_reclaimable 0 [ 239.642063][ T6963] slab_unreclaimable 0 [ 239.642063][ T6963] slab 0 [ 239.642063][ T6963] workingset_refault_anon 0 [ 239.805037][ T6973] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 239.825754][ T6973] device-mapper: ioctl: error adding target to table [ 239.854138][ T6963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 239.864316][ T6963] ,cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.731,pid=6962,uid=0 [ 239.915881][ T6963] Memory cgroup out of memory: Killed process 6962 (syz.5.731) total-vm:102244kB, anon-rss:1404kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 240.221420][ T6985] Cannot find set identified by id 0 to match [ 241.134179][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 241.196805][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 241.265637][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.330755][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.837581][ T4673] bond0 (unregistering): Released all slaves [ 242.027818][ T6742] device hsr_slave_0 entered promiscuous mode [ 242.046099][ T6742] device hsr_slave_1 entered promiscuous mode [ 242.065879][ T6742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.084432][ T6742] Cannot create hsr debugfs directory [ 242.332174][ T6986] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.352556][ T6986] device syzkaller0 entered promiscuous mode [ 242.388468][ T7017] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 242.404121][ T7017] device-mapper: ioctl: error adding target to table [ 242.593644][ T7022] ip_tables: iptables: counters copy to user failed while replacing table [ 243.852203][ T7035] loop5: detected capacity change from 0 to 32768 [ 243.896032][ T7035] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 244.144614][ T4369] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 246.604336][ T7048] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 246.683955][ T7048] device-mapper: ioctl: error adding target to table [ 246.973694][ T6742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 247.070239][ T6742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.122128][ T6742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.199393][ T6742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.671432][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.750861][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.762399][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.788294][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.845221][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.879979][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.969876][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.977143][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.011807][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.054694][ T7082] device syzkaller0 entered promiscuous mode [ 248.103367][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.139043][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.168137][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.176424][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.204674][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.413861][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.466160][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.519764][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.575465][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.626335][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.680423][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.707947][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.749419][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.871824][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.899516][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.968199][ T6742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.495893][ T7129] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 249.504929][ T7129] device-mapper: ioctl: error adding target to table [ 249.625674][ T4464] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 249.805594][ T4464] usb 4-1: device descriptor read/64, error -71 [ 250.085505][ T4464] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 250.255823][ T4464] usb 4-1: device descriptor read/64, error -71 [ 250.332308][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.348071][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.386554][ T4464] usb usb4-port1: attempt power cycle [ 250.400913][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.776089][ T7164] fuse: Invalid rootmode [ 250.816406][ T4464] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 250.866188][ T4464] usb 4-1: device descriptor read/8, error -71 [ 251.124635][ T27] audit: type=1800 audit(1785919893.588:86): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.795" name="addr_trtype" dev="configfs" ino=42311 res=0 errno=0 [ 251.145718][ T4464] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 251.162946][ T7177] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 251.186735][ T7177] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 251.213321][ T27] audit: type=1800 audit(1785919893.658:87): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.795" name="addr_traddr" dev="configfs" ino=42312 res=0 errno=0 [ 251.237752][ T4464] usb 4-1: device descriptor read/8, error -71 [ 251.254229][ T7177] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 251.273951][ T7177] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 251.284470][ T27] audit: type=1800 audit(1785919893.708:88): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.796" name="zone_nr_conv" dev="configfs" ino=42313 res=0 errno=0 [ 251.365496][ T27] audit: type=1800 audit(1785919893.718:89): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.795" name="addr_trsvcid" dev="configfs" ino=42314 res=0 errno=0 [ 251.376981][ T4464] usb usb4-port1: unable to enumerate USB device [ 251.512504][ T27] audit: type=1800 audit(1785919893.738:90): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.795" name="addr_adrfam" dev="configfs" ino=42315 res=0 errno=0 [ 251.558967][ T4293] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 251.568456][ T4293] Bluetooth: hci4: Injecting HCI hardware error event [ 251.580437][ T4293] Bluetooth: hci4: hardware error 0x00 [ 251.652883][ T7177] nvme nvme0: failed to connect socket: -111 [ 251.935093][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.961494][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.985201][ T7194] device syzkaller0 entered promiscuous mode [ 252.019326][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.040151][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.061299][ T6742] device veth0_vlan entered promiscuous mode [ 252.166207][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.184741][ T7203] fuse: Invalid rootmode [ 252.192095][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.240973][ T6742] device veth1_vlan entered promiscuous mode [ 252.425945][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.464384][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.533332][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.580962][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.626975][ T6742] device veth0_macvtap entered promiscuous mode [ 252.667984][ T6742] device veth1_macvtap entered promiscuous mode [ 252.753781][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.803669][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.872621][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.915912][ T4295] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 252.925677][ T4295] Bluetooth: hci3: Injecting HCI hardware error event [ 252.942639][ T49] Bluetooth: hci3: hardware error 0x00 [ 253.012244][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.054324][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.095382][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.127519][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.158593][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.204383][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.245356][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.275233][ T27] audit: type=1800 audit(1785919895.738:91): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.813" name="addr_trtype" dev="configfs" ino=41891 res=0 errno=0 [ 253.296433][ T7226] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 253.322429][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.357007][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.370890][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.387032][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.401056][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.413590][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.430322][ T7226] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 253.445576][ T27] audit: type=1800 audit(1785919895.898:92): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.813" name="addr_traddr" dev="configfs" ino=42394 res=0 errno=0 [ 253.473131][ T7226] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 253.485037][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.498265][ T7226] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 253.508750][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.520180][ T27] audit: type=1800 audit(1785919895.938:93): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.813" name="addr_trsvcid" dev="configfs" ino=42395 res=0 errno=0 [ 253.553600][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.587292][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.603171][ T27] audit: type=1800 audit(1785919895.968:94): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.813" name="addr_adrfam" dev="configfs" ino=42396 res=0 errno=0 [ 253.635454][ T4293] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 253.643371][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.682087][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.718961][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.733689][ T94] nvmet: connect request for invalid subsystem t! [ 253.743532][ T7227] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 253.755087][ T7227] nvme nvme0: failed to connect queue: 0 ret=16770 [ 253.803193][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.833934][ T6742] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.854201][ T6742] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.879391][ T6742] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.961807][ T6742] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.099355][ T7235] device syzkaller0 entered promiscuous mode [ 254.302088][ T7221] loop5: detected capacity change from 0 to 32768 [ 254.392544][ T7221] JBD2: Ignoring recovery information on journal [ 254.529716][ T7221] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 254.565584][ T4460] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 254.587948][ T4674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.644004][ T4674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.694379][ T27] audit: type=1804 audit(1785919897.148:95): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.811" name="/newroot/85/file1/file1" dev="loop5" ino=17060 res=1 errno=0 [ 254.725622][ T4460] usb 4-1: device descriptor read/64, error -71 [ 254.795968][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.867095][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.900524][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.965712][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.995436][ T4460] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 255.165429][ T4460] usb 4-1: device descriptor read/64, error -71 [ 255.306105][ T4460] usb usb4-port1: attempt power cycle [ 255.395637][ T49] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 255.735910][ T4460] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 255.806147][ T4460] usb 4-1: device descriptor read/8, error -71 [ 255.890123][ T7268] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 255.936309][ T7268] device-mapper: ioctl: error adding target to table [ 256.095634][ T4460] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 256.146166][ T4460] usb 4-1: device descriptor read/8, error -71 [ 256.286104][ T4460] usb usb4-port1: unable to enumerate USB device [ 256.471171][ T7255] loop6: detected capacity change from 0 to 32768 [ 256.564040][ T5118] ocfs2: Unmounting device (7,5) on (node local) [ 256.632818][ T7255] JBD2: Ignoring recovery information on journal [ 256.727673][ T7255] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 257.130247][ T7288] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 257.173491][ T7288] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 257.205378][ T7288] OCFS2: File system is now read-only. [ 257.230000][ T7288] (syz.6.656,7288,1):ocfs2_find_entry_id:407 ERROR: status = -30 [ 257.321565][ T7288] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 257.407257][ T7288] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 257.465482][ T7288] (syz.6.656,7288,0):ocfs2_assign_bh:2414 ERROR: status = -30 [ 257.487745][ T7288] (syz.6.656,7288,0):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30 [ 257.577836][ T7288] (syz.6.656,7288,0):ocfs2_mknod:272 ERROR: status = -30 [ 257.613261][ T7288] (syz.6.656,7288,0):ocfs2_create:676 ERROR: status = -30 [ 257.647516][ T7309] ip_tables: iptables: counters copy to user failed while replacing table [ 257.659166][ T7306] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 257.691763][ T7306] device-mapper: ioctl: error adding target to table [ 257.871515][ T6742] ocfs2: Unmounting device (7,6) on (node local) [ 258.397751][ T7332] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 258.495803][ T7332] device-mapper: ioctl: error adding target to table [ 258.665613][ T7341] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 258.735511][ T14] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 258.905538][ T14] usb 4-1: device descriptor read/64, error -71 [ 259.128750][ T7351] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 259.172461][ T7351] device-mapper: ioctl: error adding target to table [ 259.185499][ T14] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 259.355409][ T14] usb 4-1: device descriptor read/64, error -71 [ 259.476068][ T14] usb usb4-port1: attempt power cycle [ 259.915629][ T14] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 259.968564][ T14] usb 4-1: device descriptor read/8, error -71 [ 260.041552][ T7386] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 260.106982][ T7386] device-mapper: ioctl: error adding target to table [ 260.170136][ T7388] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 260.235459][ T14] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 260.287457][ T14] usb 4-1: device descriptor read/8, error -71 [ 260.406033][ T14] usb usb4-port1: unable to enumerate USB device [ 260.423506][ T7394] loop0: detected capacity change from 0 to 18 [ 260.493991][ T7394] ufs: You didn't specify the type of your ufs filesystem [ 260.493991][ T7394] [ 260.493991][ T7394] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 260.493991][ T7394] [ 260.493991][ T7394] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 260.625773][ T7394] ufs: ufstype=old is supported read-only [ 260.644130][ T7394] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.820045][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 260.820062][ T27] audit: type=1800 audit(1785919903.288:97): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.864" name="zone_nr_conv" dev="configfs" ino=43253 res=0 errno=0 [ 260.905245][ T7407] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 260.944526][ T7407] device-mapper: ioctl: error adding target to table [ 261.087607][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.094370][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.611465][ T7431] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 261.642153][ T7431] device-mapper: ioctl: error adding target to table [ 261.901813][ T7435] device syzkaller0 entered promiscuous mode [ 261.909060][ T7437] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 262.333572][ T27] audit: type=1800 audit(1785919904.798:98): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.877" name="buffered_io" dev="configfs" ino=43315 res=0 errno=0 [ 262.650323][ T7463] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 262.689716][ T7463] device-mapper: ioctl: error adding target to table [ 263.155806][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 263.254686][ T7480] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 263.342244][ T7480] device-mapper: ioctl: error adding target to table [ 263.356110][ T7485] device-mapper: ioctl: name not supplied when creating device [ 263.698683][ T7498] device vlan2 entered promiscuous mode [ 263.814859][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 263.866805][ T7498] device hsr_slave_0 left promiscuous mode [ 263.956488][ T7495] nvme_fabrics: missing parameter 'transport=%s' [ 263.981217][ T7495] nvme_fabrics: missing parameter 'nqn=%s' [ 264.033320][ T7507] jffs2: notice: (7507) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 264.281170][ T7509] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 264.321542][ T7509] device-mapper: ioctl: error adding target to table [ 264.810387][ T7539] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 264.840443][ T7539] device-mapper: ioctl: error adding target to table [ 264.865381][ T14] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 264.875032][ T7542] device-mapper: ioctl: name not supplied when creating device [ 265.045541][ T14] usb 6-1: device descriptor read/64, error -71 [ 265.335397][ T14] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 265.470630][ T27] audit: type=1800 audit(1785919907.938:99): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.906" name="attr_allow_any_host" dev="configfs" ino=44050 res=0 errno=0 [ 265.500072][ T7564] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 265.513736][ T14] usb 6-1: device descriptor read/64, error -71 [ 265.570514][ T7564] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 265.571118][ T27] audit: type=1800 audit(1785919907.968:100): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.906" name="addr_trtype" dev="configfs" ino=44051 res=0 errno=0 [ 265.633140][ T7566] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 265.644773][ T14] usb usb6-port1: attempt power cycle [ 265.703734][ T7564] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 265.761101][ T27] audit: type=1800 audit(1785919908.038:101): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.906" name="addr_traddr" dev="configfs" ino=44052 res=0 errno=0 [ 265.850165][ T7563] nvme_fabrics: missing parameter 'transport=%s' [ 265.865422][ T7563] nvme_fabrics: missing parameter 'nqn=%s' [ 265.876819][ T27] audit: type=1800 audit(1785919908.098:102): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.906" name="addr_trsvcid" dev="configfs" ino=44053 res=0 errno=0 [ 266.014109][ T7575] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 266.032665][ T27] audit: type=1800 audit(1785919908.168:103): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.906" name="addr_adrfam" dev="configfs" ino=44054 res=0 errno=0 [ 266.054007][ T7575] device-mapper: ioctl: error adding target to table [ 266.085558][ T14] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 266.136178][ T14] usb 6-1: device descriptor read/8, error -71 [ 266.247654][ T7569] nvme nvme0: failed to connect socket: -111 [ 266.435577][ T14] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 266.486904][ T14] usb 6-1: device descriptor read/8, error -71 [ 266.616328][ T14] usb usb6-port1: unable to enumerate USB device [ 266.663320][ T7592] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 266.700751][ T7592] device-mapper: ioctl: error adding target to table [ 267.354610][ T7623] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 267.382551][ T7623] device-mapper: ioctl: error adding target to table [ 268.011078][ T7643] device-mapper: table: 248:1: thin-pool: Invalid argument count (-EINVAL) [ 268.067949][ T7643] device-mapper: ioctl: error adding target to table [ 268.541980][ T7656] device-mapper: ioctl: name not supplied when creating device [ 268.949402][ T7671] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 268.976258][ T7671] device-mapper: ioctl: error adding target to table [ 269.044430][ T7670] ip_tables: iptables: counters copy to user failed while replacing table [ 269.125529][ T4464] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 269.173214][ T7646] loop6: detected capacity change from 0 to 32768 [ 269.207445][ T7646] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 269.327865][ T4464] usb 6-1: unable to get BOS descriptor or descriptor too short [ 269.346232][ T4464] usb 6-1: not running at top speed; connect to a high speed hub [ 269.397338][ T4464] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.445374][ T4464] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 269.479996][ T4464] usb 6-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 269.519800][ T4464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.546286][ T7647] loop3: detected capacity change from 0 to 32768 [ 269.557822][ T4464] usb 6-1: Product: syz [ 269.562699][ T4464] usb 6-1: Manufacturer: syz [ 269.618463][ T4464] usb 6-1: SerialNumber: syz [ 269.640364][ T7647] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 269.680147][ T7647] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 269.789595][ T4369] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 269.810350][ T7647] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 269.844023][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 269.884952][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 269.937787][ T4464] usb 6-1: USB disconnect, device number 6 [ 269.996642][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 111ms [ 270.039658][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 270.088469][ T7647] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 270.514143][ T27] audit: type=1800 audit(1785919912.978:104): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="addr_trtype" dev="configfs" ino=43683 res=0 errno=0 [ 270.540950][ T7701] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 270.657634][ T27] audit: type=1800 audit(1785919913.128:105): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="addr_traddr" dev="configfs" ino=44224 res=0 errno=0 [ 270.683242][ T7701] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 270.721230][ T7704] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 270.749749][ T27] audit: type=1800 audit(1785919913.188:106): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="addr_trsvcid" dev="configfs" ino=43688 res=0 errno=0 [ 270.800677][ T7701] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 270.817489][ T27] audit: type=1800 audit(1785919913.268:107): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="addr_adrfam" dev="configfs" ino=44231 res=0 errno=0 [ 270.905110][ T7647] gfs2: fsid=syz:syz.0: found 1 quota changes [ 271.018651][ T7647] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 271.018651][ T7647] inode = 11 2339 [ 271.018651][ T7647] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 409 [ 271.081737][ T7647] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 271.134611][ T7704] nvme nvme0: failed to connect socket: -111 [ 271.164948][ T7647] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7647 [syz.3.927] gfs2_quota_sync+0x355/0x780 [ 271.242242][ T7647] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 271.277608][ T7647] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 271.363282][ T7647] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 271.390217][ T7647] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 271.434186][ T7647] gfs2: fsid=syz:syz.0: File system withdrawn [ 271.501285][ T7647] CPU: 1 PID: 7647 Comm: syz.3.927 Not tainted syzkaller #0 [ 271.509895][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.521340][ T7647] Call Trace: [ 271.524849][ T7647] [ 271.528060][ T7647] dump_stack_lvl+0x188/0x24e [ 271.533658][ T7647] ? show_regs_print_info+0x12/0x12 [ 271.539139][ T7647] ? load_image+0x410/0x410 [ 271.544295][ T7647] ? kobject_uevent_env+0x364/0x890 [ 271.549974][ T7647] gfs2_withdraw+0xc69/0x1450 [ 271.555130][ T7647] ? gfs2_lm+0x240/0x240 [ 271.560125][ T7647] ? gfs2_consist_inode_i+0xf1/0x110 [ 271.565793][ T7647] gfs2_inode_refresh+0xb2d/0x1190 [ 271.571502][ T7647] ? gfs2_inode_metasync+0xf0/0xf0 [ 271.577222][ T7647] ? gfs2_glock_nq+0xcee/0x14d0 [ 271.583219][ T7647] gfs2_instantiate+0x15e/0x210 [ 271.588715][ T7647] gfs2_glock_wait+0x1d0/0x2a0 [ 271.593943][ T7647] do_sync+0x4af/0xbb0 [ 271.598312][ T7647] ? gfs2_quota_sync+0x355/0x780 [ 271.605530][ T7647] ? slot_put+0x1e0/0x1e0 [ 271.611616][ T7647] ? __lock_acquire+0x7c40/0x7c40 [ 271.618158][ T7647] ? do_raw_spin_lock+0x128/0x2f0 [ 271.625473][ T7647] ? gfs2_quota_sync+0x355/0x780 [ 271.631024][ T7647] ? do_raw_spin_unlock+0x11d/0x230 [ 271.638275][ T7647] gfs2_quota_sync+0x355/0x780 [ 271.644338][ T7647] gfs2_sync_fs+0x48/0xb0 [ 271.649451][ T7647] sync_filesystem+0xe6/0x220 [ 271.656397][ T7647] gfs2_reconfigure+0x11a/0xd80 [ 271.662736][ T7647] ? shrink_dcache_sb+0x385/0x3d0 [ 271.668810][ T7647] ? gfs2_get_tree+0x1e0/0x1e0 [ 271.675705][ T7647] ? dentry_lru_isolate+0x2e0/0x2e0 [ 271.682284][ T7647] ? vfs_parse_fs_string+0x170/0x170 [ 271.689400][ T7647] reconfigure_super+0x224/0x8d0 [ 271.696366][ T7647] path_mount+0xcce/0xfb0 [ 271.702638][ T7647] __se_sys_mount+0x2e3/0x3d0 [ 271.708862][ T7647] ? __x64_sys_mount+0xc0/0xc0 [ 271.714836][ T7647] ? lockdep_hardirqs_on+0x94/0x140 [ 271.721338][ T7647] ? __x64_sys_mount+0x1c/0xc0 [ 271.728337][ T7647] do_syscall_64+0x4c/0xa0 [ 271.733933][ T7647] ? clear_bhb_loop+0x60/0xb0 [ 271.740698][ T7647] ? clear_bhb_loop+0x60/0xb0 [ 271.746336][ T7647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.753129][ T7647] RIP: 0033:0x7efe6ed9e019 [ 271.758899][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.783218][ T7647] RSP: 002b:00007efe6fbde028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.792585][ T7647] RAX: ffffffffffffffda RBX: 00007efe6f025fa0 RCX: 00007efe6ed9e019 [ 271.801596][ T7647] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 271.809749][ T7647] RBP: 00007efe6ee3500c R08: 0000000000000000 R09: 0000000000000000 [ 271.818232][ T7647] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000 [ 271.826562][ T7647] R13: 00007efe6f026038 R14: 00007efe6f025fa0 R15: 00007ffee3953068 [ 271.834706][ T7647] [ 272.022633][ T7647] gfs2: fsid=syz:syz.0: original: gfs2_fill_super+0x18a3/0x2020 [ 272.031649][ T7647] gfs2: fsid=syz:syz.0: pid: 7647 [ 272.037702][ T7647] gfs2: fsid=syz:syz.0: lock type: 1 req lock state : 3 [ 272.044989][ T7647] gfs2: fsid=syz:syz.0: new: gfs2_reconfigure+0x70d/0xd80 [ 272.052437][ T7647] gfs2: fsid=syz:syz.0: pid: 7647 [ 272.058120][ T7647] gfs2: fsid=syz:syz.0: lock type: 1 req lock state : 3 [ 272.066897][ T7647] gfs2: fsid=syz:syz.0: G: s:SH n:1/2 f:qb t:SH d:EX/0 a:0 v:0 r:4 m:20 p:0 [ 272.075820][ T7647] gfs2: fsid=syz:syz.0: H: s:SH f:eEH e:0 p:7647 [syz.3.927] gfs2_fill_super+0x18a3/0x2020 [ 272.088044][ T7647] ------------[ cut here ]------------ [ 272.094363][ T7647] kernel BUG at fs/gfs2/glock.c:1560! [ 272.100243][ T7647] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 272.106484][ T7647] CPU: 1 PID: 7647 Comm: syz.3.927 Not tainted syzkaller #0 [ 272.114647][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.124842][ T7647] RIP: 0010:gfs2_glock_nq+0x11fd/0x14d0 [ 272.130644][ T7647] Code: 29 e0 39 fe 41 0f b7 0e 48 c7 c7 e0 7e d2 8a 4c 89 e6 89 da e8 44 6b 8b 06 31 ff 48 8b 74 24 08 ba 01 00 00 00 e8 03 79 ff ff <0f> 0b 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 64 ef ff ff 4c 89 f7 [ 272.153340][ T7647] RSP: 0018:ffffc9000c29fb50 EFLAGS: 00010246 [ 272.160722][ T7647] RAX: f039b8e282d29200 RBX: 0000000000000001 RCX: 0000000000000000 [ 272.169110][ T7647] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52001853f5c [ 272.179705][ T7647] RBP: ffff8880729991c8 R08: ffffffff8e210aef R09: fffff52001853f18 [ 272.189834][ T7647] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888072999270 [ 272.198439][ T7647] R13: ffff8880729991d0 R14: ffffc9000c29fcc2 R15: ffff8880729991b8 [ 272.206848][ T7647] FS: 00007efe6fbde6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 272.216349][ T7647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.224082][ T7647] CR2: 00007f0c18787180 CR3: 0000000078bcf000 CR4: 00000000003506e0 [ 272.234294][ T7647] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.242504][ T7647] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.250891][ T7647] Call Trace: [ 272.254585][ T7647] [ 272.258204][ T7647] gfs2_freeze_lock_shared+0x5f/0xc0 [ 272.263838][ T7647] gfs2_reconfigure+0x70d/0xd80 [ 272.269826][ T7647] ? gfs2_get_tree+0x1e0/0x1e0 [ 272.274988][ T7647] ? gfs2_reconfigure+0x70d/0xd80 [ 272.280111][ T7647] reconfigure_super+0x224/0x8d0 [ 272.285456][ T7647] path_mount+0xcce/0xfb0 [ 272.290016][ T7647] __se_sys_mount+0x2e3/0x3d0 [ 272.294937][ T7647] ? __x64_sys_mount+0xc0/0xc0 [ 272.300286][ T7647] ? lockdep_hardirqs_on+0x94/0x140 [ 272.305617][ T7647] ? __x64_sys_mount+0x1c/0xc0 [ 272.310549][ T7647] do_syscall_64+0x4c/0xa0 [ 272.315874][ T7647] ? clear_bhb_loop+0x60/0xb0 [ 272.321073][ T7647] ? clear_bhb_loop+0x60/0xb0 [ 272.325985][ T7647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.331945][ T7647] RIP: 0033:0x7efe6ed9e019 [ 272.336403][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.357143][ T7647] RSP: 002b:00007efe6fbde028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.365770][ T7647] RAX: ffffffffffffffda RBX: 00007efe6f025fa0 RCX: 00007efe6ed9e019 [ 272.373893][ T7647] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 272.383997][ T7647] RBP: 00007efe6ee3500c R08: 0000000000000000 R09: 0000000000000000 [ 272.393066][ T7647] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000 [ 272.401567][ T7647] R13: 00007efe6f026038 R14: 00007efe6f025fa0 R15: 00007ffee3953068 [ 272.410377][ T7647] [ 272.413471][ T7647] Modules linked in: [ 272.417546][ T7647] ---[ end trace 0000000000000000 ]--- [ 272.423939][ T7647] RIP: 0010:gfs2_glock_nq+0x11fd/0x14d0 [ 272.430584][ T7647] Code: 29 e0 39 fe 41 0f b7 0e 48 c7 c7 e0 7e d2 8a 4c 89 e6 89 da e8 44 6b 8b 06 31 ff 48 8b 74 24 08 ba 01 00 00 00 e8 03 79 ff ff <0f> 0b 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 64 ef ff ff 4c 89 f7 [ 272.451915][ T7647] RSP: 0018:ffffc9000c29fb50 EFLAGS: 00010246 [ 272.458238][ T7647] RAX: f039b8e282d29200 RBX: 0000000000000001 RCX: 0000000000000000 [ 272.467430][ T7647] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52001853f5c [ 272.475967][ T7647] RBP: ffff8880729991c8 R08: ffffffff8e210aef R09: fffff52001853f18 [ 272.484878][ T7647] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888072999270 [ 272.493484][ T7647] R13: ffff8880729991d0 R14: ffffc9000c29fcc2 R15: ffff8880729991b8 [ 272.501746][ T7647] FS: 00007efe6fbde6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 272.510867][ T7647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.517747][ T7647] CR2: 00007f0c18787180 CR3: 0000000078bcf000 CR4: 00000000003506e0 [ 272.526176][ T7647] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.535107][ T7647] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.544476][ T7647] Kernel panic - not syncing: Fatal exception [ 272.551379][ T7647] Kernel Offset: disabled [ 272.556523][ T7647] Rebooting in 86400 seconds..