last executing test programs: 41.87365919s ago: executing program 0 (id=449): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0xfdad) 40.930247473s ago: executing program 0 (id=462): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/170, 0xaa}, 0x40000100) 40.827864765s ago: executing program 0 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r2, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 40.760289187s ago: executing program 0 (id=466): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 40.611947001s ago: executing program 0 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='debugfs\x00', &(0x7f0000000180)='sys/kernel/debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0000:00:04.0\x00', 0xd) 40.570132371s ago: executing program 0 (id=468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) 39.210229334s ago: executing program 1 (id=487): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x456f, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x400, 0x4) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 39.083931546s ago: executing program 1 (id=488): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @private2, 0x242}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, 0x0) 38.898448501s ago: executing program 1 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 38.747879574s ago: executing program 1 (id=492): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}]}, 0x1, 0x477, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000540)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) 38.054349361s ago: executing program 1 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x64}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x87}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48000) 35.739683966s ago: executing program 1 (id=517): r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 35.678864827s ago: executing program 32 (id=517): r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 25.076968257s ago: executing program 33 (id=468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) 12.086992384s ago: executing program 5 (id=706): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 11.959910877s ago: executing program 5 (id=708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0x83, 0x5, 0x1, 0x4, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0xfffe, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) 11.785151662s ago: executing program 5 (id=709): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='N,N'], 0x6a) 11.622938785s ago: executing program 5 (id=711): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@nodioread_nolock}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 11.187954465s ago: executing program 5 (id=714): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=[{0x18, 0x117, 0x4, "6eb171f4"}], 0x18}}], 0x2, 0x10) 10.708361377s ago: executing program 5 (id=720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x20000000) 10.546330691s ago: executing program 34 (id=720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x20000000) 5.169757358s ago: executing program 3 (id=755): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffffffffffffffff, 0x1, 0x9}) 4.190212551s ago: executing program 2 (id=764): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x12, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x3f, &(0x7f0000000680)=0x1, 0x4) 4.032925994s ago: executing program 2 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000023c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x1) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3.834120959s ago: executing program 2 (id=767): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 3.288760092s ago: executing program 3 (id=770): mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x802, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x179c, 0x0) 2.326957405s ago: executing program 3 (id=776): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r0 = io_uring_setup(0x7108, &(0x7f0000000080)={0x0, 0xfaa2, 0x10, 0x3, 0x10a}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) close_range(r0, r0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) 2.204070298s ago: executing program 4 (id=777): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 1.959569323s ago: executing program 3 (id=779): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_read_part_table(0x5ca, &(0x7f0000000000)="$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") 1.899461195s ago: executing program 4 (id=780): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.883788115s ago: executing program 6 (id=781): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214010028bd7000fcdbdf250800150000000000080001000000000008004b0013fffb000800030004"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) 1.727841189s ago: executing program 4 (id=782): unshare(0x2000400) keyctl$read(0xb, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 1.727661719s ago: executing program 6 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x0, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x7, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0xf8, 0x5, 0x0, '\x00', 0x4, 0x4}) 1.707577529s ago: executing program 3 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x9) syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xff, 0x125c7, &(0x7f0000024b40)="$eJzs/XsYaHO9L/7OcZ/lHlKI5FIRitwKuVcUIZF7lEso0kVIhJIupBKhXEpIhRSSXAopREkikXsSJZGQ86y93vOscfYee43fXr+zzhnPOa/XH33GnvHN8+z1PO/3ezLNGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBjxozi+S/c+99O74fe+e+ne86MGd2e//4997/9x+y9P6b89zPzBf+bZ/PHPmeJPd+78x47vOe9/3b+S399+354/9fs++H9/0t/7v8Vr1pp7w3Pe/XGR59XPe+KJ9dd/8D/tv8hAAAA+P+i7P+y90M//Z/+kGrGjJnP/Z9+7HkzZsycOWNGWR7x64/N/3/nf3/LLfj/a3//v/N/PQAAAPxflf1f937k6P5/nfu8GTMOOfh/+fH/54/MbP/tP3c+8K+PDd2eBfLHL/AfP1T+Lx//jebNnS931s9dPP//9a8PAAAA/n9L9n/T+5H+Zp/1z/e/MHfB3IVyF859Ue4iuYvmvjh3sdyX5C6eu0TukrlL5b4092W5L89dOneZ3FfkLpu7XO7y/9Of/6rcFXJXzH117kq5K+eukrtq7mq5r8l9be7quWvkrpn7uty1ctfOXSd33dz1ctfP3SD39blvyH1j7oa5G+W+KffNuRvnbpL7ltxNczfL3Tz3rblb5L4td8vcrXLfnrt17ja52+Zul7t97g65O+a+I3en3J1z82tNZrwrd5fcXXN3y9099925s34xSX59yoy9ct+T+97cvXP3yX1f7r6578/9QO4Hcz+Uu1/uh3Nn/UKUA3Jn/XqRj+QelPvR3Fk/Q3ZI7sdyD809LPfw3I/nfiL3iNxP5h6Z+6ncT+d+JvezuUflzvq5vM/lHpP7+dwv5H4x99jcL+Uel3t87pdzT8g9Mfek3K/kfjX35NxTck/NPS33a7lfzz099xu5Z+SemXtW7jdzz879Vu63c7+Te07uubnn5X439/zc7+V+P/eC3AtzL8r9Qe7FuT/MvST3R7mX5l6We3nuFbk/zv1J7pW5V+VenTvrn8W6JvdnuT/PvTb3utzrc3+Re0Pujbm/zP1V7k25v869Ofc3ubfk/jb31tzbcn+Xe3vu73PvyL0z9w+5d+XenXtP7r259+Xen/tA7h9zH8z9U+5DuX/OfTj3kdy/5P4199Hcv+XOyrpZ/xTS47lP5P4j98ncf+Y+lft07jO5/8p99t/PrJ8+L/JR5Oe4iyo3P+9eJH+LNrfLnZn7nNz8c3jFbLn5dXbFHLlz5s6VO3fuPLnPy83Pgxf5efAiPw9e5OfBi/w8eJH8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8LpL/RfK/SP4Xyf8i+V8k/4vkf/HK3OR/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5P+vv5RXJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z23dIvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5P+sv6VdJv/L/ECZ/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C/n+8/3f5leUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlMrBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9ILE/4wqvaBKL6jyX1TpBVVyuUovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r0giq9oEovqNILqvy8QJX8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfJ/1j9uXyf/6+R/nfyv8wfUyf86+V8n/+vkf538r5P/dfK/Tv7Xyf86+V8n/+vkfz3Pf77/6/SCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq18yY8W//X1enF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1MnGOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNMLZsVwk17QpBc06QVNekGTP7BJL2jSC5r0gia9oEkvaNILmvSCJr2gSS9o0gua9IImPy/QJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/Jvnf5OcFmuR/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/ifOZ7TJ/zb53yb/2+R/m/xv8ye0yf82+d8m/9vkf5v8b5P/bfK/nfM/3/9tekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbzGzTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vSDxPqNLL+jSC7r0gi69oEuOd+kFXf7ELr2gSy/o0gu69IIuvaBLL+jy8wJd8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u1m/Z1Xyv0v+d8n/LvnfJf+75H+X/J/1+1x1yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/xPfM2Ym/2fO+v33kv8zk/8zk/8zk/8zk/8z88DM5P+sf5//zNn+8/0/M71gZnrBzPSCmekFM9MLZqYXzEwvmJleMDO9YGZ6wcz0gpn+PXsAAADw/0HZ/zP/40dm/dq8/+Gcg//jX2I047HnXrTF2XNddMPAM7P+PYHP+2/8SwUAAAD+i0b2/7m9/V9sfO02p+99/VbvG3hm1u8PYP8DAADABI3s//N6+7/c+vH9H517x9nfNfDMrN8X0P4HAACACRrZ/9/t7f/qzlceV1x7yp+vHngm/x4f+x8AAACmaGT/n9/b//X7Prbq1jeu/rWNBp7Jv7/X/gcAAIApGtn/3+vt/+an69165hzPrP/HgWfy+/bY/wAAADBFI/v/+7393/7uoKee2Wvzef418Ex+v177HwAAAKZoZP9f0Nv/3S4XvnDOc4/5y7YDzyyaa/8DAADABI3s/wt7+3/mS959yXPXuvfv5ww8M+vPsf8BAABggkb2/0W9/f+c487e4ckTl5hvaOMvlmv/AwAAwASN7P8f9Pb/cz997EHfevrItZqBZ16Sa/8DAADABI3s/4t7+3+2ld9y4vYv3uiUbww8s3iu/Q8AAAATNLL/f9jb/7N/7a7VmzVufmCZgWeWyLX/AQAAYIJG9v8lvf0/xyJL/P7xPyzwnE8OPLNk7v9+/z/n/z1/vQAAAMD/uZH9/6Pe/p/zuYs8e+ohF233lYFnlsr19/8BAABggkb2/6W9/T/XObe8aNPt9vvh6gPPvDTX/gcAAIAJGtn/l/X2/9x/2f7Or/3g0Os/PvDMy3LtfwAAAJigkf1/eW//z7PhceWWu6yz/BIDz7w81/4HAACACRrZ/1f09v/ztv/t4lX70AErDjyz9Kw/5r/zrxUAAAD4rxnZ/z/u7f9573nn5X+5ddkvf27gmVm/J6D9DwAAABM0sv9/0tv/833w5nd88+pzfvWigWdekWv/AwAAwASN7P8re/t//mvnPnSrhfZZ4dKBZ5bNtf8BAABggkb2/1W9/f/8W5Y+dfYD7tjljIFnlsu1/wEAAGCCRvb/1b39v8BOD6317DcW+cRzB55ZPtf+BwAAgAka2f8/7e3/Fyy15j1PnXvl35cdeOaVufY/AAAATNDI/r+mt/9feOI/2pl71fMdNfDMq3LtfwAAAJigkf3/s97+X/CIK1667RxnrXXcwDMr5Nr/AAAAMEEj+//nvf2/0Ar1ld+5cY9TXjPwzIq59j8AAABM0Mj+v7a3/xc++fvveuzaxx/4/sAzr861/wEAAGCCRvb/db39/6IF9/5EN/cqz5lv4JmVcu1/AAAAmKCR/X99b/8vMueGp2++9/HbVQPPrJxr/wMAAMAEjez/X/T2/6Lnf3q9k8/e6oenDDyzSq79DwAAABM0sv9v6O3/F2+w3OU7bHTa9QsNPLNqrv0PAAAAEzSy/2/s7f/Fnn5g8bO/tNPyFw08s1qu/Q8AAAATNLL/f9nb/y954JflP5649oBvDzwz6/cEtP8BAABggkb2/696+3/xzea7c7Zl5vjy7APPvDbX/gcAAIAJGtn/N/X2/xKXnb7WW1Y++lcHDzyzeq79DwAAABM0sv9/3dv/S+6/46mnPbjpCi8ZeGaNXPsfAAAAJmhk/9/c2/9LvWfrQ5848tldVhp4Zs1c+x8AAAAmaGT//6a3/19604nvqN+25ie+NPDM63LtfwAAAJigkf1/S2//v+zoja+csdczCy088MxaufY/AAAATNDI/v9tb/+/fOkjXvq3c1f/548Gnlk71/4HAACACRrZ/7f29v/Sa57XfuPGY7595sAz6+Ta/wAAADBBI/v/tt7+X+aw99/z1jk232S2gWfWzbX/AQAAYIJG9v/v/sf+r//H9yuef9V6c819ffuJgWfWy7X/AQAAYIJG9v/tvb//v+zZM05/+tq57l9y4Jn1c+1/AAAAmKCR/f/73v5f7sLXfOKMs0/57goDz2yQa/8DAADABI3s/zt6+3/58ul3bbP3jpsdPfDM63PtfwAAAJigkf1/Z2//v3LR1Z/Z+ksnvHjpgWfekGv/AwAAwASN7P8/9Pb/q77+z0XP3Gjry48YeOaNufY/AAAATNDI/r+rt/9XOPeyNZ9Z5rEvfnXgmQ1z7X8AAACYoJH9f3dv/684W/u7OZ9Y6f1rDDyzUa79DwAAABM0sv/v6e3/Vx9//oFbPHjGGucOPPOmXPsfAAAAJmhk/9/b2/8rLf6+r5y+8u6/m3fgmTfn2v8AAAAwQSP7/77e/l95lTdc+ujbrj6iHnhm41z7HwAAACZoZP/f39v/q3zms9sVR7a7nz7wzCa59j8AAABM0Mj+f6C3/1e9ZtsnmxNvX+iQgWfekmv/AwAAwASN7P8/9vb/avt+eaHH11r4n4sPPLNprv0PAAAAEzSy/x/s7f/X7Hrya0598XnffvXAM5vl2v8AAAAwQSP7/0+9/f/a23e5ZdOn993k2IFnNs+1/wEAAGCCRvb/Q739v/omN+333D883C448Mxbc+1/AAAAmKCR/f/n3v5f4+/P+/KTayx//4UDz2yRa/8DAADABI3s/4d7+3/NP7zs4m9td8h3vzPwzNty7X8AAACYoJH9/0hv/79um4ffvv0ha202x8AzW+ba/wAAADBBI/v/L739v9ZfLz3sgV0ufvEFA89slWv/AwAAwASN7P+/9vb/2ht9eJeFfrD/5fMPPPP2XPsfAAAAJmhk/z/a2//r7LDu6ze59aYvlgPPbJ1r/wMAAMAEjez/v/X2/7r3Hv71H7bzv//kgWe2ybX/AQAAYIJG9v9jvf2/3odWae5f6Ig1XjHwzLa59j8AAABM0Mj+/3tv/69/3V/vn+/qN/7uswPPbJdr/wMAAMAEjez/x3v7f4Pf/vyqtb5x/xHHDzyzfa79DwAAABM0sv+f6O3/1+88xxLfPWCp3V878MwOufY/AAAATNDI/v9Hb/+/4aV3HHzBkZvu+ZuBZ3bMtf8BAABggkb2/5O9/f/Gk16403pvO/ozHxh45h259j8AAABM0Mj+/2dv/2/4ycXXnXvlNX+708Azs37M/gcAAIAJGtn/T/X2/0Yr3nvK3Q8+u+plA8/snGv/AwAAwASN7P+ne/v/TadsWVz4xE77vGngmXfm2v8AAAAwQSP7/5ne/n/zQp+7e6NlTjv64YFn3pVr/wMAAMAEjez/f/X2/8ZzffOKRTea4ydPDjyzS679DwAAABM0sv+f7e3/Tb6314sf+tK1S24z8MyuufY/AAAATNB/vv+LGb39/5aTVzp57r1X2fIPA8/slmv/AwAAwASN7P+it/83XfBv69x99uPfX3fgmd1z7X8AAACYoJH9X/b2/2ZzXrPzBddudddbB555d679DwAAABM0sv+r3v7f/Py5Dllv7uOrxwee2SPX/gcAAIAJGtn/dW//v3WpSxZbdI56w/0Hntkz1/4HAACACRrZ/01v/29x4gE/fujGK795y8Aze+Xa/wAAADBBI/u/7e3/tx2x9l0XnrvHs78YeOY9ufY/AAAATNDI/u96+3/LFT4xY6O9zlpkr4Fn3ptr/wMAAMAEjez/mb39v9UHt/jaJgfss+eGA8/snWv/AwAAwASN7P/n9Pb/26/9/AY//MY5n3lg4Jl9cu1/AAAAmKCR/f/c3v7f+pYzd33g6kV+++zAM+/Ltf8BAABggkb2/2y9/b/NTu89fKGF7lh1u4Fn9s21/wEAAGCCRvb/7L39v+1fbl9yrXadfW4ceOb9ufY/AAAATNDI/p+jt/+323Chq79766FH7zvwzAdy7X8AAACYoJH9P2dv/2+//WL33f+DZX/yzoFnPphr/wMAAMAEjez/uXr7f4d77q/n2+WhJa8aeOZDufY/AAAATNDI/p+7t/93fP76h/zpkAW2PHDgmf1y7X8AAACYoJH9P09v/7/j7EN3fsF2N3//9wPPfDjX/gcAAIAJGtn/z+vt/50uvGidN62x313XDDyzf679DwAAABM0sv/n7e3/ncuPnnzpHy6q9hh45oBc+x8AAAAmaGT/z9fb/+88+roZ9zy9xIb3Dzwz698JYP8DAADABI3s//l7+/9dS8921wIvvveb6w8885Fc+x8AAAAmaGT/P7+3/3dZ81U/XnetjZ7dbOCZg3LtfwAAAJigkf2/QG//73rYE4udc+KRi/xl4JmP5tr/AAAAMEEj+/8Fvf2/22VLHn7+Ktdetd7AMwfn2v8AAAAwQSP7/4W9/b/7/nfv+vo/zfHS+waeOSTX/gcAAIAJGtn/C/b2/7vf89sN5v3Uafv+deCZj+Xa/wAAADBBI/t/od7+3+OmRb9255Y7HbP5wDOH5tr/AAAAMEEj+3/h3v7fc4Nv1Rdv+Oxtdww8c1iu/Q8AAAATNLL/X9Tb/3s9vcd9bzh2zdd85H95pJ1xeL7sfwAAAJigkf2/SG//v+eBTa9e+PGj3/PugWc+nmv/AwAAwASN7P9Fe/v/vZt9aclHlt70qJ8OPPOJXPsfAAAAJmhk/7+4t//33mTLSx6+7qxn3jfwzBG59j8AAABM0Mj+X6y3//f5++d2eNE8eyx8w8Azn8y1/wEAAGCCRvb/S3r7/31/+OZBb9znyjdcPfDMkbn2PwAAAEzQyP5fvLf/991mrxN/8K36zHcNPPOpXPsfAAAAJmhk/y/R2//vv+aO1f9wzvF3/nHgmU/n2v8AAAAwQSP7f8ne/v/Avi/8/fP23KrYaOCZz+Ta/wAAADBBI/t/qd7+/+Cuiz+7weyPb7HtwDOfzbX/AQAAYIJG9v9Le/v/Q7ff+6Lv3bDK+f8aeOaoXPsfAAAAJmhk/7+st//3O36Vi8696qGrfjvwzNG59j8AAABM0Mj+f3lv/3948b9us86Cy770gIFnPpdr/wMAAMAEjez/pXv7f/9Vfr7/8/c/dN89B545Jtf+BwAAgAka2f/L9Pb/AZ+Z47h7T1/nmOsHnvl8rv0PAAAAEzSy/1/R2/8HLnrpqj+6+I7b1hl45gu59j8AAABM0Mj+X7a3/z/y9Q/f+uZdF3nNnQPPfDHX/gcAAIAJGtn/y/X2/0HnrvvUC7tz3vPEwDPH5tr/AAAAMEEj+3/53v7/6GyHv/DB2/Y5aouBZ76Ua/8DAADABI3s/1f29v/Bc6/w/utXP/KZRwaeOS7X/gcAAIAJGtn/r+rt/0POeuzYNe7caOE3DzxzfK79DwAAABM0sv9X6O3/j/3o+gt2P/jeN2w98MyXc+1/AAAAmKCR/b9ib/8fWs/c4svbLnHmPwaeOSHX/gcAAIAJGtn/r+7t/8OO/cHfL1/7ojvfP/DMibn2PwAAAEzQyP5fqbf/D3/FgQuscNJ+xc0Dz5yUa/8DAADABI3s/5V7+//jq26w8i7P3LzF5QPPfCXX/gcAAIAJGtn/q/T2/yc+dvBNX1xsgfN3Hnjmq7n2PwAAAEzQyP5ftbf/j7hqs70/d8OO5x418MzJufY/AAAATNDI/l+tt/8/eeAXjtlp9lPesuzAM6fk2v8AAAAwQSP7/zW9/X/kbt/+7sp7zlW/pv/nd/9+Ts3/0/4HAACACRrZ/6/t7f9P/XK3Ta885/p7jxt45rRc+x8AAAAmaGT/r97b/59e69a/fuVbm58938AzX8u1/wEAAGCCRvb/Gr39/5l/LjzvXvsc8+bvDzzz9Vz7HwAAACZoZP+v2dv/n314qRVWm2f1F54y8MzpufY/AAAATNDI/n9db/8f9dY7b/jZdc/8oxp45hu59j8AAABM0Mj+X6u3/4+eb5dlX7d0e+RFA8+ckWv/AwAAwASN7P+1e/v/c98++RfXPn71HgsNPHNmrv0PAAAAEzSy/9fp7f9jfvDlh487dvfXzT7wzFm59j8AAABM0Mj+X7e3/z8/Y9vZ99jwjN9/e+CZb+ba/wAAADBBI/t/vd7+/8IxD5/9yi1X+tJLBp45O9f+BwAAgAka2f/r9/b/F1/2so1nznjsgwcPPPOtXPsfAAAAJmhk/2/Q2//Hrv68937pT1u/5EsDz8z6NQH2PwAAAEzQyP5/fW//f+njN33mnauc8OOVBp75Tq79DwAAABM0sv/f0Nv/x13RvnzHxdY6d2jjn5Nr/wMAAMAEjez/N/b2//H7Xfbzzz9zyFvOGXjm3Fz7HwAAACZoZP9v2Nv/X97znw9efdLy9TcGnjkv1/4HAACACRrZ/xv19v8JN68+89VrP3xvM/DMd3PtfwAAAJigkf3/pt7+P3G9z57x3m33PfuTA8+cn2v/AwAAwASN7P839/b/Sf96w4YnHnzem5cZeOZ7ufY/AAAATNDI/t+4t/+/8uD79vjpnQu/cPWBZ76fa/8DAADABI3s/016+/+rbzn/k69d/fZ/fGXgmQty7X8AAACYoJH9/5be/j/51OfP/pPbljpyiYFnLsy1/wEAAGCCRvb/pr39f8oLbnh4le7+PT4+8MxFufY/AAAATNDI/t+st/9Pnf3BX+y86xtf97mBZ36Qa/8DAADABI3s/817+/+0779i2aMvPuL3Kw48c3Gu/Q8AAAATNLL/39rb/19b4iuf+fnp83/p0oFnfphr/wMAAMAEjez/LXr7/+tf2eq9q+5/0wdfNPDMJbn2PwAAAEzQyP5/W2//n37kThvvueD+L3nuwDM/yrX/AQAAYIJG9v+Wvf3/jVd+7eyvXnXxj88YeGbWrwmw/wEAAGCCRvb/Vr39f8b7PzjzhGf222HxgWcuy7X/AQAAYIJG9v/be/v/zOvPeXC3xS760SEDz1yea/8DAADABI3s/617+/+sW4/8+eprL/DgsQPPXJFr/wMAAMAEjez/bXr7/5s7vunlvzjp5tlePfDMj3PtfwAAAJigkf2/bW//n/3ovz75hYM3WufCgWd+kvvsR5999r/1rxcAAAD4Pzey/7fr7f9vvWHVPXbd9sjTFhx45spcf/8fAAAAJmhk/2/f2//f3rbccMXVl3hijoFnrsq1/wEAAGCCRvb/Dr39/537fnLGZXfe+/zvDDxzda79DwAAABM0sv937O3/c56qX3l5t8g75x945qe59j8AAABM0Mj+f0dv/5+79hW/XOG2Ow6/YOCZa3LtfwAAAJigkf2/U2//n7fFP/62y8X73HjywDM/y7X/AQAAYIJG9v/Ovf3/3UfWnOeLu57zynLgmZ/n2v8AAAAwQSP7/529/X/+Rz597vX7L/vhzw48c22u/Q8AAAATNLL/39Xb/9+7esPN1zj9oeNeMfDMdbn2PwAAAEzQyP7fpbf/v/+rvd+3+1XrXPvagWeuz7X/AQAAYIJG9v+uvf1/we7fP/rLCx667PEDz/wi1/4HAACACRrZ/7v19v+Fy77z1V+ZfasdfjTwzA259j8AAABM0Mj+3723/y/60qk373XD8T9aeOCZG3PtfwAAAJigkf3/7t7+/8Ghxz2x2jmrPDjbwDO/zLX/AQAAYIJG9v8evf1/8Wrbz/+zPR+f7cyBZ36Va/8DAADABI3s/z17+/+H33zoe5/bZ491lhx45qZc+x8AAAAmaGT/79Xb/5fMs/SWO33rrNM+MfDMr3PtfwAAAJigkf3/nt7+/1Ez9wdXvq5+4uiBZ27Otf8BAABggkb2/3t7+//SS2/+wpXzXPn8FQae+U2u/Q8AAAATNLL/9+7t/8vm/8Qb9318zXceMfDMLbn2PwAAAEzQyP7fp7f/L//O2t88eOlnD1964Jnf5tr/AAAAMEEj+/99vf1/xcUHHHnThpveuMbAM7fm2v8AAAAwQSP7f9/e/v9xccluLz326Fd+deCZ23LtfwAAAJigkf3//t7+/8nn5/rpgZ+a48PzDjzzu1z7HwAAACZoZP9/oLf/r3z5NUsfteW1x5078MztufY/AAAATNDI/v9gb/9ftcbfZrttlZ2uPX3gmd/n2v8AAAAwQSP7/0O9/X/1J1b648v+dNqy9cAzd+Ta/wAAADBBI/t/v97+/+mP73/zKxa86WUPDDxzZ679DwAAABM0sv8/3Nv/13x4se/ccdX812w48Mwfcu1/AAAAmKCR/b9/b///bK+FPvup0y8+abuBZ+7Ktf8BAABggkb2/wG9/f/z39y+537773/gswPP3J1r/wMAAMAEjez/A3v7/9r133vt4rvev9K+A8/ck2v/AwAAwASN7P+P9Pb/dc+eudwNFy91040Dz9yba/8DAADABI3s/4N6+//6P31+rsNuO+LgqwaeuS/X/gcAAIAJGtn/H+3t/19susWfP9S98R3vHHjm/lz7HwAAACZoZP8f3Nv/N3xzh9vefed58/5+4JkHcu1/AAAAmKCR/X9Ib//fOM/xqx2/+r6PHjjwzB9z7X8AAACYoJH9/7He/v9lc9oLrtv29tP3GHjmwVz7HwAAACZoZP8f2tv/v7r0Xf9c8+CFX3/NwDN/yrX/AQAAYIJG9v9hvf1/07K/2fpdJx0y5/oDzzyUa/8DAADABI3s/8N7+//XX5rnwmPXXuuR+wee+XOu/Q8AAAATNLL/P97b/zcfuszxVyz28MV/GXjm4Vz7HwAAACZoZP9/orf/f7Panw941TPLb73ZwDOP5Nr/AAAAMEEj+/+I3v6/5SOvu2OlPz32sg8MPDPrnwmw/wEAAGCCRvb/J3v7/7dXP7nGVausdM1vBp75a679DwAAABM0sv+P7O3/W3/144WP2fKEky4beObRXPsfAAAAJmhk/3+qt/9v27351zs+tfWBOw0887dc+x8AAAAmaGT/f7q3/3/31AXbv+bYq1d6eOCZx3LtfwAAAJigkf3/md7+v33tfX54zYbtTW8aeObvufY/AAAATNDI/v9sb///fouNTjpp6TMO3mbgmcdz7X8AAACYoJH9f1Rv/9/xyGc++p7Hd3/HkwPPPJFr/wMAAMAEjez/o3v7/84XLf/Pz81zzLzrDjzzj1z7HwAAACZoZP9/rrf///CNP75gp+s2f/QPA8/M+mcC7H8AAACYoJH9f0xv/9/13V+ttvK3njn98YFn/plr/wMAAMAEjez/z/f2/93Pmf+2K/dZ/fVvHXjmqVz7HwAAACZoZP9/obf/7znhGwd8Zc9T5rxl4Jmnc+1/AAAAmKCR/f/F3v6/d7F3HL/XOTs+sv/AM8/k2v8AAAAwQSP7/9je/r9vpW0uXO2G6y/ea+CZf+Xa/wAAADBBI/v/S739f/9RJ239s9nn2voXA888m2v/AwAAwASN7P/jevv/gZ9v8q/r77n34z8feGXWh/0PAAAAEzSy/4/v7f8/7vPJhddYdYlddx94ZdYfY/8DAADABI3s/y/39v+D7/ruGrtvdeSKBw28UubD/gcAAIAJGtn/J/T2/5/u+MAdXz5so1/+buCVKh/2PwAAAEzQyP4/sbf/H3rz1R+9/PibT3jLwCt1Pux/AAAAmKCR/X9Sb///+YnipBXWX2D/RwdeafJh/wMAAMAEjez/r/T2/8N3v/aHuyx50XL3DrzS5sP+BwAAgAka2f9f7e3/R97+zPZffHK/X7x+4JUuH/Y/AAAATNDI/j+5t///st4aV31hkUMveWbglVl/vv0PAAAAEzSy/0/p7f+//uupJXa9Yp1tdxh45Tn5sP8BAABggkb2/6m9/f/og5c3K5760Mw3DLzy3HzY/wAAADBBI/v/tN7+/9tbuvsvO2jZPz448Mps+bD/AQAAYIJG9v/Xevv/sSu+9/oTdj7n5F0GXpk9H/Y/AAAATNDI/v96b///fb99v77bpfus/ZOBV+bIh/0PAAAAEzSy/0/v7f/H93zjYavfccf8vxp4Zc582P8AAAAwQSP7/xu9/f/EzUft8otqkcf2GXhlrnzY/wAAADBBI/v/jN7+/8cx213x8/mv/PjbBl6ZOx/2PwAAAEzQyP4/s7f/n3zZCS9e9Zp618cGXpknH/Y/AAAATNDI/j+rt///ufopxZ5nnrXi3QOvzNr99j8AAABM0Mj+/2Zv/z/18V3v/uoH9vjl2gOvzJsP+x8AAAAmaGT/n93b/0/P9+t1f7Lb4ydcN/DKfPmw/wEAAGCCRvb/t3r7/5lvz3vKKuevsv97B16ZPx/2PwAAAEzQyP7/dm///+sHLz9455uOX26/oVfyYf8DAADABI3s/+/09v+zMx7Z6eiZW/3i1oFXFsiH/Q8AAAATNLL/z/mP/V/MuKH+3TyPnHbJjgOvvCAf9j8AAABM0Mj+P7e3/4t3X7HmXSvutO0VA6+8MB/2PwAAAEzQyP4/r7f/y4P+sej3N7925q8HXlkwH/Y/AAAATNDI/v9ub/9XP1nzmfWPmuOPHxp4ZaF82P8AAAAwQSP7//ze/q/f9untFjnm6JOfGnhl4XzY/wAAADBBI/v/e7393zy04aV/3njTtd8+8MqL8mH/AwAAwASN7P/v9/Z/+4+9v3LRcs/Ov/HAK4vkw/4HAACACRrZ/xf09n+3zvcP3PDRNR97aOCVRfNh/wMAAMAEjez/C3v7f2Y7Y+7/3Suz/hz7HwAAACZoZP9f1Nv/z/nhqa+55I4j5j514JXF8mH/AwAAwASN7P8f9Pb/c884bqE/XrrUet8beOUl+bD/AQAAYIJG9v/Fvf0/2/O2f3LBne//+gIDryyeD/sfAAAAJmhk//+wt/9nP/iht6990P4PnTDwyhL5sP8BAABggkb2/yW9/T/Ha5a++LxTL55jtYFXlsyH/Q8AAAATNLL/f9Tb/3MuN/eX77ti/rcvN/DKUvmw/wEAAGCCRvb/pb39P9cXbt5v/kVuuvDTA6+8NB/2PwAAAEzQyP6/rLf/577pLYff+eTyP1t54JWX5cP+BwAAgAka2f+X9/b/PO85dtd5l3x4mS8MvPLyfNj/AAAAMEEj+/+K3v5/3v5nb/D69df66KEDryydD/sfAAAAJmhk//+4t//nvezdXzv/+EO+stjAK8vkw/4HAACACRrZ/z/p7f/5NrulfuSwhX/zrYFXXpEP+x8AAAAmaGT/X9nb//M/sMh9C291+8pzDbyybD7sfwAAAJigkf1/VW//P//pJa5+w6r77vSCgVeWy4f9DwAAABM0sv+v7u3/BTa4a8mL7znv0B8MvLJ8Pux/AAAAmKCR/f/T3v5/QfnKQy59dPe/njTwyivzYf8DAADABI3s/2t6+/+FFz6+85uWO2Pu1w288qp82P8AAAAwQSP7/2e9/b/g2deu84KN2/VeNvDKCvmw/wEAAGCCRvb/z3v7f6HnP/fkPx1z9dePHHhlxXzY/wAAADBBI/v/2t7+X/iwC2ecc9TWD7UDr7w6H/Y/AAAATNDI/r+ut/9ftOZBd627+QlzfG3glZXyYf8DAADABI3s/+t7+3+Rpdf78QIrrvT27w68snI+7H8AAACYoJH9/4ve/l/06I8tds8jj104z8Arq+TD/gcAAIAJGtn/N/T2/4t3evHXFpo518++OfDKqvmw/wEAAGCCRvb/jb39v9gt923wwE3XL/OcgVdWy4f9DwAAABM0sv9/2dv/L7n2d7v+8PwdP7rIwCuvyYf9DwAAABM0sv9/1dv/i39wwcM32e2Ur/xw4JXX5sP+BwAAgAka2f839fb/EvecseR8H1j9N68ceGX1fNj/AAAAMEEj+//Xvf2/5Pbvufr+M59Z+ZiBV9bIh/0PAAAAEzSy/2/u7f+lNnzrfd+9ZvOdDh94Zc182P8AAAAwQSP7/ze9/f/SvxxTrzX/MYe+dOCV1+XD/gcAAIAJGtn/t/T2/8vOX+vk9ZbbdNGzB15ZKx/2PwAAAEzQyP7/bW//v3zOj69zwaNH/2vOgVfWzof9DwAAABM0sv9v7e3/pRf84c53H7PmWS8ceGWdfNj/AAAAMEEj+/+23v5f5uT9D5l742c3unjglXXzYf8DAADABI3s/9/19v8rVvjpYhttvlO5ysAr6+XD/gcAAIAJGtn/t/f2/7JHzPnjC4867e4vDryyfj7sfwAAAJigkf3/+97+X+7EV9/10CNzXPCxgVc2yIf9DwAAABM0sv/v6O3/5Zd6dMaiK177thcPvPL6fNj/AAAAMEEj+//O3v5/5WtXOG6Rm1ZZ4ssDr7whH/Y/AAAATNDI/v9Db/+/6pDH9v/zzMevXHXglTfmw/4HAACACRrZ/3f19v8KX7x+m4t22+pzyw+8smE+7H8AAACYoJH9f3dv/6+4/MyLNjz/+L0/M/DKRvmw/wEAAGCCRvb/Pb39/+pLfvDCec6sVysGXnlTPux/AAAAmKCR/X9vb/+v1B341F0fuPKW0wZeeXM+7H8AAACYoJH9f19v/6887wa3fn/+PT59/sArG+fD/gcAAIAJGtn/9/f2/ypnHrzq+tectdfzB17ZJB/2PwAAAEzQyP5/oLf/V/3zZieufcc+i75q4JW35MP+BwAAgAka2f9/7O3/1bb8wkHnVef86/MDr2yaD/sfAAAAJmhk/z/Y2/+vWffbO9y38yJnHTbwymb5sP8BAABggkb2/596+/+1T+52yfyX3rHRUgOvbJ4P+x8AAAAmaGT/P9Tb/6vvceuLNj51nfKsgVfemg/7HwAAACZoZP//ubf/17hx4WcvOejQu2cOvLJFPux/AAAAmKCR/f9wb/+veeVSv//jIstesOjAK2/Lh/0PAAAAEzSy/x/p7f/XffTO1Re84qG3XTLwypb5sP8BAABggkb2/196+3+tX5/7h7OXXGCJbuCVrfJh/wMAAMAEjez/v/b2/9rv/VC1w5M3X/n1gVfeng/7HwAAACZoZP8/2tv/6xzw5pfMdvx+nztv4JWt82H/AwAAwASN7P+/9fb/upd/6rJ/rH/R3nMPvLJNPux/AAAAmKCR/f9Yb/+vt/lqO5621RKrnTjwyrb5sP8BAABggkb2/997+3/9Pz77sbccdu8taw68sl0+7H8AAACYoJH9/3hv/2/wzJWn1fds9OmXD7yyfT7sfwAAAJigkf3/RG//v/711dpPrHrkXp8aeGWHfNj/AAAAMEEj+/8fvf3/hurGe/92zTO77Trwyo75sP8BAABggkb2/5O9/f/GixboZsy/+ievHHjlHfmw/wEAAGCCRvb/P3v7f8NvLbvUWz9wzO2/HHhlp3zY/wAAADBBI/v/qd7+32iBP/3kG2duvvreA6/snA/7HwAAACZoZP8/3dv/bzr87e98+vzrP/D0wCvvzIf9DwAAABM0sv+f6e3/N7/uqx+fa7e5vrD9wCvvyof9DwAAABM0sv//1dv/Gy/z9W9sM/OUy9448Mou+bD/AQAAYIJG9v+zvf2/yed2Xv+Mm3Zc7E8Dr8z6PQHtfwAAAJig/3z/lzN6+/8thzzy7d+seMLmmw68sls+7H8AAACYoJH9X/T2/6avffmblnhk6/P+NvDK7vmw/wEAAGCCRvZ/2dv/my0/7157H/XYffcMvPLufNj/AAAAMEEj+7/q7f/Nv/jrow7dfKVug4FX9siH/Q8AAAATNLL/697+f2u36/K3bHzGxj8beGXPfNj/AAAAMEEj+7/p7f8tLjnlumWO2f07uw28slc+7H8AAACYoJH93/b2/9vOPOGhjz569VMfHXjlPfmw/wEAAGCCRvZ/19v/W8673ZyfXq5d8PZZ/+2c//HKe/Nh/wMAAMAEjez/mb39v9WWR511xKq37/bPgVf2zof9DwAAABM0sv+f09v/b//zG99wwD0Lf3KrgVf2yYf9DwAAABM0sv+f29v/Wz+57+7LH3be7ZsMvPK+fNj/AAAAMEEj+3+23v7fZt3vfep3W+27+p8HXtk3H/Y/AAAATNDI/p+9t/+3vbFb5hPrP/yBdwy88v582P8AAAAwQSP7f47e/t9uj8uvef/xy3/hxwOvfCAf9j8AAABM0Mj+n7O3/7f/6FMPvPjJQy67aeCVD+bD/gcAAIAJGtn/c/X2/w5XrvHcXy251mIfHHjlQ/mw/wEAAGCCRvb/3L39v+MqXz3qFVdcvPm1A6/slw/7HwAAACZoZP/P09v/7/jM2/e6Y5H9z3vPwCsfzof9DwAAABM0sv+f19v/Ox2/85s+ddBN93144JX982H/AwAAwASN7P95e/t/58W//u39Tp2/u23glQPyYf8DAADABI3s//l6+/+d5y4w5+KXHrHxlgOvHJgP+x8AAAAmaGT/z9/b/++a7caHbtj5jd/5+8ArH8mH/Q8AAAATNLL/n9/b/7ss+qfrDqvuf+qugVcOyof9DwAAABM0sv8X6O3/Xb++7PIfumOpBdcaeOWj+bD/AQAAYIJG9v8Levt/tz88+6l937/jFY8NvHJwPux/AAAAmKCR/f/C3v7ffZvVdj/4jFMWf9vAK4fkw/4HAACACRrZ/wv29v+7N6necNNP5/rQ2gOvfCwf9j8AAABM0Mj+X6i3//f4+5VnvXS+64+9e+CVQ/Nh/wMAAMAEjez/hXv7f89dP/TcA5+z+R3vHXjlsHzY/wAAADBBI/v/Rb39v9ft5z5w1K+PWfO6gVcOz4f9DwAAABM0sv8X6e3/91zzqWtu+97q77514JWP58P+BwAAgAka2f+L9vb/e/d98zIv2/2ZT+038Mon8vFv+7/6b/5LBgAAAP4Pjez/F/f2/97v+cx3X/7Z9skrBl45Ih/+/j8AAABM0Mj+X6y3//e5aaNNb93s6hfsOPDKJ/Nh/wMAAMAEjez/l/T2//su22fvz66w+5s+NPDKkfmw/wEAAGCCRvb/4r39v+/+FxzzkYfP+NavB175VD7sfwAAAJigkf2/RG//v/+BZoWl/rbSPW8feOXT+bD/AQAAYIJG9v+Svf3/gc1+fMOvl3+seWrglc/kw/4HAACACRrZ/0v19v8HN3jyr4dssvWmDw288tl82P8AAAAwQSP7/6W9/f+hp1837/s+f8I5Gw+8clQ+7H8AAACYoJH9/7Le/t/vwj9f8MHD17pi94FXjs6H/Q8AAAATNLL/X97b/x8ul9ni8LcfsvjPB175XD7sfwAAAJigkf2/dG//7//8ed5/42rLf+h3A68ckw/7HwAAACZoZP8v09v/B5z9m2Nfcu/Dxx408Mrn82H/AwAAwASN7P9X9Pb/gWu+a+UP/2PfOx4deOUL+bD/AQAAYIJG9v+yvf3/kcNOu+nIJc5b8y0Dr3wxH/Y/AAAATNDI/l+ut/8POvr4v/9+vYX/H+z9afjV4//v//NapigkQzKFjJmSeR4yy0yGTJmHEGUImcoQQlGiDJFCCBUyhAxJyDxkSpkKJUQy/I//Ps72Pvc+1/E99+f4/b7H77xwu116Wno/jnX13mu13qfuVmelbzj0PwAAABQo0/8bRv1/ybpHL7f+rZ9d+3WdlX7h0P8AAABQoEz/bxT1/6Wtvuva4JI15xxdZ+XWcOh/AAAAKFCm/1tF/X/ZtRvc+uc93zb9u85K/3DofwAAAChQpv83jvr/8juXfurhsXvsPa3Oym3h0P8AAABQoEz/t476/4o13jniyFWufmj3Oiu3h0P/AwAAQIEy/b9J1P/dnzhm7kLVMlNfqrMyIBz6HwAAAAqU6f9No/7v0ei+5X/7/L0FT6yzMjAc+h8AAAAKlOn/zaL+v3L5AVvc/VzX/TvVWbkjHPofAAAACpTp/82j/r/qnsM/OaDD08PfrbNyZzj0PwAAABQo0/9bRP1/9bdXdzukz4SR29dZuSsc+h8AAAAKlOn/LaP+v+bIfQYM3rfRQQPrrNwdDv0PAAAABcr0/1ZR//fco/OzP294z3w966wMCof+BwAAgAJl+n/rqP+v/eWxo6tfOkxeu87KPeHQ/wAAAFCgTP9vE/X/dcfO9+9hP/079N46K/Ne0/8AAABQoEz/bxv1//WTXlnpgY2322OhOiuDw6H/AQAAoECZ/t8u6v9eb/21zT8H3LhS4zor94VD/wMAAECBMv2/fdT/N3TZ6vNGvfb/6/E6K0PCof8BAACgQJn+3yHq/xs3fWb1P055oFeDOitDw6H/AQAAoECZ/t8x6v+bbuj6wmIjTzvzwTor94dD/wMAAECBMv2/U9T/vW/f4cuj339562fqrDwQDv0PAAAABcr0/85R//dZ9cpqWIMFPlm5zsq8zwTofwAAAChQpv/bRP1/8+ObDPp96f59etdZGRYO/Q8AAAAFyvT/LlH/39Jg1g4LjDv07I3qrDwUDv0PAAAABcr0/65R//ddadyx+w2dveZadVYeDof+BwAAgAJl+n+3qP/7DVn8ins6b/5qjzorj4RD/wMAAECBMv2/e9T/t075dK0hHX4YOajOyvBw6H8AAAAoUKb/94j6v/9hzV4+6Ln1D6q38mg49D8AAAAUKNP/e0b9f1vb5lPn+/yK+Zars/JYOPQ/AAAAFCjT/3tF/X/7798s9Eu10+SRdVYeD4f+BwAAgAJl+n/vqP8HnHDQfUNX+WLolnVWRoRD/wMAAECBMv3fNur/gV/0bnPE2JX3uL3OyrzPBOh/AAAAKFCm//eJ+v+O14eesMQ9w1e6rs7KqHDofwAAAChQpv/3jfr/zk5nXPXXJZ3+2qDOyhPh0P8AAABQoEz/7xf1/11XTKhqt/bsdXOdlSfDof8BAACgQJn+3z/q/7u3XPTLmW32OnOzOitPhUP/AwAAQIEy/X9A1P+D1t/ohXtbfL31qnVWRodD/wMAAECBMv1/YNT/9/SbvXq7P1p8ckWdlafDof8BAACgQJn+Pyjq/3sXbHNFw6+f6rNEnZVnwqH/AQAAoECZ/j846v/BYy4/9t8tzz/7oTorz4ZD/wMAAECBMv1/SNT/9z345A4PHvbBmqPrrDwXDv0PAAAABcr0f7uo/4c07jbo0B7Lvdq0zsqYcOh/AAAAKFCm/w+N+n/owcMWav/ce0f0qbPyfDj0PwAAABQo0/+HRf1//4xTpz7SYZnRreqsvBAO/Q8AAAAFyvT/4VH/PzB3v5fnVk//tGadlRfDof8BAACgQJn+PyLq/wd37LvWIp93XaJ7nZWx4dD/AAAAUKBM/7eP+n/Yuy2uOnDst7suUmflpXDofwAAAChQpv+PjPr/oVO+OuGuVdYc8kCdlZfDof8BAACgQJn+Pyrq/4cv/qjNr5dc/cuzdVZeCYf+BwAAgAJl+v/oqP8feXXl+xa+Z4+lVqmz8mo49D8AAAAUKNP/x0T9P/yTz7dbqM1jxwyuszIuHPofAAAACpTp/2Oj/n/0mKaf/nbrOZctXGfltXDofwAAAChQpv87RP3/WOfV/r77j8/eX7LOyvhw6H8AAAAoUKb/j4v6//E3p65yQIsVN3mszsrr4dD/AAAAUKBM/x8f9f+I9oeMabDlZRdvV2dlQjj0PwAAABQo0/8nRP0/8psbj/zz6x0GDKiz8kY49D8AAAAUKNP/J0b9P2rWAxc93OOncdfWWXkzHPofAAAACpTp/5Oi/n9i99PvOPKwDddZp87KW+HQ/wAAAFCgTP+fHPX/kw2f2+qwfX89YvE6KxPDof8BAACgQJn+PyXq/6dGnf/RA302HT2szsrb4dD/AAAAUKBM/58a9f/oQTvN+eeX2396us7KO+H4n/2/1RL/fe8ZAAAA+M9k+v+0qP+fbtp9hUYbHr7E8nVW3g2H5/8AAABQoEz/nx71/zM9N3v6kI1f3fWWOivvhUP/AwAAQIEy/d8x6v9nN5p52OCfFhqyeZ2V98Oh/wEAAKBAmf4/I+r/51qMP//nXkN/aV5n5YNw6H8AAAAoUKb/z4z6f8wdDW+rDjhlqcvrrHwYDv0PAAAABcr0/1lR/z+/yZG7jRjZ+5gt6qx8FI55/T//f+NbBgAAAP5Dmf7vFPX/C71uH7zbKQdedludlY/D4fk/AAAAFCjT/2dH/f/ibXd3b9Lg7/evr7PySTj0PwAAABQo0//nRP0/tvlJJ375/jabbFhnZVI49D8AAAAUKNP/naP+f+mx9195etzdF99TZ+XTcOh/AAAAKFCm/7tE/f/yIk1a7L70MQPqfLff/J+FQ/8DAABAgdL+fy36v9W5Uf+/suI6C67Y+c1xy9ZZ+Twc+h8AAAAKlHn+f17U/6/eN+PbGUOXWGdEnZUvwqH/AQAAoECZ/j8/6v9xX2278/TDzl/v0DorX4ZD/wMAAECBMv1/QdT/rx069+6mPZ564886K5PDof8BAACgQJn+7xr1//i9X7h076+X6/9jnZWvwqH/AQAAoECZ/r8w6v/XZy/cYcyWH5y/b52VKeHQ/wAAAFCgTP9fFPX/hONHvji1xV6txtZZmRoO/Q8AAAAFyvT/xVH/v/H5Oc2X+6PnxGPrrHwdDv0PAAAABcr0f7eo/98cv8f8O9/aovu5dVa+CYf+BwAAgAJl+v+SqP/fOuuGKcPbfH3Ce3VWvg2H/gcAAIACZfr/0qj/J/bs8f5D96y83Bl1Vr4Lh/4HAACAAmX6/7Ko/9/eaOfNj7rki9kT6qx8Hw79DwAAAAXK9P/lUf+/0+KCZRddpdOgSXVWpoVD/wMAAECBMv1/RdT/794x5tc5Y4fvfEGdlenh0P8AAABQoEz/d4/6/72GjQ4a9Pn6i/5WZ+WHcOh/AAAAKFCm/3tE/f/+qNdH7V/9ML1dnZUfw6H/AQAAoECZ/r8y6v8PBv3cb8EOO43Zoc7KT+HQ/wAAAFCgTP9fFfX/h0037zL7uSuO+qrOyoxw6H8AAAAoUKb/r476/6P2X789a+ih671cZ2VmOPQ/AAAAFCjT/9dE/f/xN6u3nr9z/zdOqrPyczj0PwAAABQo0/89o/7/ZNbySx289Ob9z6qzMisc+h8AAAAKlOn/a6P+n7T7FzPvGzf7/HfqrPwSDv0PAAAABcr0/3VR/3/6Scf9/n7/tFZH1Vn5NRz6HwAAAAqU6f/ro/7/7JgHH1u8wQMT/6qz8ls49D8AAAAUKNP/vaL+/7zzTX0OP2WB7tPrrMwOh/4HAACAAmX6/4ao/794s12n+0e+fMIedVZ+D4f+BwAAgAJl+v/GqP+/3Oa3Xw85YLvlfqmz8kc49D8AAAAUKNP/N0X9P/nK1ssO7vXv7P3rrMwJh/4HAACAAmX6v3fU/1/1brD5zz/tP2jXOit/hkP/AwAAQIEy/d8n6v8pa7/1frXxjTtPrbMyNxz6HwAAAAqU6f+bo/6fOvriLodt2GjRk+uszPudgPofAAAACpTp/1ui/v96vqf7PfDLhOnj66z8HQ79DwAAAAXK9H/fqP+/WfqyUf/06TDmszor/4RD/wMAAECBMv3fL+r/bx/e7aBG+95z1CV1Vv4Nh/4HAACAAmX6/9ao/7+bdsvMBs0bX7tCulLNO/Q/AAAAFCjT//2j/v9+vwOX+vOviac+la5U4c/ofwAAAChRpv9vi/p/WptTWj88oNt2D6cr1bwPAOh/AAAAKFCm/2+P+n/6P4+8feQOY75omK5UtXDofwAAAChQpv8HRP3/w+krdVroyNX6XpquVAuEQ/8DAABAgTL9PzDq/x8/mNTnt8umnLdaulItGA79DwAAAAXK9P8dUf//9OLkx+6e3Hb1TdOVaqFw6H8AAAAoUKb/74z6f8b5a+13wLbXvdgvXakWDof+BwAAgAJl+v+uqP9nnvDtuAM/OW/4+ulKNe/n9T8AAAAUKNP/d0f9//MXq65710Kj9r8hXakahEP/AwAAQIEy/T8o6v9Zr6+w2K8nNl3w1nSlWjQc+h8AAAAKlOn/e6L+/6XTZ98vPPrjqVulK9Vi4dD/AAAAUKBM/98b9f+vU87co/2QNg+NSleqhuHQ/wAAAFCgTP8Pjvr/t8Puf/CRC3vsvXS6UjUKh/4HAACAAmX6/76o/2e37dNz7gotm9bSlWrxcOh/AAAAKFCm/4dE/f/77wefvMir0+bcna5US4RD/wMAAECBMv0/NOr/Px6/akLDt1tde2W6Ui0ZDv0PAAAABcr0//1R/89psOMG/zaaeWqLdKVqHA79DwAAAAXK9P8DUf//udKFSzzY8ajtWqcr1bzu1/8AAABQoEz/Pxj1/9whz/546KN3fnFTulI1CYf+BwAAgAJl+n9Y1P9/bbpE29qwqu9K6Uo173cC/l/1f51fIAAAAAD8N8r0/0NR//99w2uPzDxr7Hlj0pVqmXB4/g8AAAAFyvT/w1H//3P7L73uXbLj6kPTlWrZcOh/AAAAKFCm/x+J+v/fVTc9vd2EYS8umq5Uy4VD/wMAAECBMv0//H/1fzXfM8ue81nLdsOHpytV03DofwAAAChQpv8fjfp//oUm3rTB7333r9P41fLh0P8AAABQoEz/Pxb1f7XUtOFd+22x4ILpStUsHPofAAAACpTp/8ej/q8NXe+Aa/aaM3VIulKtEA79DwAAAAXK9P+IqP8X2OqOWe8ccvxDLdOVasVw6H8AAAAoUKb/R0b9v+Clhy65as/Be1+TrlQrhUP/AwAAQIEy/T8q6v+Fbu7Qqsu0xZreka5UK4dD/wMAAECBMv3/RNT/C29w77tXbjZ+zjbpSrVKOPQ/AAAAFCjT/09G/b/Iqeeed/mrz/41MV2p5v2M/gcAAIACZfr/qaj/G0wcfkunFS5a6ex0pVo1HPofAAAACpTp/9FR/y/6Us8Ra1z4zh4npCvVauHQ/wAAAFCgTP8/HfX/Yt32PuSDIU2GvpquVKuHQ/8DAABAgeZf9v985X/r/2ei/m/4wz+zrx/da/Je6UrVIhz6HwAAAAqUef7/bNT/jQ7ZYuluJ+473/fpSrVGOPQ/AAAAFCjT/89F/b/4TtWm6y40+aB/0pVqzXDofwAAAChQpv/HRP2/xB8vffjxJ81Htk9XqrXCof8BAACgQJn+fz7q/yWf3Gnd9bad9Oo36Uq1djj0PwAAABQo0/8vRP3fuOo+7ovJzdZsk65U64RD/wMAAECBMv3/YtT/Sy373PfXXjbi7APTlWrdcOh/AAAAKFCm/8dG/d9k2PmLnX9klz4/pytVy3DofwAAAChQpv9fivp/6e3GP7j6Dt99cnG6Uq0XDv0PAAAABcr0/8tR/y/TveEeEwess/UX6Uq1fjj0PwAAABQo0/+vRP2/7I2bndz9r6vOHJeuVBuEQ/8DAABAgTL9/2rU/8utO7Pnec137XVqulJtGA79DwAAAAXK9P+4qP+bnrHaBudsNvCvtulKtVE49D8AAAAUKNP/r0X9v/x7UydcOq39SjPSlapVOPQ/AAAAFCjT/+Oj/m/2/Oc/vtdz1h5/pCvVxuHQ/wAAAFCgTP+/HvX/Cl2bLrHWIa2HHp6uVK3Dof8BAACgQJn+nxD1/4rfPfDIRXs9PPmDdKXaJBz6HwAAAAqU6f83ov5f6YDT297Q78z5Oqcr1abh0P8AAABQoEz/vxn1/8q7HnL6pN9fOOi4dKXaLBz6HwAAAAqU6f+3ov5f5a8be63dcr6RL6Qr1ebh0P8AAABQoEz/T4z6v/niGy/24YS5r16YrlRbhEP/AwAAQIEy/f921P+rjvj1+xZLbrXmx+lKtWU49D8AAAAUKNP/70T9v9pdb44766ybz34zXam2Cof+BwAAgAJl+v/dqP9Xb7bIulcMO7jP6elKtXU49D8AAAAUKNP/70X93+Lq0T0/enTcJ1+mK9U24dD/AAAAUKBM/78f9f8aG190csuODbbeKV2ptg2H/gcAAIACZfr/g6j/11xz1z0uaTTkzIPTlWq7cOh/AAAAKFCm/z+M+n+tAZc+eN3bJ/b6PV2ptg+H/gcAAIACZfr/o6j/1/7ogCWunjZ4qYvSlWqHcOh/AAAAKFCm/z+O+n+dDjf/eOFmx//yebpS7RgO/Q8AAAAFyvT/J1H/r3vuwxM2PGT8kNfSlWredwLqfwAAAChQpv8nRf3fcsLJG3zac7FdT0tXqp3DUa//5/9/+S0DAAAA/6FM/38a9f96R33S66p+fZf4Nl2p2oTD838AAAAoUKb/P4v6f/2pK57eea92P+2SrlTzXtP/AAAAUKBM/38e9f8GM9ds27zlnNEHpCvVruHQ/wAAAFCgTP9/EfX/hnt++ci7v29xxMx0pdotHPofAAAACpTp/y+j/t+oXfPN31ly7Dp7pivV7uHQ/wAAAFCgTP9Pjvq/1Y/fvL/qhGrcd+lKtUc49D8AAAAUKNP/X0X9v/GcT3/tMmzYgH/TlWreZwL0PwAAABQo0/9Tov5vvXOzZa88q+PFR6Yr1V7h0P8AAABQoEz/T436f5O3h476rOPMTd5OV6q9w6H/AQAAoECZ/v866v9NTzvjoA0ebfX+OelK1TYc+h8AAAAKlOn/b6L+3+ySg7p0ffvOy45PV6p9wqH/AQAAoECZ/v826v/NX+7d75pGRx3zSrpS7RsO/Q8AAAAFyvT/d1H/b3HZDq2vX6HHUpPTlWq/cOh/AAAAKFCm/7+P+n/Lra98u9urbX7ZOV2p9g+H/gcAAIACZfp/WtT/W234zMx1h0wbclC6Uh0QDv0PAAAABcr0//So/7e+petSH1/YctfZ6Up1YDj0PwAAABQo0/8/RP2/zcLjHrv8xFFLdE1XqnmfCdD/AAAAUKBM//8Y9f+2zy6+X6fR5/30UbpSHRwO/Q8AAAAFyvT/T1H/b3f/Jp3W+OTj0W+lK9Uh4dD/AAAAUKBM/8+I+n/7JrP6fLBQ0yM6pitVu3DofwAAAChQpv9nRv2/w1P37HPM5CnrfJiuVIeGQ/8DAABAgTL9/3PU/zvWThjWZ9vVxnVJV6rDwqH/AQAAoECZ/p8V9f9Oyx19/atHXjegQ7pSHR4O/Q8AAAAFyvT/L1H/7/xQ/zM3uaztxc+nK9UR4dD/AAAAUKBM//8a9X+b7Vu+deaAiZvsna5U7cOh/wEAAKBAmf7/Ler/XXr8uP6AHRq//1O6Uh0ZDv0PAAAABcr0/+yo/3e96cOG45qPuWxOulIdFQ79DwAAAAXK9P/vUf/v1rLxT1v/1e2YI9KV6uhw6H8AAAAoUKb//4j6f/czx+65faMGJzyRrlTHhEP/AwAAQIEy/T8n6v893l9w6IS3x3VfJl2pjg2H/gcAAIACZfr/z6j/93xh+2tuffTEiVW6UnUIh/4HAACAAmX6f27U/3tdOOe00zoOaXVXulIdFw79DwAAAAXK9P9fUf/v/f1er2901lbnr5euVMeHQ/8DAABAgTL9/3fU/20PvH6dscPm9u+VrlQnhEP/AwAAQIEy/f9P1P/77PbEIv0mHPxG/3SlOjEcof/rfEUAAAAA8P+ZTP//G/X/vn93mnb8kjevt/X/vlCL/8PzfwAAACjQf93/tfmi/t/vu3VOvfX3M4+6LF2pTg6H/gcAAIACZfp//qj/9z9gxtWntXx4zOrpSnVKOPQ/AAAAFCjT/1XU/wfs+v792+813/RN0pXq1HDofwAAAChQpv9rUf8f+FeTvSb0e2HRvulKdVo49D8AAAAUKNP/C0T9f9AZd0/v17P9zs3Sler0cOh/AAAAKFCm/xeM+v/g905qcPwhAwc9ma5UHcOh/wEAAKBAmf5fKOr/Q54/cu2NNms9+5F0pTojHPofAAAACpTp/4Wj/m/X9fbxY6fNWq5RulKdGQ79DwAAAAXK9P8iUf8fut0eZ7z61zonrJuuVGeFQ/8DAABAgTL93yDq/8O633DdJs2/6351ulJ1Cof+BwAAgAJl+n/RqP8Pv3HkQ8fssOvEO9OV6uxw6H8AAAAoUKb/F4v6/4h1z9m3z4CrWm2brlTnhEP/AwAAQIEy/d8w6v/2T74wY9xlzc5/NF2pOodD/wMAAECBMv3fKOr/I6uFG2195KT+TdKVqks49D8AAAAUKNP/i0f9f9Sy26535rZd3lggXanODYf+BwAAgAJl+n+JqP+PHjb3zQGTR6x3X7pSnRcO/Q8AAAAFyvT/klH/H3PUYXsdt9C+R62YrlTnh0P/AwAAQIEy/d846v9jp955/42f9BrzXLpSXRAO/Q8AAAAFyvT/UlH/d5g5+OqXRjeffn+6UnUNh/4HAACAAmX6v0nU/8ftedypm584edHF0pXqwnDofwAAAChQpv+Xjvr/+I/eHn/6hRftfFW6Ul0UDv0PAAAABcr0/zJR/5/QYbm17xzy7KA10pXq4nDofwAAAChQpv+Xjfr/xHPXb/D6q01mb5yuVN3Cof8BAACgQJn+Xy7q/5MmTJ++xQrvLHdjulJdEg79DwAAAAXK9H/TqP9PvnrLfbcZfvNbLdKV6tJw6H8AAAAoUKb/l4/6/5SN/33ordMP3uDKdKW6LBz6HwAAAAr0X/V/8ym1ZlH/n7rmy9fd3nBu15vSlerycOh/AAAAKFDm+f8KUf+fNqB2xskTt7q9dbpSXREO/Q8AAAAFyvT/ilH/n774o2+2fmPIO2PSlap7OPQ/AAAAFCjT/ytF/d9xxHnrPd/4xNYrpStVj3DofwAAAChQpv9Xjvr/jLvaNrq507iTFk1XqnnfCaj/AQAAoECZ/l8l6v8zm10746SHGlw5NF2prgqH/gcAAIACZfq/edT/Zy2813kn7jnr1zqNX10dDv0PAAAABcr0/6pR/3d69vpbbunbepnh6Up1TTj0PwAAABQo0/+rRf1/9v1PjHhh9sAdh6QrVc9w6H8AAAAoUKb/V4/6/5wmnQ7ZeN32dy2YrlTXhkP/AwAAQIEy/d8i6v/Ol42dfcrmL3x/TbpSXRcO/Q8AAAAFyvT/GlH/d9l6waVvmz7fIi3Tler6cOh/AAAAKFCm/9eM+v/cDbff9M1rH26/TbpS9QqH/gcAAIACZfp/raj/z7tlzofbtjvz2TvSleqGcOh/AAAAKFCm/9eO+v/8t1ues+WOI956Kl2pbgyH/gcAAIACZfp/naj/Lzjtx5vGD+yywQrpSnVTOPQ/AAAAFCjT/+tG/d/1kg+H3/H3pK4N05Wqdzj0PwAAABQo0/8to/6/8OXGB3RctdntD6crVZ9w6H8AAAAoUKb/14v6/6J298zabJur3lktXaluDof+BwAAgAJl+n/9qP8v/vGEJV/+ctfWl6Yr1S3h0P8AAABQoEz/bxD1f7c5R7e66dLvTuqXrlR9w6H/AQAAoECZ/t8w6v9Ldu7/bof261y5abpSzfs7Af0PAAAABcr0/0ZR/1966AbP7fr0O7/ekK5Ut4ZD/wMAAECBMv3fKur/y776rv3Ik5oss366UvUPh/4HAACAAmX6f+Oo/y+f/c7Fkxd+dset0pXqtnDofwAAAChQpv9bR/1/xd5L37nUpIvuujVdqW4Ph/4HAACAAmX6f5Oo/7t/ft/2e7wy+ful05VqQDj0PwAAABQo0/+bRv3f4/hjPhvdrPkio9KVamA49D8AAAAUKNP/m0X9f+VZh//1U9de7e9OV6o7wqH/AQAAoECZ/t886v+rxg9YeaX79n22lq5Ud4ZD/wMAAECBMv2/RdT/V/faZ/Ty7bZ4cka6Ut0VDv0PAAAABcr0/5ZR/1+zydWHTrt2zmFt05Vq3r8J0P8AAABQoEz/bxX1f8/mj13w3PR2jQ5PV6pB4dD/AAAAUKBM/28d9f+1t3W+ve3mfX/4I12p7gmH/gcAAIACZfp/m6j/r1vkla2XXXexwZ3TlerecOh/AAAAKFCm/7eN+v/6x+b7+OvZ49t8kK5Ug8Oh/wEAAKBAmf7fLur/Xvdt9cejfY9f8oV0pbovHPofAAAACpTp/+2j/r9hxb+a7bTn4J+PS1eqIeHQ/wAAAFCgTP/vEPX/je27fvvEQ0dd8XG6Ug0Nh/4HAACAAmX6f8eo/2/65pkF23S6s8OF6Up1fzj0PwAAABQo0/87Rf3fe9aVLZZs3Gqz09OV6oFw6H8AAAAoUKb/d476v8/uO7wy5Y2ZH76ZrlQPhkP/AwAAQIEy/d8m6v+bP5l14pMTO96xU7pSDQuH/gcAAIACZfp/l6j/bzlmk+57NRx2yZfpSvVQOPQ/AAAAFCjT/7tG/d+38+KDVzm9avl7ulI9HA79DwAAAAXK9P9uUf/3e3Pcbj8MHzv+4HSleiQc+h8AAAAKlOn/3aP+v7Vnsynf3df0ybPTlWp4OPQ/AAAAFCjT/3tE/d9/o0/nX6Hrx4dNTFeqR8Oh/wEAAKBAmf7fM+r/21p803zfZuc1ejVdqR4Lh/4HAACAAmX6f6+o/2+/o/mLz7wy6ocT0pXq8XDofwAAAChQpv/3jvp/QMPeHb6d1HLw9+lKNSIc+h8AAAAKlOn/tlH/Dxx10KVLLzytzV7pSjUyHPofAAAACpTp/32i/r9j0Bl373BSmyXbpyvVqHDofwAAAChQpv/3jfr/zqZDd3786R4//5OuVE+EQ/8DAABAgTL9v1/U/3dNW/SVvdt3u6JNulI9GQ79DwAAAAXK9P/+Uf/fvd+EFmMuHdPhm3Sleioc+h8AAAAKlOn/A6L+H9Rm9oLTv2y82c/pSjU6HPofAAAACpTp/wOj/r/nn42+bbrNxA8PTFeqp8Oh/wEAAKBAmf4/KOr/e0+/fLedV217xxfpSvVMOPQ/AAAAFCjT/wdH/T/4gzaDh/993SUXpyvVs+HQ/wAAAFCgTP8fEvX/fS926z514GotT01XqufCof8BAACgQJn+bxf1/5DznzxxuR2njB+XrlRjwqH/AQAAoECZ/j806v+h25z6YpOuzQ/ZOV2png+H/gcAAIACZfr/sKj/779yWPMv75v8xOR0pXohHPofAAAACpTp/8Oj/n+gd9/5R7yy75TZ6Ur1Yjj0PwAAABQo0/9HRP3/4Nr7TdmtWa/qoHSlGhsO/Q8AAAAFyvR/+6j/h43+aucVF26y10fpSvVSOPQ/AAAAFCjT/0dG/f/QfC3unjHpnQe6pivVy+HQ/wAAAFCgTP8fFfX/w0uvfOnTT1/0T8d0pXolHPofAAAACpTp/6Oj/n/k4Y867H7Ss6u8la5Ur4ZD/wMAAECBMv1/TNT/wx9v+ucel+7asUu6Uo0Lh/4HAACAAmX6/9io/x9t8HnT0e2vuu7DdKV6LRz6HwAAAAqU6f8OUf8/ttLULX/aZp2Pnk9XqvHh0P8AAABQoEz/Hxf1/+NDVpu00pffbdkhXaleD4f+BwAAgAJl+v/4qP9HbHrjhbv+3eWsn9KVakI49D8AAAAUKNP/J0T9P/KGQ/qPXHXETXunK9Ub4dD/AAAAUKBM/58Y9f+o209/cvKOzV4+Il2p3gyH/gcAAIACZfr/pKj/n1j1gcOXGjipxZx0pXorHPofAAAACpTp/5Oj/n/yhPP/Wfba+Q75PF2pJoZD/wMAAECBMv1/StT/T33x3Ipft3vhiYvSlertcOh/AAAAKFCm/0+N+n/06923fXTzM6eclq5U74RD/wMAAECBMv1/WtT/T3fa6Yudpj9cvZauVO+GQ/8DAABAgTL9f3rU/89MmXnJ8rNb77VLulK9Fw79DwAAAAXK9H/HqP+fPWyzgdPWnfXAt+lK9X449D8AAAAUKNP/Z0T9/1zbhs88t2f7f2amK9UH4dD/AAAAUKBM/58Z9f+Y38cf1bbvwFUOSFeqD8Oh/wEAAKBAmf4/K+r/54+8/Yq5nU7s+F26Un0UDv0PAAAABcr0f6eo/1/49shjF3loyHV7pivVx+HQ/wAAAFCgTP+fHfX/i7+ctEP7Nxp8dGS6Un0SDv0PAAAABcr0/zlR/4/d4+5BjzQet+W/6Uo1KRz6HwAAAAqU6f/OUf+/NKlJ9WvDg886J12pPg2H/gcAAIACZfq/S9T/Lx/7/pcLT7z5prfTleqzcOh/AAAAKFCm/8+N+v+VLjNeOHD4Vi+/kq5Un4dD/wMAAECBMv1/XtT/r761zup3nT63xfHpSvVFOPQ/AAAAFCjT/+dH/T/u2rlX3TvwulWvTleqL8Oh/wEAAKBAmf6/IOr/11pte0K7Hds+v266Uk0Oh/4HAACAAmX6v2vU/+PXWLhNbdUpN2+brlRfheP/pv9r/w/fMgAAAPAfyvT/hVH/v37nC/fN/Hu1LnemK9WUcHj+DwAAAAXK9P9FUf9PaHTOQg9+OWabJulKNTUc+h8AAAAKlOn/i6P+f+OJkVMP3abbZ4+mK9XX4dD/AAAAUKBM/3eL+v/Ne254uWH7idfcl65U34RD/wMAAECBMv1/SdT/by2/x1r/Xtr45AXSlerbcOh/AAAAKFCm/y+N+n/ilJ0bf3XStGbPpSvVd+HQ/wAAAFCgTP9fFvX/24f1+KXx0y3nrpiuVN+HQ/8DAABAgTL9f3nU/++0HfPOLpN6PLJYulJNC4f+BwAAgAJl+v+KqP/f/f2CjUYt3Gaf+9OVano49D8AAAAUKNP/3aP+f++E12/8sdnHC6+RrlQ/hEP/AwAAQIEy/d8j6v/3v2h09sqvNP3mqnSl+jEc+h8AAAAKlOn/K6P+/+D1zQ/c875Rj92YrlQ/hUP/AwAAQIEy/X9V1P8fdvr50ae6nnfgxulKNSMc+h8AAAAKlOn/q6P+/2jT1Zd59vRhqy6TrlQzw6H/AQAAoECZ/r8m6v+Pb/j6932Gd3z+iXSl+jkc+h8AAAAKlOn/nlH/f3L7Fx80mzj25rvSlWpWOPQ/AAAAFCjT/9dG/T9p1eU3+b5h1aVKV6pfwqH/AQAAoECZ/r8u6v9PH3/w5sca37lNr3Sl+jUc+h8AAAAKlOn/66P+/6xBx3N3fOOoz9ZLV6rfwqH/AQAAoECZ/u8V9f/nK7Vrt8xDM6/ZOl2pZodD/wMAAECBMv1/Q9T/Xwy5aeQ3nVqd3D9dqX4Ph/4HAACAAmX6/8ao/788uPVGy/cd32z1dKX6Ixz6HwAAAAqU6f+bov6fPOO3d6btudjcy9KVak449D8AAAAUKNP/vaP+/2ruW788t+7gR/qmK9Wf4fgf/X/Cf+9bBgAAAP5Dmf7vE/X/lB0bNG47+/h9NklXqrnh8PwfAAAACpTp/5uj/p/67tOPLjt9zsJPpivVX+HQ/wAAAFCgTP/fEvX/16dcfODXm2/xTbN0pfo7HPofAAAACpTp/75R/39z8W5nP9qu72ON0pXqn3DofwAAAChQpv/7Rf3/7auX3bjTte0OfCRdqf4Nh/4HAACAAmX6/9ao/7+74sBNdj3u2RseTFdq8w79DwAAAAXK9H//qP+/3/KWD0aOueiMBulKLfwZ/Q8AAAAlyvT/bVH/T1v/kd8nf/HOViunK7UqHPofAAAACpTp/9uj/p/e75Rllqo1mfRMulKb9w8A9D8AAAAUKNP/A6L+/2HBSSP3WLlX743SldoC4dD/AAAAUKBM/w+M+v/HMSu1G/3ivuf0TldqC4ZD/wMAAECBMv1/R9T/Pz241rk/DZq8Vo90pbZQOPQ/AAAAFCjT/3dG/T+j8eSbV+rW/JW10pXawuHQ/wAAAFCgTP/fFfX/zIarNlyx/6QRA9OV2ryf1/8AAABQoEz/3x31/8+jvv1pxi7NDt4+Xak1CIf+BwAAgAJl+n9Q1P+zBn321tNrjJh/7XSltmg49D8AAAAUKNP/90T9/0vTFdbffU6XL3umK7XFwqH/AQAAoECZ/r836v9fe95/fZOp392/ULpSaxgO/Q8AAAAFyvT/4Kj/f9vozDO/3GKd3e9NV2qNwqH/AQAAoECZ/r8v6v/ZLQ7eZ8ShV634eLpSWzwc+h8AAAAKlOn/IVH//35Hn2G7dd/178bpSm2JcOh/AAAAKFCm/4dG/f/HJzsusnPvgTdslq7UlgyH/gcAAIACZfr//qj/5xxz1bTh+7Q/4+Z0pTbvMwH6HwAAAAqU6f8Hov7/s/Ozr0/dYNZWV6QrtXndr/8BAACgQJn+fzDq/7lvXrjOcrNaT1o1Xak1CYf+BwAAgAJl+n9Y1P9/tX/tmr1nPNz7oXSltnQ49D8AAAAUKNP/D0X9//c3S5w2pvWZ5yyRrtSWCYf+BwAAgAJl+v/hqP//mbXpntMPfGGtpulKbdlw6H8AAAAoUKb/H4n6/9/dfxna9Ib5XhmdrtSWC4f+BwAAgAJl+n/4/+r/2ny3Nl22/8lzR9RZqc37TID+BwAAgAJl+v/RqP/nX+3zX08dsdXBg9KV2vLh0P8AAABQoEz/Pxb1f7XZ1Pe3e+/m+UemK7Vm4dD/AAAAUKBM/z8e9X/tutU2f2ORg79cLl2prRAO/Q8AAAAFyvT/iKj/F1j5xn59lxl3/+3pSm3FcOh/AAAAKFCm/0dG/b/gvYd0OeG1Brtvma7UVgqH/gcAAIACZfp/VNT/Cw0//aBW9w9ZcYN0pbZyOPQ/AAAAFCjT/09E/b/wog+MerHLiX9fl67UVgmH/gcAAIACZfr/yaj/F9nn/KVe6d74j2PSlf/5M/ofAAAACpTp/6ei/m/w63MzNz104vIvpiu1VcOh/wEAAKBAmf4fHfX/ol92f/vYLbq1fT9dqa0WDv0PAAAABcr0/9NR/y92+E6te08dM+y8dKW2ejj0PwAAABQo0//PRP3fcNzMPq/NWe3ruelKrUU49D8AAAAUKNP/z0b93+jszTpttcaUBQ5LV2prhEP/AwAAQIEy/f9c1P+Ln9hwvzN2abvfPulKbc1w6H8AAAAoUKb/x0T9v8Sn4x8b2P+6R39IV2prhUP/AwAAQIEy/f981P9LDth735O7nTf2kHSltnY49D8AAAAUKNP/L0T933jNng/dPmjUar+mK7V1wqH/AQAAoECZ/n8x6v+lNh5+3VsvNj13SrpSWzcc+h8AAAAKlOn/sVH/N7n63DO2WfnjfjumK7WW4dD/AAAAUKBM/78U9f/SzV5686Ram8/fSFdq64VD/wMAAECBMv3/ctT/y9xVrXfzFz22PzNdqa0fDv0PAAAABcr0/ytR/y87YotGz49pedr56Uptg3DofwAAAChQpv9fjfp/ucX/mdH6uGk9P0lXahuGQ/8DAABAgTL9Py7q/6Z7rrfX5l1a/fF3ulLbKBz6HwAAAAqU6f/Xov5ffua0+1+6f+byR6crtVbh0P8AAABQoEz/j4/6v9nUiVff+NpRbXdPV2obh0P/AwAAQIEy/f961P8rHLXsqcctc+ewaelKrXU49D8AAAAUKNP/E6L+X3HCveO3WKT6+sR0pbZJOPQ/AAAAFCjT/29E/b/SuR3Wfv29sQu8lK7UNg2H/gcAAIACZfr/zaj/V+5waIM7R3Tc7910pbZZOPQ/AAAAFCjT/29F/b/KR3dMP/3kYY92Sldqm4dD/wMAAECBMv0/Mer/5utuc0afG9qNfT1dqW0RDv0PAAAABcr0/9tR/69645/XHXNg39VOSVdqW4ZD/wMAAECB5l/4/3zlf+v/d6L+X6378w9t0nqLc7ulK7WtwqH/AQAAoECZ5//vRv2/+nYL7fvqjDn9Pk1XaluHQ/8DAABAgTL9/17U/y2GjZgxYNbxn++XrtS2CYf+BwAAgAJl+v/9qP/XWPbsRmduMHj7WelKbdtw6H8AAAAoUKb/P4j6f81q9/W23mex075OV2rbhUP/AwAAQIEy/f9h1P9rPdnrzXG9x/fcLV2pbR8O/Q8AAAAFyvT/R1H/r/1X+1Mn3N9g2QnpSm2HcOh/AAAAKFCm/z+O+n+dXW+7evsu434/I12p7RgO/Q8AAAAFyvT/J1H/r3vAXfeftsyJ91yQrtR2Cof+BwAAgAJl+n9S1P8tvztxr1tfG7LTpHSltnM49D8AAAAUKNP/n0b9v17X96aPfW+rxdqlK7U24dD/AAAAUKBM/38W9f/6zy/VYKNF5k77LV2p7RIO/Q8AAAAFyvT/51H/b/De2msff/LBz32VrtR2DYf+BwAAgAJl+v+LqP83POOn8f1G3Hz0DulKbbdw6H8AAAAoUKb/v4z6f6NzNjig74Fnrv9nulLbPRz6HwAAAAqU6f/JUf+3eu274Sfc8PCEQ9OV2h7h0P8AAABQoEz/fxX1/8afvXNTqxnz3bpvulLbMxz6HwAAAAqU6f8pUf+3Pmnpc15s/cIFP6Yrtb3Cof8BAACgQJn+nxr1/ya/3fdu/w3ab3RsulLbOxz6HwAAAAqU6f+vo/7fdN9jWp06a+DbY9OVWttw6H8AAAAoUKb/v4n6f7MjDl9yu96te7yXrtT2CYf+BwAAgAJl+v/bqP83nzxg1hv7zDr+3HSlNu87AfU/AAAAFCjT/99F/b/F4H0Oee3QdZbdP12p7RcO/Q8AAAAFyvT/91H/b7nK1SO26v7d77+kK7V5fyeg/wEAAKBAmf6fFvX/Vos9dssZU3e9Z2q6UjsgHPofAAAACpTp/+lR/2/9aOfzBm5x1U67piu1A8Oh/wEAAKBAmf7/Ier/bVZ/5cNX1mi22Ph0pXZQOPQ/AAAAFCjT/z9G/b9t//k23XTOpGknpyu1g8Oh/wEAAKBAmf7/Ker/7a7faulj+3d57pJ0pXZIOPQ/AAAAFCjT/zOi/t9+879m995lxNGfpSu1duHQ/wAAAFCgTP/PjPp/h4EPtWwxaN/1T0pXaoeGQ/8DAABAgTL9/3PU/zuuddprH3brNeHldKV2WDj0PwAAABQo0/+zov7fqfX+312xcvNb30lXaoeHQ/8DAABAgTL9/0vU/ztf02/Rs16cfMFZ6UrtiHDofwAAAChQpv9/jfq/zQprPNDyi4s2+itdqbUPh/4HAACAAmX6/7eo/3e5e8ruH9WeffuodKV2ZDj0PwAAABQo0/+zo/7fdeTHp1x3XJMee6QrtXl/J6D/AQAAoECZ/v896v/dlljl2kvGvHP89HSldnQ49D8AAAAUKNP/f0T9v/teb2x44T6Dj104XakdEw79DwAAAAXK9P+cqP/3+HmxN67uffylg9OV2rHh0P8AAABQoEz//xn1/55ft/rh01nj33ssXal1CIf+BwAAgAJl+n9u1P97Hf374htusNimS6YrtePCof8BAACgQJn+/yvq/73f2OXhzq37XjQgXakdHw79DwAAAAXK9P/fUf+3Pe+Kva+a0W7gduF/LhT9uRPCof8BAACgQJn+/yfq/32Oe6rjuzfMeW2ddKV2Yjj0PwAAABQo0///Rv2/78eX3ND8wC3WvjZdqZ0UDv0PAAAABfqv+3+B+aL+3+/FIx4/bMTYw1ulK7WTw6H/AQAAoECZ/p8/6v/9zx+4/wMnV0/3SVdqp4RD/wMAAECBMv1fRf1/wOlDzvpnkWEzuqcrtVPDof8BAACgQJn+r0X9f+AHx/Zu9F7HxddMV2qnhUP/AwAAQIEy/b9A1P8HtXl340Nem7nbA+lK7fRw6H8AAAAoUKb/F4z6/+B/lpk4eJlW9y2SrtQ6hkP/AwAAQIEy/b9Q1P+HTNvw55+73DlrlXSldkY49D8AAAAUKNP/C0f9326/75tU9x/V5Nl0pXZmOPQ/AAAAFCjT/4tE/X/o0ls/sdCYHsfelq7UzgqH/gcAAIACZfq/QdT/hz3898G/Hdfm0i3SlVqncOh/AAAAKFCm/xeN+v/w0a92vrs27b0N05Xa2eHQ/wAAAFCgTP8vFvX/EfPN3/eAL1puen26UjsnHPofAAAACpTp/4ZR/7fv/fhmDV4cddH86Uqtczj0PwAAABQo0/+Nov4/cu0u7/258nkD70lXal3Cof8BAACgQJn+Xzzq/6O22fe3h7t9/NqIdKV2bjj0PwAAABQo0/9L/P/7/9/a/3j96CuvWe7IQU3XXjZdqZ0XDv0PAAAABcr0/5LR8/9jOrfsPWiXKYcPS1dq54dD/wMAAECBMv3fOOr/Y9/88az9+6/29OLpSu2CcOh/AAAAKFCm/5eK+r/DJx/uv+Cc62Ysn67UuoZD/wMAAECBMv3fJOr/445p/PjsNdou/nS6UrswHPofAAAACpTp/6Wj/j9+1j1NHtpi4m6bpyu1i8Kh/wEAAKBAmf5fJur/E3Y/4eejpja+75Z0pXZxOPQ/AAAAFCjT/8tG/X9i+6MnLtp9zKzL05Vat3DofwAAAChQpv+Xi/r/pG/6bzzn0G5NmqcrtUvCof8BAACgQJn+bxr1/8mD9ur79y9bvH5zulK7NBz6HwAAAAqU6f/lo/4/pen1nRffcM66m6UrtcvCof8BAACgQJn+bxb1/6kNnzj48H3bdVs1XanN+04A/Q8AAAAFyvT/ClH/nzaq0xP39+l75xXpSm3ea/ofAAAACpTp/xWj/j+9xdjlZvVa7IMl0pVa93DofwAAAChQpv9Xivq/4x0L/jb/AeM3fyhdqfUIh/4HAACAAmX6f+Wo/8/ouf17B298/HGj05XaleHQ/wAAAFCgTP+vEvX/mRvN2ey+nwZf3jRdqV0VDv0PAAAABcr0f/Oo/89af8uHhzQ4auagdKV2dTj0PwAAABQo0/+rRv3fqd+/ex/0/p2N66zUrgmH/gcAAIACZfp/taj/z77i5Y7zjWy1y3LpSq1nOPQ/AAAAFCjT/6tH/X/OlrUbfjll5r0j05XateHQ/wAAAFCgTP+3iPq/84OPbji0c8cft0xXateFQ/8DAABAgTL9v0bU/10an/fGEUOHNbw9XaldHw79DwAAAAXK9P+aUf+fu2DbH5YYVx16XbpS6xUO/Q8AAAAFyvT/WlH/nzfm2sX/WnrsUxukK7UbwqH/AQAAoECZ/l876v/z5x72wB9V09cbpCu1G8Pxf/T/Av8dbxkAAAD4D2X6f52o/y/Y8c7dF/v843UfTFdqN4XD838AAAAoUKb/1436v+vBg085+rnzuj2TrtR6h0P/AwAAQIEy/d8y6v8LZxx37bAOo+5cOV2p9QmH/gcAAIACZfp/vaj/L7r47Za/X9Lyg97pSu3mcOh/AAAAKFCm/9eP+v/iV5d7bYF7pm2+UbpSuyUc+h8AAAAKlOn/DaL+7/bu+t/tN7bNcWulK7W+4dD/AAAAUKBM/28Y9f8lp0xf9J5VelzeI12p9QuH/gcAAIACZfp/o6j/Lz27/UlX/dFt5vbpSu3WcOh/AAAAKFCm/1tF/X/ZuNt6dG4xpvHAdKXW///H3p+FbT3+f9+/r+NzlJCx8DVkSsiQOUOSWYUolIRkjAxJpJBkSEgyJlNCmUPGzFOGZErGZJ6FJKL4r+yua9+2/fpf+/2775V94fFYetd5Hq/tXH1ux3l+jnDofwAAAChQpv83i/r/nI9uumWNXZbddXi6Urs2HPofAAAACpTp/82j/h961FG7vX3NG7esl67UxoRD/wMAAECBMv2/RdT/586d/tWw8/b68ZZ0pXZdOPQ/AAAAFCjT/1tG/X/e3stVgw68eMkG6Urt32cC6H8AAAAoUKb/t4r6//zu663Tapu1ui2brtRuCIf+BwAAgAJl+r911P8XfDJ7ykdffv7oA+lK7cZw6H8AAAAoUKb/t476f9gtbQ5/r8kVjx+artRuCof+BwAAgAJl+n+bqP8vbPbnkA1e2v/ghelKbWw49D8AAAAUKNP/20b9P3zxp28aPOGvRt+lK7Wbw6H/AQAAoECZ/t8u6v+LJjbY6eJTtv1mj3SlNi4c+h8AAAAKlOn/NlH/X7zWpM/e7T1+7PPpSu2WcOh/AAAAKFCm/7eP+v+Sa05epPmDR7U7Kl2p3RoO/Q8AAAAFyvR/26j/R1y8x5onvfNSk77pSu22cOh/AAAAKFCm/3eI+v/SrUY8N7RRo9/eTldq48Oh/wEAAKBAmf5vF/X/yFMXa3vq7DkX9E5XahPCof8BAACgQJn+3zHq/8umTvvovM02P+rVdKV2ezj0PwAAABQo0/87Rf0/6r25C9/sfP1mH6UrtTvCof8BAACgQJn+3znq/8t7bbb6WiN6vH1WulK7Mxz6HwAAAAqU6f9dov6/4ueznzr98meunZOu1O4Kh/4HAACAAmX6f9eo/6/ssNvBwzstMmifdKV2dzj0PwAAABQo0/+7Rf1/1SFnnPFxq3ta7Z6u1O4Jh/4HAACAAmX6f/eo/6/+4rEbNvr1xGlfpiu1e8Oh/wEAAKBAmf7fI+r/a246Ztv1v5z0+LPpSm1iOPQ/AAAAFCjT/+2j/h+98j3vfbBN/4N7piu1+8Kh/wEAAKBAmf7vEPX/tUtdMX/EgR82Oi1dqd0fDv0PAAAABcr0f8eo/8dM6rzKmeet/M076UrtgXDofwAAAChQpv/3jPr/uhafTG5xzQVjD0xXapPCof8BAACgQJn+3yvq/+uva3HgO7vs1u6vdKX2YDj0PwAAABQo0/97R/1/w7BVBwxp/k2TH9KV2kPh0P8AAABQoEz/d4r6/8bNPrj25D/W/23vdKX2cDj0PwAAABQo0//7RP1/09MDVr9k9bcumJuu1B4Jh/4HAACAAmX6f9+o/8cOfHLhWc8tf9QB6Urt0XDofwAAAChQpv87R/1/8wnnftRy3BOb7Ziu1B4Lh/4HAACAAmX6v0vU/+Om79T2/cFnvP15ulKbHA79DwAAAAXK9P9+Uf/fstvPN5zT69NrT0xXao+HQ/8DAABAgTL9v3/U/7cu2OqMvk+uMei1dKX2RDj0PwAAABQo0/8HRP1/2zdLHrzOxyNafZCu1J4Mh/4HAACAAmX6v2vU/+M7v/LUjEU7TRuQrtSeCof+BwAAgAJl+r9b1P8TVlhplbe2ubjzr+lK7elw6H8AAAAoUKb/D4z6//a7Pp6/5pd7PbBvulJ7Jhz6HwAAAAqU6f/uUf/f8cgX7/U/7/Ovd0tXas+GQ/8DAABAgTL9f1DU/3cuuta25x+4VoMv0pXac+HQ/wAAAFCgTP/3iPr/rpEjr525y1OdjklXas+HQ/8DAABAgTL9f3DU/3e3PGDAxtecdc8r6UrthXDofwAAAChQpv8Pifr/nrZ9Dhz4xxt/zkxXai+GQ/8DAABAgTL9f2jU//eee8fkC5svu8rgdKU2JRz6HwAAAAqU6f+eUf9PHH3s2sOe+673C+lK7aVw6H8AAAAoUKb/D4v6/76173pm0OobDDs6Xam9HA79DwAAAAXK9H+vqP/vb33VJ60Gn/fRSelK7d9nAup/AAAAKFCm/w+P+v+BS/ZZ9KNxu2z/VrpSezUc+h8AAAAKlOn/I6L+n/T/f6U2NRz6HwAAAAqU6f8jo/5/8Nbm7U7ptdKVC9KV2mvh0P8AAABQoEz/HxX1/0P3NTtsjUUfeub7dKU2LRz6HwAAAAqU6f+jo/5/eIn3hr798WlrtE9Xaq+HQ/8DAABAgTL9f0zU/490Wnzdd1+6q/MJ6UrtjXDofwAAAChQpv97R/3/6G9TX2je5PgHpqYrtTfDof8BAACgQJn+Pzbq/8c+nffFSac89/WH6Urt388E1P8AAABQoEz/Hxf1/+SDNmkwdMKiDU5PV2pvh0P/AwAAQIEy/d8n6v/HXz7ntvcevLHTb+lKbXo49D8AAAAUKNP/x0f9/0S/XXbZoPch93RNV2rvhEP/AwAAQIEy/X9C1P9PHn3WkYMb/fxnu3SlNiMc+h8AAAAKlOn/E6P+f2rmIxdc/M6mq3yWrtTeDYf+BwAAgAJl+v+kqP+fPu3b7ttu9krvbulK7b1w6H8AAAAoUKb/+0b9/8xrrR55efYSw/5MV2rvh0P/AwAAQIEy/X9y1P/Pvt909PUjbv3ox3Sl9kE49D8AAAAUKNP//aL+f+7wtwed0PmI7TulK7UPw6H/AQAAoECZ/j8l6v/nfznswy07zT/luXSl9lE49D8AAAAUKNP//aP+f6Hj+G1evHzrKw9LV2ozw6H/AQAAoECZ/j816v8XD71+pVG/XvXMqelK7eNw6H8AAAAoUKb/T4v6f8qXB/15WKuua0xPV2qzwqH/AQAAoECZ/h8Q9f9LYy885MiP11hn63Sl9kk49D8AAAAUKNP/p0f9//IqnR6/atFPn782Xal9Gg79DwAAAAXK9P/AqP9fWbr/9c/26jTyknSl9lk49D8AAAAUKNP/g6L+f/XBBwZv+uSIvq3Sldrn4dD/AAAAUKBM/58R9f/Udf8z69hxy289Ll2pfREO/Q8AAAAFyvT/mVH/v3b9lO1HD37r/f+kK7Uvw6H/AQAAoECZ/j8r6v9pFy5c9bXVz7hkhXSl9lU49D8AAAAUKNP/g6P+f33z7f5u+9wTfSalK7Wvw6H/AQAAoECZ/j876v83Xt70pbWb79ZsqXSl9k049D8AAAAUKNP/Q6L+f7Pf7y3f+OOCf+5KV2rfhkP/AwAAQIEy/X/O2YssUoV/vHX0a0uce836d05OV2rfhUP/AwAAQIEy/T80ev//7ZlLfHvaLt90+G+6Uvs+HPofAAAACpTp/3Oj/p/e6dH2Gx7Yv3ZlulL7IRz6HwAAAAqU6f/zov5/57fBd846b9JnrdOV2o/h0P8AAABQoEz/nx/1/4xPdx1+0ZcrP7RGulKbHQ79DwAAAAXK9P8FUf+/e9DQYwZs82HXc9KV2k/h0P8AAABQoEz/D4v6/73V9516RqtF1rk1Xan9HA79DwAAAAXK9P+FUf+/f+vVG1/66zPPN0xXar+EQ/8DAABAgTL9Pzzq/w/uu3vpDy8/ceQy6UptTjj0PwAAABQo0/8XRf3/4RLH/bhep3v63p+u1H4Nh/4HAACAAmX6/+Ko/z8a/f5e/TpvvnXbdKU2Nxz6HwAAAAqU6f9Lov6fufbq9549Ys7716Urtd/Cof8BAACgQJn+HxH1/8et1xkxfXaPSy5KV2rzwqH/AQAAoECZ/r806v9Zl3zeZ93Nru+zfrpS+z0c+h8AAAAKlOn/kVH/fzJ4x2/fe+eoZpenK7U/wqH/AQAAoECZ/r8s6v9PX7hgiQ0ajf9n03SlNj8c+h8AAAAKlOn/UVH/f/bmEy0H9250Z4t0pfZnOPQ/AAAAFCjT/5dH/f/5cYNeuvjBlzqcm67U/gqH/gcAAIACZfr/iqj/v5j/8jHvTti/tli6UlsQDv0PAAAABcr0/5VR/3+589LDm59yxWd3pCu1heHQ/wAAAFCgTP9fFfX/V123vPOkJts+9ES6Uvs7HPofAAAACpTp/6uj/v/6x1/bD33pr66rpyu1f8Kh/wEAAKBAmf6/Jur/b25f88cL7mr6VYd0pfr30P8AAABQoEz/j476/9vlv176lJOmN/wmXanC9+h/AAAAKFGm/6+N+v+7hjM3XmOZgV3+SVeqRcOh/wEAAKBAmf4fE/X/90+sMvXtqZPvPzhdqWrh0P8AAABQoEz/Xxf1/w+tbu8z7M0Wf72ZrlT/PgBA/wMAAECBMv1/fdT/P1554ohBjb9euV+6UtXDof8BAACgQJn+vyHq/9lD9r+31fHt9z4iXakahEP/AwAAQIEy/X9j1P8/bXf5Xh/dN+zeF9OVqmE49D8AAAAUKNP/N0X9/3OLLu/MPKDfzDPSlerf1+t/AAAAKFCm/8dG/f/LdVe23nj4/W0+TleqRuHQ/wAAAFCgTP/fHPX/nGH3rjDwu1WPeTldqRYPh/4HAACAAmX6f1zU/79u1nvuhVvNvPC4dKVaIhz6HwAAAAqU6f9bov6fe9OH+721Qbunv05XqiXDof8BAACgQJn+vzXq/99WXu2hNX8fsuau6UrVOBz6HwAAAAqU6f/bov6ft9S6V/e/ulX/zulKtVQ49D8AAAAUKNP/46P+/33Sp/3P7zj7ip/TlWrpcOh/AAAAKFCm/ydE/f/Hz5u/ec7BW371brpSLRMO/Q8AAAAFyvT/7VH/z+/w2+Z9h8xt2D9dqZYNh/4HAACAAmX6/46o//885PXl1vm0e5de6Ur1b/frfwAAAChQpv/vjPr/ry8a/Txj+zH3P52uVMuHQ/8DAABAgTL9f1fU/wtOnbzPJWs0+GvPdKVqEg79DwAAAAXK9P/dUf8vnHrm/WctmLLy7HSlahoO/Q8AAAAFyvT/PVH///3e7pe3vK733vPTlWqFcOh/AAAAKFCm/++N+v+fXkP6vt9uwr0HpSvViuHQ/wAAAFCgTP9P/N/9Xy1yxOYb7jq+y8xP05VqpXDofwAAAChQpv/vi/r/Px//Nu2hQaPa7JyuVP8Nh/4HAACAAmX6//6o/xd95fWfPlulzTH7pSvVyuHQ/wAAAFCgTP8/EPV/7aRGjZedsvDCeelKtUo49D8AAAAUKNP/k6L+rz6bfHeHD3o+PTBdqVYNh/4HAACAAmX6/8Go/+vdzuz0aIOxa76XrlSrhUP/AwAAQIEy/f9Q1P8N9tz9hB+PWrr/6+lK1Swc+h8AAAAKlOn/h6P+bzhvyMXNHpt2xfHpSrV6OPQ/AAAAFCjT/49E/b/Y/V3WW7njo5cNSVeqf1+j/wEAAKBAmf5/NOr/Rotd+cq3Vw84ae10pVozHPofAAAACpTp/8ei/l981Xu/f+L3Gc23SFeqtcKh/wEAAKBAmf6fHPX/Erf1brT3Biu+cFW6Uv37OwH6HwAAAAqU6f/Ho/5fcosPb2+61fCLV05Xqubh0P8AAABQoEz/PxH1f+MRq3X86ruOxz+SrlTrhEP/AwAAQIEy/f9k1P9LXbvusfcP/3Kbe9OVqkU49D8AAAAUKNP/T0X9v/Qanw7b8YDm7zVOV6p1w6H/AQAAoECZ/n866v9leh7df9J9s+54OF2p1guH/gcAAIACZfr/maj/l/1g7NW7H9+sY9N0pVo/HPofAAAACpTp/2ej/l9u2piHlm88cfVF05WqZTj0PwAAABQo0//PRf2//CkH7/fJm33/vul/fbnh//q+DcKh/wEAAKBAmf5/Pur/Jl/9NHfy1B8e3jBdqf79P/0PAAAABcr0/wtR/zftsf4Keyyz0QEj0pVqo3DofwAAAChQpv9fjPp/hT2Wb73qSUMXHZ2uVBuHQ/8DAABAgTL9PyXq/xXnvPPOT3ft9Pl26UrVKhz6HwAAAAqU6f+Xov5f6aGGfb9/bPRlq6Yr1Sbh0P8AAABQoEz/vxz1/3+XfObylY7qdtKT6Uq1aTj0PwAAABQo0/+vRP2/8kp/3b9ng3nNb09Xqs3Cof8BAACgQJn+fzXq/1Vu3n6fpz5o/cIS6Uq1eTj0PwAAABQo0/9To/5fdZNLf/5iyh0XX5CuVFuEQ/8DAABAgTL9/1rU/6sNb7/ciqscd/w66Uq1ZTj0PwAAABQo0//Tov5vdkO/zXce9MI2m6Ur1Vbh0P8AAABQoEz/vx71/+rNH3xz4vjqvZHpStU6HPofAAAACpTp/zei/l9jxor7dWr3zx0t05Vq63DofwAAAChQpv/fjPp/zT5vPvT4dW07DktXqm3Cof8BAACgQJn+fyvq/7UGfH/1NwtGrn5julJtGw79DwAAAAXK9P/bUf+v/exG/VdZY9+/t09Xqu3Cof8BAACgQJn+nx71f/N9bnyn3fZTH74vXanahEP/AwAAQIEy/f9O1P/rfHdg6wc+bXzA8ulK9e/vBOh/AAAAKFCm/2dE/d/i78NX+HrIuEWrdKVqGw79DwAAAAXK9P+7Uf+vu8utc5sc3Ovz29KVaodw6H8AAAAoUKb/34v6f71FTttnmaPGDt4oXanahUP/AwAAQIEy/f9+1P/rP3bf/Z8/1vOGS9OVasdw6H8AAAAoUKb/P4j6v+U9F13+8AfTXrkmXal2Cof+BwAAgAJl+v/DqP83aLJX310aLL3BtulKtXM49D8AAAAUKNP/H0X9v+H5/7y5+iqjej2UrlS7hEP/AwAAQIEy/T8z6v+N2myz+Q9Tugxtkq5Uu4ZD/wMAAECBMv3/cdT/G69XW+6R8QvfraUr1W7h0P8AAABQoEz/z4r6v9WoF37uOKjNVmPTlWr3cOh/AAAAKFCm/z+J+n+TS+vHdLhuyi6rpCvVHuHQ/wAAAFCgTP9/GvX/pls+N/zRdg1ufTRdqdqHQ/8DAABAgTL9/1nU/5utOf/OH9eY8Ms96UrVIRz6HwAAAAqU6f/Po/7ffMwO7Zst6L3MkulK1TEc+h8AAAAKlOn/L6L+36LRJd/u+uncA89OV6o9w6H/AQAAoECZ/v8y6v8tH+i4xEPbb/nIWulKtVc49D8AAAAUKNP/X0X9v9X4vi0/O3jMD1umK9Xe4dD/AAAAUKBM/38d9X/r1R5+adkh3Rtfna5UncKh/wEAAKBAmf7/Jur/rQ88sk/Tq4cMnpiuVPuEQ/8DAABAgTL9/23U/9t8Pm7EVx3b3fB/aPxq33DofwAAAChQpv+/i/p/299HN1hkkUVeqacrVedw6H8AAAAoUKb/v4/6f7u9Dt1rx99bbTA+Xam6hEP/AwAAQIEy/f9D1P9tZv3448rf3d9rg3Sl2i8c+h8AAAAKlOn/H6P+3/7IDZb+dqt+Qy9MV6r9w6H/AQAAoECZ/p8d9X/bvstu/MQBM9+9IV2pDgiH/gcAAIACZfr/p6j/d3j13al7D191qzbpStU1HPofAAAACpTp/5+j/m932PnL/nH817ucn65U3cKh/wEAAKBAmf7/Jer/HT9s9+sS97W4tXm6Uh0YDv0PAAAABcr0/5yo/3d6feBbh7457JfN05Wqezj0PwAAABQo0/+/Rv2/c//HN7mrcftlLktXqoPCof8BAACgQJn+nxv1/y5fLzXy92WmH7haulL1CIf+BwAAgAJl+v+3qP93Pfilk6upTR95Kl2pDg6H/gcAAIACZfp/XtT/u7Wf02Wfuyb/MCFdqQ4Jh/4HAACAAmX6//eo/3f/dYv7xp00sPHi6Up1aDj0PwAAABQo0/9/RP2/x8NfNR0/pPFiX6UrVc9w6H8AAAAoUKb/50f9377xGr/vd/DUb3dJV6rDwqH/AQAAoECZ/v8z6v8O/115xiLb93qiS7pS9QqH/gcAAIACZfr/r6j/O477aItfPx3X45d0pTo8HPofAAAACpTp/wVR/++56QlXTFjQtumZ6Up1RDj0PwAAABQo0/8Lo/7f66IJpx60xj9zZ6Ur1ZHh0P8AAABQoEz//x31/943juq6dLt9b3opXamOCof+BwAAgAJl+v+fqP87rbPfgwuuG7njselKdXQ49D8AAAAU6P/e//VFov7fZ5Mlt1xk0HGbv5GuVMeEQ/8DAABAgTL9/5+o//cd/sq7v46/462T05Wqdzj0PwAAABQo0/+LRv3f+Yaf542fUp1/ZLpS/fs3AfofAAAACpTp/1rU/12ab9Vkv1VeOHpKulIdFw79DwAAAAXK9H8V9f9+D507aekG3TbumK5UfcKh/wEAAKBAmf6vR/2//5I7HbDgg9Gvf5uuVMeHQ/8DAABAgTL93yDq/wNWGnDahMdaj/k7XalOCIf+BwAAgAJl+r9h1P9db37yyoOOmjewR7pSnRgO/Q8AAAAFyvT/YlH/d/uqz6aHnrTRYoPSleqkcOh/AAAAKFCm/xtF/X9gjzvevuuuH759P12p+oZD/wMAAECBMv2/eNT/3fcYOeePqTs9MS1dqU4Oh/4HAACAAmX6f4mo/w+ac8AySywztEefdKXqFw79DwAAAAXK9P+SUf/36PnFxH0aN2v6SbpSnRIO/Q8AAAAFyvR/46j/D/5grc7j3pw1d6d0peofDv0PAAAABcr0/1JR/x8ybaV+v9/X96b905Xq1HDofwAAAChQpv+Xjvr/0FM+vqw6fuKOv6cr1Wnh0P8AAABQoEz/LxP1f8/zz2jy1/COm++VrlQDwqH/AQAAoECZ/l826v/D2jw2b7EDhr/1U7pSnR4O/Q8AAAAFyvT/clH/91rv7Hd7bNX8/D/SlWpgOPQ/AAAAFCjT/8tH/X/4qN22vPe7L4/unq5Ug8Kh/wEAAKBAmf5vEvX/EYvMvXLu7wM2npGuVGeEQ/8DAABAgTL93zTq/yMf2+y0hhs8+vop6Up1Zjj0PwAAABQo0/8rRP1/1D2LHdCl44pjDk9XqrPCof8BAACgQJn+XzHq/6ObTJt009UzBj6TrlSDw6H/AQAAoECZ/l8p6v9j9ll1mVvajLy5f7pSnR0O/Q8AAAAFyvT/f6P+7/3dB3O6frLvzu+mK9WQcOh/AAAAKFCm/1eO+v/Yvz95u3b2Pys+na5U54RD/wMAAECBMv2/StT/x+3SYtOfe7Sd1ytdqYaGQ/8DAABAgTL9v2rU/31mXHHZnTuOe2p2ulKdGw79DwAAAAXK9P9qUf8f36dzv27X9zpkz3SlOi8c+h8AAAAKlOn/ZlH/nzDgmM5LLpy6+EHpSnV+OPQ/AAAAFCjT/6tH/X/is/dM/GfNxt/PT1eqC8Kh/wEAAKBAmf5fI+r/k2adsN7fL84bvXO6Ug0Lh/4HAACAAmX6f82o//seOeGVxiu3HvBpulJdGA79DwAAAAXK9P9aUf+f3HfU9wcOHL3hvHSlGh4O/Q8AAAAFyvT/2lH/93t1v0Z33Nbttf3SleqicOh/AAAAKFCm/5tH/X/KgV/d/svkF859L12pLg6H/gcAAIACZfp/naj/+3++RsdFj66OHJiuVJeEQ/8DAABAgTL93yLq/1N/X/nYAxresenx6Uo1Ihz6HwAAAAqU6f91o/4/ba+Pht364XFvvJ6uVJeGQ/8DAABAgTL9v17U/wMaLbXh2Ncm3vxNulKNDIf+BwAAgAJl+n/9qP9Pf+ClaZ2X7btzh3Sluiwc+h8AAAAKlOn/llH/Dxw/56cGfWeteHC6Uo0Kh/4HAACAAmX6f4Oo/wettkXj3+5uNu+fdKW6PBz6HwAAAAqU6f8No/4/49Lz775n4tCn+qUr1RXh0P8AAABQoEz/bxT1/5lbtut0cJ+dDnkzXamuDIf+BwAAgAJl+n/jqP/PWnPgCY2W/GHxF9OV6qpw6H8AAAAoUKb/W0X9P3jM4xf/+cZG3x+RrlRXh0P/AwAAQIEy/b9J1P9nn73Epx+3njH643SluiYc+h8AAAAKlOn/TaP+H7Lta7WNvl9xwBnpSjU6HPofAAAACpTp/82i/j9n49/XOv2iRzc8Ll2prg2H/gcAAIACZfp/86j/h16x6dPDuw547eV0pRoTDv0PAAAABcr0/xZR/5/bYGjPNzt8ee6u6Up1XTj0PwAAABQo0/9bRv1/3uO7nrPWVc2P/Dpdqa4Ph/4HAACAAmX6f6uo/8+fMHjcqfOGb/pzulLdEA79DwAAAAXK9H/rqP8vWO7RHc9r2fGNzulKdWM49D8AAAAUKNP/W0f9P+yA474c8mGbd55MV6qbwqH/AQAAoECZ/t8m6v8Lf7i74ckNF26xarpSjQ2H/gcAAIACZfp/26j/h/9xdYsWR3fpuUS6Ut0cDv0PAAAABcr0/3ZR/1+0077PvzN51JDb05VqXDj0PwAAABQo0/9tov6/+I3Pjxhx29IvrZOuVLeEQ/8DAABAgTL9v33U/5ccu875Zw6ctv4F6Up1azj0PwAAABQo0/9to/4fcdbq49dfueeZI9OV6rZw6H8AAAAoUKb/d4j6/9Ln39/1gxfHXrdZulKND4f+BwAAgAJl+r9d1P8jzz30kVZrdp89LF2pJoRD/wMAAECBMv2/Y9T/l7Ud3f2jhWOWbpmuVP9+JoD+BwAAgAJl+n+nqP9HtRw3aNj1Wx60fbpS3REO/Q8AAAAFyvT/zlH/Xz7yyNGDdpz72I3pSnVnOPQ/AAAAFCjT/7tE/X/Fou9us0aP3r8un65Ud4VD/wMAAECBMv2/a9T/Vz6y7Idvnz1hufvSlerucOh/AAAAKFCm/3eL+v+quzb484JPGux2W7pS3RMO/Q8AAAAFyvT/7lH/X73Cjyud0mbK+Cpdqe4Nh/4HAACAAmX6f4+o/6/pvMPjJ7Vc9Z2105VqYjj0PwAAABQo0//to/4f/c38Q4bOm7nFkHSl+veZAPofAAAACpTp/w5R/1+74LnB717Vr+dV6Up1fzj0PwAAABQo0/8do/4fs1v9+uYd7h+yRbpSPRAO/Q8AAAAFyvT/nlH/Xzf94e0Hd2310iPpSjUpHPofAAAACpTp/72i/r/+hL6zLr5o9vorpyvVg+HQ/wAAAFCgTP/vHfX/DQM7/v3e9+3ObJyuVA+FQ/8DAABAgTL93ynq/xufvmTVDVoPue7edKV6OBz6HwAAAAqU6f99ov6/abNWo6e/MXB203Sl+veZAPofAAAACpTp/32j/h877NtB6y45eemH05Xq0XDofwAAAChQpv87R/1/83Vvd+/Xp+lBN6Ur1WPh0P8AAABQoEz/d4n6f1yLpo+cPXH6Y4umK9XkcOh/AAAAKFCm//eL+v+WSeNX+vDu9r+OSFeqx8Oh/wEAAKBAmf7fP+r/W5c67M/1+g5bbsN0pXoiHPofAAAACpTp/wOi/r9t5YM+PGPZFrttl65UT4ZD/wMAAECBMv3fNer/8Tddv82lr309fnS6Uj0VDv0PAAAABcr0f7eo/yd80en6i+Y13+7/0PjV0+HQ/wAAAFCgTP8fGPX/7YdcOHhAyy8/mJiuVM+EQ/8DAABAgTL93z3q/zs6PHDIhh06jhifrlTPhkP/AwAAQIEy/X9Q1P93/tz/8VlXDT+xnq5Uz4VD/wMAAECBMv3fI+r/u3pNWfXci1ZscWG6Uj0fDv0PAAAABcr0/8FR/9/93n/+Pq3rjCkbpCvVC+HQ/wAAAFCgTP8fEvX/PVO3m7V26wGXt0lXqhfDof8BAACgQJn+PzTq/3tPXbj9G98/evIN6Uo1JRz6HwAAAAqU6f+eUf9PPG77W99ccqdFmqcr1Uvh0P8AAABQoEz/Hxb1/31v/rX7Wm8M/fT8dKV6ORz6HwAAAAqU6f9eUf/f/8IzR506caMHL0tXqlfCof8BAACgQJn+Pzzq/wcGNzz3vD4/7Ld5ulK9Gg79DwAAAAXK9P8RUf9P+vHB5h/37bvaU+lKNTUc+h8AAAAKlOn/I6P+f7Brvxc3unvigtXSleq1cOh/AAAAKFCm/4+K+v+hndt/ffprzSYsnq5U08Kh/wEAAKBAmf4/Our/h+dfWh++7Kz2E9KV6vVw6H8AAAAoUKb/j4n6/5EnDh47omG13aXpSvVGOPQ/AAAAFCjT/72j/n+04Zidz/zwhQ82SleqN8Oh/wEAAKBAmf4/Nur/x5Yf22v9yceN2DZdqd4Kh/4HAACAAmX6/7io/yfffvTZHxx9x4nXpCvV2+HQ/wAAAFCgTP/3ifr/8e3eWWPIwNYtmqQr1fRw6H8AAAAoUKb/j4/6/4khyz978m3zpjyUrlTvhEP/AwAAQIEy/X9C1P9PXrn+5y1e7Hb52HSlmhEO/Q8AAAAFyvT/iVH/P9Xqp/+8s/Lok2vpSvVuOPQ/AAAAFCjT/ydF/f/0eU9+dPjCXos8mq5U74VD/wMAAECBMv3fN+r/Z3YY0HbkmuM+XSVdqd4Ph/4HAACAAmX6/+So/5/dYKfVn9+x8YNLpivVB+HQ/wAAAFCgTP/3i/r/ucvOXdj6+qn73ZOuVB+GQ/8DAABAgTL9f0rU/8/Xtjq4z9n7rrZWulJ9FA79DwAAAAXK9H//qP9fePTnp27sMXLB2elKNTMc+h8AAAAKlOn/U6P+f/HuV254tU3bCVenK9XH4dD/AAAAUKBM/58W9f+UFZc8Y+tP/mm/ZbpSzQqH/gcAAIACZfp/QNT/L3X5+L02yw7b8/10pfokHPofAAAACpTp/9Oj/n/525W2ff219ncPSleqT8Oh/wEAAKBAmf4fGPX/KwvXWmXM3V/P75OuVJ+FQ/8DAABAgTL9Pyjq/1d3/2L+MX1brDQtXak+D4f+BwAAgAJl+v+MqP+nvnPAgZv3mbzvTulK9UU49D8AAAAUKNP/Z0b9/9qJIyc/PXHgxE/SlerLcOh/AAAAKFCm/8+K+n/aoDuuveKN6V/8nq5UX4VD/wMAAECBMv0/OOr/15/pM+DoJZvW909Xqq/Dof8BAACgQJn+P/vsRRZpGP7xxnZH7T3w+9mn/ZSuVN+EQ/8DAABAgTL9PyR6///NITfddWHrVlftla5U34ZD/wMAAECBMv1/TtT/b1157SUzuw55tnu6Un0XDv0PAAAABcr0/9Co/99u1ePEjS9qt/Yf6Ur1fTj0PwAAABQo0//nRv0//YnZr/e/auaxp6Qr1Q/h0P8AAABQoEz/nxf1/zsN19vo/A6rXjQjXal+DIf+BwAAgAJl+v/8qP9nLL/ckm+1vH/WM+lKNTsc+h8AAAAKlOn/C6L+f/f26bPXnNev7eHpSvXvZwLqfwAAAChQpv+HRf3/3o8NOqzzyYQ9d0lXqp/Dof8BAACgQJn+vzDq//e7Pj1hRpved3+VrlS/hEP/AwAAQIEy/T886v8Pdv7zwnN6TJn/S7pSzQmH/gcAAIACZfr/oqj/P5zf5ri+ZzdYqUu6Uv0aDv0PAAAABcr0/8VR/3903IhXW14/Zt9Z6Uo1Nxz6HwAAAAqU6f9Lov6f+eYe67+/Y/eJZ6Yr1W/h0P8AAABQoEz/j4j6/+MXTl7skjXnfnFsulLNC4f+BwAAgAJl+v/SqP9nDZ703VkLt6y/lK5Uv4dD/wMAAECBMv0/Mur/Ty5Z4cQhK0877eR0pfojHPofAAAACpTp/8ui/v+09RuXnPzi0le9ka5U88Oh/wEAAKBAmf4fFfX/Z2t/d1eL28Y+OyVdqf4Mh/4HAACAAmX6//Ko/z8fveHe7wzsufaR6Ur1Vzj0PwAAABQo0/9XRP3/xRI3zB5x9MJjv01XqgXh0P8AAABQoEz/Xxn1/5f3dVvyzMltLuqYrlQLw6H/AQAAoECZ/r8q6v+vbu210fofjprVI12p/g6H/gcAAIACZfr/6qj/v179ltc/aNil7d/pSvVPOPQ/AAAAFCjT/9dE/f/NQace9/FPj372Z7pS//fQ/wAAAFCgTP+Pjvr/208nXrjR5gNq3dKVevge/Q8AAAAlyvT/tVH/f/fb8Amnd5nRtVO6Ul80HPofAAAACpTp/zFR/3/fac8Owy9d8aEf05V6LRz6HwAAAAqU6f/rov7/Yebf3705avg/h6Ur9Soc+h8AAAAKlOn/66P+//HorRdba++OzZ5LV+r/PgBQ/wMAAECBMv1/Q9T/s/stuv6pG3/ZYXq6Um8QDv0PAAAABcr0/41R///08vOvnjen+Z2npiv1huHQ/wAAAFCgTP/fFPX/z9OrLuc2nfX+1HSl/u/r9T8AAAAUKNP/Y6P+/+WEZ+877eVmW5+QrtQbhUP/AwAAQIEy/X9z1P9zBv4xcu3bJ/Y5PV2pLx4O/Q8AAAAFyvT/uKj/f3267clv9O97yYfpSn2JcOh/AAAAKFCm/2+J+n9u54vfuuiYH57vmq7UlwyH/gcAAIACZfr/1qj/f/umwyYDJm20zm/pSr1xOPQ/AAAAFCjT/7dF/T9vwUnLbjh9aN/P0pX6UuHQ/wAAAFCgTP+Pj/r/990e+nXWYjuNbJeu1JcOh/4HAACAAmX6f0LU/38sekTXD5uN/uzodKW+TDj0PwAAABQo0/+3R/0//5GbH1zv2W61F9KV+rLh0P8AAABQoEz/3xH1/593XXPFGTfP6/pWulL/t/v1PwAAABQo0/93Rv3/1wqHnHrpWa0fOildqS8fDv0PAAAABcr0/11R/y8494cZ0w+/458F6Uq9STj0PwAAABQo0/93R/2/sG3LLdZ96rhmh6Qr9abh0P8AAABQoEz/3xP1/98tl2nab9YLHdqnK/UVwqH/AQAAoECZ/r836v9/Rs74/exadef36Up9xXDofwAAAChQpv8n/u/+ry/Sbvv2//nin/f3TVfqK4VD/wMAAECBMv1/X9T///nzrzvnbN1261/Tlfp/w6H/AQAAoECZ/r8/6v9FZz8z/LZuI/t8ka7UVw6H/gcAAIACZfr/gaj/a/s1PGb/c/e9ZLd0pb5KOPQ/AAAAFCjT/5Oi/q9efPClpUZPff6VdKW+ajj0PwAAABQo0/8PRv1fP6Nfy4W7Nl7nmHSlvlo49D8AAAAUKNP/D0X93+CY9kvcvs64voPTlXqzcPw/6P/6/9cfGQAAAPgfyvT/w//7C/WGb136bff5vUbOTFfqq4fD+/8AAABQoEz/PxK9/7/YVQfvdchiTa/cNF2p//sa/Q8AAAAFyvT/o1H/N9pwzL13T59+yuXpSn3NcOh/AAAAKFCm/x+L+n/xrceOmD9p4Brnpiv1tcKh/wEAAKBAmf6fHPX/Eucc3WfxYyY/0yJdqa8dDv0PAAAABcr0/+NR/y+5zDtT9+3fYtgd6Uq9eTj0PwAAABQo0/9PRP3f+I7lN7759q97L5au1NcJh/4HAACAAmX6/8mo/5d6cv2l573cfvvV05X6v38ToP8BAACgQJn+fyrq/6Wrn36sNx320RPpSn3dcOh/AAAAKFCm/5+O+n+ZXXov8/Ocfvc0TFfq64VD/wMAAECBMv3/TNT/y/5975zaxvd3ujVdqa8fDv0PAAAABcr0/7NR/y/33ZVvd9171VXuT1fqLcOh/wEAAKBAmf5/Lur/5ffpsukto2b+uUy6Ut8gHPofAAAACpTp/+ej/m/y7KeX/XNpuweuS1fqG4ZD/wMAAECBMv3/QtT/TQes22/JLkM6t01X6huFQ/8DAABAgTL9/2LU/yv0Wa1zt81bNVg/XalvHA79DwAAAAXK9P+UqP9XnPHhxDt/mv31RelKvVU49D8AAAAUKNP/L0X9v9KoRk3unb/llXelK/VNwqH/AQAAoECZ/n856v//rvf6vB7rzD1lqXSlvmk49D8AAAAUKNP/r0T9v3Kb395dbNfua/w3XalvFg79DwAAAAXK9P+rUf+vcv7mW/41eswzk9OV+ubh0P8AAABQoEz/T436f9UmQ6686dwGw1qnK/UtwqH/AQAAoECZ/n8t6v/V7tn9tC7dpvS+Ml2pbxkO/Q8AAAAFyvT/tKj/mz125gENt+69/TnpSn2rcOh/AAAAKFCm/1+P+n/1RSZPmvvFhI/WSFfq//5NgP4HAACAAmX6/42o/9eY899Nl6h1uefadKW+dTj0PwAAABQo0/9vRv2/5h6z3v5j1qhOW6cr9W3Cof8BAACgQJn+fyvq/7V6fDnnrqfarNIqXalvGw79DwAAAAXK9P/bUf+v/dXayxx6+MI/L0lX6tuFQ/8DAABAgTL9Pz3q/+anXDaxOqvnA/9JV+ptwqH/AQAAoECZ/n8n6v91pnXt/PvNYzuPS1fq24dD/wMAAECBMv0/I+r/Fh8c32/cs0s3mJSu1NuGQ/8DAABAgTL9/27U/+v2vPOyfZpN+3qFdKW+Qzj0PwAAABQo0//vRf2/XvPTt9xvncaDrk9X6u3Cof8BAACgQJn+fz/q//VveOrd8fOnXrtDulLfMRz6HwAAAAqU6f8Pov5vOfy8eb+O7jVtvXSlvlM49D8AAAAUKNP/H0b9v8EmOzdZZNdxrYanK/Wdw6H/AQAAoECZ/v8o6v8Nb/5l0kHd2h7VIF2p7xIO/Q8AAAAFyvT/zKj/N1qp9QETzv3nglvSlfqu4dD/AAAAUKBM/38c9f/GSzY+bcEX+779QLpS3y0c+h8AAAAKlOn/WVH/t3ro1SuX3nrkZsumK/Xdw6H/AQAAoECZ/v8k6v9N7lyi8VKzjmt3Z7pS3yMc+h8AAAAKlOn/T6P+33TZ135aWLtjbKN0pd4+HPofAAAACpTp/8+i/t+s/vu02w+vfmuWrtQ7hEP/AwAAQIEy/f951P+bP7Xpht2feqHJ4+lKvWM49D8AAAAUKNP/X0T9v8VGQy/+z83dDt4kXanvGQ79DwAAAAXK9P+XUf9vefWuJ8w5a/Tjo9KV+l7h0P8AAABQoEz/fxX1/1ZDB3e6rVnrb85LV+p7h0P/AwAAQIEy/f911P+tt3n07v2fnddo3XSl3ikc+h8AAAAKlOn/b6L+3/rM4xrtO32jQf+Hlfo+4dD/AAAAUKBM/38b9f82U+7+/ubFfrj25nSlvm849D8AAAAUKNP/30X9v+3bV78y75idpj2YrtQ7h0P/AwAAQIEy/f991P/b9d53vfqkoa1WTFfqXcKh/wEAAKBAmf7/Ier/Nn99PuyQ25sdNSZdqe8XDv0PAAAABcr0/49R/2+/4zrH3t1/1gXbpCv1/cOh/wEAAKBAmf6fHfV/2/1X7zi/ad+3N05X6geEQ/8DAABAgTL9/1PU/zv89P7ti788cbOL05V613DofwAAAChQpv9/jvq/3a7DTnl8447ttkpX6t3Cof8BAACgQJn+/yXq/x3/2fuqTnOGj70iXakfGA79DwAAAAXK9P+cqP93+v6Uh1cZ1fy3oelKvXs49D8AAAAUKNP/v0b9v/O+9+//zd5fNlkzXakfFA79DwAAAAXK9P/cqP93eW6R3x7oMuDgu9OVeo9w6H8AAAAoUKb/f4v6f9fTX1yx3aWPPr50ulI/OBz6HwAAAAqU6f95Uf/vdvyCrZr8tOI3K6Ur9UPCof8BAACgQJn+/z3q/93f3Xb615vPaPRYulI/NBz6HwAAAAqU6f8/ov7f4/JvTvr82bFLHpCu1HuGQ/8DAABAgTL9Pz/q//brbzxqmWY9f5ybrtQPC4f+BwAAgAJl+v/PqP87bN/kgV3Omvbo5+lKvVc49D8AAAAUKNP/f0X93/GCt/Z9+Oalu+2YrtQPD8f/pP//8//yRwYAAAD+hzL9vyDq/z2b9vzlh6dGLftaulI/Ihze/wcAAIACZfp/YdT/e9172/KrH97l5xPTlfqR4dD/AAAAUKBM//8d9f/ek6/brGNt4S0D0pX6UeHQ/wAAAFCgTP//E/V/p/90f+ORWW12/SBdqR8dDv0PAAAABfq/93+DRaL+32fZGdtN2XpK657pSv2YcOh/AAAAKFCm//8T9f++dy7z/hZfNJjxbLpS7x0O/Q8AAAAFyvT/olH/d36q5R89z51wzjvpSv3YcOh/AAAAKFCm/2tR/3ep/7Dy5d16H35aulI/Lhz6HwAAAAqU6f8q6v/9rj7ksZd2ndvyr3Sl3icc+h8AAAAKlOn/etT/+290TbftRm/56oHpSv34cOh/AAAAKFCm/xtE/X/ANjeffuL8MTfuna7UTwiH/gcAAIACZfq/YdT/XYceMea6dbqf9UO6Uj8xHPofAAAACpTp/8Wi/u825aEdrtl8yJKvpiv1k8Kh/wEAAKBAmf5vFPX/gWeeNPO4n9r92DtdqfcNh/4HAACAAmX6f/Go/7v37rBgh0tnP3pWulI/ORz6HwAAAAqU6f8lov4/6O2Lm03t0qrbR+lKvV849D8AAAAUKNP/S0b932PHtk9evff9y+6TrtRPCYf+BwAAgAJl+r9x1P8H//VHjyNG9ft5TrpS7x8O/Q8AAAAFyvT/UlH/H/LTs2duMmfmLV+mK/VTw6H/AQAAoECZ/l866v9D969ufG7jVXfdPV2pnxYO/Q8AAAAFyvT/MlH/9xx/28ptXv669cJ0pT4gHPofAAAACpTp/2Wj/j9stZ5/vN60xYxD05X66eHQ/wAAAFCgTP8vF/V/r0bd3x/Tf9g5e6Qr9YHh0P8AAABQoEz/Lx/1/+EPXLfdMbe3P/y7dKU+KBz6HwAAAAqU6f8mUf8fsebGYzafNL3lUelK/Yxw6H8AAAAoUKb/m0b9f+SYb05/+pimrz6frtTPDIf+BwAAgAJl+n+FqP+PuvStblcsNvnGt9OV+lnh0P8AAABQoEz/rxj1/9FbNnns6OkDz+qbrtQHh0P/AwAAQIEy/b9S1P/H9H2x2eGD29z2QrpSPzsc+h8AAAAKlOn//0b93/vVRRaMHLdw96PTlfqQcOh/AAAAKFCm/1eO+v/YWdvOfP65LsuflK7UzwmH/gcAAIACZfp/laj/jztywQ6tVx815610pT40HPofAAAACpTp/1Wj/u/z+9439ll06cmHpCv1c8Oh/wEAAKBAmf5fLer/4/caduaNH0/rviBdqZ8XDv0PAAAABcr0f7Oo/0848P4erz7Zc6nv05X6+eHQ/wAAAFCgTP+vHvX/iZ+f8uTWvcb+1D5dqV8QDv0PAAAABcr0/xpR/5/096QW25zX/fpf05X6sHDofwAAAChQpv/XjPq/7y4nP//KgWPO2DddqV8YDv0PAAAABcr0/1pR/5+8zx5f3rDNluvtlq7Uh4dD/wMAAECBMv2/dtT//b4b0fD4L+e+/EW6Ur8oHPofAAAACpTp/+ZR/58yoM34rf7offYx6Ur94nDofwAAAChQpv/Xifq//7N/7vpC8wmHvZKu1C8Jh/4HAACAAmX6v0XU/6fOePqIy3ZpsOXMdKU+Ihz6HwAAAAqU6f91o/4/rU+D83tdM2X64HSlfmk49D8AAAAUKNP/60X9P2C96WsdNWLV27qlK/WR4dD/AAAAUKBM/68f9f/po5Z7+srOM3f/M12pXxYO/Q8AAAAFyvR/y6j/B56/3qfPbNZv+R/TlfqocOh/AAAAKFCm/zeI+n9Qm9m1zWbfP6dTulK/PBz6HwAAAAqU6f8No/4/454e43r/2mryc+lK/Ypw6H8AAAAoUKb/N4r6/8wm1+54bavZ3Q9LV+pXhkP/AwAAQIEy/b9x1P9nLXJTz2md2i11arpSvyoc+h8AAAAKlOn/VlH/D37sqHO2v3zIT9PTlfrV4dD/AAAAUKBM/28S9f/ZY9/86b+nDLz+hHSlfk049D8AAAAUKNP/m0b9P2SVFRt/N2HyGVPTlfrocOh/AAAA+P+x96fRV4//3/9P7NeWTBmTKZnHEEoyJ0QyZ0imZJ5lljEZ42NooAwliQyRDKmQociQmQxFkUzJmAz/C+fR/zx+v+O7vsc6z/X7rnVcuN2ueK73eu/H2lfv763XLlCm/7eI+v/ypTfZeNzEFdafmq7Ubg+H/gcAAIACZfq/ZdT/Vzzx7Rsdl3930vnpSu2OcOh/AAAAKFCm/7eM+v/K9Q45dcWGe1z6a7pSGxgO/Q8AAAAFyvT/VlH/9xp01/Uz37v6qM7pSm1QOPQ/AAAAFCjT/1tH/X/VNUMfGvnEulvtmK7U7gyH/gcAAIACZfq/VdT/vVse02nnE75+94t0pXZXOPQ/AAAAFCjT/62j/r/63JHftu9/05Sl0pXa3eHQ/wAAAFCgTP9vE/X/Na+f2/CJdvtuNiJdqd0TDv0PAAAABcr0f5uo/6/9qOP609f+t9uYdKU2OBz6HwAAAAqU6f9to/6/7pjrXl32j+17rZyu1IaEQ/8DAABAgTL93zbq/+t/2ubEPWYOmXxbulK7Nxz6HwAAAAqU6f/tov6/Yc9/r35mm6M3aZWu1IaGQ/8DAABAgTL9v33U/32OeGn4D4dMPr9ZulK7Lxz6HwAAAAqU6f8dov6/ceYie67Wa8n+l6crtWHh0P8AAABQoEz/7xj1/01De42edfRvs1unK7X7w6H/AQAAoECZ/t8p6v//rLHLAauMa9Xo9nSlNjwc+h8AAAAKlOn/naP+v7nR+T06fTbgiBvSldoD4dD/AAAAUKBM/+8S9f8tI8f3e7bBweNapCu1B8Oh/wEAAKBAmf5vF/X/rWst2errNV76fUi6UhsRDv0PAAAABcr0/65R/9824LX3lp+w6IoLpyu1h8Kh/wEAAKBAmf5vH/V/3xt++mXHIQ/svGK6Uns4HPofAAAACpTp/92i/u/XqtWKj19y0pBR6UrtkXDofwAAAChQpv93j/q//1kzH3vyhEen3JKu1B4Nh/4HAACAAmX6f4+o/wdMWmufdk+csdnm6UptZDj0PwAAABQo0/8dov6//dOVz1jmvc+7rZuu1B4Lh/4HAACAAmX6f8+o/+847vNbvmy4eq8r05Xa4+HQ/wAAAFCgTP/vFfX/wF9PafnU8ldMXixdqS14JqD+BwAAgAJl+r9j1P+DOj04Zc+JO2/yQLpSeyIc+h8AAAAKlOn/vaP+v/Ow/8xZ4/7vzh+brtRGh0P/AwAAQIEy/d8p6v+7pnde9ruzN+m/RrpSezIc+h8AAAAKlOn/faL+v3u5X/std8v7s4emK7WnwqH/AQAAoECZ/t836v97hrfsMa3TSo3q6Urt6XDofwAAAChQpv/3i/p/8NiGB4xq8fQRy6QrtWfCof8BAACgQJn+3z/q/yH1N0fv9vN54x5LV2pjwqH/AQAAoECZ/j8g6v97b7t4xVV/mPn79ulK7dlw6H8AAAAoUKb/D4z6f2iLMb/8uMXaKw5MV2oLvhNQ/wMAAECBMv1/UNT/92172Xtj9rt25+vSldq4cOh/AAAAKFCm/ztH/T/sst1a7d5nzyEbpCu18eHQ/wAAAFCgTP8fHPX//S/ddsteT1y9w+B0pfZcOPQ/AAAAFCjT/4dE/T/8kv3PGH/CHp/9Fyu158Oh/wEAAKBAmf4/NOr/B046YZ9vG3597UrpSu2FcOh/AAAAKFCm/w+L+v/BKY881uS9dU96Il2pTQiH/gcAAIACZfq/S9T/I3ZZbdldJo5pvk26UnsxHPofAAAACpTp/8Oj/n9o3tQ5jy5/wYQ70pXaS+HQ/wAAAFCgTP93jfr/4e+nT5lx9rv9rk9Xai+HQ/8DAABAgTL9f0TU/490Xq/lSvevcM6m6UrtlXDofwAAAChQpv+PjPr/0Q5fP7hipx8WvTVdqU0Mh/4HAACAAmX6/6io/0fOWXOPmbe0mLl1ulKbFA79DwAAAAXK9P/RUf8/NmOV40f+fNnINdOV2qvh0P8AAABQoEz/HxP1/+NdP7125xY77nNFulJ7LRz6HwAAAAqU6f9uUf+Pmnzahitv8enKS6crtcnh0P8AAABQoEz/Hxv1/xPnDJ84+4dV/3goXam9Hg79DwAAAAXK9H/3qP9HH33LN+P6PDbimXSl9kY49D8AAAAUKNP/x0X9/+SHBzbquN9ZHZukK7U3w6H/AQAAoECZ/j8+6v+nBvZ+ZI929++wQ7pSeysc+h8AAAAKlOn/E6L+f3rdnTo+0/+EzwalK7Up4dD/AAAAUKBM/58Y9f8zW1x48g9/vHLttelK7e1w6H8AAAAoUKb/T4r6f8zVY/ustnZ10vrpSu2dcOh/AAAAKFCm/0+O+v/Zpktv2n6bO5rfm67U3g2H/gcAAIACZfr/lKj/x949afITMw+dUKUrtffCof8BAACgQJn+PzXq/3Gjfv5+eq9f+jVOV2rvh0P/AwAAQIEy/X9a1P/jl9pq6WUP2eqcx9OV2gfh0P8AAABQoEz/nx71/3P3dnv73nFvLNowXal9GA79DwAAAAXK9P8ZUf8/v/rgzTofvfTMB9OV2kfh0P8AAABQoEz/nxn1/wuL92+8SIN7Rj6brtQ+Dof+BwAAgAJl+v+sqP8nPNr15zmfHbnP6ulKbWo49D8AAAAUKNP/Z0f9/2Lz7/Z/cMLfK9+crtQ+CYf+BwAAgAJl+r9H1P8v9d9w5MFrtP1js3Sl9mk49D8AAAAUKNP/50T9//L1y9y0xCU3j1gvXal9Fg79DwAAAAXK9P+5Uf+/svX7Z/47ZP+OvdKV2ufh0P8AAABQoEz/nxf1/8QzF31//n5r735CulKbFg79DwAAAAXK9P/5Uf9PmvjClov1mTn8tXSlNj0c+h8AAAAKlOn/C6L+f/WTP1bo8sOef3+SrtS+CIf+BwAAgAJl+v/CqP9f6779749sce2qPdOV2pfh0P8AAABQoEz/XxT1/+Rfru/8S4uVDpybrtRmhEP/AwAAQIEy/X9x1P+v793hifrP74/aJ12pzQyH/gcAAIACZfq/Z9T/bxx6+q3733LetN3SldpX4dD/AAAAUKBM/18S9f+b00afc3enpxeema7Uvg6H/gcAAIACZfr/0qj/32r67I5j79/5rCPSldqscOh/AAAAKFCm/y+L+n/K3RcM3vvsK27+O12pfRMO/Q8AAAAFyvT/5VH/vz1qxyuaLr/Jy7PTldqCn+l/AAAAKFCm/6+I+v+dpa466puJ3623e7pS+zYc+h8AAAAKlOn/K6P+f3fgls8/9t4Zp76YrtS+C4f+BwAAgAJl+r9X1P/vrTt3rZ0aPnpj93Sl9n049D8AAAAUKNP/V0X9//4WExuscMLqU89IV2o/hEP/AwAAQIEy/d876v8Prl5q2ldPfN7mnXSl9mM49D8AAAAUKNP/V0f9/+HkT9p9MWTR3X9JV2pzwqH/AQAAoECZ/r8m6v+Pzml6X+NLXhp+ULpS+ykc+h8AAAAKlOn/a6P+//joZr13XeOkv3dKV2pzw6H/AQAAoECZ/r8u6v+pH3517OgJD6z6ZbpS+zkc+h8AAAAKlOn/66P+/6TDAS99/1mrA09LV2oLngmg/wEAAKBAmf6/Ier/T+fcvN7qDX4b9Xq6Uvs1HPofAAAACpTp/z5R/3824/6qw9EHT/s4Xan9Fg79DwAAAAXK9P+NUf9/3vXUGU+PG7DweelK7fdw6H8AAAAoUKb/b4r6f9qIyUe1P+Tos15IV2p/hEP/AwAAQIEy/f+fqP+nr7j4FU/0GnLzkelKbV449D8AAAAUKNP/N0f9/0WDzQZPn7nky+emK7U/w6H/AQAAoECZ/r8l6v8vn/ptx2W3mbzee+lKbX449D8AAAAUKNP/t0b9P2PDdtP2WHvfUw9JV2p/hUP/AwAAQIEy/X9b1P8zb7q8wTN/3HTj/HSl9nc49D8AAAAUKNP/faP+/+rKp9b6of/2U79LV2r/hEP/AwAAQIEy/d8v6v+vt+/5/Grt/m2zd7pS+zcc+h8AAAAKlOn//lH/z7pgxLErb9Txxw3TlWrBof8BAACgQJn+HxD1/zfPndh79u/XL3V1ulKF39H/AAAAUKJM/98e9f/sd/e5b1y/5ofela5UDcKh/wEAAKBAmf6/I+r/b0/t267jnl+O2S5dqRYJh/4HAACAAmX6f2DU/9/9tfaMFQ/qOXdkulItGg79DwAAAAXK9P+gqP+/b/9FNfPa8cstl65UtXDofwAAAChQpv/vjPr/h/0+XG/k7Ma7LZquVAu+AED/AwAAQIEy/X9X1P8/zlr9pZ23fuu++9KVqh4O/Q8AAAAFyvT/3VH/z/n1s8N3mbLRu6umK9WC1+t/AAAAKFCm/++J+v+nTk3GP7rk7K3GpStVw3DofwAAAChQpv8HR/0/97Dmd844pd1Rw9OVavFw6H8AAAAoUKb/h0T9//P0GRetNLLXpY3SlWrBz/Q/AAAAFCjT//dG/f/LWQd9steIJpN6pyvVEuHQ/wAAAFCgTP8Pjfr/10k3bT/+9I/WXyddqZYMh/4HAACAAmX6/76o/3/79IE1vl3m3Iu2SFeqpcKh/wEAAKBAmf4fFvX/78ed/HeTyaMH3ZSuVEuHQ/8DAABAgTL9f3/U/3+sNe6QVT8+5ccn05VqmXDofwAAAChQpv+HR/0/b8B5Y36sRiy1QrpSNQ6H/gcAAIACZfr/gaj//7xh59vHdG9waIN0pVrQ/fofAAAACpTp/wej/p/f6srzdn9mwpi705VquXDofwAAAChQpv9HRP3/19CtP1xuWNe5G6cr1fLh0P8AAABQoEz/PxT1/99rzGkz7cK7luuTrlQLngmg/wEAAKBAmf5/OOr/fxq9usqoVTbfbUC6Uq0YDv0PAAAABcr0/yNR//87col5u70y575t05VqpXDofwAAAChQpv8f/d/9Xy20cYuvXm/W6N3L0pWqSTj0PwAAABQo0/8jo/5fuO83i27/16tbrZWuVCuHQ/8DAABAgTL9/1jU/w0uf2edEwd2O2rLdKVqGg79DwAAAAXK9P/jUf8v0nqFVwbsOPTSvulKtUo49D8AAAAUKNP/o6L+X/SBYce9cHjrSU3TlWrVcOh/AAAAKFCm/5+I+r+2zFG9Nr9s3vpPpSvVauHQ/wAAAFCgTP+Pjvq/WvSwe4+d3vmiR9KVavVw6H8AAAAoUKb/n4z6vz5uUPu+2/UdtGS6Uq0RDv0PAAAABcr0/1NR/y/2Z6cvbp48vf/0dKVa8Br9DwAAAAXK9P/TUf833PGahY5aptn5u6Qr1Zrh0P8AAABQoEz/PxP1/+IHPL7mVqf32eSAdKVqHg79DwAAAAXK9P+YqP8b/dBjwssjOk3+LV2p1gqH/gcAAIACZfr/2aj/l7jolWMGjXy71wXpSrV2OPQ/AAAAFCjT/2Oj/l/y5YUvO/WU5bp9mK5U64RD/wMAAECBMv0/Lur/pd7e9u42S47d7M10pVo3HPofAAAACpTp//FR/y99/N87T5py0ZRT0pVqvXDofwAAAChQpv+fi/p/mfUvHN92695DPkhXqvXD8b/7/9L/sbcMAAAA/B/K9P/zUf83vnns4W/Obr9zj3Sl2iAcPv8HAACAAmX6/4Wo/5e9qvdFd1w7a8Wj05Vqw3DofwAAAChQpv8nRP2/XNud7jz+oA1+fy5dqTYKh/4HAACAAmX6/8Wo/5d/+OftW+45atxe6Uq1cTj0PwAAABQo0/8vRf2/wvJbffJcvx5H/JCuVJuEQ/8DAABAgTL9/3LU/ysutPTft/4+tdG8dKXaNBz6HwAAAAqU6f9Xov5f6ZlJaxy3UdPZh6UrVYtw6H8AAAAoUKb/J0b93+SfVcYcs93z/S9KV6rNwqH/AQAAoECZ/p8U9f/K7T495KbpC53/WbpSbR4O/Q8AAAAFyvT/q1H/N93n6/NevOzhTSalK9UW4dD/AAAAUKBM/78W9f8qs9e8vdXhp00+KV2pWoZD/wMAAECBMv0/Oer/Vc+7pc3JO87t9XW6Um0ZDv0PAAAABcr0/+tR/6/2woEf3jWwZbdd05Vqq3DofwAAAChQpv/fiPp/9fdPm/faX4M22y9dqbYOh/4HAACAAmX6/82o/9c4efgqrZt1mTInXalahUP/AwAAQIEy/f9W1P/N7mx05yuvDBvSIV2pWodD/wMAAECBMv0/Jer/Ndd+/aItV+m+86x0pdomHPofAAAACpTp/7ej/m++2e+HH3nhxBX/TVeqNuHQ/wAAAFCgTP+/E/X/WtduPv6WYQ1/PzxdqbYNh/4HAACAAmX6/92o/9ducsUaE5+5ddyUdKVqGw79DwAAAAXK9P97Uf+vM3jXv7ftfuARZ6Ur1Xbh0P8AAABQoEz/vx/1/7qjL/nktGp+o27pSrV9OPQ/AAAAFCjT/x9E/b/eEk9vP/DjNrNfTleqHcKh/wEAAKBAmf7/MOr/9Xc/6fb+0+ed0zFdqXb8X/+t/0+/XQAAAOD/Qqb/P4r6f4O5D5130nat+/2YrlQ7hcPn/wAAAFCgTP9/HPX/hl/1O2SHw/tO+CNdqXYOx3/b/w3+v3nLAAAAwP+hTP9Pjfp/oy77jpl8Wefmh6Yr1S7h8Pk/AAAAFCjT/59E/b/xG1+u0m/gqye9n65U7cKh/wEAAKBAmf7/NOr/Tc5eZ163HRtde3a6Uu0aDv0PAAAABcr0/2dR/2965BofbtZs6GfHpCtV+3DofwAAAChQpv8/j/q/xccftZnwV7cdnk9Xqt3Cof8BAACgQJn+nxb1/2avrDz4hVXu6nhhulLtHg79DwAAAAXK9P/0qP83v/jzHTd/peuIj9KVao9w6H8AAAAoUKb/v4j6f4sTZh517LA5f7yRrlQdwqH/AQAAoECZ/v8y6v+W76x1Rd8LN1/55HSl2jMc+h8AAAAKlOn/GVH/b7nTf9Z6vfuIfaalK9Ve4dD/AAAAUKBM/8+M+n+r+Z2f3/6ZU0bunK5UHcOh/wEAAKBAmf7/Kur/rX88ZdqJH0+YeWC6Uu0dDv0PAAAABcr0/9dR/7c68MEGA6oGi/6erlSdwqH/AQAAoECZ/p8V9X/rxuffN2iZj855K12p9gmH/gcAAIACZfr/m6j/t3lwfLtTJzfpd2a6Uu0bDv0PAAAABcr0/+yo/9uM73VsmxGjJxybrlT7hUP/AwAAQIEy/f9t1P/b1nbpPen0c5u/kq5U+4dD/wMAAECBMv3/XdT/bfv9tN7Np8w+ac90pTogHPofAAAACpTp/++j/t9uk1YvHTVyo2u/SVeqBd8JqP8BAACgQJn+/yHq/+23WXLGVlN6ffZPulIdFA79DwAAAAXK9P+PUf/vcMVr1ctLttuhS7pSdQ6H/gcAAIACZfp/TtT/O25w+9TTZ4/v+FW6Uh0cDv0PAAAABcr0/09R/+90S5dtrti654h26Up1SDj0PwAAABQo0/9zo/7fuXf3Jh8c9NYf+6cr1aHh0P8AAABQoEz//xz1/y7b3f3n2tc2XvmndKU6LBz6HwAAAAqU6f9fov5v98iyh17S7/p9Lk5XqgXPBNT/AAAAUKBM//8a9f+uK7z71PV7dhz5ebpSHR4O/Q8AAAAFyvT/b1H/t1/4hwEfbvTlzInpStU1HPofAAAACpTp/9+j/t9tzPoXbvR780VPTFeqI8Kh/wEAAKBAmf7/I+r/3f/98/MW1YELX5WuVEeGQ/8DAABAgTL9Py/q/z12bbvdJx/fOm3tdKU6Khz6HwAAAAqU6f8/o/7vsG+16tXPtBnVMl2pjg6H/gcAAIACZfp/ftT/e3773D8Xdp9/4H/SleqYcOh/AAAAKFCm//+K+n+v88/s2uzC7quulq5U3cKh/wEAAKBAmf7/O+r/jhNGPfvOsGF/j09XqmPDof8BAACgQJn+/yfq/70/6DOo9ysNh9+frlTdw6H/AQAAoECZ/v836v9Op+x+ydmrTNx98XSlOi4c+h8AAAAK9N/3f32hqP/3OW+Zf6/+q2WbR9OV6vhw6H8AAAAoUKb/F476f98X3l/twmZzp/4XjV+dEA79DwAAAAXK9H+DqP/3e/+7ti127HJjLV2pTgyH/gcAAIACZfp/kaj/9z95w88+GTjo1GHpSnVSOPQ/AAAAFCjT/4tG/X/AP/179r5sofU2Sleqk8Oh/wEAAKBAmf6vRf1/YLuuA88+/PmXr0lXqlPCof8BAACgQJn+r6L+P2ifbmObbXfazXemK9Wp4dD/AAAAUKBM/9ej/u88e/AR70x/+Ky26Up1Wjj0PwAAABQo0/+LRf1/8MOnz//g9x4Lr5KuVKeHQ/8DAABAgTL93zDq/0OWH73y2huNmvZ0ulKdEQ79DwAAAAXK9P/iUf8futD1rU/fs+moh9OV6sxw6H8AAAAoUKb/G0X9f9gzHT6+ot/UA5dIV6qzwqH/AQAAoECZ/l8i6v8u6/9xwYfXtl/10nSlOjsc+h8AAAAKlOn/JaP+P/zm7ftvdFDvv5unK1WPcOh/AAAAKFCm/5eK+r/rVYs+fcnWGwzfKl2pzgmH/gcAAIACxf3/v/7H/v9H/y8d9f8RbV847PrZs3bvl65U54ZD/wMAAECBMp//LxP1/5FvHPnZWUsu12aTdKU6Lxz6HwAAAAqU6f/GUf8fdfZ9bS+d8vbUG9OV6vxw6H8AAAAoUKb/l436/+gjB6727siLbuyfrlQXhEP/AwAAQIEy/b9c1P/HfHzov+udMvbUNulKdWE49D8AAAAUKNP/y0f93233WUdcdHqz9UanK9VF4dD/AAAAUKBM/68Q9f+xczcde+OI6S8vn65UF4dD/wMAAECBMv2/YtT/3b9afuDUyZ1uXiRdqXqGQ/8DAABAgTL9v1LU/8d1ebvn+sv0OeuedKW6JBz6HwAAAAqU6f8mUf8f32ShjzceM/HBFdKV6tJw6H8AAAAoUKb/V476/4TBL7f+/LiGHZ5MV6rLwqH/AQAAoECZ/m8a9f+Jo/9a+br6sNXvTleqy8Oh/wEAAKBAmf5fJer/k5ZoM/+8qd3/bZCuVFeEQ/8DAABAgTL9v2rU/yffefVha708f3SfdKW6Mhz6HwAAAAqU6f/Vov4/Ze29n36raZvOG6crVa9w6H8AAAAoUKb/V4/6/9TNzu5/5QW3LrJtulJdFQ79DwAAAAXK9P8aUf+fdu1jF5x734FfDEhXqt7h0P8AAABQoEz/N4v6//R+Z35xzk4P37RWulJdHQ79DwAAAAXK9P+aUf+fscmohXoNOu2My9KV6ppw6H8AAAAoUKb/m0f9f+Y2fdac8vfz6/RNV6prw6H/AQAAoECZ/l8r6v+zrth9QvM1F3pxy3Slui4c+h8AAAAKlOn/taP+P7vxn8ec33bQDU+lK9X14dD/AAAAUKBM/68T9X+PB9tedu20Lic3TVeqG8Kh/wEAAKBAmf5fN+r/c8ZXd3926dzWS6YrVZ9w6H8AAAAoUKb/14v6/9zacztv0qXlR4+kK9WN4dD/AAAAUKBM/68f9f95Oy371QYdZj14dbpS3RQO/Q8AAAAFyvT/BlH/nz//3UU/7rtBhw3Tleo/4dD/AAAAUKBM/28Y9f8FP/6wTp/feq++XbpS3RwO/Q8AAAAFyvT/RlH/X3jg+q9cvGH7f+9KV6pbwqH/AQAAoECZ/t846v+LXrn9uHVbTR29XLpS3RoO/Q8AAAAFyvT/JlH/X3xxl17vfdu088h0pbotHPofAAAACpTp/02j/u95Qvd7L7tu1CL3pStV33DofwAAAChQpv9bRP1/yTt3tz+zc48vFk1Xqn7h0P8AAABQoEz/bxb1/6UTV9rooEf73DQuXan6h0P/AwAAQIEy/b951P+XnTll0tCTO52xarpSDQiH/gcAAIACZfp/i6j/L+/+7ayflpi+TqN0pbo9HPofAAAACpTp/5ZR/1/xySaLN3ir2YvD05XqjnDofwAAAChQpv+3jPr/yr3veuCQ18fesE66Ug0Mh/4HAACAAmX6f6uo/3v9csjuDzS+6OTe6Uo1KBz6HwAAAAqU6f+to/6/atoxJ/xzxtutb0pXqjvDof8BAACgQJn+bxX1f+9Dh1635EPLfbRFulLdFQ79DwAAAAXK9H/rqP+vXv3cFg27dPvks3Slujsc+h8AAAAKlOn/baL+v+beka//eenQ7S5KV6p7wqH/AQAAoECZ/m8T9f+1j1733cPTGp1wUrpSDQ6H/gcAAIACZfp/26j/r1u841KHt3316knpSjUkHPofAAAACpTp/7ZR/1/f/9+HqzU7P79rulLdGw79DwAAAAXK9P92Uf/f0HybvX79u2+zr9OVamg49D8AAAAUKNP/20f932frRU65Z1Drs+ekK9V94dD/AAAAUKBM/+8Q9f+N17904347zbttv3SlGhYO/Q8AAAAFyvT/jlH/3zR5lzOH3dfg61npSnV/OPQ/AAAAFCjT/ztF/f+fc3rddMAFE6oO6Uo1PBz6HwAAAAqU6f+do/6/+ejxIxdqesp+h6cr1QPh0P8AAABQoEz/7xL1/y0fnr//zy+PePzfdKV6MBz6HwAAAAqU6f92Uf/f2uG1n++fuvmfZ6Ur1Yhw6H8AAAAoUKb/d436/7Y5SzY+rD5nlSnpSvVQOPQ/AAAAFCjT/+2j/u87o9VmSx/XtdPL6Ur1cDj0PwAAABQo0/+7Rf3fr+tPb/815q6Hu6Ur1SPh0P8AAABQoEz/7x71f/+ma53zx0PtPtklXakeDYf+BwAAgAJl+n+PqP8H3D3z1kZn9NpuerpSjQyH/gcAAIACZfq/Q9T/t4/6/IkjGm90wm/pSvVYOPQ/AAAAFCjT/3tG/X/HUit3HvH67KsPSFeqx8Oh/wEAAKBAmf7fK+r/gQMf/P33t859/sN0pRoVDv0PAAAABcr0f8eo/wete8oKiy4xutkF6Ur1RDj0PwAAABQo0/97R/1/5xadt9zn5CZnn5KuVKPDof8BAACgQJn+7xT1/11X/+f9IY9+dNub6Ur1ZDj0PwAAABQo0//7RP1/9wUt9+/SufnXPdKV6qlw6H8AAAAoUKb/9436/57nfh35yHVfVh+kK9XT4dD/AAAAUKBM/+8X9f/gd9+8af63Hfd7Ll2pngmH/gcAAIACZfp//6j/h5za8MzFWl3/+NHpSjUmHPofAAAACpTp/wOi/r/3rzFv779h4z9/SFeqZ8Oh/wEAAKBAmf4/MOr/oe0v3uzu395aZa90pRobDv0PAAAABcr0/0FR/9+3326Nf+nbs9Nh6Uo1Lhz6HwAAAAqU6f/OUf8Pm3XZz/UO4x+el65U48Oh/wEAAKBAmf4/OOr/+0fs33mRMy7a4sx0pVrwnQD6HwAAAAqU6f9Dov4fvuJtT8x5aOw7b6Ur1fPh0P8AAABQoEz/Hxr1/wMNHrn13teX6/1KulK9EA79DwAAAAXK9P9hUf8/+NQJ53Ru/Hb3Y9OVakI49D8AAAAUKNP/XaL+H7Hh1PeXWKJTi2/SlerFcOh/AAAAKFCm/w+P+v+hm1bb8t+3+ryxZ7pSvRQO/Q8AAAAFyvR/16j/H75yvRUefLTZ7V3SlerlcOh/AAAAKFCm/4+I+v+R7af/fvDJ0y/8J12pFjwTUP8DAABAgTL9f2TU/4+uteZph1zXtGG7dKWaGA79DwAAAAXK9P9RUf+PHPD1DQ90njrrq3SlmhQO/Q8AAAAFyvT/0VH/P3bDpyP+adXj2Z/SlerVcOh/AAAAKFCm/4+J+v/xVqvsveS3ow7fP12pXguH/gcAAIACZfq/W9T/o4YO/+Gg3zZY/vN0pZocDv0PAAAABcr0/7FR/z+xxmlLDN1w1q8XpyvV6+HQ/wAAAFCgTP93j/p/dKMDN/mpQ/t7TkxXqjfCof8BAACgQJn+Py7q/ydH3vJmg769d5yYrlRvhkP/AwAAQIEy/X981P9P/brTSdWlXbb4MV2p3gqH/gcAAIACZfr/hKj/n+7U+5pfuwx6p2O6Uk0Jh/4HAACAAmX6/8So/585bOz997Rt2fvQdKV6Oxz6HwAAAAqU6f+Tov4fM/3CDvtNm9v9j3Sleicc+h8AAAAKlOn/k6P+f/asSbMb/n1ai7PTlerdcOh/AAAAKFCm/0+J+n/spKUX+3PNh994P12p3guH/gcAAIACZfr/1Kj/x3261QYP77TQ7c+nK9WCvwnofwAAAChQpv9Pi/p//HE/v3b4oOcvPCZdqT4Ih/4HAACAAmX6//So/597ffCK317QpuFH6Ur1YTj0PwAAABQo0/9nRP3//Lndfmly3/xZF6Yr1YK/Ceh/AAAAKFCm/8+M+v+FY7q+t9fLBz57crpSfRwO/Q8AAAAFyvT/WVH/T/iof6vxTW89/I10pZoaDv0PAAAABcr0/9lR/7+454b9ZtQbLr9zulJ9Eg79DwAAAAXK9H+PqP9f+um7HitNnfjrtHSl+jQc+h8AAAAKlOn/c6L+f3nm+wfsMqb7Pb+nK9Vn4dD/AAAAUKBM/58b9f8rRywz+tHjhu14YLpSfR4O/Q8AAAAFyvT/eVH/T1zlhWVH9X1r16fTlWrBvwnQ/wAAAFCgTP+fH/X/pHsWnbNbh8b3rpKuVNPDof8BAACgQJn+vyDq/1ef2H7KchuOn7NEulJ9EQ79DwAAAAXK9P+FUf+/tvQfLaf91rPxw//vjUUXqr4Mp/4HAACAAmX6/6Ko/ycP6nDLmG+/PLh5ulLNCIf+BwAAgAJl+v/iqP9fX+/6M3Zv1fzpS9OVamY49D8AAAAUKNP/PaP+f6Pl6H1W7Xz99/3SleqrcOh/AAAAKFCm/y+J+v/Na05/7MfrOi6xVbpSfR0O/Q8AAAAFyvT/pVH/v3XWBVfOPXl0zxvTlWpWOPQ/AAAAFCjT/5dF/T9l0rPdF3703Ls2SVeqb8Kh/wEAAKBAmf6/POr/tz+9arcD3/rotTbpSjU7HPofAAAACpTp/yui/n/nuB2H3rdEkw37pyvVt+HQ/wAAAFCgTP9fGfX/u7/Orf3duNcxy6cr1Xfh0P8AAABQoEz/94r6/71OW3691OvtLh+drlTfh0P/AwAAQIEy/X9V1P/vH7bUy4c+NPv9e9KV6odw6H8AAAAoUKb/e0f9/8H0iWsPP2OjVoukK9WP4dD/AAAAUKBM/18d9f+HQ5te+tBxc3ZdO12p5oRD/wMAAECBMv1/TdT/H63xydFdx2x+71XpSvVTOPQ/AAAAFCjT/9dG/f9xo692WXzqXXP+k65Uc8Oh/wEAAKBAmf6/Lur/qSOb3TOv3rVxy3Sl+jkc+h8AAAAKlOn/66P+/2Stmxce3HTCwePTleqXcOh/AAAAKFCm/2+I+v/TAQd8ue/LDZ5eLV2pfg2H/gcAAIACZfq/T9T/n91w6gu1+0Z8v3i6Uv0WDv0PAAAABcr0/41R/3/e6v5mv11wyhL3pyvV7+HQ/wAAAFCgTP/fFPX/tJcWH9pwUN+e/0XjV3+EQ/8DAABAgTL9/5+o/6dfMnm3P3fqfNej6Uo1Lxz6HwAAAAqU6f+bo/7/4qTfuj+85rzXhqUr1Z/h0P8AAABQoEz/3xL1/5dTNrvy8L9bb1hLV6r54dD/AAAAUKBM/98a9f+MXS5fu5o29Jhr0pXqr3DofwAAAChQpv9vi/p/5rx2L//attvlG6Ur1d/h0P8AAABQoEz/9436/6vve359T5dX32+brlT/hEP/AwAAQIEy/d8v6v+vOz9V2+/SRq3uTFeqf8Oh/wEAAKBAmf7vH/X/rOVOvOeg46d/e3u6Ul9w6H8AAAAoUKb/B0T9/83wEbsMHdVs8dbpSj38jv4HAACAEmX6//ao/2eP7Xv0T+/26doiXak3CIf+BwAAgAJl+v+OqP+/re9zaYPFOo2/IV2pLxIO/Q8AAAAFyvT/wKj/v7vti2aHrPD2bwunK/VFw6H/AQAAoECZ/h8U9f/3LdZ+4YFJy600JF2p18Kh/wEAAKBAmf6/M+r/H7Zd/ct/ho/dZVS6Uq/Cof8BAACgQJn+vyvq/x8v+3DhJXtcNHjFdKW+4AsA9T8AAAAUKNP/d0f9P2dgkwFL3Nz7rRHpSn3B6/U/AAAAFCjT//dE/f/Tup9d+O/e7TdfKl2pNwyH/gcAAIACZfp/cNT/c7eYceiDm846duV0pb54OPQ/AAAAFCjT/0Oi/v/56uZPHTx3gyvHpCv1RuHQ/wAAAFCgTP/fG/X/L01varLIj6Neb5Wu1JcIh/4HAACAAmX6f2jU/7/efdCfc1r22Pi2dKW+ZDj0PwAAABQo0//3Rf3/26iTp967/9TzLk9X6gueCaj/AQAAoECZ/h8W9f/vSz2wTecbmw5olq7Ulw6H/gcAAIACZfr//qj//+hw3qD9Bzz/bT1dqS8TDv0PAAAABcr0//Co/+fNGXfJ3bsutPjQdKXeOBz6HwAAAAqU6f8Hov7/c8aVXX9Z5+Guj6Ur9QXdr/8BAACgQJn+fzDq//ldd362Pu+08cukK/XlwqH/AQAAoECZ/h8R9f9fk+es2mXG3N8Gpiv15cOh/wEAAKBAmf5/KOr/v8/Z+p9HWrdcaft0pb5COPQ/AAAAFCjT/w9H/f/P0Ut8Pv/gQbtskK7UVwyH/gcAAIACZfr/kaj///3w1e0Wu7LL4OvSlfpK4dD/AAAAUKBM/z/6v/u/vtBia15xzTHD3to8Xak3CYf+BwAAgAJl+n9k1P8LP/b1UReM7775LelKfeVw6H8AAAAoUKb/H4v6v8F9n+646ecTj70yXak3DYf+BwAAgAJl+v/xqP8XWXWVwZ8u0vDKddOV+irh0P8AAABQoEz/j4r6f9E+wxtctfqtrz+QrtRXDYf+BwAAgAJl+v+JqP9rW542rccLB268WLpSXy0c+h8AAAAKlOn/0VH/V80OfH7NwfPPWyNdqa8eDv0PAAAABcr0/5NR/9dvv2Wtt3u2GTA2Xakv+JuA/gcAAIACZfr/qaj/F/tsp97v39hx4L7pSn3Ba/Q/AAAAFCjT/09H/d+wW+9j19n/+ot/Tlfqa4ZD/wMAAECBMv3/TNT/i58+tt0ZLZtvMCNdqTcPh/4HAACAAmX6f0zU/41evfC+y3/8cmL7dKW+Vjj0PwAAABQo0//PRv2/xMGTqo/m9rzs1XSlvnY49D8AAAAUKNP/Y6P+X/KLpWdsuOn4I49PV+rrhEP/AwAAQIEy/T8u6v+lftvqpZ57N97yknSlvm449D8AAAAUKNP/46P+X3qvn9e74ea33vs0XamvFw79DwAAAAXK9P9zUf8vs0SPj8/rsdGw49KV+vrh0P8AAABQoEz/Px/1f+PRj7e+bvjs9i+lK/UNwqH/AQAAoECZ/n8h6v9lB1+z8ueT2i37drpS3zAc+h8AAAAKlOn/CVH/L9ek0/yNV+j18+npSn2jcOh/AAAAKFCm/1+M+n/5a/8+7NzFmjzzV7pS3zgc+h8AAAAKlOn/l6L+X2GzbZ++8t2PDuuartQ3CYf+BwAAgAJl+v/lqP9XXHvh/m+NOnfpPdKV+qbh0P8AAABQoEz/vxL1/0p3vnLBWseP/uHbdKXeIhz6HwAAAAqU6f+JUf83+XiFz9brecrAyelKfbNw6H8AAAAoUKb/J0X9v/KR77R9d/CIi09NV+qbh0P/AwAAQIEy/f9q1P9Nz/5mtUtfaLDB+elKfYtw6H8AAAAoUKb/X4v6f5U3Wvx71uoTJk5NV+otw6H/AQAAoECZ/p8c9f+qXQYdsf4iXS/rnK7UtwyH/gcAAIACZfr/9aj/V/vqsLFTP7/ryF/TlfpW4dD/AAAAUKBM/78R9f/qc48aeOP4zbf8Il2pbx0O/Q8AAAAFyvT/m1H/r7H7sJ4XHTPnvR3TlXqrcOh/AAAAKFCm/9+K+r/ZM7X5V1zZaNif6Uq9dTj0PwAAABQo0/9Tov5fc6EJK59+8KvtD05X6tuEQ/8DAABAgTL9/3bU/82Xn9d67dbdlu2UrtTbhEP/AwAAQIEy/f9O1P9rPbzDxx/MGPrz9+lKfdtw6H8AAAAoUKb/3436f+22N1xw/bzWzxyVrtTbhkP/AwAAQIEy/f9e1P/rXLVn/0vWmXfYhHSlvl049D8AAAAUKNP/70f9v+7NZzy90a6dl343XalvHw79DwAAAAXK9P8HUf+vt/6Th304oO8P56Qr9R3Cof8BAACgQJn+/zDq//VPPvbfTwYfeObf6Up9x3DofwAAAChQpv8/ivp/g/eHrNai5623HJGu1HcKh/4HAACAAmX6/+Oo/zd8YUDbC1dv88ru6Up953DofwAAAChQpv+nRv2/0XlHfHb1C/PXnZ2u1HcJh/4HAACAAmX6/5Oo/zee/X3Pdz7vflr3dKXeLhz6HwAAAAqU6f9Po/7fZJ+NBjZbZFifF9OV+q7h0P8AAABQoEz/fxb1/6btGo89+5iGH7+TrtTbh0P/AwAAQIEy/f951P8t/vngiN7jJ257RrpS3y0c+h8AAAAKlOn/aVH/b/blSq9cdXDLPV5LV+oLvhNA/wMAAECBMv0/Per/zQ+Zsk6PK+fef0K6Ut8jHPofAAAACpTp/y+i/t+i47eLrjmjy18905V6h3DofwAAAChQpv+/jPq/5e+bfPV260GrfZKu1PcMh/4HAACAAmX6f0bU/1see1f7a9ZZ6IB90pX6XuHQ/wAAAFCgTP/PjPp/q88PufeCec8/MTddqXcMh/4HAACAAmX6/6uo/7d+7Zhemw44bfrMdKW+dzj0PwAAABQo0/9fR/3f6oyhx32668ML7Zau1DuFQ/8DAABAgTL9Pyvq/9ZbnTvho/17nHlkulJf8EwA/Q8AAAAFyvT/N1H/b3PjyDU3vHHULS+kK/V9w6H/AQAAoECZ/p8d9X+bO65bqOePTV95L12p7xcO/Q8AAAAFyvT/t1H/b7tmxy9uaDl13XPTlfr+4dD/AAAAUKBM/38X9X/bx//d+f1N2582P12pHxAO/Q8AAAAFyvT/91H/b9dwm7vXmdu7zyHpSv3AcOh/AAAAKFCm/3+I+n/71Ra57IybN/h473SlflA49D8AAAAUKNP/P0b9v8Owl465fO9Z236XrtQ7h0P/AwAAQIEy/T8n6v8dl7x13JbDl9vjoHSlfnA49D8AAAAUKNP/P0X9v9OT+3V5pcfb9/+SrtQXPBNA/wMAAECBMv0/N+r/nYccf/EtK1z015fpSv3QcOh/AAAAKFCm/3+O+n+XlR++68hJY1fbKV2pHxYO/Q8AAAAFyvT/L1H/t7tu1R22fbfZAa+nK/Uu4dD/AAAAUKBM//8a9f+um3/86cTFpj9xWrpSPzwc+h8AAAAKlOn/36L+b7/OtL8GHt9p+nnpSr1rOPQ/AAAAFCjT/79H/b/bXeuuftqoPgt9nK7UjwiH/gcAAIACZfr/j6j/d5/6yzMn7TqvtnW6Uj8yHPofAAAACpTp/3lR/+9x1BYH9x/Qesat6Ur9qHDofwAAAChQpv//jPq/Q4/Fzp88r++jV6Qr9aPDof8BAACgQJn+nx/1/55vvnHHDut03nfNdKV+TDj0PwAAABQo0/9/Rf2/1+EXbdut9atNHkpX6t3Cof8BAACgQJn+/zvq/45fP/NRvxmN5i2drtSPDYf+BwAAgAJl+v+fqP/3/vnSPyZcOfShJulKvXs49D8AAAAUKNP//0b932mP9k03O7jbXs+kK/XjwqH/AQAAoED/ff8vtFDU//vsd/S6e4y/a/v/YqV+fDj0PwAAABQo0/8LR/2/76x7X3zmmK6fD05X6ieEQ/8DAABAgTL93yDq//3+unPmD4vMue6JdKV+Yjj0PwAAABQo0/+LRP2/f/uD66t9vvmJK6Ur9ZPCof8BAACgQJn+XzTq/wPenT2s/Qsj1rojXamfHA79DwAAAAXK9H8t6v8DT9141ydWP+WFbdKV+inh0P8AAABQoEz/V1H/H3TBit2m95zQd9N0pX5qOPQ/AAAAFCjT//Wo/zs/99ZVyw5ucO716Ur9tHDofwAAAChQpv8Xi/r/4CsbNF9x1Ee1B9OV+unh0P8AAABQoEz/N4z6/5DtX3xu5vFNZjRMV+pnhEP/AwAAQIEy/b941P+HbvjP9JGLjX509XSlfmY49D8AAAAUKNP/jaL+P+ym1ovs/O65+z6brtTPCof+BwAAgAJl+n+JqP+7NLh2yMqTZjfZLF2pnx0O/Q8AAAAFyvT/klH/H/7UXjvNXmGjeTenK/Ue4dD/AAAAUKBM/y8V9X/XEeccOa5Hr4d6pSv1c8Kh/wEAAKBAmf5fOur/I1Z89PKOw9vttV66Uj83HPofAAAACpTp/2Wi/j9yxrL1x/Yev/2gdKV+Xjj0PwAAABQo0/+No/4/quu7M3e6uefnO6Qr9fPDof8BAACgQJn+Xzbq/6M7/PDiCnPfum79dKV+wYLf/599twAAAMD/jUz/Lxf1/zFz1l/3q00bn3htulK/MBz6HwAAAAqU6f/lo/7vdvTtV41tef1aVbpSvygc+h8AAAAKlOn/FaL+P/bDLt32/rHjC/emK/WLw6H/AQAAoECZ/l8x6v/uk7vv2vTGL/s+nq7Ue4ZD/wMAAECBMv2/UtT/x51z97Bv9m9+buN0pX5JOPQ/AAAAFCjT/02i/j9+izMX+f6Pbo8MTVfql4ZD/wMAAECBMv2/ctT/J1w9avrqaw/du56u1C8Lh/4HAACAAmX6v2nU/ycO7PNch3aNmi6TrtQvD4f+BwAAgAJl+n+VqP9PWnf35k/3f3X+Y+lK/Ypw6H8AAAAoUKb/V436/+RRf17+Ra/Oj22frtSvDIf+BwAAgAJl+n+1qP9PWartkY0P6bv/wHSl3isc+h8AAAAKlOn/1aP+P7VptdOu27SuX5eu1K8Kh/4HAACAAmX6f42o/0+7+7kho2fO+2qDdKXeOxz6HwAAAAqU6f9mUf+fPnahbZ9s0ODWW9KV+tXh0P8AAABQoEz/rxn1/xn1lz9q99mEHpunK/VrwqH/AQAAoECZ/m8e9f+Zy/31xzLjTllz3XSlfm049D8AAAAUKNP/a0X9f9bwNk2/PHrEc1emK///ZwLqfwAAAChQpv/Xjvr/7G2vfuapSza/ZrF0pX59OPQ/AAAAFCjT/+tE/d/jsr0P3nPInOMfSFfqN4RD/wMAAECBMv2/btT/59x29vlrTOjadmy6Uu8TDv0PAAAABcr0/3pR/5/b4rE7vlvjrk/XSFfqN4ZD/wMAAECBMv2/ftT/55105A6zGrZ7pHW6Ur8pHPofAAAACpTp/w2i/j9/yn2frvJer71vT1fq/wmH/gcAAIACZfp/w6j/L3hp4F+dntio6Q3pSv3mcOh/AAAAKFCm/zeK+v/CSw5d/dkTZs9vka7UbwmH/gcAAIACZfp/46j/L/p+1rivzz73sSHpSv3WcOh/AAAAKFCm/zeJ+v/izpt2Wf7+0fsvnK7UbwuH/gcAAIACZfp/06j/e+6y/MU7TmxSXzFdqfcNh/4HAACAAmX6v0XU/5fMe/uux5f/6KtR6Uq9Xzj0PwAAABQo0/+bRf1/6RfHzu33c/Nbl0pX6v3Dof8BAACgQJn+3zzq/8sOHrJMtxZf9hiRrtQHhEP/AwAAQIEy/b9F1P+X7zVg8806dVxzTLpSvz0c+p//H3v3HW7nnC58fInyrK0kzGAYJUpMc4YQLRjEyRh1lBkl52hBECIRk4wyyBBlZIgSREsYneh9tCBKRPTeSfROgujvhTvx2x55H2bCPNfvfD5/zH3vnbXv7O26zpGvtXY2AAAANVTR/52S/h/43lb3jxpy6A3zlq8UJ8ai/wEAAKCGKvp/maT/D9ju9T8dN3iOQ44pXylOikX/AwAAQA1V9P+ySf8f+NTiR+680T07Ll++UgyLRf8DAABADVX0/3JJ/x80Zo6LVl1635UXKl8phsei/wEAAKCGKvp/+aT/D9714Y3GvjHyyf3LV4qTY9H/AAAAUEMV/b9C0v9/W2bG90a3H/1I7/KV4pRY9D8AAADUUEX/d076/5DBo+ZcaVRL57HlK8U/YtH/AAAAUEMV/b9i0v+DTvhg2T6nnbXL4+Urxamx6H8AAACooYr+Xynp/78vtOrDJw3Y/tA9y1eK02KZav9veso0+5QBAACA76ii/1dO+v/QSw7b/bZtPrrl3fKV4vRY/j/P/884jT5jAAAA4Luq6P/fJP1/WHOdY5a5fsUOm5avFGfE4vX/AAAAUEMV/b9K0v+D5+972dZPHb3rauUrxZmx6H8AAACooYr+XzXp/8PPvHKTIW02PnJc+UpxViz6HwAAAGqoov9XS/r/iBeWGrH98xeM36x8pTg7Fv0PAAAANVTR/12S/j9y8/fXOqZznzYflq8U58Si/wEAAKCGKvp/9aT/j1rzzh1v7HbjJq+XrxTnxqL/AQAAoIYq+v+/k/4f8s4sg5Y+sHHl+uUrxYhY9D8AAADUUEX/d036/+it//mrnscN+3RU+UpxXiz6HwAAAGqoov9/m/T/MY8NGH1C183bdy9fKc6PRf8DAABADVX0/xpJ/x97129fvqvDO+v8uXyluCAW/Q8AAAA1VNH/v0v6f2i/gbP8ZlKncx8oXykujEX/AwAAQA1V9P+aSf8f13HDCzu/8dIjE8pXioti0f8AAABQQxX9v1bS/8cPGrremKV/2XnD8pXi4lj0PwAAANRQRf+vnfT/CcPP7zV8o4N3WaN8pbgkFv0PAAAANVTR/+sk/X9ih50H7zJ4jUOfK18pLo1F/wMAAEANVfT/ukn/n3TFo0ssN+TxW3YsXykui0X/AwAAQA1V9P96Sf8Pm7X92FvW/2mHMeUrxeWx6H8AAACooYr+/33S/8PnWez1I5e8bNcny1eKK2LR/wAAAFBDFf2/ftL/J586vt02E/ofOaB8pbgyFv0PAAAANVTR/xsk/X/KBl0GDZtz8PhbyleKq2LR/wAAAFBDFf2/YdL//3jl4B17j16/zQ7lK8U/Y9H/AAAAUEMV/b9R0v+nfnrdWiue/ewmu5avFFfHov8BAACghir6/w9J/5/W9S8jbu+30JX3la8U18Si/wEAAKCGKvr/j0n/n/7Q7bMc1fO6T7csXymujUX/AwAAQA1V9P/GSf+f0avdy90v37v9x+UrxXWx6H8AAACooYr+3yTp/zP3WHb0sg/et86r5SvF9bHofwAAAKihiv7fNOn/s26a8KtbW3587lrlK8XIWPQ/AAAA1FBF/2+W9P/ZBy08+Kal71nupvKV4oZY9D8AAADUUEX/d0v6/5yVX+y11BtzPLx1+UpxYyz6HwAAAGqoov//J+n/c3/x5Ho9Bo8cuHv5SjH5NQH6HwAAAGqoov//N+n/EUfNd+GxG+27zYPlK8WoWPQ/AAAA1FBF/2+e9P95jXPa3bn++MW7la8UN8ei/wEAAKCGKvp/i6T/z7+6z+urDFlkzEflK8Utseh/AAAAqKGK/t8y6f8LLth47E4TDh3+WvlKcWss+h8AAABqqKL/t0r6/8I5hyxx/JLrDfh9+UpxWyz6HwAAAGqoov+3Tvr/opY/XHHc6Ctmm1i+UoyORf8DAABADVX0f/ek/y++9Jg/7jzn7q9tUr5S3B6L/gcAAIAaquj/bZL+v+SsC/uv2u/Rq7okv35Auy9/bUy8rf8BAACghir6f9uk/y9doOfQsWfP0218+UpxRyz6HwAAAGqoov+3S/r/ssMfX37o5QfO3qd8pRgbi/4HAACAGqro/x5J/1++7AIPbtez69t3lq8Uk9+n/wEAAKCGKvp/+6T/r1j45xM7trxyxmPlK8Vdseh/AAAAqKGK/t8h6f8rT3x27lEPLt51j/KV4u5Y9D8AAADUUEX/75j0/1VPd7rktlFvLbdV+UpxTyz6HwAAAGqoov97Jv3/zx7vbrBM+6Ue/qR8pbg3Fv0PAAAANVTR/zsl/X9137v7bj3g5IGvlK8U98Wi/wEAAKCGKvp/56T/r7mjZciQ07bcZs3yleL+WPQ/AAAA1FBF//dK+v/abtd0Gn39qMVvLl8pHohF/wMAAEANVfT/Lkn/Xzd+n3tX2qbNmO3LV4oHY9H/AAAAUEMV/d876f/r3//dW33anDe8b/lK8VAs+h8AAABqqKL/+yT9P3K9/X500lO7DLi/fKV4OBb9DwAAADVU0f+7Jv1/w4v33P2rzsfO1rN8pXgkFv0PAAAANVTR/32T/r9xi7l//ejzm752R/lK8Wgs+h8AAABqqKL/d0v6/6a1/mvWww784KonyleKx2LR/wAAAFBDFf3/p6T/R0145Y19u63Qbd/yleLxWPQ/AAAA1FBF//dL+v/m7pv9frGuZ8z+TvlKMfk1AfofAAAAaqii//sn/X/L48PPe+i47d7eoHyleDIW/Q8AAAA1VNH/f076/9a7Tz9s/0ljzvhd+UrxVCz6HwAAAGqoov93T/r/tv7b9OnbYZauz5evFE/Hov8BAACghir6f4+k/0cvddEd/R/cu0tL+UrxTCz6HwAAAGqoov/3TPr/9r//+ZcHtVx3yojyleLZWPQ/AAAA1FBF/++V9P+Yk9dt3tfzxxOvLV8pxsWi/wEAAKCGKvr/L0n/37HYoFcWvvy+uRYsXynGx6L/AQAAoIYq+n/vpP/HXrnC2nudvf7mR5WvFM/Fov8BAACghir6f5+k/++c7dOzD+k3+LqO5SvF5J8JoP8BAACghir6f9+k/++a9+ZDnpxzoZd/Xr5SvBCL/gcAAIAaquj/AUn/331am52XGP1s88DyleLFWPQ/AAAA1FBF//816f97ujW36LTkT/datXyleCkW/Q8AAAA1VNH/+yX9f+/4u0beMOHxE4eVrxQvx6L/AQAAoIYq+n//pP/ve3/i8KOH9L97UPlK8Uos+h8AAABqqKL/Byb9f/96S++9w/qXLfGL8pXi1Vj0PwAAANRQRf8fkPT/A0//9YmVN/rlDqeXrxSvxaL/AQAAoIYq+v/ApP8f7LHGKncPfumgmcpXitdj0f8AAABQQxX9f1DS/w/13bv9iW+scd8c5SvFG7HofwAAAKihiv4/OOn/h++4+pMdlz6406XlK8Wbseh/AAAAqKGK/v9b0v+PHL5jt14dNu9ydPlK8VYs+h8AAABqqKL/D0n6/9FlL7jm5EnDTlmufKV4Oxb9DwAAADVU0f+Dkv5/bOGjT7jjuE4TFy5fKd6JRf8DAABADVX0/9+T/n/8xI32WKHrO3MNLF8pJsSi/wEAAKCGKvr/0KT/n2h55pFtu/XZvF35SjExFv0PAAAANVTR/4cl/f/kpT9b8YgDL7ju/PKV4t1Y9D8AAADUUEX/D076/6mz5p/v5ucbL19dvlK8F4v+BwAAgBqq6P/Dk/5/eoHHPli+843NecpXivdj0f8AAABQQxX9f0TS/8+8ucfeo59aca9Ty1eKSbHofwAAAKihiv4/Mun/Zze+fvhKbT468RuuFB/Eov8BAACghir6/6ik/8d1OWBkn202vvsn5SvFh7HofwAAAKihiv4fkvT/+I9W3+Kk649e4vLyleKjWPQ/AAAA1FBF/x+d9P9zPd/65LbTWnboXL5SfByL/gcAAIAaquj/Y5L+f/7+5dovM2D0Qd/wFwAUn8Si/wEAAKCGKvr/2KT/X7ht1lW2br/9fYeWrxSfxqL/AQAAoIYq+n9o0v8v7jPmiSGjzuq0RPlK8Vks+h8AAABqqKL/j0v6/6XO8+wx9OK31563fGXKh+t/AAAAqKGK/j8+6f+XBz51wna7dBxxTflKMx6j/wEAAKCOKvr/hKT/Xxn63DUdZxv+2XnlK802seh/AAAAqKGK/j8x6f9Xf71It1H3brVg2/KV5vSx6H8AAACooYr+Pynp/9dGHvHBcWNv2nT/8pXmDLHofwAAAKihiv4flvT/6zNuMt/Os09/xULlK80ZY9H/AAAAUEMV/T886f835ui14qq7nj9u+fKV5kyx6H8AAACooYr+Pznp/zdHnPvI2PN6TX9M+UqziEX/AwAAQA1V9P8pSf+/dcVOq925ztC+S5avNCd/vP4HAACAGqro/38k/f/2rOedusrQTY44rHyl2RKL/gcAAIAaquj/U5P+f2eeYwfu9P6km08oX2nOHIv+BwAAgBqq6P/Tkv6fcOoG3Y9fvPNiK5SvNGeJRf8DAABADVX0/+lJ/0/sOO7Gm5Y7vddl5SvNWWPR/wAAAFBDFf1/RtL/7w7qsOhSr/Q4bO7yleZsseh/AAAAqKGK/j8z6f/3hi/YpsegOx6drnyl2TYW/Q8AAAA1VNH/ZyX9/36HR545dpOZVzitfKXZLhb9DwAAADVU0f9nJ/0/aeuZux612r1rH1C+0pw9Fv0PAAAANVTR/+ck/f/BY2PP7H7S7CN+Vr7SnCMW/Q8AAAA1VNH/5yb9/+Fd7x287MfXf7ZU+UpzcvfrfwAAAKihiv4fkfT/R/069rh1oQELDilfaf44Fv0PAAAANVTR/+cl/f/xC/vfMuw34zZtX77SnDMW/Q8AAAA1VNH/5yf9/8nmXX/e+9lFr7iufKU5Vyz6HwAAAGqoov8vSPr/0zX3nWnF/Q4bd275SnPuWPQ/AAAA1FBF/1+Y9P9n71z13O1brDt9s3yl+ZNY9D8AAADUUPT/DMl7jkh+uc2XozlPo9Hl9eT98fh280z+oM//Z9u93574TfMrzXlazy9+i+kajRku+tqn9Q3/jWGamPL1tH1g3OqNjo3p0q/8c0tM5fHHNueev9Gx0ab0+NYfMH08ft4tP15gYKNjY6avP36nnr2367HHlDfjV5vzr9n7jaUbHRvNrz9+1x67bdW7z3Y94s3459Ky0MV7Duvf6NiY4ev/pHr27r9L8mZLjIV/+maHwV98Pl97/J/6de+3/Z+mvDlzPH6RuF96/G6tP/9Z4vGL9pq/3euzjW7MOG/rhzf69u/Tr3sDAACA/7SK/p/Ss41GlxuS90cXf+f+n7f1bEyt/6f/976qqZry9XxP/R+vlWj86OPdf/tq26saza/38059+u/Wu3uvjtPgawEAAAAAAACAKeL5/zbJu0Z/tc708FevIU815280imcajekmbfb8h0/8O7//Zxv/mz77vl4qAAAAAPmoeP3/lO9Pn0av/5+/9WxM7fX/M/57X9VUTfl6vqfX/8fn3Vzg2U8OvqexQmOWb/r+/K126957hx6tvgVgpvi4BWe59vk9Gys02n7z9+lvte2OrT+0iI9rv897G57cds3GbF//uC++/770YQAAAPxfU9H/U3q20djvr+mHxZw9fftb9P8CrWcj+h8AAAD4PlX0/5TnpafS/9/1+f8FW8+G/gcAAIAfQEX/T3l9+Tf2/+xT3vyW/d/S/qt7k7VpffN71Vwo5sIxF4m5aMwOMReL+bOYP4/5i5i/jPmrmIvH/K+Yv44Z3x3QXDJmvAS/uVTMpWN2irlMzGVjLhdz+ZgrxOwcc8WYK8VcOeZvYq4Sc9WYq8XsEnP1mP8ds2vM38ZcI+bvYq4Zc62Ya8dcJ+a6MdeL+fuY68fcIOaGMTeK+YeYf4y5ccxNYm4ac7OY3WL+T8z/jbl5zC1ibhlzq5hbx4wfSdjcJua2MbeLGT9vsbl9zB1i7hizZ8ydYu4cs1fM+BmMzd4x+8TcNWbfmLvFjJ/A2OwXs3/MP8fcPWb85MXmnjH3ivmXmHvH3CfmvjEHxIz/G27uF3P/mANjHhDzwJgHxTw45t9iHhJzUMy/xzw05mExB8c8PGb8/5bmkTGPijkk5tExj4l5bMyhMY+LeXzME2KeGPOkmMNiDo95csxTYv4j5qkxT4t5eswzYp4Z86yYZ8c8J+a5MUfEPC/m+TEviHlhzPg+p+bFMS+JeWnMy2JeHvOKmFfGvCrmP2NeHfOamNfGvC7m9TFHxozv4WreGPOmmKNi3hzzlpi3xrwtZvzdMM3bY46JeUfMsTHvjHlXzLtj3hPz3pj3xbw/5gMxH4z5UMyHYz4S89GYj8V8PGb8XTTNJ2M+FfPpmM/EfDbmuJjjYz4X8/mYL8R8MeZLMV+O+UrMV2O+FjN+Vm7zjZhvxnwr5tsx34k5IWb8+7L5bsz3Yr4fc1LMD2J+GPOjmB/H/CTmpzE/+3JO/qt8WuLftS3xL9+W+Et0WuLPAS3xur+W+O//LfHngJbJP3928s+VnfzzYif/HNhZY84Ws23MdjHjTwwtc8T8Ucwfx5wz5lwx5475k5jxfENL/Pyglp/GnC9mfF9hS7y+sCWeZ2hJ/rwBAET/t/3qPTPu8Z/8fAAAAIBpT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5K9V/xcN/Q8AAAAZ8vw/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkb0r/9538Hv0PAAAAufH8PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAOTvO/f/jN//5wQAAABMW57/BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMhfuf8b+h8AAAAy4/l/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMjf1Pt/+v/Y5wQAAABMW57/BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID8Rf/PkLzniOSXm1+OloUajf3+mn5Y61//8u1t93574jfNr3x+J52fazPdNPtiqs32A/5eAAAAUBsV/d8SY+Gp9P886dvfov8Xbj0bP3D/t3vpyznTw/GOWX+43xsAAAD+cyr6f+YvR8siU+n/G9K3v0X/L9J6NqL/Z1h3mn1BUzP9F/87R/K5f+5HjUaz2Wi0aTNtfpPmfK3vN+dvNIpnGo3pJk2b+wAAAPCvqej/Wb4cLYtOpf8vSt/+Fv2/aOvZiP6f8Ylp9gV9N9N1m+HsB7sOaDS23nTkF/Ol58/6Yk7x8kY3dhowtsfkNyc/7pm5RrZ+3A9zFwAAAP4lFf0fr49v6dBodHk9eX88X97uu77+v0PrOfljZ7joa5/WNHo+vmTK19P2gXGrNzo2pku/8s8tMZXHH9uce/62LzXalB6/xPf0mQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmCgAA//9NdsnQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) 1.658828841s ago: executing program 4 (id=785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) 1.407622456s ago: executing program 2 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r1, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.205609432s ago: executing program 6 (id=787): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000840)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x8}}}], 0x40}}], 0x1, 0x0) 1.049104675s ago: executing program 2 (id=788): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x16, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x101100, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) 665.426454ms ago: executing program 6 (id=789): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@xino_auto}]}) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 615.876395ms ago: executing program 4 (id=790): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000005e80)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0x10, @empty, 0xc9}, 0x1c, 0x0}}], 0x1, 0x800) 538.776627ms ago: executing program 6 (id=791): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x0, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 477.342678ms ago: executing program 7 (id=722): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@quiet}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_lower}, {@fat=@flush}, {@numtail}, {@utf8}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 411.85728ms ago: executing program 4 (id=792): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x100}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x6, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x5, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0x3, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x2, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x1000004, 0x6d00, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x0, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x3, 0x7, 0x20008c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x80, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x6, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 407.26957ms ago: executing program 3 (id=793): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={0x0, 0x1, 0x38, 0x3}) 84.049778ms ago: executing program 2 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0xc0010006, 0x0, 0x9}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1000000000000058, 0x0, [{0x40000106, 0x0, 0x3}]}) 7.80948ms ago: executing program 6 (id=795): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x3, 0x9, 0x1000}, 0x10) 0s ago: executing program 7 (id=796): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@nodioread_nolock}, {@noquota}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_ignore}, {@data_err_ignore}, {@nodiscard}, {@mb_optimize_scan}, {@data_err_ignore}]}, 0x1, 0x5ba, &(0x7f0000002480)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) sched_setaffinity(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 91.467400][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.485085][ T5119] loop4: detected capacity change from 0 to 256 [ 91.520434][ T1108] usb 4-1: config 0 descriptor?? [ 91.572758][ T5119] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 91.782434][ T1108] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 91.799352][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.857585][ T1108] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 91.871602][ T1108] usb 4-1: media controller created [ 91.897304][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.996311][ T1108] az6027: usb out operation failed. (-71) [ 92.026173][ T1108] az6027: usb out operation failed. (-71) [ 92.032364][ T1108] stb0899_attach: Driver disabled by Kconfig [ 92.039798][ T1108] az6027: no front-end attached [ 92.039798][ T1108] [ 92.043018][ T5144] loop4: detected capacity change from 0 to 4096 [ 92.068375][ T1108] az6027: usb out operation failed. (-71) [ 92.074157][ T1108] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 92.082137][ T4300] usb 2-1: Cannot set autoneg [ 92.088203][ T4300] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 92.105155][ T1108] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 92.110578][ T5144] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.131322][ T4300] usb 2-1: USB disconnect, device number 7 [ 92.136471][ T5144] EXT4-fs (loop4): Ignoring removed orlov option [ 92.188120][ T5144] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 92.211219][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.219785][ T5146] loop2: detected capacity change from 0 to 8192 [ 92.236945][ T1108] dvb-usb: schedule remote query interval to 400 msecs. [ 92.243967][ T1108] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 92.259499][ T1108] usb 4-1: USB disconnect, device number 8 [ 92.280523][ T5146] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 92.303848][ T5146] REISERFS (device loop2): using ordered data mode [ 92.312979][ T1108] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 92.322442][ T5146] reiserfs: using flush barriers [ 92.342983][ T5146] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.373442][ T5146] REISERFS (device loop2): checking transaction log (loop2) [ 92.434521][ T5146] REISERFS (device loop2): Using r5 hash to sort names [ 92.491091][ T5146] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 92.640348][ T5146] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3085, free_space(entry_count) 2 [ 92.702146][ T5146] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 544. Fsck? [ 92.720890][ T5156] loop4: detected capacity change from 0 to 4096 [ 92.732301][ T5146] REISERFS (device loop2): Remounting filesystem read-only [ 92.743309][ T5146] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 92.746061][ T4211] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.839659][ T5156] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 92.999948][ T4300] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 93.055969][ T4211] usb 1-1: Using ep0 maxpacket: 32 [ 93.095753][ T5174] loop1: detected capacity change from 0 to 64 [ 93.201264][ T4211] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 93.211966][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.229143][ T4211] usb 1-1: config 0 descriptor?? [ 93.268071][ T4211] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 93.320812][ T5186] Dev loop8: unable to read RDB block 8 [ 93.341052][ T5186] loop8: unable to read partition table [ 93.347364][ T5186] loop8: partition table beyond EOD, truncated [ 93.356490][ T5186] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 93.377265][ T4300] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.395584][ T4300] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 93.417871][ T4300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.459283][ T4300] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 93.478201][ T4300] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 93.606100][ T4300] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.650405][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.678576][ T4300] usb 4-1: Product: syz [ 93.684161][ T4300] usb 4-1: Manufacturer: syz [ 93.736563][ T4300] cdc_wdm 4-1:1.0: skipping garbage [ 93.741864][ T4300] cdc_wdm 4-1:1.0: skipping garbage [ 93.770060][ T4300] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 93.776639][ T4300] cdc_wdm 4-1:1.0: Unknown control protocol [ 93.801631][ T5196] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 93.830143][ T26] audit: type=1800 audit(1785401800.752:9): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.341" name="file2" dev="loop1" ino=17058 res=0 errno=0 [ 93.921923][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 94.142760][ T5211] FAT-fs (loop2): Unrecognized mount option "dmask=00000ïhí “.’…åʼÖ>`Ÿ000000000000000003" or missing value [ 94.356136][ T4211] gspca_nw80x: reg_w err -71 [ 94.366208][ T4211] nw80x: probe of 1-1:0.0 failed with error -71 [ 94.407161][ T4211] usb 1-1: USB disconnect, device number 5 [ 94.458201][ T21] usb 4-1: USB disconnect, device number 9 [ 94.485094][ T5209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.498881][ T5227] set_capacity_and_notify: 5 callbacks suppressed [ 94.498895][ T5227] loop2: detected capacity change from 0 to 7 [ 94.523127][ T4179] Dev loop2: unable to read RDB block 7 [ 94.530133][ T4179] loop2: AHDI p1 p2 p3 [ 94.534356][ T4179] loop2: partition table partially beyond EOD, truncated [ 94.551908][ T4179] loop2: p1 start 1601398130 is beyond EOD, truncated [ 94.561315][ T4179] loop2: p2 start 1702059890 is beyond EOD, truncated [ 94.576943][ T4300] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.584738][ T5227] Dev loop2: unable to read RDB block 7 [ 94.590611][ T5227] loop2: AHDI p1 p2 p3 [ 94.595123][ T5227] loop2: partition table partially beyond EOD, truncated [ 94.606958][ T5227] loop2: p1 start 1601398130 is beyond EOD, truncated [ 94.613959][ T5227] loop2: p2 start 1702059890 is beyond EOD, truncated [ 94.713011][ T5231] vcan0: tx drop: invalid da for name 0x000000000000f000 [ 94.966152][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.995311][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.060537][ T4300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.116685][ T4300] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.125819][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.195782][ T4300] usb 5-1: config 0 descriptor?? [ 95.274352][ T5256] loop0: detected capacity change from 0 to 8192 [ 95.319732][ T5256] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 95.355674][ T5256] REISERFS (device loop0): using ordered data mode [ 95.415438][ T5256] reiserfs: using flush barriers [ 95.431381][ T5263] loop1: detected capacity change from 0 to 256 [ 95.466301][ T5256] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.510714][ T5256] REISERFS (device loop0): checking transaction log (loop0) [ 95.548569][ T5247] loop2: detected capacity change from 0 to 40427 [ 95.572434][ T5256] REISERFS (device loop0): Using r5 hash to sort names [ 95.586256][ T5256] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 95.612888][ T5247] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 95.651791][ T5247] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.679609][ T4300] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 95.701361][ T5247] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 95.716784][ T4300] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 95.766078][ T5247] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 95.842696][ T5247] F2FS-fs (loop2): invalid crc value [ 95.907325][ T5247] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.948023][ T4300] usb 5-1: USB disconnect, device number 3 [ 96.012878][ T5268] fido_id[5268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 96.047013][ T5247] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.080875][ T5257] loop3: detected capacity change from 0 to 40427 [ 96.087656][ T5247] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.197123][ T5247] attempt to access beyond end of device [ 96.197123][ T5247] loop2: rw=2049, want=53256, limit=40427 [ 96.285815][ T5257] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.374348][ T4193] attempt to access beyond end of device [ 96.374348][ T4193] loop2: rw=2049, want=45112, limit=40427 [ 96.422914][ T5257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.601103][ T4195] attempt to access beyond end of device [ 96.601103][ T4195] loop3: rw=2049, want=45104, limit=40427 [ 96.647442][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.886171][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 97.006238][ T21] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.014547][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.070491][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.082088][ T5303] loop2: detected capacity change from 0 to 512 [ 97.095483][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.116002][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.149552][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.170015][ T5303] EXT4-fs (loop2): Ignoring removed nobh option [ 97.191079][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.326244][ T5303] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 97.347479][ T5317] loop4: detected capacity change from 0 to 256 [ 97.360056][ T5303] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.382452][ T26] audit: type=1800 audit(1785401804.302:10): pid=5303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.373" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 97.416613][ T5317] exfat: Deprecated parameter 'utf8' [ 97.421950][ T5317] exfat: Deprecated parameter 'utf8' [ 97.431027][ T5317] exfat: Deprecated parameter 'utf8' [ 97.489565][ T5317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 97.496360][ T21] usb 1-1: usb_control_msg returned -32 [ 97.507371][ T4300] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.555619][ T21] usbtmc 1-1:16.0: can't read capabilities [ 97.636159][ T4236] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 97.837247][ T4227] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 97.866174][ T4300] usb 2-1: config 3 has an invalid interface number: 245 but max is 0 [ 97.874586][ T4300] usb 2-1: config 3 has no interface number 0 [ 97.886285][ T5325] usbtmc 1-1:16.0: control status returned 2 [ 97.896114][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 97.905260][ T4300] usb 2-1: config 3 interface 245 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 97.916510][ T4300] usb 2-1: config 3 interface 245 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 97.927479][ T4300] usb 2-1: config 3 interface 245 has no altsetting 0 [ 98.016053][ T4236] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.024455][ T4236] usb 4-1: config 0 has no interface number 0 [ 98.086131][ T4300] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=9c.54 [ 98.095203][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.107393][ T4300] usb 2-1: Product: syz [ 98.111730][ T4300] usb 2-1: Manufacturer: syz [ 98.114569][ T13] usb 1-1: USB disconnect, device number 6 [ 98.116504][ T4300] usb 2-1: SerialNumber: syz [ 98.216081][ T4227] usb 3-1: not running at top speed; connect to a high speed hub [ 98.224007][ T4236] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.233364][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.241811][ T4236] usb 4-1: Product: syz [ 98.246296][ T4236] usb 4-1: Manufacturer: syz [ 98.250914][ T4236] usb 4-1: SerialNumber: syz [ 98.262837][ T4236] usb 4-1: config 0 descriptor?? [ 98.306344][ T4227] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 98.317609][ T4236] smsc95xx v2.0.0 [ 98.456925][ T4300] quatech2 2-1:3.245: Quatech 2nd gen USB to Serial Driver converter detected [ 98.487389][ T4300] usb 2-1: qt2_attach - failed to power on unit: -71 [ 98.494190][ T4300] quatech2: probe of 2-1:3.245 failed with error -71 [ 98.506677][ T4300] usb 2-1: USB disconnect, device number 8 [ 98.515748][ T4227] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 98.525039][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.534056][ T4227] usb 3-1: Product: syz [ 98.538494][ T4227] usb 3-1: Manufacturer: syz [ 98.543281][ T4227] usb 3-1: SerialNumber: syz [ 98.622416][ T5331] loop0: detected capacity change from 0 to 512 [ 98.697687][ T5331] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.391: inode #1: comm syz.0.391: iget: illegal inode # [ 98.746961][ T5331] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.391: error while reading EA inode 1 err=-117 [ 98.765787][ T5331] EXT4-fs (loop0): 1 orphan inode deleted [ 98.774978][ T5331] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.826914][ T4227] cdc_ncm 3-1:9.0: skipping garbage [ 98.832549][ T4227] cdc_ncm 3-1:9.0: CDC Union missing and no IAD found [ 98.843943][ T4227] cdc_ncm 3-1:9.0: bind() failure [ 98.856866][ T4227] usb 3-1: USB disconnect, device number 5 [ 99.033146][ T5345] loop1: detected capacity change from 0 to 128 [ 99.093920][ T5351] loop4: detected capacity change from 0 to 128 [ 99.101645][ T5345] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 99.144817][ T5345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.164768][ T5345] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 99.187595][ T5345] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 99.194032][ T5351] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.426110][ T4236] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 99.455836][ T4236] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.476452][ T5367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 99.489987][ T4236] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 99.505703][ T5371] set_capacity_and_notify: 1 callbacks suppressed [ 99.505716][ T5371] loop0: detected capacity change from 0 to 128 [ 99.521739][ T5369] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 99.541113][ T4236] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 99.560119][ T5374] loop4: detected capacity change from 0 to 512 [ 99.569676][ T4236] usb 4-1: USB disconnect, device number 10 [ 99.633417][ T5371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.654279][ T5374] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 99.676438][ T5371] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.695231][ T5379] loop2: detected capacity change from 0 to 512 [ 99.731799][ T5374] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 99.759201][ T5374] ext4 filesystem being mounted at /115/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.794546][ T5379] EXT4-fs (loop2): Ignoring removed oldalloc option [ 99.818914][ T5379] EXT4-fs (loop2): Ignoring removed nobh option [ 99.909058][ T5379] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.411: ea_inode file size=7 entry size=6 [ 99.946964][ T5379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.411: iget: bad extra_isize 90 (inode size 256) [ 100.063484][ T5393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.416'. [ 100.066138][ T5379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.411: error while reading EA inode 11 err=-117 [ 100.166539][ T5379] EXT4-fs (loop2): 1 orphan inode deleted [ 100.170256][ T4300] kernel write not supported for file /input/mice (pid: 4300 comm: kworker/1:5) [ 100.256075][ T5379] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,quota,nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 100.287443][ T5400] loop0: detected capacity change from 0 to 1024 [ 100.303000][ T5404] loop3: detected capacity change from 0 to 256 [ 100.330426][ T5400] EXT4-fs (loop0): Ignoring removed oldalloc option [ 100.340512][ T5406] loop1: detected capacity change from 0 to 256 [ 100.352550][ T5379] EXT4-fs (loop2): Ignoring removed bh option [ 100.374328][ T5400] EXT4-fs (loop0): Ignoring removed oldalloc option [ 100.399951][ T5379] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 100.411393][ T5400] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.413192][ T5379] EXT4-fs (loop2): re-mounted. Opts: stripe=0x0000000000000008,init_itable,block_validity,journal_async_commit,bh,noinit_itable,. Quota mode: writeback. [ 100.430575][ T5379] EXT4-fs error (device loop2): ext4_nfs_get_inode:1433: inode #11: comm syz.2.411: iget: bad extra_isize 90 (inode size 256) [ 100.502139][ T5400] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 100.542980][ T5406] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.543028][ T5406] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 100.551683][ T5406] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.724897][ T5414] device macsec0 entered promiscuous mode [ 100.725596][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 100.743843][ T5414] device veth1_macvtap left promiscuous mode [ 100.788138][ T5414] device macsec0 left promiscuous mode [ 100.794427][ T26] audit: type=1800 audit(1785401807.712:11): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.422" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 100.894191][ T26] audit: type=1800 audit(1785401807.762:12): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.422" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 101.203582][ T5431] loop1: detected capacity change from 0 to 2048 [ 101.307489][ T5431] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback. [ 101.375387][ T5431] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.474766][ T5431] EXT4-fs (loop1): shut down requested (1) [ 101.503340][ T5425] loop3: detected capacity change from 0 to 32768 [ 101.688805][ T5463] loop4: detected capacity change from 0 to 764 [ 101.730845][ T5425] XFS (loop3): Mounting V5 Filesystem [ 101.811836][ T5465] all (unregistering): Released all slaves [ 101.852301][ T5425] XFS (loop3): Ending clean mount [ 101.929174][ T5425] XFS (loop3): Quotacheck needed: Please wait. [ 102.015419][ T5425] XFS (loop3): Quotacheck: Done. [ 102.066106][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.084274][ T4195] XFS (loop3): Unmounting Filesystem [ 102.446156][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.481271][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.502307][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.553006][ T21] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.564648][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.573255][ T5498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.457'. [ 102.614976][ T21] usb 3-1: config 0 descriptor?? [ 102.743009][ T5505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.952242][ T5511] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 103.002796][ T5511] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.109270][ T21] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 103.193213][ T21] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 103.387268][ T13] usb 3-1: USB disconnect, device number 6 [ 103.541906][ T5529] loop1: detected capacity change from 0 to 512 [ 103.642899][ T5529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.720764][ T5529] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.126862][ T5546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.313217][ T5553] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 104.627996][ T5566] set_capacity_and_notify: 2 callbacks suppressed [ 104.628010][ T5566] loop2: detected capacity change from 0 to 128 [ 104.752800][ T5576] loop4: detected capacity change from 0 to 64 [ 104.757142][ T5566] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.804106][ T5566] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.867648][ T26] audit: type=1800 audit(1785401811.792:13): pid=5576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.489" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 105.044064][ T4190] hfs: node 4:3 still has 1 user(s)! [ 105.123980][ T5582] loop1: detected capacity change from 0 to 512 [ 105.211717][ T5582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.231782][ T5586] loop2: detected capacity change from 0 to 128 [ 105.259365][ T5582] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.492: inode has both inline data and extents flags [ 105.292640][ T5586] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 105.395981][ T5582] EXT4-fs (loop1): Remounting filesystem read-only [ 105.403347][ T5582] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.492: couldn't read orphan inode 15 (err -117) [ 105.414053][ T5586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.476722][ T5582] EXT4-fs (loop1): Remounting filesystem read-only [ 105.484915][ T5582] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,. Quota mode: none. [ 105.599797][ T5582] overlayfs: failed to create directory ./bus/work (errno: 117); mounting read-only [ 105.781390][ T4186] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /102/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 105.803392][ T5597] loop2: detected capacity change from 0 to 1024 [ 105.926109][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 105.943399][ T4186] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /102/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.966631][ T5597] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 105.983686][ T5599] loop4: detected capacity change from 0 to 4096 [ 106.092274][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.102496][ T4186] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 106.116113][ T5597] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.131927][ T5599] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 106.162005][ T26] audit: type=1800 audit(1785401813.082:14): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.499" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.168822][ T5597] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm syz.2.499: lblock 8 mapped to illegal pblock 8 (length 8) [ 106.238495][ T26] audit: type=1800 audit(1785401813.092:15): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.499" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.276592][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.283518][ T4186] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /102/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 106.370548][ T5608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.389814][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.393250][ T5597] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 106.401104][ T4186] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /102/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.526784][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.546792][ T5607] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.499: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.565327][ T4186] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 106.613238][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.650563][ T4186] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /102/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 106.711392][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.727740][ T4186] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /102/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.793477][ T5615] loop4: detected capacity change from 0 to 1024 [ 106.797506][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.860881][ T4186] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 106.903767][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 106.922468][ T4186] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /102/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 106.964737][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 107.026282][ T5615] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 107.100566][ T5615] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.303980][ T5625] loop2: detected capacity change from 0 to 64 [ 107.509495][ T4193] hfs: node 4:3 still has 1 user(s)! [ 107.986809][ T13] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 108.081905][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.138135][ T21] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 108.178668][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.281934][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.386365][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.396214][ T13] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 108.415620][ T13] usb 4-1: config 0 has no interface number 0 [ 108.537187][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.581590][ T5639] chnl_net:caif_netlink_parms(): no params data found [ 108.586213][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 108.612267][ T144] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 112: padding at end of block bitmap is not set [ 108.616114][ T13] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 108.646537][ T144] EXT4-fs (loop4): Remounting filesystem read-only [ 108.660350][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.680903][ T13] usb 4-1: Product: syz [ 108.685309][ T13] usb 4-1: Manufacturer: syz [ 108.712366][ T13] usb 4-1: SerialNumber: syz [ 108.762162][ T13] usb 4-1: config 0 descriptor?? [ 108.811253][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.818978][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.827554][ T5639] device bridge_slave_0 entered promiscuous mode [ 108.846296][ T21] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 108.865797][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.900095][ T21] usb 3-1: Product: syz [ 108.904311][ T21] usb 3-1: Manufacturer: syz [ 108.913676][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.921209][ T21] usb 3-1: SerialNumber: syz [ 108.931313][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.964410][ T5639] device bridge_slave_1 entered promiscuous mode [ 109.062367][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.085454][ T13] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 109.120228][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.131167][ T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 109.139397][ T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 109.150731][ T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 109.161182][ T13] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 109.234384][ T5639] team0: Port device team_slave_0 added [ 109.278114][ T5639] team0: Port device team_slave_1 added [ 109.315047][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.328805][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.363368][ T21] usb 3-1: MIDIStreaming interface descriptor not found [ 109.370786][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.445089][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.456134][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.464426][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.506334][ T21] usb 3-1: USB disconnect, device number 7 [ 109.514888][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.639013][ T5639] device hsr_slave_0 entered promiscuous mode [ 109.657336][ T5639] device hsr_slave_1 entered promiscuous mode [ 109.667940][ T5639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.677010][ T5639] Cannot create hsr debugfs directory [ 109.760876][ T4211] usb 4-1: USB disconnect, device number 11 [ 109.785652][ T4211] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 109.805129][ T4211] keyspan 4-1:0.133: device disconnected [ 109.856202][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.868318][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.972445][ T1108] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 110.156412][ T1108] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 110.175981][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.187974][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.190317][ T5639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.211329][ T1108] usb 5-1: Product: syz [ 110.222374][ T1108] usb 5-1: Manufacturer: syz [ 110.227361][ T1108] usb 5-1: SerialNumber: syz [ 110.235588][ T5639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.320976][ T4300] Bluetooth: hci0: command 0x0409 tx timeout [ 110.332932][ T5639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.351543][ T5639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.416051][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 110.445545][ T154] device hsr_slave_0 left promiscuous mode [ 110.484647][ T154] device hsr_slave_1 left promiscuous mode [ 110.504305][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.511164][ T5687] loop3: detected capacity change from 0 to 256 [ 110.524971][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.536204][ T21] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 110.544323][ T21] usb 3-1: config 0 has no interface number 0 [ 110.554616][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.590132][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.609299][ T154] device bridge_slave_1 left promiscuous mode [ 110.615449][ T26] audit: type=1800 audit(1785401817.532:16): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.524" name="=" dev="loop3" ino=1048609 res=0 errno=0 [ 110.646661][ T1108] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 110.649924][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.653909][ T1108] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 110.686155][ T1108] usb 5-1: failed to enable PITCH for EP 0x1 [ 110.726208][ T1108] usb 5-1: unit 2 not found! [ 110.728957][ T154] device bridge_slave_0 left promiscuous mode [ 110.731232][ T21] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 110.746061][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.746625][ T1108] usb 5-1: unit 0 not found! [ 110.766765][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.794655][ T21] usb 3-1: Product: syz [ 110.809759][ T21] usb 3-1: Manufacturer: syz [ 110.814515][ T21] usb 3-1: SerialNumber: syz [ 110.828796][ T5690] loop3: detected capacity change from 0 to 512 [ 110.846529][ T154] device veth1_macvtap left promiscuous mode [ 110.853192][ T21] usb 3-1: config 0 descriptor?? [ 110.865749][ T5690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.875378][ T154] device veth0_macvtap left promiscuous mode [ 110.916220][ T154] device veth1_vlan left promiscuous mode [ 110.934867][ T154] device veth0_vlan left promiscuous mode [ 110.950348][ T21] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.952089][ T5690] EXT4-fs (loop3): 1 truncate cleaned up [ 110.965550][ T5690] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 110.967985][ T1108] usb 5-1: USB disconnect, device number 4 [ 111.163154][ T21] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.202961][ T21] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 111.567296][ T21] kernel write not supported for file /comedi4 (pid: 21 comm: kworker/1:0) [ 111.579630][ T5668] loop2: detected capacity change from 0 to 256 [ 111.731397][ T13] usb 3-1: USB disconnect, device number 8 [ 111.736014][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 111.766479][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 111.815095][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 111.848389][ T13] quatech2 3-1:0.51: device disconnected [ 111.883470][ T5711] loop3: detected capacity change from 0 to 8192 [ 111.946079][ T5711] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 111.956398][ T5711] REISERFS (device loop3): using ordered data mode [ 111.963122][ T5711] reiserfs: using flush barriers [ 111.983471][ T5711] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.001427][ T5711] REISERFS (device loop3): checking transaction log (loop3) [ 112.016310][ T5704] loop4: detected capacity change from 0 to 32768 [ 112.026262][ T5711] REISERFS (device loop3): Using r5 hash to sort names [ 112.036954][ T5711] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 112.194900][ T154] team0 (unregistering): Port device team_slave_1 removed [ 112.224698][ T5704] XFS (loop4): Mounting V5 Filesystem [ 112.261244][ T154] team0 (unregistering): Port device team_slave_0 removed [ 112.269877][ T5719] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.535'. [ 112.368027][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.389776][ T5704] XFS (loop4): Ending clean mount [ 112.396229][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 112.460191][ T4190] XFS (loop4): Unmounting Filesystem [ 112.504720][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.764538][ T154] bond0 (unregistering): Released all slaves [ 112.851712][ T5724] tipc: Started in network mode [ 112.862852][ T5724] tipc: Node identity ac1414aa, cluster identity 4711 [ 112.876197][ T5724] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.892302][ T5724] tipc: Enabled bearer , priority 10 [ 113.008600][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.086940][ T5733] loop3: detected capacity change from 0 to 256 [ 113.110019][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.156027][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.211125][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.223161][ T5733] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 113.256887][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.297380][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.319823][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.356847][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.375919][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.400468][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.407683][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.446321][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.478318][ T5746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 113.521316][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.532305][ T5751] loop2: detected capacity change from 0 to 16 [ 113.536677][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.596126][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.621961][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.663160][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.670481][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.670746][ T5751] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.712619][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.721698][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.736052][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.769525][ T5751] capability: warning: `syz.2.546' uses 32-bit capabilities (legacy support in use) [ 113.795819][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.825311][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.846894][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.873708][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.904700][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.915650][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.935018][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.985761][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.020460][ T5639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.059407][ T4236] tipc: Node number set to 2886997162 [ 114.072094][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.086688][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.156186][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 114.192096][ T5752] loop3: detected capacity change from 0 to 32768 [ 114.284036][ T5752] XFS (loop3): Mounting V5 Filesystem [ 114.306329][ T1108] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.319464][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.343815][ T1108] usb 5-1: config 0 descriptor?? [ 114.379663][ T5752] XFS (loop3): Ending clean mount [ 114.407353][ T1108] cp210x 5-1:0.0: cp210x converter detected [ 114.426149][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 114.463523][ T4195] XFS (loop3): Unmounting Filesystem [ 114.476171][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 114.488344][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.496284][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.554936][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.846239][ T1108] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.966178][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 115.053933][ T5796] loop2: detected capacity change from 0 to 1024 [ 115.119140][ T1108] usb 5-1: cp210x converter now attached to ttyUSB0 [ 115.143431][ T5796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.236106][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.273336][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.318461][ T5696] usb 5-1: USB disconnect, device number 5 [ 115.341517][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.364967][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.373552][ T5696] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.403198][ T5639] device veth0_vlan entered promiscuous mode [ 115.434030][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.465835][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.480471][ T5639] device veth1_vlan entered promiscuous mode [ 115.515732][ T5696] cp210x 5-1:0.0: device disconnected [ 115.574927][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.585051][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.595394][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.604770][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.630194][ T5639] device veth0_macvtap entered promiscuous mode [ 115.679413][ T5639] device veth1_macvtap entered promiscuous mode [ 115.759468][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.810762][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.866006][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.902302][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.940279][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.985932][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.015951][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.056239][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.087279][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.122345][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.146845][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.178653][ T5824] loop2: detected capacity change from 0 to 1024 [ 116.200879][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.238946][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.308568][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.376015][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.403112][ T5814] loop3: detected capacity change from 0 to 32768 [ 116.410380][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.460472][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.469938][ T5814] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.556 (5814) [ 116.501139][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.535445][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.558131][ T2302] Bluetooth: hci0: command 0x0419 tx timeout [ 116.579278][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.611964][ T5814] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 116.627492][ T5814] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 116.629054][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.647901][ T5814] BTRFS info (device loop3): use zstd compression, level 3 [ 116.655265][ T5814] BTRFS info (device loop3): use no compression [ 116.695955][ T5814] BTRFS info (device loop3): using free space tree [ 116.699847][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.719158][ T5814] BTRFS info (device loop3): has skinny extents [ 116.733343][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.779881][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.820943][ T5639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.831815][ T5639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.871274][ T5639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.918603][ T5639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.944972][ T5833] loop2: detected capacity change from 0 to 8192 [ 117.082635][ T5814] BTRFS info (device loop3): enabling ssd optimizations [ 117.110766][ T309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.142450][ T309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.166948][ T5833] loop2: p3 p4 < > [ 117.170967][ T5833] loop2: p3 start 9895680 is beyond EOD, truncated [ 117.220964][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.286100][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.294002][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.364015][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.579530][ T5860] loop4: detected capacity change from 0 to 512 [ 117.627033][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'. [ 117.666522][ T5860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.736460][ T5860] EXT4-fs (loop4): 1 truncate cleaned up [ 117.745950][ T5860] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,init_itable,,errors=continue. Quota mode: none. [ 117.814724][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 117.891573][ T26] audit: type=1800 audit(1785401824.812:17): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.567" name="cgroup" dev="loop4" ino=18 res=0 errno=0 [ 118.047039][ T2302] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 118.077229][ C0] net_ratelimit: 2 callbacks suppressed [ 118.077246][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 118.193785][ T5880] loop2: detected capacity change from 0 to 8 [ 118.250817][ T5880] SQUASHFS error: lzo decompression failed, data probably corrupt [ 118.276026][ T5880] SQUASHFS error: Failed to read block 0x91: -5 [ 118.286223][ T2302] usb 6-1: Using ep0 maxpacket: 32 [ 118.324163][ T5880] SQUASHFS error: Unable to read metadata cache entry [8f] [ 118.366236][ T5880] SQUASHFS error: Unable to read inode 0x11f [ 118.407249][ T2302] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.421513][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.464576][ T5890] loop4: detected capacity change from 0 to 64 [ 118.471829][ T2302] usb 6-1: config 0 descriptor?? [ 118.756213][ T2302] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 118.778771][ T2302] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.847575][ T2302] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 118.854779][ T2302] usb 6-1: media controller created [ 118.923419][ T2302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.036296][ T2302] az6027: usb out operation failed. (-71) [ 119.086197][ T2302] az6027: usb out operation failed. (-71) [ 119.092013][ T2302] stb0899_attach: Driver disabled by Kconfig [ 119.118263][ T2302] az6027: no front-end attached [ 119.118263][ T2302] [ 119.126210][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 119.146169][ T5915] device ip6_vti0 entered promiscuous mode [ 119.176026][ T2302] az6027: usb out operation failed. (-71) [ 119.195290][ T2302] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 119.247211][ T2302] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 119.298053][ T2302] dvb-usb: schedule remote query interval to 400 msecs. [ 119.324218][ T2302] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 119.348466][ T2302] usb 6-1: USB disconnect, device number 2 [ 119.473620][ T2302] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 119.519655][ T4192] bridge0: port 3(syz_tun) entered disabled state [ 119.572634][ T4192] device syz_tun left promiscuous mode [ 119.580997][ T4192] bridge0: port 3(syz_tun) entered disabled state [ 120.004367][ T5961] loop5: detected capacity change from 0 to 4096 [ 120.011810][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.105373][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 120.128631][ T5961] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 120.156063][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 120.205455][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.231663][ T9] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 120.254220][ T5639] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 120.281653][ T5639] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 120.292004][ T5639] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 120.306636][ T5971] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 120.326078][ T5971] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 120.339709][ T9] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 120.355464][ T5971] netlink: 'syz.2.591': attribute type 7 has an invalid length. [ 120.374136][ T5639] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 120.406068][ T5971] netlink: 197204 bytes leftover after parsing attributes in process `syz.2.591'. [ 120.419652][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.448143][ T5980] loop3: detected capacity change from 0 to 512 [ 120.543309][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.653510][ T5980] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.700512][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.714507][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.724243][ T5924] device bridge_slave_0 entered promiscuous mode [ 120.741940][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.749810][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.760422][ T5924] device bridge_slave_1 entered promiscuous mode [ 120.800671][ T2302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.927055][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.957662][ T6008] loop2: detected capacity change from 0 to 1024 [ 121.007416][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.029376][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 121.049015][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 121.153751][ T5924] team0: Port device team_slave_0 added [ 121.206026][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 121.232299][ T5924] team0: Port device team_slave_1 added [ 121.340416][ T6026] loop5: detected capacity change from 0 to 512 [ 121.356718][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.374408][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.407019][ T6008] hfsplus: xattr searching failed [ 121.428247][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.436229][ T2302] Bluetooth: hci5: command 0x0409 tx timeout [ 121.501104][ T6026] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.544872][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.568275][ T2302] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.575501][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.603076][ T6026] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.603092][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.659247][ T5924] device hsr_slave_0 entered promiscuous mode [ 121.667912][ T5924] device hsr_slave_1 entered promiscuous mode [ 121.680790][ T2302] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.774696][ T6039] loop4: detected capacity change from 0 to 128 [ 121.836775][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.883112][ T6039] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 121.917432][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.021719][ T6039] hpfs: filesystem error: improperly stopped [ 122.045155][ T6039] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 122.055325][ T6039] hpfs: You really don't want any checks? You are crazy... [ 122.062899][ T6039] hpfs: Code page index out of array [ 122.102355][ T6039] hpfs: code page support is disabled [ 122.146550][ T6039] hpfs: hpfs_map_4sectors(): unaligned read [ 122.153111][ T6039] hpfs: hpfs_map_4sectors(): unaligned read [ 122.197228][ T6039] hpfs: filesystem error: unable to find root dir [ 122.236023][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 122.267304][ T5924] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.294364][ T6039] hpfs: hpfs_map_sector(): read error [ 122.332184][ T6039] hpfs: hpfs_map_sector(): read error [ 122.348333][ T5924] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.356825][ T6056] loop2: detected capacity change from 0 to 128 [ 122.358235][ T6058] scsi_strcpy_devinfo: vendor string 'vendo€â*r' is too long [ 122.395967][ T6058] scsi_strcpy_devinfo: model string 'moí劌r•™—˜r³ádel' is too long [ 122.416850][ T5924] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.432801][ T5924] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.526826][ T6056] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.557037][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.621998][ T6056] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.658981][ T6072] loop3: detected capacity change from 0 to 256 [ 122.697380][ T6056] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x0e) [ 122.726687][ T6072] exfat: Deprecated parameter 'utf8' [ 122.732523][ T6072] exfat: Deprecated parameter 'utf8' [ 122.810145][ T6072] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 122.876764][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.998974][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.062859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.115481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.165380][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.191472][ T6092] loop3: detected capacity change from 0 to 64 [ 123.199261][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.286722][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 123.338929][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.370481][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.412482][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.419649][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.543037][ T2302] Bluetooth: hci5: command 0x041b tx timeout [ 123.629750][ T6112] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.658324][ T6100] FAULT_INJECTION: forcing a failure. [ 123.658324][ T6100] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 123.685482][ T6112] FAULT_INJECTION: forcing a failure. [ 123.685482][ T6112] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 123.700819][ T6112] CPU: 1 PID: 6112 Comm: syz.2.633 Not tainted syzkaller #0 [ 123.708170][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.718245][ T6112] Call Trace: [ 123.721543][ T6112] [ 123.724475][ T6112] dump_stack_lvl+0x188/0x250 [ 123.729187][ T6112] ? show_regs_print_info+0x20/0x20 [ 123.734421][ T6112] ? load_image+0x410/0x410 [ 123.738941][ T6112] ? prandom_u32+0x217/0x250 [ 123.743558][ T6112] should_fail+0x383/0x4b0 [ 123.747991][ T6112] prepare_alloc_pages+0x1e3/0x5b0 [ 123.753112][ T6112] __alloc_pages+0x11b/0x480 [ 123.757712][ T6112] ? zone_statistics+0x170/0x170 [ 123.762670][ T6112] ? rcu_lock_acquire+0x30/0x30 [ 123.767545][ T6112] ? alloc_pages+0x452/0x560 [ 123.772158][ T6112] __get_free_pages+0x8/0x30 [ 123.776766][ T6112] __tlb_remove_page_size+0x1f2/0x3f0 [ 123.782165][ T6112] unmap_page_range+0xfcf/0x2410 [ 123.783590][ T3559] FAULT_INJECTION: forcing a failure. [ 123.783590][ T3559] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 123.787167][ T6112] unmap_vmas+0x131/0x250 [ 123.804720][ T6112] ? unmap_page_range+0x2410/0x2410 [ 123.809932][ T6112] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.811056][ T4236] FAULT_INJECTION: forcing a failure. [ 123.811056][ T4236] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 123.815926][ T6112] ? lock_chain_count+0x20/0x20 [ 123.815958][ T6112] exit_mmap+0x3b9/0x640 [ 123.815979][ T6112] ? vm_brk+0x20/0x20 [ 123.816004][ T6112] ? __khugepaged_exit+0x2bc/0x330 [ 123.848218][ T6112] __mmput+0x115/0x390 [ 123.852302][ T6112] exit_mm+0x632/0x7b0 [ 123.856370][ T6112] ? perf_pmu_migrate_context+0xb70/0xb70 [ 123.862108][ T6112] ? acct_collect+0x547/0x710 [ 123.866789][ T6112] ? do_exit+0x2110/0x2110 [ 123.871204][ T6112] ? taskstats_exit+0x451/0xae0 [ 123.876056][ T6112] do_exit+0x5b8/0x2110 [ 123.880218][ T6112] ? put_task_struct+0x80/0x80 [ 123.884980][ T6112] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.891053][ T6112] ? _raw_spin_lock_irq+0xb7/0xf0 [ 123.896077][ T6112] do_group_exit+0x12c/0x2f0 [ 123.900676][ T6112] ? lockdep_hardirqs_on+0x94/0x140 [ 123.905873][ T6112] get_signal+0x7eb/0x12e0 [ 123.910303][ T6112] arch_do_signal_or_restart+0xe6/0x12a0 [ 123.915947][ T6112] ? futex_exit_release+0x1c0/0x1c0 [ 123.921147][ T6112] ? get_sigframe_size+0x10/0x10 [ 123.926082][ T6112] ? __context_tracking_exit+0x4c/0x80 [ 123.931767][ T6112] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.937771][ T6112] ? exit_to_user_mode_loop+0x3b/0x130 [ 123.943261][ T6112] exit_to_user_mode_loop+0x9e/0x130 [ 123.948546][ T6112] exit_to_user_mode_prepare+0xee/0x180 [ 123.954127][ T6112] syscall_exit_to_user_mode+0x16/0x40 [ 123.959683][ T6112] do_syscall_64+0x58/0xa0 [ 123.964212][ T6112] ? clear_bhb_loop+0x30/0x80 [ 123.969263][ T6112] ? clear_bhb_loop+0x30/0x80 [ 123.973946][ T6112] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.979959][ T6112] RIP: 0033:0x7f6c9d2fff99 [ 123.984373][ T6112] Code: Unable to access opcode bytes at RIP 0x7f6c9d2fff6f. [ 123.991992][ T6112] RSP: 002b:00007f6c9b5580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.000877][ T6112] RAX: fffffffffffffe00 RBX: 00007f6c9d587fa8 RCX: 00007f6c9d2fff99 [ 124.008846][ T6112] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c9d587fa8 [ 124.016820][ T6112] RBP: 00007f6c9d587fa0 R08: 0000000000000000 R09: 0000000000000000 [ 124.024792][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.032848][ T6112] R13: 00007f6c9d588038 R14: 00007ffcc0c8d200 R15: 00007ffcc0c8d2e8 [ 124.040887][ T6112] [ 124.043905][ T4236] CPU: 0 PID: 4236 Comm: kworker/0:9 Not tainted syzkaller #0 [ 124.051412][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.061882][ T4236] Workqueue: events nsim_dev_trap_report_work [ 124.067975][ T4236] Call Trace: [ 124.071274][ T4236] [ 124.074210][ T4236] dump_stack_lvl+0x188/0x250 [ 124.078900][ T4236] ? show_regs_print_info+0x20/0x20 [ 124.084102][ T4236] ? load_image+0x410/0x410 [ 124.088618][ T4236] ? mark_lock+0x94/0x320 [ 124.092954][ T4236] ? prandom_u32+0x217/0x250 [ 124.097636][ T4236] should_fail+0x383/0x4b0 [ 124.102065][ T4236] prepare_alloc_pages+0x1e3/0x5b0 [ 124.107186][ T4236] __alloc_pages+0x11b/0x480 [ 124.111780][ T4236] ? zone_statistics+0x170/0x170 [ 124.116720][ T4236] ? __lock_acquire+0x7b50/0x7b50 [ 124.121762][ T4236] new_slab+0xc0/0x4b0 [ 124.125837][ T4236] ___slab_alloc+0x807/0xdd0 [ 124.130432][ T4236] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 124.136271][ T4236] __kmalloc_node_track_caller+0x13d/0x3a0 [ 124.142104][ T4236] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 124.147933][ T4236] ? __alloc_skb+0xf4/0x750 [ 124.152452][ T4236] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 124.158273][ T4236] __alloc_skb+0x22c/0x750 [ 124.162703][ T4236] nsim_dev_trap_report_work+0x25c/0xab0 [ 124.168360][ T4236] process_one_work+0x867/0xff0 [ 124.173252][ T4236] ? worker_detach_from_pool+0x240/0x240 [ 124.178894][ T4236] ? lockdep_hardirqs_off+0x70/0x100 [ 124.184204][ T4236] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.189358][ T4236] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.194914][ T4236] ? wq_worker_running+0x97/0x170 [ 124.199947][ T4236] worker_thread+0xad7/0x12a0 [ 124.204659][ T4236] kthread+0x42e/0x520 [ 124.208804][ T4236] ? rcu_lock_release+0x20/0x20 [ 124.213664][ T4236] ? kthread_blkcg+0xd0/0xd0 [ 124.218266][ T4236] ret_from_fork+0x1f/0x30 [ 124.222711][ T4236] [ 124.225741][ T3559] CPU: 1 PID: 3559 Comm: udevd Not tainted syzkaller #0 [ 124.232691][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.242778][ T3559] Call Trace: [ 124.246064][ T3559] [ 124.249001][ T3559] dump_stack_lvl+0x188/0x250 [ 124.253681][ T3559] ? verify_lock_unused+0x140/0x140 [ 124.258978][ T3559] ? show_regs_print_info+0x20/0x20 [ 124.264178][ T3559] ? load_image+0x410/0x410 [ 124.268778][ T3559] ? prandom_u32+0x217/0x250 [ 124.273391][ T3559] should_fail+0x383/0x4b0 [ 124.277831][ T3559] prepare_alloc_pages+0x1e3/0x5b0 [ 124.282979][ T3559] __alloc_pages+0x11b/0x480 [ 124.287583][ T3559] ? zone_statistics+0x170/0x170 [ 124.292529][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.298515][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 124.303541][ T3559] ? alloc_pages+0x452/0x560 [ 124.308133][ T3559] new_slab+0xc0/0x4b0 [ 124.312205][ T3559] ___slab_alloc+0x807/0xdd0 [ 124.316190][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 124.316792][ T3559] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 124.329439][ T3559] __kmalloc+0x11d/0x340 [ 124.333695][ T3559] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 124.339450][ T3559] tomoyo_realpath_from_path+0xed/0x5e0 [ 124.345110][ T3559] tomoyo_check_open_permission+0x1eb/0x410 [ 124.351018][ T3559] ? tomoyo_check_path_number_acl+0x280/0x280 [ 124.357103][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 124.362126][ T3559] ? __rwlock_init+0x140/0x140 [ 124.366890][ T3559] ? hook_file_open+0xf1/0x230 [ 124.371888][ T3559] ? tomoyo_file_open+0xe9/0x170 [ 124.376976][ T3559] security_file_open+0x5e/0xa0 [ 124.381841][ T3559] do_dentry_open+0x321/0xf90 [ 124.386542][ T3559] ? vfs_open+0x2b/0x80 [ 124.390709][ T3559] path_openat+0x2718/0x2fb0 [ 124.395330][ T3559] ? __kasan_slab_alloc+0xa9/0xc0 [ 124.400385][ T3559] ? do_filp_open+0x400/0x400 [ 124.405100][ T3559] do_filp_open+0x1df/0x400 [ 124.409628][ T3559] ? vfs_tmpfile+0x300/0x300 [ 124.414255][ T3559] ? _raw_spin_unlock+0x24/0x40 [ 124.419130][ T3559] ? alloc_fd+0x59e/0x650 [ 124.423481][ T3559] do_sys_openat2+0x14b/0x500 [ 124.428173][ T3559] ? __lock_acquire+0x7b50/0x7b50 [ 124.433223][ T3559] ? do_sys_open+0xe0/0xe0 [ 124.437654][ T3559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.443745][ T3559] ? lock_chain_count+0x20/0x20 [ 124.448617][ T3559] __x64_sys_openat+0x135/0x160 [ 124.453480][ T3559] do_syscall_64+0x4c/0xa0 [ 124.457893][ T3559] ? clear_bhb_loop+0x30/0x80 [ 124.462570][ T3559] ? clear_bhb_loop+0x30/0x80 [ 124.467337][ T3559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.473252][ T3559] RIP: 0033:0x7f3d7d141c3a [ 124.477672][ T3559] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 124.497279][ T3559] RSP: 002b:00007ffea6702218 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 124.505708][ T3559] RAX: ffffffffffffffda RBX: 000056046f4bc980 RCX: 00007f3d7d141c3a [ 124.513681][ T3559] RDX: 0000000000090800 RSI: 000056046f48dde0 RDI: 00000000ffffff9c [ 124.521664][ T3559] RBP: 000056046f48dde0 R08: 0000000000000000 R09: 0000000000000001 [ 124.529774][ T3559] R10: 0000000000000000 R11: 0000000000000206 R12: 000056046f4967b0 [ 124.537750][ T3559] R13: 00000000000000ff R14: 000056046e90fbe0 R15: 00007ffea67024b0 [ 124.545778][ T3559] [ 124.548799][ T6100] CPU: 0 PID: 6100 Comm: syz.5.627 Not tainted syzkaller #0 [ 124.556315][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.566474][ T6100] Call Trace: [ 124.569810][ T6100] [ 124.572805][ T6100] dump_stack_lvl+0x188/0x250 [ 124.577514][ T6100] ? show_regs_print_info+0x20/0x20 [ 124.582731][ T6100] ? load_image+0x410/0x410 [ 124.587265][ T6100] ? prandom_u32+0x217/0x250 [ 124.591933][ T6100] should_fail+0x383/0x4b0 [ 124.596376][ T6100] prepare_alloc_pages+0x1e3/0x5b0 [ 124.601517][ T6100] __alloc_pages+0x11b/0x480 [ 124.606127][ T6100] ? zone_statistics+0x170/0x170 [ 124.611085][ T6100] ? mark_lock+0x94/0x320 [ 124.615450][ T6100] alloc_pages_vma+0x2bc/0x790 [ 124.620238][ T6100] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 124.626053][ T6100] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 124.631722][ T6100] ? shmem_swapin_page+0x22f0/0x22f0 [ 124.637143][ T6100] ? __lock_acquire+0x7b50/0x7b50 [ 124.642195][ T6100] ? xas_descend+0x210/0x3b0 [ 124.646842][ T6100] ? xas_load+0x127/0x140 [ 124.651261][ T6100] ? pagecache_get_page+0xc32/0xf20 [ 124.656564][ T6100] ? page_cache_prev_miss+0x380/0x380 [ 124.661963][ T6100] ? mark_lock+0x94/0x320 [ 124.666311][ T6100] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.672422][ T6100] shmem_getpage_gfp+0x14be/0x2c10 [ 124.677589][ T6100] shmem_write_begin+0xcd/0x1a0 [ 124.682551][ T6100] generic_perform_write+0x2b6/0x550 [ 124.687862][ T6100] ? atime_needs_update+0x770/0x770 [ 124.693207][ T6100] ? grab_cache_page_write_begin+0xa0/0xa0 [ 124.699082][ T6100] ? file_remove_privs+0x5d0/0x5d0 [ 124.704341][ T6100] ? rwsem_write_trylock+0x135/0x1c0 [ 124.709641][ T6100] ? clear_nonspinnable+0x60/0x60 [ 124.714702][ T6100] __generic_file_write_iter+0x261/0x4e0 [ 124.720373][ T6100] ? generic_write_checks+0x3be/0x460 [ 124.725779][ T6100] generic_file_write_iter+0xa6/0x1b0 [ 124.731172][ T6100] __kernel_write+0x522/0x980 [ 124.735854][ T6100] ? vfs_read+0xd50/0xd50 [ 124.740205][ T6100] ? __lock_acquire+0x7b50/0x7b50 [ 124.745633][ T6100] ? get_dump_page+0xee/0x670 [ 124.750338][ T6100] ? down_read_killable+0x1ce/0x340 [ 124.755629][ T6100] __dump_emit+0x258/0x380 [ 124.760147][ T6100] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 124.765620][ T6100] ? generic_file_llseek_size+0x34a/0x3a0 [ 124.771343][ T6100] ? dump_emit+0x145/0x3d0 [ 124.775756][ T6100] dump_user_range+0x84/0x340 [ 124.780435][ T6100] elf_core_dump+0x2fe0/0x3530 [ 124.785218][ T6100] ? load_elf_library+0x980/0x980 [ 124.790394][ T6100] ? verify_lock_unused+0x140/0x140 [ 124.795637][ T6100] ? dump_vma_snapshot+0xaf1/0xe40 [ 124.800901][ T6100] ? rcu_read_lock_any_held+0xb0/0x130 [ 124.806478][ T6100] ? do_raw_spin_unlock+0x11d/0x230 [ 124.811860][ T6100] do_coredump+0x14e8/0x2a40 [ 124.816480][ T6100] ? nfs_stat_to_errno+0x170/0x170 [ 124.821631][ T6100] ? lock_chain_count+0x20/0x20 [ 124.826504][ T6100] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.831888][ T6100] ? lockdep_hardirqs_on+0x94/0x140 [ 124.837102][ T6100] get_signal+0x531/0x12e0 [ 124.841648][ T6100] arch_do_signal_or_restart+0xe6/0x12a0 [ 124.847370][ T6100] ? _raw_spin_unlock+0x40/0x40 [ 124.852250][ T6100] ? force_sig_info_to_task+0x318/0x3c0 [ 124.857799][ T6100] ? get_sigframe_size+0x10/0x10 [ 124.862754][ T6100] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.868739][ T6100] ? exit_to_user_mode_loop+0x3b/0x130 [ 124.874200][ T6100] exit_to_user_mode_loop+0x9e/0x130 [ 124.879490][ T6100] exit_to_user_mode_prepare+0xee/0x180 [ 124.885050][ T6100] irqentry_exit_to_user_mode+0x5/0x30 [ 124.890536][ T6100] exc_page_fault+0x88/0x100 [ 124.895273][ T6100] asm_exc_page_fault+0x22/0x30 [ 124.900139][ T6100] RIP: 0033:0x7fa49155bb47 [ 124.904605][ T6100] Code: e8 8e fa ff ff 89 f2 48 8d 3d a5 4e 1b 00 48 8d 35 f3 09 1e 00 31 c0 e8 c7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 124.924563][ T6100] RSP: 002b:00007fa48f8df120 EFLAGS: 00010202 [ 124.930629][ T6100] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa4916a5f99 [ 124.938775][ T6100] RDX: 00007fa48f8df140 RSI: 00007fa48f8df270 RDI: 000000000000000b [ 124.947107][ T6100] RBP: 00007fa49173cec4 R08: 0000000000000000 R09: 0000000000000000 [ 124.955360][ T6100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.956313][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.963649][ T6100] R13: 00007fa49192e038 R14: 00007fa49192dfa0 R15: 00007ffd8a66ec88 [ 124.963714][ T6100] [ 124.996208][ T154] device hsr_slave_0 left promiscuous mode [ 125.005516][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.015688][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.036125][ T154] device hsr_slave_1 left promiscuous mode [ 125.046094][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.053564][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.086941][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.110023][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.118904][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.131018][ T154] device bridge_slave_1 left promiscuous mode [ 125.156174][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.200405][ T6136] sctp: [Deprecated]: syz.3.641 (pid 6136) Use of int in max_burst socket option deprecated. [ 125.200405][ T6136] Use struct sctp_assoc_value instead [ 125.235759][ T154] device bridge_slave_0 left promiscuous mode [ 125.260343][ T6138] loop5: detected capacity change from 0 to 4096 [ 125.263677][ T6139] loop2: detected capacity change from 0 to 512 [ 125.281245][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.282746][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.311600][ T6138] NILFS (loop5): invalid segment: Checksum error in segment payload [ 125.337526][ T154] device veth1_macvtap left promiscuous mode [ 125.343606][ T6138] NILFS (loop5): trying rollback from an earlier position [ 125.356190][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 125.374410][ T154] device veth0_macvtap left promiscuous mode [ 125.378628][ T6138] NILFS (loop5): recovery complete [ 125.386435][ T154] device veth1_vlan left promiscuous mode [ 125.392485][ T154] device veth0_vlan left promiscuous mode [ 125.405698][ T6139] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.422730][ T6144] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.599736][ T5896] Bluetooth: hci5: command 0x040f tx timeout [ 125.723170][ T154] team0 (unregistering): Port device team_slave_1 removed [ 125.738140][ T154] team0 (unregistering): Port device team_slave_0 removed [ 125.752096][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.772235][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.842942][ T154] bond0 (unregistering): Released all slaves [ 125.895209][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.904005][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.915376][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.924345][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.931681][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.941422][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.950183][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.973869][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.985621][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.994603][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.011091][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.041890][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.051200][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.052734][ T6149] loop3: detected capacity change from 0 to 256 [ 126.059994][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.086166][ T4300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.118213][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.171548][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.191340][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.336006][ T4300] usb 3-1: Using ep0 maxpacket: 16 [ 126.460288][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.484150][ T4300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.526774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.537731][ T4300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.539423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.560602][ T4300] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.578940][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.676211][ T4300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.695774][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.711067][ T4300] usb 3-1: SerialNumber: syz [ 126.772291][ T4300] hub 3-1:1.0: bad descriptor, ignoring hub [ 126.779561][ T4300] hub: probe of 3-1:1.0 failed with error -5 [ 126.800326][ T4300] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 126.836195][ T4194] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 126.908647][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.923590][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.986628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.007792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.024189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.104593][ T6188] loop4: detected capacity change from 0 to 512 [ 127.112077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.143173][ T5924] device veth0_vlan entered promiscuous mode [ 127.173742][ T5924] device veth1_vlan entered promiscuous mode [ 127.180159][ T6147] raw-gadget.0 gadget: fail, usb_ep_set_wedge returned -11 [ 127.233366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.246424][ T4194] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.267114][ T4194] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 127.267495][ T6188] EXT4-fs (loop4): 1 truncate cleaned up [ 127.296605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.316279][ T6188] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 127.336000][ T13] usb 3-1: USB disconnect, device number 9 [ 127.354492][ T6188] EXT4-fs (loop4): shut down requested (1) [ 127.360948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.396840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.437753][ T5924] device veth0_macvtap entered promiscuous mode [ 127.455388][ T5924] device veth1_macvtap entered promiscuous mode [ 127.462096][ T4194] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 127.482009][ T4194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.513531][ T4194] usb 4-1: Product: syz [ 127.528310][ T4194] usb 4-1: Manufacturer: syz [ 127.547584][ T4194] usb 4-1: SerialNumber: syz [ 127.555267][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.586295][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.605925][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.621577][ T4194] snd-ua101 4-1:1.1: invalid num_altsetting [ 127.635975][ T4194] snd-ua101 4-1:1.0: invalid format type [ 127.645501][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.679559][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.692602][ T5896] Bluetooth: hci5: command 0x0419 tx timeout [ 127.738139][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.784077][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.785228][ T6186] loop5: detected capacity change from 0 to 32768 [ 127.816530][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.835835][ T4194] usb 4-1: USB disconnect, device number 12 [ 127.875386][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.889933][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.954216][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.028120][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.028906][ T6186] XFS (loop5): Mounting V5 Filesystem [ 128.059493][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.098251][ T6213] loop4: detected capacity change from 0 to 2048 [ 128.102703][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.129920][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.151934][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.201865][ T6186] XFS (loop5): Ending clean mount [ 128.209967][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.248704][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.283245][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.305996][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.319770][ T4300] net_ratelimit: 6 callbacks suppressed [ 128.319786][ T4300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.339479][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.368525][ T5639] XFS (loop5): Unmounting Filesystem [ 128.378987][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.436495][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.449239][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.489579][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 128.501201][ T5924] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.522693][ T5924] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.544755][ T5924] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.565411][ T6213] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 128.595213][ T5924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.728607][ T6213] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.787572][ T26] audit: type=1800 audit(1785401835.712:18): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.656" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 128.851559][ T6213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.656: bg 0: block 345: padding at end of block bitmap is not set [ 128.892148][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 128.944402][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.959844][ T6213] EXT4-fs (loop4): Remounting filesystem read-only [ 128.966683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.983137][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.011693][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 129.024857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.086469][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.094434][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.137993][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.166560][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.464429][ T6258] sctp: [Deprecated]: syz.2.667 (pid 6258) Use of int in max_burst socket option deprecated. [ 129.464429][ T6258] Use struct sctp_assoc_value instead [ 129.492134][ T6260] loop5: detected capacity change from 0 to 256 [ 129.516071][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 129.597632][ T2302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.631849][ T6260] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 129.864105][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.873725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.939746][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.957935][ T4893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.997968][ T4228] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 130.144392][ T6293] loop6: detected capacity change from 0 to 1024 [ 130.324098][ T6307] netlink: 'syz.4.682': attribute type 11 has an invalid length. [ 130.451246][ T6315] loop3: detected capacity change from 0 to 256 [ 130.492360][ T6319] input: syz0 as /devices/virtual/input/input13 [ 130.606837][ T4228] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 130.626333][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.646073][ T4228] usb 3-1: Product: syz [ 130.656286][ T4228] usb 3-1: Manufacturer: syz [ 130.666115][ T4228] usb 3-1: SerialNumber: syz [ 130.697675][ T4228] usb 3-1: config 0 descriptor?? [ 130.828285][ T6341] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.854597][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.694'. [ 130.869404][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.694'. [ 130.885231][ T6342] Zero length message leads to an empty skb [ 130.946147][ T4228] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.145151][ T26] audit: type=1800 audit(1785401838.062:19): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.698" name="start_block" dev="configfs" ino=40626 res=0 errno=0 [ 131.157725][ T6356] netlink: 'syz.5.699': attribute type 1 has an invalid length. [ 131.194355][ T6356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.203022][ T6356] IPv6: NLM_F_CREATE should be set when creating new route [ 131.220140][ T6357] netlink: 'syz.5.699': attribute type 1 has an invalid length. [ 131.238361][ T6357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.352426][ T6363] loop3: detected capacity change from 0 to 512 [ 131.378201][ T4211] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.471844][ T6363] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 131.561566][ T6363] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.614680][ T6376] loop5: detected capacity change from 0 to 8192 [ 131.670700][ T4211] usb 7-1: Using ep0 maxpacket: 8 [ 131.821235][ T4211] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 131.830206][ T4211] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.862187][ T4300] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.865918][ T4211] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.894654][ T4211] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.914465][ T4228] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 131.925693][ T4228] usb 3-1: USB disconnect, device number 10 [ 131.948288][ T4211] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.975809][ T4211] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.990907][ T4211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.116135][ T4300] usb 5-1: Using ep0 maxpacket: 8 [ 132.140350][ T6400] loop3: detected capacity change from 0 to 128 [ 132.192531][ T6402] loop5: detected capacity change from 0 to 512 [ 132.241022][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 132.267474][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.287177][ T4211] usb 7-1: usb_control_msg returned -32 [ 132.292806][ T4211] usbtmc 7-1:16.0: can't read capabilities [ 132.296996][ T4300] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.305389][ T6402] EXT4-fs (loop5): orphan cleanup on readonly fs [ 132.313455][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 132.325077][ T4300] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 132.334985][ T4300] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 132.344305][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.354679][ T4300] usb 5-1: config 0 descriptor?? [ 132.363798][ T6402] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.711: ea_inode with extended attributes [ 132.406589][ T6402] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.711: error while reading EA inode 11 err=-117 [ 132.406712][ T4189] Bluetooth: hci2: urb ffff88802541a700 submission failed (90) [ 132.516761][ T6402] EXT4-fs (loop5): 1 orphan inode deleted [ 132.522561][ T6402] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,dioread_lock,debug_want_extra_isize=0x0000000000000006,nojournal_checksum,resgid=0x0000000000000000,acl,barrier,,errors=continue. Quota mode: none. [ 132.603691][ T2302] usb 5-1: USB disconnect, device number 6 [ 132.636705][ T6417] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32 [ 132.674499][ T6419] loop2: detected capacity change from 0 to 128 [ 132.749463][ T6419] FAT-fs (loop2): bogus number of reserved sectors [ 132.795847][ T6419] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 132.798959][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.816390][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.821006][ T6419] FAT-fs (loop2): Can't find a valid FAT filesystem [ 132.913539][ T26] audit: type=1800 audit(1785401839.832:20): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="local" dev="configfs" ino=41660 res=0 errno=0 [ 133.156627][ T4893] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.207662][ T6436] loop3: detected capacity change from 0 to 16 [ 133.239021][ T4893] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.288848][ T6436] erofs: (device loop3): mounted with root inode @ nid 36. [ 133.318623][ T6443] loop2: detected capacity change from 0 to 256 [ 133.323092][ T4893] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.341428][ T6436] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 133.424039][ T6443] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.447005][ T4254] net_ratelimit: 10 callbacks suppressed [ 133.447022][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.470696][ T4893] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.682115][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 133.819113][ T6454] loop2: detected capacity change from 0 to 2048 [ 133.893466][ T4211] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.917180][ T6454] loop2: p1 < > p4 [ 133.917180][ T6454] p4: [ 133.947451][ T6454] loop2: p4 size 722688 extends beyond EOD, truncated [ 133.964322][ T6454] loop2: p6 start 262464109 is beyond EOD, truncated [ 133.993275][ T6454] loop2: p7 size 2304 extends beyond EOD, truncated [ 134.095025][ T5898] usb 7-1: USB disconnect, device number 2 [ 134.176178][ T4211] usb 4-1: Using ep0 maxpacket: 16 [ 134.207809][ T6446] loop4: detected capacity change from 0 to 32768 [ 134.336907][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.364568][ T5669] udevd[5669]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 134.370085][ T6446] XFS (loop4): Mounting V5 Filesystem [ 134.394238][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 134.415295][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 134.445576][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 134.536250][ T4211] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 134.575992][ T4211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.606068][ T4211] usb 4-1: Product: syz [ 134.631044][ T6457] chnl_net:caif_netlink_parms(): no params data found [ 134.639147][ T4211] usb 4-1: Manufacturer: syz [ 134.643783][ T4211] usb 4-1: SerialNumber: syz [ 134.662257][ T6446] XFS (loop4): Ending clean mount [ 134.698876][ T6446] XFS (loop4): User initiated shutdown received. [ 134.726426][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 134.737520][ T6446] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 134.756123][ T5898] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 134.764691][ T6446] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 134.903635][ T6482] loop2: detected capacity change from 0 to 32768 [ 134.928780][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.953870][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.976614][ T4190] XFS (loop4): Unmounting Filesystem [ 134.996177][ T4211] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 135.020979][ T4211] usb 4-1: USB disconnect, device number 13 [ 135.031737][ T6457] device bridge_slave_0 entered promiscuous mode [ 135.032367][ T6482] XFS (loop2): Mounting V5 Filesystem [ 135.137326][ T6482] XFS (loop2): Ending clean mount [ 135.148276][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.155378][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.163035][ T5898] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.197648][ T5898] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 135.247264][ T6457] device bridge_slave_1 entered promiscuous mode [ 135.250218][ T5898] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 135.296112][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.362039][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.371373][ T4193] XFS (loop2): Unmounting Filesystem [ 135.399774][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.411528][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.500253][ T6457] team0: Port device team_slave_0 added [ 135.524596][ T6457] team0: Port device team_slave_1 added [ 135.607012][ T4893] device hsr_slave_0 left promiscuous mode [ 135.625334][ T4893] device hsr_slave_1 left promiscuous mode [ 135.644220][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.666050][ T4893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.693573][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.709260][ T4893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.720172][ T4893] device bridge_slave_1 left promiscuous mode [ 135.755585][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.766018][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 135.774731][ T4893] device bridge_slave_0 left promiscuous mode [ 135.781415][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.796269][ T4893] device veth1_macvtap left promiscuous mode [ 135.802485][ T4893] device veth0_macvtap left promiscuous mode [ 135.809214][ T4893] device veth1_vlan left promiscuous mode [ 135.815145][ T4893] device veth0_vlan left promiscuous mode [ 135.858161][ T5899] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 135.926087][ T4211] Bluetooth: hci0: command 0x0409 tx timeout [ 135.986090][ T4300] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.126644][ T4893] team0 (unregistering): Port device team_slave_1 removed [ 136.144788][ T4893] team0 (unregistering): Port device team_slave_0 removed [ 136.172380][ T4893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.206054][ T4893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.236152][ T4300] usb 5-1: Using ep0 maxpacket: 16 [ 136.266174][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.313499][ T6526] loop2: detected capacity change from 0 to 512 [ 136.346310][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.357121][ T4300] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.371506][ T4300] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.382036][ T5899] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.402890][ T5899] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 136.414166][ T4300] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.427341][ T5899] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 136.440931][ T4300] usb 5-1: config 1 interface 0 has no altsetting 0 [ 136.448047][ T5899] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 136.459896][ T5899] usb 4-1: config 1 interface 1 has no altsetting 0 [ 136.468945][ T2302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.483554][ T4893] bond0 (unregistering): Released all slaves [ 136.490092][ T5898] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 136.498982][ T5898] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input14 [ 136.508649][ T4211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.528719][ T6529] overlayfs: failed to verify origin (/syz2, ino=99, err=-116) [ 136.538361][ T5898] input: failed to attach handler kbd to device input14, error: -5 [ 136.546350][ T6529] overlayfs: failed to verify upper root origin [ 136.551247][ T5898] usb 7-1: USB disconnect, device number 3 [ 136.613250][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.616183][ T4300] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 136.627100][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.636085][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.664879][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.695571][ T4300] usb 5-1: Product: syz [ 136.700493][ T4300] usb 5-1: Manufacturer: syz [ 136.705112][ T4300] usb 5-1: SerialNumber: syz [ 136.716300][ T5899] usb 4-1: string descriptor 0 read error: -22 [ 136.726275][ T5899] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 136.735723][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.762329][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.762468][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.797075][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.812587][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.844961][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.892300][ T6457] device hsr_slave_0 entered promiscuous mode [ 136.914006][ T6457] device hsr_slave_1 entered promiscuous mode [ 136.956077][ T6457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.974019][ T6457] Cannot create hsr debugfs directory [ 136.989942][ T4300] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 137.227088][ T4300] usb 5-1: USB disconnect, device number 7 [ 137.401162][ T6457] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 137.410099][ T6556] loop2: detected capacity change from 0 to 256 [ 137.435641][ T6457] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 137.443225][ T6516] usblp0: removed [ 137.459270][ T6457] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 137.473191][ T6556] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.489699][ T6457] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 137.513832][ T26] audit: type=1800 audit(1785401844.432:21): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 137.586333][ T26] audit: type=1800 audit(1785401844.432:22): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 137.619349][ T6557] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 137.638812][ T6557] FAT-fs (loop2): Filesystem has been set read-only [ 137.656857][ T6557] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 137.667653][ T5899] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 137.683913][ T6549] loop6: detected capacity change from 0 to 32768 [ 137.686329][ T5899] usb 4-1: Warning! Unlikely big volume range (=18513), cval->res is probably wrong. [ 137.712729][ T5899] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -18513/0/1 [ 137.722389][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.767836][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.786776][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.817697][ T6549] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 137.831028][ T5899] usb 4-1: USB disconnect, device number 14 [ 137.858635][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.951115][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.989515][ T5924] ocfs2: Unmounting device (7,6) on (node local) [ 137.996823][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 138.036762][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.045289][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.052461][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.137210][ T6569] loop4: detected capacity change from 0 to 512 [ 138.171491][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.200754][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.304095][ T6569] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.748: corrupted in-inode xattr [ 138.366564][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.373683][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.383802][ T6569] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.748: couldn't read orphan inode 15 (err -117) [ 138.470235][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.477528][ T6569] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.547297][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.554984][ T6569] EXT4-fs (loop4): shut down requested (1) [ 138.596451][ T4300] net_ratelimit: 7 callbacks suppressed [ 138.596467][ T4300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.611151][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.653983][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.679280][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.734692][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.790998][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.794410][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.890317][ T6457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.892696][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 138.971201][ T6457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.024313][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.046554][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.075512][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.126691][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.166574][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.207376][ T309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.222776][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.386137][ T2302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.405229][ T6614] loop4: detected capacity change from 0 to 512 [ 139.542212][ T6614] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000603) [ 139.646875][ T6614] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000603) [ 139.726990][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.824731][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.857417][ T6590] loop3: detected capacity change from 0 to 40427 [ 139.866127][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.897009][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.904625][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.907700][ T6590] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 139.920483][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.076768][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 140.107793][ T6590] F2FS-fs (loop3): invalid crc value [ 140.158477][ T6590] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.314042][ T6646] loop4: detected capacity change from 0 to 256 [ 140.322699][ T6590] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.346019][ T1324] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.396223][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.431986][ T6590] attempt to access beyond end of device [ 140.431986][ T6590] loop3: rw=2049, want=45112, limit=40427 [ 140.625231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.636020][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 140.671242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.776166][ T1324] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 140.787042][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.801209][ T1324] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.801852][ T4300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.817016][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.843457][ T1324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.859494][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.872935][ T1324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.879122][ T4300] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.894657][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.904099][ T6457] device veth0_vlan entered promiscuous mode [ 140.911777][ T1324] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.923939][ T6457] device veth1_vlan entered promiscuous mode [ 140.951255][ T1324] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.951743][ T4300] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.995620][ T6660] loop4: detected capacity change from 0 to 4096 [ 141.011301][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.091056][ T6660] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 141.123357][ T6660] EXT4-fs (loop4): Unrecognized mount option "seclabel" or missing value [ 141.125382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.167066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.198106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.207143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.232624][ T6457] device veth0_macvtap entered promiscuous mode [ 141.257998][ T6457] device veth1_macvtap entered promiscuous mode [ 141.327180][ T1324] usb 3-1: usb_control_msg returned -32 [ 141.335926][ T1324] usbtmc 3-1:16.0: can't read capabilities [ 141.374706][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.420607][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.451848][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.494860][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.513998][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.532409][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.549980][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.562104][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.578091][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.591159][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.611401][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.637769][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.653913][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.667174][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.680360][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.691553][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.702681][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.714400][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.717293][ T6683] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 141.736517][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.739277][ T5900] usb 3-1: USB disconnect, device number 11 [ 141.795057][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.855358][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.895092][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.897992][ T6693] loop3: detected capacity change from 0 to 2048 [ 141.956557][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.981161][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.999991][ T6693] loop3: p1 < > [ 142.010548][ T6457] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.025757][ T6457] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.034931][ T6457] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.044244][ T6457] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.362805][ T6705] loop3: detected capacity change from 0 to 32768 [ 142.366140][ T5669] udevd[5669]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 142.385297][ T6705] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.394466][ T6705] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.431807][ T6705] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 142.450334][ T1324] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 142.458385][ T1324] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 142.516938][ T1324] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms [ 142.526692][ T1324] gfs2: fsid=syz:syz.0: jid=0: Done [ 142.535800][ T6705] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 142.681590][ T6705] gfs2: fsid=syz:syz.0: found 1 quota changes [ 142.696252][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.705378][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.723522][ T6720] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 142.723522][ T6720] inode = 11 2339 [ 142.723522][ T6720] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414 [ 142.767639][ T6720] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 142.780714][ T6720] gfs2: fsid=syz:syz.0: The quotad daemon is withdrawing. [ 142.790377][ T6720] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 142.805428][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.813387][ T6720] CPU: 0 PID: 6720 Comm: gfs2_quotad Not tainted syzkaller #0 [ 142.820873][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.830942][ T6720] Call Trace: [ 142.834236][ T6720] [ 142.837194][ T6720] dump_stack_lvl+0x188/0x250 [ 142.838066][ T6713] device syzkaller1 entered promiscuous mode [ 142.841894][ T6720] ? show_regs_print_info+0x20/0x20 [ 142.853100][ T6720] ? load_image+0x410/0x410 [ 142.857628][ T6720] ? do_raw_spin_unlock+0x11d/0x230 [ 142.862852][ T6720] gfs2_assert_warn_i+0x187/0x2c0 [ 142.867988][ T6720] gfs2_quota_cleanup+0x48c/0x670 [ 142.873049][ T6720] gfs2_make_fs_ro+0x440/0x620 [ 142.877842][ T6720] ? __might_sleep+0xf0/0xf0 [ 142.882451][ T6720] ? gfs2_dinode_out+0xb00/0xb00 [ 142.887416][ T6720] ? _raw_spin_unlock+0x24/0x40 [ 142.892295][ T6720] ? gfs2_glock_nq+0xcaa/0x1510 [ 142.897189][ T6720] gfs2_withdraw+0x660/0x14e0 [ 142.901895][ T6720] ? gfs2_meta_new+0x160/0x160 [ 142.906676][ T6720] ? gfs2_lm+0x240/0x240 [ 142.911208][ T6720] ? gfs2_freeze_lock+0x52/0xc0 [ 142.916087][ T6720] ? gfs2_consist_inode_i+0xc0/0xe0 [ 142.921529][ T6720] gfs2_inode_refresh+0xb2d/0x11a0 [ 142.926669][ T6720] ? gfs2_inode_metasync+0xf0/0xf0 [ 142.931809][ T6720] inode_go_lock+0x127/0x450 [ 142.936651][ T6720] do_promote+0x75b/0xb20 [ 142.941021][ T6720] finish_xmote+0x4c2/0xaf0 [ 142.945554][ T6720] do_xmote+0x752/0x10a0 [ 142.949824][ T6720] gfs2_glock_nq+0xc6b/0x1510 [ 142.954541][ T6720] do_sync+0x49c/0xba0 [ 142.958641][ T6720] ? slot_put+0x1e0/0x1e0 [ 142.963094][ T6720] ? __lock_acquire+0x7b50/0x7b50 [ 142.968140][ T6720] ? do_raw_spin_lock+0x128/0x2f0 [ 142.973187][ T6720] ? do_sync+0x494/0xba0 [ 142.977452][ T6720] ? do_raw_spin_unlock+0x11d/0x230 [ 142.982682][ T6720] gfs2_quota_sync+0x355/0x780 [ 142.984265][ T5669] udevd[5669]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 142.987470][ T6720] gfs2_quotad+0x40f/0x890 [ 142.987507][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 142.987523][ T6720] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 142.987540][ T6720] ? init_wait_entry+0xd0/0xd0 [ 142.987559][ T6720] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 142.987579][ T6720] ? __kthread_parkme+0x14e/0x1b0 [ 142.987600][ T6720] kthread+0x42e/0x520 [ 142.987614][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 142.987630][ T6720] ? kthread_blkcg+0xd0/0xd0 [ 143.042579][ T6720] ret_from_fork+0x1f/0x30 [ 143.047027][ T6720] [ 143.105710][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.161279][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.193106][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.243088][ T6738] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 143.272263][ T6720] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 143.331142][ T6720] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 1 [ 143.395355][ T6720] gfs2: fsid=syz:syz.0: File system withdrawn [ 143.403220][ T6720] CPU: 1 PID: 6720 Comm: gfs2_quotad Not tainted syzkaller #0 [ 143.410762][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.420923][ T6720] Call Trace: [ 143.424227][ T6720] [ 143.425579][ T6743] loop7: detected capacity change from 0 to 128 [ 143.427183][ T6720] dump_stack_lvl+0x188/0x250 [ 143.427213][ T6720] ? show_regs_print_info+0x20/0x20 [ 143.427230][ T6720] ? load_image+0x410/0x410 [ 143.447953][ T6720] ? lockref_put_or_lock+0x6e/0xb0 [ 143.453092][ T6720] gfs2_withdraw+0xb9a/0x14e0 [ 143.457787][ T6720] ? gfs2_meta_new+0x160/0x160 [ 143.462564][ T6720] ? gfs2_lm+0x240/0x240 [ 143.466820][ T6720] ? gfs2_consist_inode_i+0xc0/0xe0 [ 143.472034][ T6720] gfs2_inode_refresh+0xb2d/0x11a0 [ 143.477143][ T6720] ? gfs2_inode_metasync+0xf0/0xf0 [ 143.482272][ T6720] inode_go_lock+0x127/0x450 [ 143.486943][ T6720] do_promote+0x75b/0xb20 [ 143.491270][ T6720] finish_xmote+0x4c2/0xaf0 [ 143.495771][ T6720] do_xmote+0x752/0x10a0 [ 143.500021][ T6720] gfs2_glock_nq+0xc6b/0x1510 [ 143.504699][ T6720] do_sync+0x49c/0xba0 [ 143.508798][ T6720] ? slot_put+0x1e0/0x1e0 [ 143.513213][ T6720] ? __lock_acquire+0x7b50/0x7b50 [ 143.518229][ T6720] ? do_raw_spin_lock+0x128/0x2f0 [ 143.523247][ T6720] ? do_sync+0x494/0xba0 [ 143.527608][ T6720] ? do_raw_spin_unlock+0x11d/0x230 [ 143.533084][ T6720] gfs2_quota_sync+0x355/0x780 [ 143.537851][ T6720] gfs2_quotad+0x40f/0x890 [ 143.542287][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 143.547406][ T6720] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 143.553296][ T6720] ? init_wait_entry+0xd0/0xd0 [ 143.558151][ T6720] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 143.564055][ T6720] ? __kthread_parkme+0x14e/0x1b0 [ 143.569090][ T6720] kthread+0x42e/0x520 [ 143.573150][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 143.578285][ T6720] ? kthread_blkcg+0xd0/0xd0 [ 143.582958][ T6720] ret_from_fork+0x1f/0x30 [ 143.587377][ T6720] [ 143.771234][ T4211] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.810518][ T6720] ================================================================== [ 143.819774][ T6720] BUG: KASAN: use-after-free in gfs2_inode_refresh+0xd02/0x11a0 [ 143.827440][ T6720] Write of size 8 at addr ffff88805decbaf0 by task gfs2_quotad/6720 [ 143.835414][ T6720] [ 143.837737][ T6720] CPU: 1 PID: 6720 Comm: gfs2_quotad Not tainted syzkaller #0 [ 143.845181][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.855240][ T6720] Call Trace: [ 143.858512][ T6720] [ 143.861435][ T6720] dump_stack_lvl+0x188/0x250 [ 143.866196][ T6720] ? show_regs_print_info+0x20/0x20 [ 143.871384][ T6720] ? _printk+0xda/0x130 [ 143.875527][ T6720] ? gfs2_inode_refresh+0xd02/0x11a0 [ 143.880806][ T6720] ? load_image+0x410/0x410 [ 143.885319][ T6720] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 143.890775][ T6720] print_address_description+0x60/0x2d0 [ 143.896323][ T6720] ? gfs2_inode_refresh+0xd02/0x11a0 [ 143.901647][ T6720] kasan_report+0xdf/0x130 [ 143.906067][ T6720] ? gfs2_inode_refresh+0xd02/0x11a0 [ 143.911344][ T6720] kasan_check_range+0x235/0x290 [ 143.916278][ T6720] gfs2_inode_refresh+0xd02/0x11a0 [ 143.921385][ T6720] ? gfs2_inode_metasync+0xf0/0xf0 [ 143.926594][ T6720] inode_go_lock+0x127/0x450 [ 143.931188][ T6720] do_promote+0x75b/0xb20 [ 143.935513][ T6720] finish_xmote+0x4c2/0xaf0 [ 143.940028][ T6720] do_xmote+0x752/0x10a0 [ 143.944268][ T6720] gfs2_glock_nq+0xc6b/0x1510 [ 143.948947][ T6720] do_sync+0x49c/0xba0 [ 143.953021][ T6720] ? slot_put+0x1e0/0x1e0 [ 143.957343][ T6720] ? __lock_acquire+0x7b50/0x7b50 [ 143.962362][ T6720] ? do_raw_spin_lock+0x128/0x2f0 [ 143.967414][ T6720] ? do_sync+0x494/0xba0 [ 143.971736][ T6720] ? do_raw_spin_unlock+0x11d/0x230 [ 143.976926][ T6720] gfs2_quota_sync+0x355/0x780 [ 143.981690][ T6720] gfs2_quotad+0x40f/0x890 [ 143.986227][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 143.991365][ T6720] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 143.997263][ T6720] ? init_wait_entry+0xd0/0xd0 [ 144.002022][ T6720] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 144.007916][ T6720] ? __kthread_parkme+0x14e/0x1b0 [ 144.012936][ T6720] kthread+0x42e/0x520 [ 144.016999][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 144.022100][ T6720] ? kthread_blkcg+0xd0/0xd0 [ 144.026703][ T6720] ret_from_fork+0x1f/0x30 [ 144.031131][ T6720] [ 144.034138][ T6720] [ 144.036449][ T6720] Allocated by task 6705: [ 144.040760][ T6720] __kasan_slab_alloc+0x92/0xc0 [ 144.045695][ T6720] slab_post_alloc_hook+0x4c/0x380 [ 144.050799][ T6720] kmem_cache_alloc+0x15d/0x280 [ 144.055647][ T6720] gfs2_alloc_inode+0x45/0x110 [ 144.060404][ T6720] iget5_locked+0x9e/0x250 [ 144.064809][ T6720] gfs2_inode_lookup+0x110/0xd20 [ 144.069733][ T6720] gfs2_dir_search+0x165/0x220 [ 144.074488][ T6720] gfs2_lookupi+0x4a1/0x630 [ 144.078990][ T6720] gfs2_lookup_simple+0xab/0x100 [ 144.083911][ T6720] init_inodes+0x180/0x320 [ 144.088398][ T6720] gfs2_fill_super+0x1671/0x1ea0 [ 144.093322][ T6720] get_tree_bdev+0x3e6/0x610 [ 144.097924][ T6720] gfs2_get_tree+0x4d/0x1e0 [ 144.102443][ T6720] vfs_get_tree+0x88/0x270 [ 144.106851][ T6720] do_new_mount+0x247/0xa40 [ 144.111357][ T6720] __se_sys_mount+0x2e3/0x3d0 [ 144.116020][ T6720] do_syscall_64+0x4c/0xa0 [ 144.120426][ T6720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.126306][ T6720] [ 144.128629][ T6720] Freed by task 20: [ 144.132420][ T6720] kasan_set_track+0x4b/0x70 [ 144.137009][ T6720] kasan_set_free_info+0x1f/0x40 [ 144.141957][ T6720] ____kasan_slab_free+0xd5/0x110 [ 144.146969][ T6720] slab_free_freelist_hook+0xec/0x170 [ 144.152331][ T6720] kmem_cache_free+0x8f/0x210 [ 144.156992][ T6720] rcu_core+0x96e/0x1650 [ 144.161240][ T6720] handle_softirqs+0x336/0x830 [ 144.165988][ T6720] run_ksoftirqd+0xa4/0x100 [ 144.170476][ T6720] smpboot_thread_fn+0x520/0x990 [ 144.175403][ T6720] kthread+0x42e/0x520 [ 144.179456][ T6720] ret_from_fork+0x1f/0x30 [ 144.183860][ T6720] [ 144.186188][ T6720] Last potentially related work creation: [ 144.191884][ T6720] kasan_save_stack+0x35/0x60 [ 144.196552][ T6720] kasan_record_aux_stack+0xb8/0x100 [ 144.201823][ T6720] call_rcu+0x189/0x900 [ 144.205964][ T6720] evict+0x810/0x8b0 [ 144.209846][ T6720] gfs2_put_super+0x2fa/0x7c0 [ 144.214512][ T6720] generic_shutdown_super+0x130/0x300 [ 144.219876][ T6720] kill_block_super+0x7c/0xe0 [ 144.224544][ T6720] deactivate_locked_super+0x93/0xf0 [ 144.229842][ T6720] cleanup_mnt+0x426/0x4d0 [ 144.234255][ T6720] task_work_run+0x125/0x1a0 [ 144.238831][ T6720] exit_to_user_mode_loop+0x10f/0x130 [ 144.244192][ T6720] exit_to_user_mode_prepare+0xee/0x180 [ 144.249730][ T6720] syscall_exit_to_user_mode+0x16/0x40 [ 144.255197][ T6720] do_syscall_64+0x58/0xa0 [ 144.259604][ T6720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.265488][ T6720] [ 144.267798][ T6720] The buggy address belongs to the object at ffff88805decb640 [ 144.267798][ T6720] which belongs to the cache gfs2_inode of size 1608 [ 144.281854][ T6720] The buggy address is located 1200 bytes inside of [ 144.281854][ T6720] 1608-byte region [ffff88805decb640, ffff88805decbc88) [ 144.295380][ T6720] The buggy address belongs to the page: [ 144.301016][ T6720] page:ffffea000177b200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5dec8 [ 144.311160][ T6720] head:ffffea000177b200 order:3 compound_mapcount:0 compound_pincount:0 [ 144.319472][ T6720] memcg:ffff88805a556e01 [ 144.323698][ T6720] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 144.331845][ T6720] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888146d243c0 [ 144.340418][ T6720] raw: 0000000000000000 0000000080120012 00000001ffffffff ffff88805a556e01 [ 144.348986][ T6720] page dumped because: kasan: bad access detected [ 144.355401][ T6720] page_owner tracks the page as allocated [ 144.361107][ T6720] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6705, ts 142407587848, free_ts 112364175279 [ 144.383668][ T6720] get_page_from_freelist+0x24f6/0x2670 [ 144.389336][ T6720] __alloc_pages+0x1ee/0x480 [ 144.393940][ T6720] new_slab+0xc0/0x4b0 [ 144.398004][ T6720] ___slab_alloc+0x807/0xdd0 [ 144.402588][ T6720] kmem_cache_alloc+0xf0/0x280 [ 144.407339][ T6720] gfs2_alloc_inode+0x45/0x110 [ 144.412094][ T6720] iget5_locked+0x9e/0x250 [ 144.416499][ T6720] gfs2_inode_lookup+0x110/0xd20 [ 144.421520][ T6720] init_sb+0xa4a/0x1360 [ 144.425670][ T6720] gfs2_fill_super+0x138b/0x1ea0 [ 144.430596][ T6720] get_tree_bdev+0x3e6/0x610 [ 144.435173][ T6720] gfs2_get_tree+0x4d/0x1e0 [ 144.439662][ T6720] vfs_get_tree+0x88/0x270 [ 144.444072][ T6720] do_new_mount+0x247/0xa40 [ 144.448577][ T6720] __se_sys_mount+0x2e3/0x3d0 [ 144.453264][ T6720] do_syscall_64+0x4c/0xa0 [ 144.457679][ T6720] page last free stack trace: [ 144.462382][ T6720] free_unref_page_prepare+0x637/0x6c0 [ 144.467839][ T6720] free_unref_page+0x8f/0x2a0 [ 144.472504][ T6720] __unfreeze_partials+0x188/0x1e0 [ 144.477611][ T6720] put_cpu_partial+0x12d/0x190 [ 144.482378][ T6720] qlist_free_all+0x35/0x90 [ 144.486867][ T6720] kasan_quarantine_reduce+0x150/0x160 [ 144.492310][ T6720] __kasan_slab_alloc+0x2f/0xc0 [ 144.497153][ T6720] slab_post_alloc_hook+0x4c/0x380 [ 144.502277][ T6720] __kmalloc_node+0x1ae/0x3a0 [ 144.506938][ T6720] __vmalloc_node_range+0x2dd/0x8b0 [ 144.512161][ T6720] vzalloc+0x75/0x80 [ 144.516043][ T6720] __do_replace+0xa8/0xa00 [ 144.520453][ T6720] do_ip6t_set_ctl+0xaa4/0xd90 [ 144.525200][ T6720] nf_setsockopt+0x25f/0x280 [ 144.529776][ T6720] ipv6_setsockopt+0x20ba/0x3cc0 [ 144.534701][ T6720] tcp_setsockopt+0x229/0x1e60 [ 144.539457][ T6720] [ 144.541783][ T6720] Memory state around the buggy address: [ 144.547398][ T6720] ffff88805decb980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.555451][ T6720] ffff88805decba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.563500][ T6720] >ffff88805decba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.571560][ T6720] ^ [ 144.579262][ T6720] ffff88805decbb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.587836][ T6720] ffff88805decbb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.595967][ T6720] ================================================================== [ 144.604041][ T6720] Disabling lock debugging due to kernel taint [ 144.611089][ C0] net_ratelimit: 13 callbacks suppressed [ 144.611104][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 144.614350][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.631961][ T4300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.642388][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.655669][ T6720] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.662973][ T6720] CPU: 1 PID: 6720 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 144.671814][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.681855][ T6720] Call Trace: [ 144.685123][ T6720] [ 144.688037][ T6720] dump_stack_lvl+0x188/0x250 [ 144.692721][ T6720] ? show_regs_print_info+0x20/0x20 [ 144.697901][ T6720] ? load_image+0x410/0x410 [ 144.702392][ T6720] panic+0x2f8/0x850 [ 144.706275][ T6720] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.712418][ T6720] ? bpf_jit_dump+0xd0/0xd0 [ 144.717006][ T6720] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 144.723081][ T6720] ? _raw_spin_unlock+0x40/0x40 [ 144.728022][ T6720] ? gfs2_inode_refresh+0xd02/0x11a0 [ 144.733383][ T6720] check_panic_on_warn+0x80/0xa0 [ 144.738324][ T6720] ? gfs2_inode_refresh+0xd02/0x11a0 [ 144.743597][ T6720] end_report+0x6d/0xf0 [ 144.747752][ T6720] kasan_report+0x102/0x130 [ 144.752245][ T6720] ? gfs2_inode_refresh+0xd02/0x11a0 [ 144.757687][ T6720] kasan_check_range+0x235/0x290 [ 144.762642][ T6720] gfs2_inode_refresh+0xd02/0x11a0 [ 144.767765][ T6720] ? gfs2_inode_metasync+0xf0/0xf0 [ 144.772865][ T6720] inode_go_lock+0x127/0x450 [ 144.777442][ T6720] do_promote+0x75b/0xb20 [ 144.781924][ T6720] finish_xmote+0x4c2/0xaf0 [ 144.786433][ T6720] do_xmote+0x752/0x10a0 [ 144.790670][ T6720] gfs2_glock_nq+0xc6b/0x1510 [ 144.795348][ T6720] do_sync+0x49c/0xba0 [ 144.799403][ T6720] ? slot_put+0x1e0/0x1e0 [ 144.803719][ T6720] ? __lock_acquire+0x7b50/0x7b50 [ 144.808732][ T6720] ? do_raw_spin_lock+0x128/0x2f0 [ 144.813750][ T6720] ? do_sync+0x494/0xba0 [ 144.817986][ T6720] ? do_raw_spin_unlock+0x11d/0x230 [ 144.823259][ T6720] gfs2_quota_sync+0x355/0x780 [ 144.828036][ T6720] gfs2_quotad+0x40f/0x890 [ 144.832443][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 144.837543][ T6720] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 144.843425][ T6720] ? init_wait_entry+0xd0/0xd0 [ 144.848273][ T6720] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 144.854153][ T6720] ? __kthread_parkme+0x14e/0x1b0 [ 144.859167][ T6720] kthread+0x42e/0x520 [ 144.863316][ T6720] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 144.868418][ T6720] ? kthread_blkcg+0xd0/0xd0 [ 144.873025][ T6720] ret_from_fork+0x1f/0x30 [ 144.877868][ T6720] [ 144.881095][ T6720] Kernel Offset: disabled [ 144.885497][ T6720] Rebooting in 86400 seconds..