last executing test programs: 9m47.196137967s ago: executing program 32 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x1ef, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0xfc, 0x0, 0x6, 0xfd, 0x0, 0x800}}, 0x1c}, 0x1, 0x11}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB='\b\x00&\x00l\t\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) close(r7) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) 9m25.964481591s ago: executing program 33 (id=82): r0 = fanotify_init(0x0, 0x40000) fanotify_mark(r0, 0x106, 0x30, r0, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1082005, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303065725f69643d00000000000000000000000000000000842e1617ee0dfdc1e30173a745f6b9305baa8245cbb5b29b2d48c6df72bf19d2f7571760840c42808dda244fb72d660eaa17d475528b16d90cf731fdbacf30848e4228211681cc80b966a6cbb450fea453036fa4d4f6d1ac306bf4ce8018787a5240530bae3e45e372bab4", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,default_permissions,default_permissions,allow_other,blksize=0x0000000000001000,blksize=0x0000000000000000,blksize=0x0000000000000600,max_read=0x0000000000010001,blksize=0x0000000000001000,func=CREDS_CHECK,appraise,func=KEXEC_KERNEL_CHECK,\x00'], 0x1, 0x0, &(0x7f0000000280)="652ceb18c696cdecacf4b01118a1823cca99c57cee4cc9828cdb36ae79") prctl$PR_GET_SPECULATION_CTRL(0x34, 0x2, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x891d, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73322e2e0050917f085c7ba374abb7e55fa5da6a3134ec244923459bff7141bc3c6a87ac28e6c8e60671b62aa01a914ab048d5ebfd"], &(0x7f0000000100)=""/36, 0x24) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f00000000c0)=0x6) r7 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0xfc, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) linkat(r1, &(0x7f00000002c0)='./file0\x00', r8, &(0x7f0000000340)='./file0\x00', 0x1400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9m14.271145957s ago: executing program 34 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x3d, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) 9m12.685697008s ago: executing program 35 (id=112): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x2a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x147) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800005}, 0x1c) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=ANY=[@ANYBLOB="040cbb65b613f49f13cbeb7cc18ef3076f15ab5e2db50a8df471a2f9ccbddef7a91e3db04085e1c3a11d9769d467b40037d00b7bd07d70126fe38cf4"], 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000000680)="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", 0xff6}, {&(0x7f0000001680)="05d4c2b3f2e037dcfa2ab1e3cf1577bf48173fec16f1d8a35d8be3d885900403581c68f33feff84fe82514d1aa77730630d6517ddd8d4093685b10581570b03c79f19e03354e3342c302782918dea9e8b73e1c55c265fc6b01c2b6ec51f1b38eac0ac4f805ebe90ac6631f355c35fa51deffa28ea8080eb389e19ba489e1302c0f222b3af1015f938dd58b2af6d4f080831c8be2e58e9a0c3aaf3932bfbd9e64", 0xa0}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="2004f49d5dbdff5fcbf0f63e9334310850e619487a3c7e139dc3a6356585da76a84b0144cc09610b6f80eac9a99d9eb108ec64c12b44ba21bd250faad0e28980fae34a5841843e1e97d3829323ac8ce2be472b17cac8992600815c451794", 0x5e}, {&(0x7f0000002bc0)="d808461a1cc5e1029a7266a54308000000e1181f301317e4171c521dcaf29ec9a2fc5a293d0ff4e66d5d61aaa88000fdc598dc3d2119e4acb6ee159f5bf8f3946f145fbd5777e2acf1913876a1abc69852cd6184f489a4c4f68601f31fa12a3ebe28a040fe940e4322ccaaf536b36e6a626755ee711e59196bdc6c370917490c4ae7d1bd63c962ebdcf349e770a074780963fd85178fe7fcb2fc9c2c749bec2859b1be1b7d3eebc597fcd3dd6ee565c33d0583c913560e43d208f665ede5f511875e05da7bccd87b7ecded1ce9c4dc021c056f253388055b8fd289285967d8dcea6a", 0xe2}, {&(0x7f0000002800)="7540fc4c51d657b00ef6d1e5012674de8dd4214933f9a0e1200c9558d6b1363f20c846712a142b73b7e2b812ddd85fa0584320f441fa96a86225cd47449e4c4a198b0590d1cf8564a9cdb6013e9d11afc79adfad0c56", 0x56}, {&(0x7f0000002880)="397e19893f318176f8d4b58383ba2dd7cc3a4877e4f5832ed17dfb4680ee7f4c1d48c9af49639d0d28eef3cb9c463d48f194813051840444eb95001f92f27f1f885cd9077fe1fe9c29e275cb80a86751026ad527", 0x54}, {&(0x7f0000002900)="8174863baa0d2801066e325b981d831de001ce43cb866fe0becea2931d2e0370e9c1d5fa6cabd60c5f5d00845b8a1f9ba60629f2c34e5efe738082e8316f981926a0dd741749c8a175dcf2ab03c88ffe41023c983f0d7825d58b0d7ef5ee962ff543b52d9598a6438923ac774450840307f8dc893159f4c245fa8bb1fbb8c134ec360b51b12f0cc5b7d9b712d08e01fe6d4369f5df3b17cfeb7dc3bbbab53b28764854418d660e5b4ce4f07755c46f8508f4dd74042dd3d9d8058bf87140df347f27b129f6a62cc9fe7e8001953b4bc28a9ffbf7fd6aa52e06e502d887", 0xdd}, {&(0x7f0000000400)="54cef17ad00d8dbe0f94c38a641b22f592b38812bb706f4ede8379b3a2f6c843e74ae6d7dad9b0bab826294f842e90fbc84e15df4d1c4fe352f5e9eaf41367b4cf7cda964c40fe1403c06523371b4c02c3a7c4bc5c11e73da985598dafcaaabc1a00e4277b15da3a3a5afa14357846eebd00fbce333e4e8b2554b672487ac8ea9fdb4948f9dde700d0c8a0b214a6d9c6263feb53ccb9391848080d6125948adf5fd20c8244ffd9c48357", 0xaa}], 0x9, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) io_uring_setup(0xa5d, &(0x7f00000004c0)={0x0, 0xca72, 0x1, 0x2, 0x4b}) r3 = socket$inet(0x2, 0x5, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4000000000000003, {0x4, 0x0, 0x0, '\x00', {0x10000, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x200005, 0x4}, {0xfffffffffffffffb, 0x40}, {0x45, 0x4000004}, 0x60, 0x0, 0x81}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xc) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffefb) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x3f7, 0x2, 0x70bd2c, 0x25dfdbfb, {0x7, 0x5, './file0', './dev'}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20040005) 9m3.933108923s ago: executing program 36 (id=122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 8m57.121823085s ago: executing program 37 (id=130): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e2b02010301ffff64b029601f"], 0x2e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xe80, 0x0) ioctl$RTC_IRQP_READ(r1, 0x40187014, &(0x7f0000000040)) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r0, &(0x7f0000000340)="8b", 0x47f, 0x6}]) eventfd(0x1) socket$inet6(0xa, 0x2, 0xfffffff7) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002800)={{0xffffffffffffffff, &(0x7f0000001180)='\x00', 0x44303, &(0x7f00000011c0)={@_ha_fsid={[0xb, 0xe592]}, {0x7ff, 0xfff, 0xffffff74, 0x200}}, 0x2, &(0x7f0000001200)={@_ha_fsid}, &(0x7f0000001240)=0x5}, 0x5, &(0x7f0000002740)=[{0x2, 0x3, &(0x7f0000000240), &(0x7f00000012c0)="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", 0x1000, 0x8}, {0x1, 0x5, &(0x7f00000022c0)='\x00', &(0x7f0000002300)="64f131749d52c2e839da6175afdebc3cf27f2365627eed1573eeff78b20cd26f613b706f8edff651413ad362f26ccc9e6f54c4a1f42881f48c2f9bcc22d437e93a0f440c8aad0fc5434d0880ae2fa487512f4830a5ec10e71658d23aa9b64dd104e61daf9df4e4977fea408a42bbdfbfae5dfa9fc0a88d6aebc1b9d7e4e967ec527e4744215830ce98d72935ae4e801a6a1f7b6be6bbe4975e4fa9e06670ad14b69d64f097a15096bd3dec29c49795d5254641eb171fc01d377ba0975cb439c6d5aa85714ebfc6deb92bdfa430c0330f8b5da5ba7a9cc28291ce856a1b81ac9d6c092c95d874154dc1dd3542ca40e1b0c8779c8f", 0xf4, 0x20}, {0x3, 0x2, &(0x7f0000002400)='\\\x00', &(0x7f0000002440)="eabc89ab2428ba76dd03c6e60b32984627e1153f7e599d0a4211eec412ea6b6c7ffc3b85fc737d16cbe76b38cd42d5e1fed76f738b1546b5c80e7716fbf1dc0a850a13e4ea09d8caa59bb32f4a8923043654fda8c0bab14f9f32a62ea1a4794566fdc57bb780d80d2d073ba59489dfa56fe219daaadaa3fbd62e3ba3d8994419b76a2abb59dede", 0x87, 0x8}, {0x2, 0xf, &(0x7f0000002500)='{-{%p\t\x00\x00', &(0x7f0000002540)="3e83b9e5824ef5d37386cef83fe10744c8160d5107326d4d78da026922e326ccd0283c2d3a42f3e9cf8f1665c15bfdf5934cd3ef00b971481c7c7736018d948dc8549302646e63adc8631ce074c4e4f10a721b9a8d9e459de69849ec129df401f1d6c665c3e22dc25edd668b84338c23174ee3ebebb0e7b764d0037df2f7e1ad02faa0918500d0915c05a268b2a712585ef26babdb74457206f0636c3ca24956df6dc9fb193805f233c3fe66ab03dc64fcad3173059525", 0xb7}, {0x2, 0x7e57, &(0x7f0000002600)=':\x00', &(0x7f0000002f00)="d585a6494af8bf78236424cc2673b4838dfef34318ee97a90f97c2e21646220f5b746cecfa0eb4b28810e1c509a0450f7c3ba90a3fc9e7e48065617c1f3e27ee7d803b77ece1b38543f7833e5f4887d023ca6e311b955596288a9d1c10b22b9fd132a7e63b47b89821fed8802edfbf4627cbab0a49e938e0975ac1dfd9b96460c6252a62ed9bd5ee7c8e24ca00debd78d1781db8df1da10cdb5e0b7ca0b39de1263159a028264cf484a13a3cc42890425d28107d336c1f3d7eef44efabebf59fb438c184570f81c424fc0426ae38c0bc37", 0xd1, 0x18}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x4, 0x1, 0x2, 0x0, 0x82}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0x888, 0x6, 0x2da3, 0x9, 0x4, 0xc7e7, 0x2, 0x8, 0x6, 0xb73, 0x5, 0x7, 0x8, 0x2, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0xdd8, 0x7f, 0xb, 0x8, 0x5, 0xfffe, 0xb9, 0x56, 0x9, 0xa618, 0x1, 0x6, 0xe769, 0x1, 0x2, 0xb, 0x6, 0x7f, 0xc, 0x1, 0x8, 0xfffc, 0xffff, 0x8, 0x4, 0x440, 0x9, 0x5], 0x2}}) eventfd(0xffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8m48.159881841s ago: executing program 38 (id=145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000002c0)={0xfff7, 0x1, 0x2, 0xa, 0x4}) 7m47.142445427s ago: executing program 39 (id=296): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902", 0x1f) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={{}, {0x0, 0xea60}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8055}, 0x40004) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) (async) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) (async) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902", 0x1f) (async) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={{}, {0x0, 0xea60}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8055}, 0x40004) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 7m20.516068625s ago: executing program 40 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe2c8, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./proc\x00', &(0x7f00000003c0), &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x25, 0x1) 7m19.52917546s ago: executing program 41 (id=347): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000000000006006600c78800001c00"], 0x4c}}, 0x800) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) 6m51.558397607s ago: executing program 42 (id=397): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xbda8ee4cc7852c63, 0x204031, 0xffffffffffffffff, 0x42791000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00c03b000000000000e90733776bdebdcc6f7ad4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/swaps\x00', 0x0, 0x2) pread64(r3, &(0x7f00000003c0)=""/4110, 0x100e, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) syz_open_dev$mtd(0x0, 0x46, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r4, &(0x7f0000000500)=""/100, 0x7ffc) 6m40.124931683s ago: executing program 43 (id=425): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(r1, &(0x7f00000002c0)='./file1\x00', 0x4c) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5m31.870217947s ago: executing program 0 (id=641): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84553bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e4a83765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10500b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c7dcd6b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f4f1fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 5m31.241084279s ago: executing program 0 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040f7eca4d7"], 0x40) r5 = eventfd(0xffffffff) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, 0x0, 0xfe88) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) readv(r9, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/68, 0x44}], 0x1) io_submit(r2, 0x5, &(0x7f0000000a00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000004c0)="ac7943c626653fc0abee6c539968a872327114a6d119884770014a1e8e390e731f1acc42744f62537082f372f6c3863f6b49542b9cdb17414e56a3314b696226445c99c19136a9e74fdfa86997c3d3bd35f6c3a85d1c3cfa1d7113691ee3700f9437c6e3b7d9ddfe815085e08b28678e831748879bcc379ca8a0152911a147a75a9407519df45e0894e59508de804e979adb1c9d6e2ed58fe12a9bff513eb948543405f797a7809b13730764c3935cc2fcff414c96a662cc09f9b78e1735872c48e067afeccd4cbb5560890f3096c30ae13a31135053cdd20aaeca2f6eaa5b90116c5b9f06380006052e8484f8f7c30f92", 0xf1, 0xffffffffffffff81, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xf903, r0, &(0x7f0000000600)="36a69bbf6cf23169c0c81c60924e2c8fc09f388e1645c7042d3fb3a210aef126f4c9a9d7d6ace46471cd67e7b31608a1f2569550ce336b0fb69a675aec5027ace244c3158a763a059bc5c24389e1f07550f8ffa308516f60e3cc3d00e620713aaf447f9bf812a71e38f0496304020d2eca4a4e338b4d81458e0655c145f6dae41804c006f1062a0eafd0f6e5", 0x8c, 0x8, 0x0, 0x3, r4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000700)="f13bf16bc03952e750f94340d9179023f50b1acbe8b1f4c2006b4f8b9be853627c00b976f30da6c6a0989fe4175eecaabfffc98ffd1c2fa9a8f121628ccc65a324239b7318f9ae12564c0050f27cd758dee8f7", 0x53, 0x0, 0x0, 0x3, r5}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0xd, 0x5, r1, &(0x7f00000007c0)="e635d65219eeb4990aa85469e2381ea6a43663c5e1d8e00a4b620d90a21d37a4861a7af69dbcbf66fda5b91bae23c00b985d4fb860d6412a5ead25de340e747275da504db5906cc77c1ed33f3d9b77cf29d733a925d348b8491711007e036a925d5689d4f7fbf58941108bae74ab5e110031d3a5ce86719d416ca4ad2e73f728be83ebf4f16b822e34c167dd2edaf9a250f22db167a3849a1342af762decaf9d74c620be2828cb5277d61f7364d74de5ac68fcd5b47993eb796fa55dedee", 0xbe, 0x7fff, 0x0, 0x0, r6}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0x400, r7, &(0x7f0000000900)="00c3f38e453f6fa214c5e3d9c34b01cb626e47b3d9279844612f6bb517a3d31a90ede75181b95da5081c96ae280f8dbfb5f37fe2041ba860755070d388d66db7775276a9d67a57e77c320d7ec5b9cf7d716160f93dc51e423fb5778d29743b3b7589182d04c2c3bf9f346136e4e22776c2ef6ea7433a49f5dd22e37edb406db387ae3258c72c835b99920b768a01d2c54a6148cddb895a0e038fcf4db7afac26bed2aeb113501f9d3e5e3e7871c67adcbf3b2ed557601e", 0xb7, 0x0, 0x0, 0x1, r9}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14], 0x4c}}, 0x884) 5m30.037041105s ago: executing program 0 (id=650): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) write$binfmt_elf32(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600dc06037cac00000000000002000600040008007802000038000000d600000001000000fe0320000400070007000100000000000500000003202418020000000d000000bb00000004000000c681000006000000050000000f000000ff7f00000000000001000000830300000b00000009000000000000000800000000020000000000000600000006000000070000000500000003"], 0x2b8) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/error_log\x00', 0x1c0003, 0x85) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r4, &(0x7f0000000100)=0x100000000, 0x12) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m29.749381253s ago: executing program 0 (id=654): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, r1, 0xffffffff, 0x6, 0x0, 0x18, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x6}, 0x60) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008480, &(0x7f0000000200)={[{@grpjquota}, {@nodioread_nolock}, {@noquota}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x2}}, {@grpid}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16], 0x1, 0x25c, &(0x7f0000000a00)="$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") creat(&(0x7f0000000340)='./file2\x00', 0x102) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r9}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40000, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000140)={0x4, 0xef4d, 0x4, 0x1}) mount(&(0x7f00000000c0)=@filename='./file1\x00', &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='gfs2meta\x00', 0x2a21001, 0x0) 5m28.529952551s ago: executing program 0 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040f7eca4d7"], 0x40) r5 = eventfd(0xffffffff) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, 0x0, 0xfe88) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) readv(r9, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/68, 0x44}], 0x1) io_submit(r2, 0x5, &(0x7f0000000a00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000004c0)="ac7943c626653fc0abee6c539968a872327114a6d119884770014a1e8e390e731f1acc42744f62537082f372f6c3863f6b49542b9cdb17414e56a3314b696226445c99c19136a9e74fdfa86997c3d3bd35f6c3a85d1c3cfa1d7113691ee3700f9437c6e3b7d9ddfe815085e08b28678e831748879bcc379ca8a0152911a147a75a9407519df45e0894e59508de804e979adb1c9d6e2ed58fe12a9bff513eb948543405f797a7809b13730764c3935cc2fcff414c96a662cc09f9b78e1735872c48e067afeccd4cbb5560890f3096c30ae13a31135053cdd20aaeca2f6eaa5b90116c5b9f06380006052e8484f8f7c30f92", 0xf1, 0xffffffffffffff81, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xf903, r0, &(0x7f0000000600)="36a69bbf6cf23169c0c81c60924e2c8fc09f388e1645c7042d3fb3a210aef126f4c9a9d7d6ace46471cd67e7b31608a1f2569550ce336b0fb69a675aec5027ace244c3158a763a059bc5c24389e1f07550f8ffa308516f60e3cc3d00e620713aaf447f9bf812a71e38f0496304020d2eca4a4e338b4d81458e0655c145f6dae41804c006f1062a0eafd0f6e5", 0x8c, 0x8, 0x0, 0x3, r4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000700)="f13bf16bc03952e750f94340d9179023f50b1acbe8b1f4c2006b4f8b9be853627c00b976f30da6c6a0989fe4175eecaabfffc98ffd1c2fa9a8f121628ccc65a324239b7318f9ae12564c0050f27cd758dee8f7", 0x53, 0x0, 0x0, 0x3, r5}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0xd, 0x5, r1, &(0x7f00000007c0)="e635d65219eeb4990aa85469e2381ea6a43663c5e1d8e00a4b620d90a21d37a4861a7af69dbcbf66fda5b91bae23c00b985d4fb860d6412a5ead25de340e747275da504db5906cc77c1ed33f3d9b77cf29d733a925d348b8491711007e036a925d5689d4f7fbf58941108bae74ab5e110031d3a5ce86719d416ca4ad2e73f728be83ebf4f16b822e34c167dd2edaf9a250f22db167a3849a1342af762decaf9d74c620be2828cb5277d61f7364d74de5ac68fcd5b47993eb796fa55dedee", 0xbe, 0x7fff, 0x0, 0x0, r6}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0x400, r7, &(0x7f0000000900)="00c3f38e453f6fa214c5e3d9c34b01cb626e47b3d9279844612f6bb517a3d31a90ede75181b95da5081c96ae280f8dbfb5f37fe2041ba860755070d388d66db7775276a9d67a57e77c320d7ec5b9cf7d716160f93dc51e423fb5778d29743b3b7589182d04c2c3bf9f346136e4e22776c2ef6ea7433a49f5dd22e37edb406db387ae3258c72c835b99920b768a01d2c54a6148cddb895a0e038fcf4db7afac26bed2aeb113501f9d3e5e3e7871c67adcbf3b2ed557601e", 0xb7, 0x0, 0x0, 0x1, r9}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14], 0x4c}}, 0x884) 5m26.121225845s ago: executing program 0 (id=668): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) (fail_nth: 3) 5m25.445206597s ago: executing program 44 (id=668): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) (fail_nth: 3) 4m40.081856155s ago: executing program 8 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000078b82a20000000200000001007c9c12014e044523c4d9f48f73142208c38676f3c07de81129"], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/netfilter/nfnetlink_queue\x00', 0x143000, 0x182) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0xc}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x7) landlock_restrict_self(r2, 0x3) landlock_restrict_self(r3, 0x9) landlock_restrict_self(r2, 0x5) r4 = socket(0x1d, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e23, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x5) landlock_restrict_self(r2, 0x4) landlock_restrict_self(r2, 0x2) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) 4m39.120028023s ago: executing program 8 (id=773): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/115, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) (fail_nth: 3) 4m38.31380055s ago: executing program 8 (id=774): socket(0x10, 0x80002, 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffffff, r0, 0x0, &(0x7f0000000800)={[&(0x7f0000000780)='\x00', &(0x7f00000007c0)=')Y{,]\x8b%\xd9/\x00']}, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r2, &(0x7f0000000300)=""/253, 0xfd) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f0000000300)=0xffffffffffffff94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m37.962761551s ago: executing program 8 (id=777): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe={'stripe', 0x3d, 0xb6}}, {@minixdf}, {@orlov}]}, 0x4, 0xbc4, &(0x7f0000002800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x88d80a, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000000)='dir0\x00', 0x1f7) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) statx(r0, &(0x7f00000000c0)='./bus\x00', 0x100, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file7\x00', r3, r4) 4m36.902591205s ago: executing program 8 (id=780): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x1, {&(0x7f0000000300)}, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0xa) 4m32.737085115s ago: executing program 8 (id=792): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x100008001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) read(r2, &(0x7f0000000500)=""/142, 0x68) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 4m31.162755237s ago: executing program 45 (id=792): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x100008001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) read(r2, &(0x7f0000000500)=""/142, 0x68) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 3m57.574238315s ago: executing program 2 (id=875): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="28000000000000ba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x7f) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) unshare(0x22020600) fcntl$notify(r5, 0x402, 0x24) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3m56.624727592s ago: executing program 2 (id=879): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open(0x0, 0x60840, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x10000}, 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r4, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x2, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x10002b2}}], 0x1, 0x0, 0x0) 3m56.34292645s ago: executing program 2 (id=883): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(r1, 0x0, r0, 0x0, 0x0, 0x0) (fail_nth: 3) 3m55.634472338s ago: executing program 2 (id=886): r0 = syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xb03, &(0x7f00000017c0)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) finit_module(r1, 0x0, 0x3) prlimit64(0x0, 0x4, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x3c0000000003, 0x1db203) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, &(0x7f0000000500)="aa78cd6f827bece61438a8ae36dc24c721290c6b91f1ced44871f5f5e4ed4000d9578506e6737834a73793ac397818cea0a65856c178312c4264e69a18c765f247fc7feab8afa36a5ad80799822a3a0801ca30eec825943f8f1f8c968924a69a8c988abc959cd8c50beb036dc1e785030c95cb9efe19452e73ed518884d71874e4c9db244ad3cbff9a069a4180993f4d292cfcadc406edb267560ed4944f58000ec1ef", 0xa3) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x74) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) r5 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r5, 0x100000000fffd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x101800, 0x0) getdents(r6, &(0x7f0000000140)=""/49, 0x31) getdents64(r6, &(0x7f0000001f80)=""/4111, 0x100f) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x48, 0x0) r7 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x9, 0x0, 0x0, 0x1, 0x24, 0x8, 0x17, 0x75}) 3m54.404667934s ago: executing program 2 (id=890): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000080) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (fail_nth: 3) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3m53.442672561s ago: executing program 2 (id=892): socket(0x10, 0x80002, 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffffff, r0, 0x0, &(0x7f0000000800)={[&(0x7f0000000780)='\x00', &(0x7f00000007c0)=')Y{,]\x8b%\xd9/\x00']}, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r2, &(0x7f0000000300)=""/253, 0xfd) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m51.942706165s ago: executing program 46 (id=892): socket(0x10, 0x80002, 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffffff, r0, 0x0, &(0x7f0000000800)={[&(0x7f0000000780)='\x00', &(0x7f00000007c0)=')Y{,]\x8b%\xd9/\x00']}, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r2, &(0x7f0000000300)=""/253, 0xfd) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m10.585442169s ago: executing program 9 (id=980): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @broadcast}, {0x0, 0x4e24, 0x8}}}}}, 0x0) 3m10.507801802s ago: executing program 9 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 3) 3m8.861935075s ago: executing program 9 (id=985): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/115, 0x0, 0x80a0000}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x90001) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18d0010}) io_uring_enter(0xffffffffffffffff, 0x0, 0x15ef, 0x4d, 0x0, 0x40) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1832c1, 0x9c37611dc13d0da6) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 3m7.343965414s ago: executing program 9 (id=989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x80, &(0x7f0000001980)=ANY=[], 0x1, 0x156, &(0x7f0000000440)="$eJzs0c9qGlEUx/Hv1amObUULUyiF/gEXFUUcFbsrVEuhLuxAoVC6EvxDAhpDhOAuGsg+DzCBhEBW4jNEswgmCpIs8wxCdlka7oxGt9nfz+Yyv3POnTPMz2+TKGHw4vrRbGzvVFutauXzH6soAMGSvqx7ZN3NznOwIU8NZl2Q8UVgMVBu1uXzLAdRIP8Kapv1qonb+1JmhpulnOzunxwbvnWztNunE4HhZRDmi3u78F6DfGh13/wEvsAeb6DG2tp2vN+7+j0eFRKxsw9eDgrxT7qAtu1bNCRizvGdFad+mxwlpsl+gInuxypak0w6/TVjpkwze2NdjwvZziHar9e7dP7L/krgadwX0T9qf2FfgC2gJ5gewUAE5ccdP1gNhAHcb3mQb5oN5LIdOdoI+Q1ngTCItl0uvXtxWjLCHrzRtR+hKIqiKIqiKIqiKM/0GAAA//9pH1B2") chdir(&(0x7f00000001c0)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x188) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c76c1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xe9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffd}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r8 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = dup(r7) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x2000, 0xffbffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x20000001, 0x2}}], 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m4.299802113s ago: executing program 9 (id=997): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000180)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@errors_remount}, {@noinit_itable}, {@auto_da_alloc}, {@minixdf}, {@noblock_validity}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nodioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x7, 0xd0c, 0x1000, 0x8, 0x6, 0xa9, 0x5, 0xf64, 0xfffffffe}) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) read(r1, &(0x7f0000001b00)=""/194, 0xc2) 3m2.914414913s ago: executing program 9 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc02, {0x7, 0x0, 0x0, r1, 0x2, 0xc4, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3m2.255584738s ago: executing program 47 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc02, {0x7, 0x0, 0x0, r1, 0x2, 0xc4, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 2m38.784648325s ago: executing program 6 (id=1063): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044850) r1 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0xa0) (fail_nth: 3) 2m21.84791358s ago: executing program 6 (id=1086): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp862,discard=0x0000000000002004,iocharset=iso8859-9,discard,iocharset=macroman,errors=remount-ro,integrity,usrquota,errors=continue,nodiscard,iocharset=cp936,\x00'], 0x2c, 0x62d7, &(0x7f0000021240)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD+eM2fmvHPmnTPz7Po/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZre8Zu4TQ1mWNf7kf23Psuc1/r11cnu+7JWbPUIAAABgvX6R//3c9WnB4VXcqGmdf37Jt768uLi4mL175M/HPrO4mK6YzLKxLVmWXxc99YP3DDWvEzyWTQwNN10e7rH5kR7Xj/a4fqzH9eM9rt/S4/qJHtcv2wHLbC1+HpPf2e78n9uLXZrdkI3l1+3ucKvHhrYMD8ef5eSG8tssjp3I5rNT2Vw207J+se5Qvv5Xb2ls641Z3NZw07Z2NmbITx49HscwFPbx7pZtLd1n9KNXZ5M//cmjx//2/LM3dao9d0PL/RXjvH1XY5wfC0uKsQ5lW9I+ieMcbhrnzg7PyUjLOIfy2zX+3T7O51Y5zpGlYW6o9ud8IhvO//3tfD+NNv9YL+2nnWHZz27NsuzS0rDb11m2rWw429ayZHjp+ZkoZmTjPhpT6QXZ6Jrm6S2rmKeNOru7dZ62vybi839LuN3oCmNofpp+9NHxpuf954tXMk+jxqNe6bXSPgf7/VopyxyM8+Lb+YN+vOMc3B0e/6O3rTwHO86dDnMwPe6mObir1xwcHh/Jx5yehKH8NktzcE/L+iP5loby+sxt3efg9PmHz04vfPgjd80/fOzk3Mm50/v27JnZt3//wYMHp0/Mn5qbKf6+wr1dftuy4fQa2BX2XXwNvLxt3eapuvj58WXH3yt9HU50eR1ub1u336/D0fYHN7QxL8jlc7p4bbyzsdMnLg9nK7zG8ufnjvW/DtPjbnodjja9Dju+p3R4HY6u4nXYWOfsHav7zDLa9KfTGFZ+L1jfHNzeNAfbP4+0z8F+fx4pyxycCPPiu3es/F6wM4z38am1fh4ZWTYH08MNx57GkvR5f+JgXjrNy5sbV1wznl1YmDt39yPHzp8/tycLZUO8sGmutM/XbU2PKVs2X4fXPF8Pz7/k8Zs7LN8e9tXEXY2/JlZ8rhrr3HN39+cqf3frvD9blu7NQumzjd6fnd7NG/tzPMs++42PPvi1Rz/7mhX3Z6Pf/Nj0+j+Lp7606fg7tsLxN/b9vyy2l+7qsZGx0eL1O5L2zljL8bj1qRrNj11D+bafm17d8Xgs/Nno4/ENXY7HO9rW7ffxeKz9wcXj8VCvn3asT/vzORHmyamZ7sfjxjo79q51To52PR7fGupQ2P+vCJ1C6oua5s5K8zZta3R0LDyu0biF1nm6r2X9sdCbNbb15N7woTCNcnXz9PZbi/VHmm4XbdQ8nWxbt9/zNP3sa6V5OtTrp29Xpv35nAjz4oZ93edpY52n71n/sXNr/GfTsXO81xwcGxlvjHksTcL8eJ8tbo1z8O7seHYmO5XN5teO5/NpKN/W1L2rO1aOhz8bfazc0WUO3t62br/nYHofW2nuDY0uf/B90P58ToR58cS93edgY53XHujvZ9fbiyVLP4pu+uza/vO1lX7mdXPbbrpac6UxksZj+caB7j+bbaxz6uBa+8zu++nOsOSaDvup/fW70mtqNtuY/bQjjPPZgyvvp8Z4Gut85tAq59PhLMsufvD+/Oe94fcrFy9858stv3fp9Dudix+8/8fXnvintYwfgMH3y6JsK97rmn4ztZrf/wMAAAADIfb9w6Em+n8AAACojNj3x/8Vnuj/AQAAoDJi3z8aalKF/v+Pe6+y47XPzv/yYpaS+YtBvD7thgeK9WLGdSZcnlxc0lh+/xfn/ucfL65ueMNZlv38gT/quP6OB+K4CpNhnE+9rnX5Ml++a1XbPvrQxbTd5vz658L9x8ez2mnQKYI7k2XZV6//VL6dyfdczuvTDxzN64OXHn+ssc5zh4rL8fbPvLBY/69C+PfwiWMtt38m7Icfhjrzps77I97uS5dfsfPAu5a2F283tOu6/GE/8d7ifuP35Hz6sWL9uJ9XGv/XPvnklxrrP/KyzuO/ONx5/E+G+/1iqP/74mL95uegcTne7uNh/HF78XZ3f+HrHcf/1CeK9c++vljvaKhx+7eHy7tf/+x88/56ZOhYy+PK3lCsF7c/850/za+P9xfvv338E0cut+yP9vnx9L8X9zPdtn5cHrcT/UPb9hv30zw/4/af/JOjLfu51/afevCZFzfut337d7atd/aDd+TbX7q/1m9s+uuPf6rj9uJ4Dv/92ZbHc/jt4XUctv/Ee8N8DNf/31PF/bV/u8LRt7cef+L6n9t+seXxRG/8abH9p151Mq9bJrZuu+Z511536aWNfZdl395S3F+v7Z/8mzMt4//8jcX+iNfHjH779lcSt3/uQ1OnzyxcmJ9Ne/XR6/PvznlzMZ443uvDsbX98pEz5983d25yZnImyyar+xV6V+wLof64KJe6r7247Ah6x0Ph+bz5L7+67bZ/+2Rc/h/vLJZfflPxvvXysN6nw/Lt4flb2/aXe+KWG/PX99DTYYSLy78veD127v7vg72+3zcXHn/754I438++6H35fmhcl79vxNf1Osf/vdnifr4S9uti+GbmXTcuba95/fjdCJffUbze173/wmEuPq9/F57vt/ywuP84rvh4vxc+x3x9R+vxLs6Pr1wcbr///Fs8LoXjSXapuD6uFff35edu7Di8+D0k2aWb8st/lu7npjU9zJUsfHhh+tT86QuPTJ+fWzg/vfDhjxx5+MyF0+eP5N/leeT9vW6/dHzalh+fZuf235PlR6szRbnKNnv8Zx86Pntg5rbZuRPHLpw4/9DZuXMnjy8sHJ+bXbjt2IkTcx/qdfv52fv27D2078DeqZPzs/cdPHRo36Gp+dNnGsMoBtXD/pkPTJ0+dyS/ycJ99xzac++998xMPXxmdu6+AzMzUxd63T5/b5pq3PoPp87NnTp2fv7huamF+Y/M3bfn0P79e3t+G+DDZ08sTE6fu3B6+sLC3Lnp4rFMns8XN977et2ealr4fvF5tt1Q8UV82dvu3J++n7Xhix9d8a6KVdq+QPTZ8F0033z+2YOruRz7/rFQkyr0/wAAAEAu9v3joSb6fwAAAKiM2PdvCTXR/wMAAEBlxL5/ItT0XwJq0v9XLv+/4+Kqti//L//fvL/k/2uW/39H2fL/xfFC/r8/1pu/r0P+f1Uryv/L/8v/y//L/9MHZcv/x75/a5b5/T8AAABUVOz7t4Wa6P8BAACgMmLff02oif4fAAAAKiP2/c8LNalJ/y//L/8v/y//L//fefvy/4NJ/r+7kuX/J9oXyP9vfv4/q1f+/1I/x78J+f+tzRfk/ymjsuX/Y99/bahJTfp/AAAAqIPY918XaqL/BwAAgMqIff/1oSb6fwAAAKiM2PdvDzWpSf8v/7+u/H/KXA1u/r/Ysvy//L/8v/x/Vcj/d1ey/P8y8v+bn/93/v+Byv+3kP+njMqW/499//NDTWrS/wMAAEAdxL7/BaEm+n8AAAAon9Eru1ns+18YarKs/7/CDQAAAACbLvb9N2RtQfCa/P5f/t/5/0t7/v8x+X/5/0L58/8jmfx/ecj/dyf/30M/8v+X5P/l/+X/5f+Jypb/z/v+bCJ7UahJTfp/AAAAqIPY998YaqL/BwAAgMqIff+vhJro/wEAAKAyYt+/I9SkJv2//H9l8v8/a37qKpH/d/5/+f+g/Pl/5/8vE/n/7uT/e3D+f/l/+X/5f/pqoWOntHn5/9j33xRqUpP+HwAAAOog9v03h5ro/wEAAKAyYt//q6Em+n8AAACojNj37ww1qUn/L/9f8vx/TI7W8fz/8v/y/0GZ8/8T8v+lI//fnfx/D/L/8v/y//L/9NXC94vPs+02K/8f+/4Xh5rUpP8HAACAOoh9/0tCTfT/AAAAUBmx739pqIn+HwAAACoj9v2ToSY16f/Xkv8fuiT/v5KrfP7/8VWc/7+F/P+m5P9H5f8Ldcr/Z/L/pSP/3538fw/y//L/8v/y//RV2fL/se+/JdSkJv0/AAAA1EHs+3eFmuj/AQAAoDJi339rqIn+HwAAACoj9v27Q01q0v87//9A5P8z+f+ByP87/38g/9+Z/P/GkP/vTv6/B/l/+X/5f/l/+qps+f/Y978s1KQm/T8AAADUQez7bws10f8DAABAZcS+/+WhJvp/AAAAqIzY998ealKT/l/+X/5f/l/+X/6/8/Y3PP9/Sf6/H+T/u5P/70H+X/5f/l/+n74qW/4/9v2vCDWpSf8PAAAAdRD7/jtCTfT/AAAAUBmx778z1ET/DwAAAJUR+/6pUJOa9P/y//L/1cz//6f8f5fty/+XNP/v/P99If/fnfx/D/L/8v/9yP+PhQXy//L/bHr+P35ei5dj339XqElN+n8AAACog9j33x1qov8HAACAyoh9/3Soif4fAAAAKiP2/TOhJjXp/+X/5f+rmf93/v9u219X/v+lS/cr/1+Q/y8X+f/u5P976Gf+f4v8f23z/+s6//+Y/D+Vstn5//bLse/fE2pSk/4fAAAA6iD2/XtDTfT/AAAAUBmx798XaqL/BwAAgMqIff89oSY16f/l/+X/5f/l/53/v/P25f8Hk/x/d/3P/8eHKP/v/P/y//3J/zv/P9VStvx/7PvvDTWpSf8PAAAAdRD7/v2hJvp/AAAAqIzY9x8INdH/AwAAQGXEvv9gqElN+n/5f/l/+X/5f/n/ztuX/x9M8v/dOf9/D/L/8v8DnP9vzC35f8qmbPn/2PcfCjWpSf8PAAAAdRD7/leGmuj/AQAAoDJi3/9roSb6fwAAACih8Su6Vez7fz3UpCb9v/y//L/8v/z/Juf/x3rl/8fl/+X/10D+vzv5/x7k/+X/Bzj/v8L5/68NV8v/synKlv+Pff99oSY16f8BAACgDmLf/xuhJvp/AAAAqIzY978q1ET/DwAAAJUR+/7DoSY16f/l/zco/x8Xljb/H5PM8v/5Avl/5/+X/x9Y8v/dyf/3IP8v/1+9/H+/z//f/jadyP/TSdny/7Hvf3WoSU36fwAAAKiD2PffH2qi/wcAAIDKiH3/a0JN9P8AAABQGbHvf22oSU36f/l/5//f/PP/j7WMXf5/6Xby/wX5f/n/tZD/707+vwf5f/l/+X/n/6evypb/j33/60JNatL/AwAAQB3Evv/1oSb6fwAAAKiM2Pe/IdRE/w8AAACVEfv+N4aa1KT/l/+X/9/8/L/z/8v/F+T/5f/7Qf6/O/n/HuT/5f/l/+X/6auy5f9j3/+boSY16f8BAACgDmLf/0Coif4fAAAAKiP2/W8KNdH/AwAAQGXEvv/NoSY16f/l/+X/5f/l/+X/O29f/n8wyf93N2D5/19cF5bL/xfk/8s9/rXm/0fbLl+V/P8PVsr/L25pv738P1dD2fL/se9/S6hJTfp/AAAAqIPY97811ET/DwAAAJUR+/63hZro/wEAAKAyYt//W6EmNen/5f8b41hKL8v/y//nC+T/5f/l/weW/H93Kf//XKd3riblyP87/38b+f9yj9/5/+X/Wa5s+f/Y97891KQm/T8AAADUQez7Hww10f8DAABAZcS+/x2hJvp/AAAAqIzY978z1KQm/b/8v/P/y//L/8v/d96+/P9gkv/vbsDO/y//30b+v9zjvyr5//+S/2ewlS3/H/v+h0JNatL/AwAAQB3Evv9doSb6fwAAAKiM2Pf/dqiJ/h8AAAAqI/b97w41qUn/L/8/KPn/Sfn/Neb/x8My+X/5f/n/epH/707+vwf5f/n/suX/nf+fAVe2/H/s+98TarL6/n9i1WsCAAAAV1P7r5OS2Pf/TqhJTX7/DwAAAHUQ+/7fDTXR/wMAAEBlxL7/90JNatL/y/8PSv7f+f8z5/+X/297PPL/8v+dbFz+Px551pT/39Jr+/L/8v/y/4M7fvl/+X+WK1v+P/b9vx9qUpP+HwAAAOog9v3vDTXR/wMAAMBA6PR/stvFvv9IqIn+HwAAACoj9v1HQ01q0v/L/8v/y/+XNP//F7v+5bvfeuvRPfL/8v/y/2uyoef/b7z4nf9f/l/+P5H/l/+X/6dd2fL/se8/Fmqy1Pi92Qn+AQAAYLDFvv8PQk1q8vt/AAAAqIPY9x8PNdH/AwAAQGXEvn821KQm/b/8/ybm/0ezLJP/l/+v4Pn/4/4YpPz/1JYByv/Hg678f0cbmv9/11JOXP5/rfn/8Y5L2/P/Q/L/LeT/1zz+b2ZZtmHjv/iv8v/y/7QrW/4/9v1zoSY16f8BAACgDkLfP3yiqEtX6P8BAACgMmLffzLURP8PAAAAlRH7/veFmtSk/5f/d/5/+X/5f+f/77z90ub/nf+/K/n/7sqT/+/M+f/l/wd5/M7/L//PcmXL/8e+fz7UpCb9PwAAANRB7PvfH2qi/wcAAIDKiH3/B0JN9P/w/+zdyZNlZZnH8ZuQRFUF0RG960Uvuve96k1vWDSrXnT/Ab1gw6YjulvFAeeJwnnEeR7QUBEHHEARUVGcBScUcUTFGcQJJ0SlDCqf56kcTp6bWXUz77nv+/ksfIqE5F4IrOJXybcOAABAM3L3Pzhu6WT/6//1/032/0f0/2Ovr//X/7dM/z9O/z+H/l//r//X/7NQU+v/c/c/JG7pZP8DAABAD3L3XxS32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+v8n+/z/u/r/7/13/v9vr6//1/y3T/4/T/8+h/9f/6//1/yzU1Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+i+MW+x8AAACakbv/kXFLJ/t/W/+/Nuuz/8+MV//fUv/v+f+7vr7+X//fssPt/y994Hs+/b/+X/8f9P/6f/0/202t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7n9M3GL/AwAAQDNy9z82bulk/3v+v+f/6//1//r/4dfX/68mz/8f11P/f/Gt5150z7X/eN1+Xl//r//X/+v/Wayp9f+5+x8Xt3Sy/wEAAKAHufsfH7fY/wAAANCM3P1PiFvsfwAAAFhBxwY/mrv/iXFLJ/tf/6//1/9H/39U/6//1/+3QP8/btn9/9CPl5t5/n/7/f+DFvJOl/f+x+j/9f/sNLX+P3f/k+KWTvY/AAAA9CB3/5PjFvsfAAAApmvef1i2Te7+S+IW+x8AAACakbv/eNzSyf7X/x98//9X/f9q9P+e/6//1/83Qf8/btn9/zz6//b7/4O07Pev/9f/s9PU+v/c/ZfGLZ3sfwAAAOhB7v6nxC32PwAAADQjd/9T4xb7HwAAAJqRu/9pcUsn+1//7/n/+n/9/+H3/xvf2er/T/1d1f8vjv5/nP5/Dv3/mfbz5+j/9f/6fzbbZ/9/38h32wvp/3P3Pz1u6WT/AwAAQA9y9z8jbrH/AQAAoBm5+58Zt9j/AAAA0Izc/c+KWzrZ//p//b/+X/9/2v3/zn/0TvL8/2H6/8Oh/x83mf5/bX3ww/r/le//Pf9f/6//Z4upPf8/d/+z45ZO9j8AAAD0IHf/c+KWkf2/75/MBwAAAJYqd/9z4xZf/wcAAICVl9VZ7v7nxS2d7H/9v/5f/6//P/zn/69+/3/dpven/58W/f+4yfT/u9D/6/9X+f3r//X/7DS1/j93//Pjlk72PwAAAPQgd/9lcYv9DwAAAM3I3f+CuMX+BwAAgGbk7n9h3NLJ/h/u/0/9/kn3/9sj4Zn+P+n/2+7/88+o/x/t/8/3/P8+6f/H6f/n0P/r//X/u/X/x+Z9vv6fIVPr/3P3vyhu6WT/AwAAQA9y9784brH/AQAAoBm5+18St9j/AAAA0Izc/S+NWzrZ/57/r//X/69e/+/5/xuW+fz/2aH3/+v6/z1abv+/dn/+CKr/P733r//X/6/y+2+y/z9ntvX5/yO/CoD+nyFT6/9z978sbulk/wMAAEAPcve/PG6x/wEAAGA1bP5vB4aeFTeb1e5/Rdxi/wMAAEAzcve/Mm5pZ/+PPqtT/6//1/+f/HT9v/5/oP9fn02n//f8/73y/P9x+v859P8H0c+vN9b/X77b50+h/7/k4J7//6/zPl//z5At/f8Npz6+rP4/d/+r4pZ29j8AAAB0L3f/q+MW+x8AAACakbv/NXGL/Q8AAADNyN3/2rilk/1/4P3/yK8+oP/X/0+k//f8f/3/4OtP6/n/+v+90v+P0//Pof/3/H/P/9f/c+Y2/Svjlv5/k2X1/7n7Xxe3dLL/AQAAoAe5+18ft9j/AAAA0Izc/ZfHLfY/AAAANCN3/xvilk72v+f/6//1//p//f/w6+v/V9MZ9fdn6f+L/l//r//X/+v/WYCp9f9bd39/+x8AAAB68MaT/3s0fr7e/gcAAIAW5e5/U9xi/wMAAEAzcve/OW7pZP/r/w+2/8+P6//1/zP9v/5f/38oun3+/9rQj0Q77dL/3/y/x/9r60f0//p//b/+X//PHv39yO+bRP9/4tS/Xebuf0vc0sn+BwAAgB7k7r8ibrH/AQAAoBm5+98at9j/AAAA0Izc/VfGLfvc/2PNw5Tp/z3/X/+v/9f/D7++/n81ddv/75Hn/8+h/9f/6//1/yzUJPr/Tb+du/9tcYuv/wMAAEAzcve/PW6x/wEAAKAZufvfEbfY/wAAANCM3P3vjFs62f/6f/2//l//r/8ffn39/2rS/4/T/8+xSv3/lWfQ/68Pf3jZ/fyZWvb71//r/9lpav1/7v6r4pZO9j8AAAD0IHf/u+IW+x8AAACakbv/3XGL/Q8AAADNyN3/nrilk/2v/9f/6//1//r/4dfX/68m/f84/f9sNrt65A0M9f8njkyz//f8/8m9f/2//p+dptb/5+5/b9zSyf4HAACAHuTuvzpusf8BAACgGbn7r4lb7H8AAABoRu7+98Utnex//b/+X/+v/9f/D7++/n816f/H6f/nWKXn/+v/J/f+9f/6f3aaWv+fu//9cUsn+x8AAAB6kLv/2rjF/gcAAIBm5O7/QNxi/wMAAEAzcvdfF7d0sv/1//p//b/+f6D/P/l/df2//n8VHVz/P9P/6//1/3Po//X/+n+2m1r/n7v/g3FLJ/sfAAAAepC7//q4xf4HAACAZuTu/1DcYv8DAABAM3L3fzhu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9/xz6f/2//l//z0IN9/+XLK3/z93/kbilk/0PAAAAPcjdf0PcYv8DAABAM3L3fzRusf8BAACgGbn7Pxa3dLL/9f/6/639/2ym/9f/6/83DPT/t917xd/Vby+g/z860/8vnP5/nP5/Dv1/m/3/WbOG+v9ju36+/p8pmtrz/3P33xi3dLL/AQAAoAe5+z8et9j/AAAA0Izc/Z+IW+x/AAAAaEbu/k/GLZ3sf/2//n/Bz/+/68KB96H/36D/X/n+3/P/V4D+f5z+fw79f5v9v+f/6/9Zmqn1/7n7PxW3dLL/AQAAoAe5+z8dt9j/AAAA0Izc/Z+JW+x/AAAAaEbu/s/GLZ3sf/2//n/B/b/n/+v/9f+70P8fDv3/OP3/HPr/5vr//Ld7/b/+n+WYWv+fu/9zcUsn+x8AAAB6kLv/prjF/gcAAIBm5O6/OW6x/wEAAKAZufs/H7d0sv/1//p//f9q9v9Ht/T/Z8/0/6f+eP1/36bS/5933n/eov/X/+v/l9//e/6//p/lmlr/n7v/C3FLJ/sfAAAAepC7/4txi/0PAAAAzcjd/6W4xf4HAACAZuTu/3Lc0sn+39n/nzPbKFQ3DPX/0ajp/zfR/299//r/4X8+PP9f/6//P3hT6f89///03r/+X/+/yu9/X/3/P+/8fP0/LZpa/5+7/5a4pZP9DwAAAD3I3f+VuMX+BwAAgGbk7v9q3GL/AwAAQDNy998at3Sy/z3/X/+v/9f/L7z/v/7OjW/o/7fQ/x+O0+zv/+3G+Ib+P+j/9f/6/36f/3+2/p/FmVr/n7v/a3FLJ/sfAAAAepC7/7a4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9f9n+l7ahn/7/6NAHl93Pn6llv/9m+n/P/2eBptb/5+7/ZtzSyf4HAACAHuTu/1bcYv8DAABAM3L3fztusf8BAACgGbn7vxO3dLL/9f/6//b7/wv1/9teX/+v/2+Z/j9/RB+m/5+jn/5/0LL7+VV///p//T87Ta3/z91/e9zSyf4HAACAHuTu/27cYv8DAABAM3L3fy9usf8BAACgGbn7vx+3dLL/9f999f9rsx77f8//1//r/3ui/x+n/59D/6//1//r/1moqfX/ufvvWFvvcv8DAADAqvrvf/n/2/f6x95x8n+Pzn4Qt5w/O7HHL2MDAAAAE/fA7l9bn81+ePK3fP0fAAAAWpS7/0dxSyf7X//fV//f5/P/9f/6f/1/T4b6+6Hvo3ej/w/6f/2//l//r/9nAabW/+fu/3Hcsmn4re/7rxIAAACYktz9P4lbOvn6PwAAAPQgd/9P45Yd+98vBwgAAACrKnf/z+KWTr7+r/+feP8/O6D+P/44/f8G/b/+f+j19f+ryfP/x51h/39iTf+v/x+h/9f/6//Zbmr9f+7+O+OWTvY/AAAANGrLzyjk7r8rbrH/AQAAoBm5+38et9j/AAAA0Izc/XfHLZ3sf/3/off/maof4PP/j9W3PP+/8/7/sqODr6//1/+3TP8/zvP/59D/t9L/H9H/6/+Zhqn1/7n7fxG3dLL/AQAAoAe5+38Zt9j/AAAA0Izc/b+KW+x/AAAAaEbu/l/HLZ3sf/3/xJ//f1r9/x6e/6//76P/3+X12+n//+Hc4zdd8D/XXKX/55TD7P/zn4VD7v+P7PfPuZn+fw79fyv9v+f/6/+ZiMX3/+tbPrjf/j93/2/ilk72PwAAAPQgd/89cYv9DwAAAM3I3f/buMX+BwAAgGbk7v9d3NLJ/tf/6/+n0v/n3+sl9P/HT7v/PzabzZbS/2dT3Hv/7/n/+v+dPP9/nP5/Dv2//l//r/9noRbf/2/94H77/9z9v49bOtn/AAAA0IPc/X+IW3L/r+37p+4BAACAicnd/8e4xdf/AQAAoBm5+++NWzrZ//p//f9U+v/k+f+nPq+t5/9fUHFqn/3/P9W39P8HS/8/Tv8/h/5f/6//1/+zUFPr/3P3/ylu6WT/AwAAQA9y998Xt9j/AAAA0Izc/X+OW+x/AAAAaEbu/r/ELZ3sf/1/q/1/FvH6f/3/VPp/z//3/P/Dof8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xYAAP//2HxcCQ==") removexattr(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff, r1, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='offline', 0x7) 2m18.322842358s ago: executing program 6 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) close_range(r2, 0xffffffffffffffff, 0x100000000000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4414}, 0x4000884) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000006c0)={{r1}, "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"}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r6, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=+', 0x38) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_on}], [], 0x2c}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000180001002dbd7000ffdbdf258020"], 0x64}}, 0x20000010) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) 2m14.421307768s ago: executing program 6 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x2, 0x5505, &(0x7f0000000340)="$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") r2 = openat(r1, &(0x7f0000000500)='.\x00', 0x0, 0x2) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[], 0x24, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000080)) flistxattr(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xbf, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x14}}}, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r12, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r12, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r12, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "ec720d001ef6be99b473d27aef0100008000"}) syz_open_pts(r12, 0x40000) splice(r12, 0x0, r11, 0x0, 0x7ffff000, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r10, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0xffbffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x387, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff83, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2m12.054899199s ago: executing program 48 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x2, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r2 = openat(r1, &(0x7f0000000500)='.\x00', 0x0, 0x2) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[], 0x24, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000080)) flistxattr(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xbf, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x14}}}, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r12, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r12, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r12, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "ec720d001ef6be99b473d27aef0100008000"}) syz_open_pts(r12, 0x40000) splice(r12, 0x0, r11, 0x0, 0x7ffff000, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r10, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0xffbffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x387, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff83, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 17.148873921s ago: executing program 5 (id=1316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040080) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x880000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000128bd7000fedbdf257f0000001c003400c4dd845571219a4161b69ce08201ea3ebce88c59565817cf1000340049d4ff4f817af53423bf5a7ed90f53f8a2b66468b88df065ca37206621f02b0f12e098ed02fe9743f606c9f524a41e344fa3dcfcca6fb3341a1a02d13b91ff9936b8205230bf2cf839b05550759f4c174b2403286d72e85320d18c1f2af853979f8747f94a59fa5ff5c93f8daacb62cd018abde7fb9f3e4c9ffc1e101ae3557ed949b365e3dbcf0febe8af8e7d8749bcb4d15526b303cc55108ea0e5551cf1457d2e8e560da90059489263a5ce0a12565a841d8024c631ea4912e115cc1b5d5b3b1ce9a397adc5d3608699e70c398db94c7dc3565261820042b2319295694d6c44510258fab09fbcbd7d8f56b2b842490a92c544baf6aad269bb94a64a6945e6e45bf3cf4f9c8745fe19677b67e0871abc3fd7d6349e9517ab"], 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x24000044) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) semop(0x0, &(0x7f00000002c0), 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0xd4c6) read(r8, &(0x7f0000000180), 0x1000) 15.148650491s ago: executing program 5 (id=1318): socket(0x2, 0x3, 0xff) socket(0x2, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f0000000080)=""/59, 0x63, 0xea) 11.451900186s ago: executing program 1 (id=1325): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1ff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4, 0x2, 0x6, 0xff, 0x18, "22aa0a2db01821da"}) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) 11.30952907s ago: executing program 7 (id=1327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x148) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) io_uring_register$IORING_REGISTER_QUERY(r1, 0x23, &(0x7f00000007c0)=[{&(0x7f00000006c0)={&(0x7f00000003c0)={0x0, 0x0}, 0x0, 0x2}, &(0x7f0000000700)="b64a1d1f20754472d6be5c7f598c156138d991ba8bb19b9f0f3aa1fb7716b954eb3c198eb3c18f47a10b0ba724339626a99e1ddfd281c986231fb9e999779b77a8aecbe12b472ac5f55c0f25d3efeb6fccf8f5cc77713f0064e8b36eb928b9594680f676c6c9e7946b3867b3bf0ba555225ed8b367", 0x0, 0x75}], 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x2080, 0x9) openat(r3, &(0x7f0000000800)='./file0\x00', 0x400, 0x121) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs3(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7370617273652c61636c2c6e6f68696464656e2c6e6f68696464656e2c7370617273652c61636c2c6e6f636173652c696f636861727365743d6e6f6e822c696f636861727365743d69736f383835392d392c707265616c6c6f632c77696e646f77735f6e616d65732c7370617273652c686964655f646f745f66696c65732c00"], 0x4, 0x1f778, &(0x7f0000023880)="$eJzs3Qm8DeX/B/Bn9n2fI1tcuklC9iXJvmbfQrJlz5YtJC7JliwRki3JliRUkkQSJdllT5IkSbsk/i9zz73de/GraXv6j8+7V985Z+45z3zP8pmZM87yZYMJdRpVbZiQkJBAWJYkO0fSSSJJ5JKVfNqOz7vEJU8ZQghPCBmfWKBVjW71tMvzzJxrHxy0JPe6PlqTleYbEtlqt/zybJHjWzNtzfLlxUadOvdO6Nw7oXuPPgltEtr26NGnTduu7RPade79QMGEel3bt+ndPqFz997te6X7c4euPXr2HJDQpns7Q+3Zq33v3gltug9IeKD9gIQ+PRL69BqQ0KZjm87dEwoWLJhgqAT+oMaLaXcAAAAAAAAAAAAAAAAAAAB/j0uXyCWGdhMAAAAAAAAAAAAAAAAAAADwl1StUatKIcKlnmcIQ0oRhkxL+WB/XMrJlEvahJDWwanMQa0eP5W0yMzf9fw+5lpT8WpNXOUNCIUIIZ1Sx2dJzeAUQ4RgnvC7yyFd4wPFpynL5blEUptUJY3i55PivTOkfLpGLsan5VNmXOCuOnUvJX8lwrJ043BX3J7yGe7IBJJ+6jByML106dKlq91F/4wr+4T/trDPM5mkn6Z/nnHXzH/TDPnn4ulI+YqQfyP/PVPHZ0mDsPm30zSaJv9yav5rk86kF+kVn3+t9QCX8X61rz7NxSd/I8q/m9+/iqXdAFDFXpF/9n/kn/3/lP/U5pOnafNfi/QgHUlV0pl0Je3j86+V/5Qwp+Y/w7gp09yE4XjkH/5fuTL/XDz/RzPkX4yvA1Jm2fG8pOS/0J/Mf/r9fIbUC53z9FLGl7hE0oT0IF1JX9KNtA/GTUpdDkvapS6RT7p8O1JeD/jBX4vFk+GT2YxLmOSlCG78+sG85AsIl/ffE1iS7jIZ/0bi68pCqcvniRs/1ZsMIAPJA6QN6RqsjVL2Ry6v+/KmXl4geuo9HX+c4rc8KXV+5tS9lcx/eD3E//5FIML4K/LPx/O/7iqv//kM2/+/K/9/aTuvxweKf+tf2u18BdKH9CG9SGXSnnSIz0+/HuD+8HpgNLlyPRDMC7keuNZ+Rsr9mrqfkeF2pUxzcZmDK/09+xnY/l/frtz+C0H+ueSnRobtv5Dh+N//yv8+u0e6acr8PL+9ck693m+vIxhS+a9v/4PxGa5gcL5eurz99nxPuWmpefOTJ/nt9NNcghUsYwIhpGlwxeT1Rqn4sbtEUoMUJYWC28HE7xg+fv/kjf+ftsnMGY7azIn3yPDl4/dwspTLVCdp7vCrTFOWn4v3g8UsS9lv4JP3M+QMfab0knL8B65nVx7/E+Pb/3pXef0v/suv/9Me/w/9uoBPP3ba1wUVSWfSh3QjbUjPa26PU2Q8npp6kfg0F5Ptb9we/9uw/b++Xbn9l+L5X3WV/X/pH9r/T5vzWmFznuEf0lLGF4Kc9yA9SJ/g/H91v1+KT1PXMxn/YTA+deL/gPP3rmeQ/+vblfmX4/nvf5X8y9SO/3N/4vh/emmPC1QkbUg7Uik4NtibJOcp/XE0NvVUUrr98zTvD4gHN3X//ELO9NO4lKWxl5Kv8N/aT0D+r29X5l8J8q+kP9gff2Wq/D3v/0nI2AXzu/v/f8u/CwTLvbz/35C0J/eTvqQXaZ8h32nyEB8hNd988p3Rk0k/vTxaZdKQ5GaY7Ez8OMFR8ttxgnWpr78vXy55NJekP06wLP5/8q3147c/eYNfP3FFcP+kTJPilxtECKlBalxx+TmHj1Rkmd+mKbej3VUvz5GzLnfu8mVSpiTD+CTN483Gb99m8tvxhYVpbl/K5e0Mt29a/H8S7FElLz9vypPrGsvOeLlr3QcZL3et257xdvy31sO0XPn6X/0f7/9Tqb3+5/5E/lM6TZ6mff3fmPQklUgb0jue/6vtlw+JT3/7d3/2qtPcSeRGNs3+PRGS9x8S4sfhEkkN0p10ID3i10pZ+emdsz3w0OBDBzLe7n/3eYnt//Xtyu2/Fj/+n8ReefxP+3u2/3bGLv6l7X+w3Mv5r0L6kz6kPelO2gXbs+TXOsm5bcr8/nH96kzy/5dlSb4FpDWpE7//kmvY/vLEVw0il0jqkrakC6mReozi7x6/PukbHBdpQziSNT5+p+AV1l8f//LrqwakPelJ2pBewRo2PWx//0uu3P7rhATb/4SrHP/X/4Hjf7Tfl5P+dT+Teur6eH5i+399u3L7b/yP/BvIf8Qg/9e3K/Nv/o/8m8h/xCD/17cr82/9j/xbyH/EIP/Xtyvzbwf5J2QUSZ9/JvUav13u78j/9ZGz/yrk//p2Zf4d5P//J/nPXAn5v75dmX8X+b+OIP/Xtyvz7yH/1xHk//p2Zf595P86gvxf367Mfwz5v44g/9e3K/OfCfm/jiD/17cr838D8n8dQf6vb1fmP/n7vw3Sk73y83+Z/4bP/+X5k5//rRP//M/f+/mX5M+z9g/uiuTPGTZN/Txr3dTrOiTD53/SfC44IX4n5Y1/rOmK9xgx6W9w2s/Rnk1dLku2py63frrLpl3uuvj/JDhOUyh+v8c/HxsfN+0NT7kvLmWQ9vH3459wbJrm87hhx7na+6oy3l6s5/+Lrp3/q33/d5aI5D/t5+smxN+DmJLDQlfJv0fS5zCBXHkj/n8+z7H9v75dO/9JV8l/1r/h879h8v/b9/8wqd//8099PnVCyvLY375vMHk90CB1jIzrgfJpvh8ge3yaEP/iXj3NPZrWf2s9ge//vL4lf/43X4b8X14fjGIzfv/PiWD6W+6TpeR+Gtc1yF2pMd3STVPmJ1zlc//s/9zuJ3eT8fsAf285Gce7vNwCwTU7xH/vI3m/+XLe7TSf+z/7B77P92jKd/uk5p0hrYMOCckWP5+xr4zTlPfpZU3zO2BX6+/GPzt+RnzG8Qun+eOJ1PXR9tR9muTXQSlvJ7x83Tvjt7tp6t/5YF7mlK9NFnmSWKtp4xqVk6+TZl61q8yrXbcy+apCfPz/xnrwenXiGvm/8vv/BfJZML1W/n/veXnFRj9k/v/ufCVd43vBU1pK/d6fDOOlTHOxbHAo82q5yfwP5mZovK2/Jzef/fUh4C+h+/z57Jr5b33F9///tfxf7adm/pH8Z3SN7d+1vu9zXfwxScaRVfH5OiFzlhFC6pAmQb2sRfAt4j1Ji/iv+BQgnYNvFe9I2gf/dyfFSBFSnBQN/itJCpHipAhpkWZNlP50OVKOtPibR03//OIzPL8+y/D8Ev7q8+vSs+meX/Dfdu38n/uPbf9T9v//6Hom5WdzLi+32TXyf7Xtf4qM3/uf4Wd4SC6G/5/b/8vL7BNff09I/TsfzPur6+/gtYcmkr692/cq2L9Nnz69CpP45Cp/K0Lik0D6XGL7T9t/b/vPBvnPe5Xtf9Nqfzz/Kb/78+fzn7w9+r38Z1wOSUweJ+9NydMr9/+LZlgO+UPrmfDLSQ7ctdYzKa+vU9czGcZLmeZShJT1TPytE3/n8+Qz8u+8zoBr+e/lP3n7vznk9j/j731lnIbJf8803TTKkMvfW05Kzynf+ZySSyU1lwXJ/cHvgiZfIux+QMq4KdNcjPn/+DgAtv+0/dfyT+IZLEUy/jxs+t+vuOJgPvw/JNFuAKiSQuQ/eY8V+4NR8qe+NAQiQw6RfyWoyH+UKLQbAKqUEPlPPvKN/EeJSrsBoEoNkf/kd94i/1Gi0W4A/m1Z0x5010LkP/kd7ch/lOi0GwCq9BD5N4KK/EeJQbsBoMoIkX8zqMh/lJi0GwCqzBD5t4KK/EeJRbsBoMoKkf/kd/wg/1GCd3Fd3+wQ+Q++BQv5jxSHdgNAlRMi/8m/son8R4lLuwGgyg2R/+Dbr5D/SPFoNwBUeSHyH3ySCPmPFJ92A0CVHyL/saAi/1ESo90AUBULkf9MQUX+oyQT7QaAqkwh8n9DUJH/KLmBdgNA1Q34/O91LTPtBoCqzCHynyWoyH+UZKHdAFCVJUT+swYV+Y+SrLQbAKqyhsh/8jfwI/9Rko12A0BVthD5T/7FK+Q/SrLTbgCoyh4i/8m/SIf8R8mNtBsAqm4Mkf8cQUX+oyQH7QaAqhwh8p8zqMh/lOSk3QBQlTNE/pN/pQT5j5Kr/SoTXD8SQuQ/V1CR/yjJRbsBoCpXiPznDiryHyW5aTcAVOUOkf/kH6RF/qPkJtoNAFU3hch/8g9UI/9Rkki7AaAqMUT+bw4q8h8lN9NuAKi6OUT+8wQV+Y+SPLQbAKryhMj/LUFF/qPkFtoNAFW3hMh/3qAi/1GSl3YDQFXeEPm/NajIf5TcSrsBoOrWEPnPF1TkP0ry0W4AqMoXIv+3BRX5j5LbaDcAVN0WIv/5g4r8R0l+2g0AVflD5L9AUJH/KClAuwGgqkCI/BcMKvIfJQVpNwBUFQyR/9uDivxHye20GwCqbg+R/0JBRf6jpBDtBoCqQiHyXzioyH+UFKbdAFBVOET+iwQV+Y+SIrQbAKqKhMh/0aAi/1FSlHYDQFXRP55/MXmC/EdJMdoNAFXFQmz/iwcV+Y+S4rQbAKqKh8h/iaAi/1FSgnYDQFWJEPkvGVTkP0pK0m4AqCoZIv/BHOQ/UkrRbgCoKhUi/6WDivxHSWnaDQBVpUPk/46gIv9RcgftBoCqO0Lkv0xQkf8oKUO7AaCqTIj83xlU5D9K7qTdAFB1Z4j8lw0q8h8lZWk3AFSVDZH/u4KK/EfJXbQbAKruCpH/ckFF/qOkHO0GgKpyIfJfPqjIf5SUp90AUFU+RP4rBBX5j5IKtBsAqiqEyH/FoCL/UVKRdgNAVcUQ+a8UVOQ/SirRbgCoqhQi/5WDivxHSWXaDQBVlUPkv0pQkf8oqUK7AaCqSoj8Vw0q8h8lVWk3AFRVDZH/akFF/qOkGu0GgKpqIfJfPajIf5RUp90AUFU9RP5rBBX5j5IatBsAqmqEyH/NoCL/UVKTdgNAVc0Q+b87qMh/lNxNuwGg6u4Q+a8V1HT5l/+lNuEfUot2A0BVrRD5rx1UbP+jpDbtBoCq2iHyXyeoyH+U1KHdAFBVJ0T+6wYV+Y+SurQbAKrqhsh/vaAi/1FSj3YDQFW9EPmvH1TkP0rq024AqKofIv8Ngor8R0kD2g0AVQ3S5N9MnXv1/DcMKvIfJQ1pNwBUNQyx/W8UVOQ/ShrRbgCoahQi/42DivxHSWPaDQBVjUPkv0lQkf8IEFNONKHbB1DWJET+7wkq8h8l99BuAKi6J0T+mwYV+Y+SprQbAKqahsh/s6Ai/1HSjHYDQFWzEPlvHlTkP0qa024AqGoeIv/3BhX5j5J7aTcAVN0bIv8tgor8R0kL2g0AVS1C5P++oCL/UXIf7QaAqvt+y3+arF89/y2DivxHSUvaDQBVLUNs/1sFFfmPkla0GwCqWoXIf+ugIv9R0pp2A0BV69/NP5M6t01Qkf8oaUO7AaCqTYjtf9ugIv9R0pZ2A0BV2xD5vz+oyH+U3E+7AaDq/hD5bxdU5D9K2tFuAKhqFyL/7YOK/EdJe9oNAFXtQ+S/Q1CR/yjpQLsBoKpDiPx3DCryHyUdaTcAVHUMkf9OQUX+o6QT7QaAqk4h8t85qMh/lHSm3QBQ1TlE/rsEFfmPki60GwCquoTI/wNBRf6j5AHaDQBVD4TIf9egIv9R0pV2A0BV1xD57xZU5D9KutFuAKjqFiL/3YOK/EdJd9oNAFXdQ+S/R1CR/yjpQbsBoKrHVfKvXCP/PYOK/EdJT9oNAFU9Q2z/Hwwq8h8lD9JuAKh6MET+ewUV+Y+SXrQbAKp6hch/76Ai/1HSm3YDQFXvEPnvE1TkP0r60G4AqOoTIv99g4r8R0lf2g0AVX1D5L9fUJH/6MCr/+tdvxD5fyioyH+UPES7AaDqoRD57x9U5D9K+tNuAKjqHyL/A4KK/EfJANoNAFUDQuR/YFCR/ygZSLsBoGpgiPw/HFTkP0oept0AUPVwiPwPCiryHyWDaDcAVA0Kkf9Hgor8R8kjtBsAqh4Jkf/BQUX+o2Qw7QaAqsEh8j8kqMh/lAyh3QBQNSRE/pOCivxHSRLtBoCqpBD5HxpU5D9KhtJuAKgaGiL/w4KK/EfJMNoNAFXDQuT/0aAi/1HyKO0GgKpHQ+R/eFCR/ygZTrsBoGp4iPw/FlTkP0oeo90AUPVYiPyPCCryHyUjaDcAVI0Ikf+RQUX+o2Qk7QaAqpEh8j8qqMh/lIyi3QBQNSpE/kcHFfmPktG0GwCqRofI/5igIv9RMoZ2A0DVmBD5fzyoyH+UPE67AaDq8RD5HxtU5D9KxtJuAKgaGyL/TwQV+Y+SJ2g3AFQ9ESL/44KK/EfJONoNAFXjQuR/fFCR/ygZT7sBoGp8iPxPCCryHyUTaDcAVE0Ikf+JQUX+o2Qi7QaAqokh8v9kUJH/KHmSdgNA1ZMh8j8pqMh/lEyi3QBQNSlE/icHFfmPksm0GwBaXBI8/n88/08FFfmPkqdoNwBUPRUi/1OCivxHyRTaDQBVU0Lkf2pQkf8omUq7AaBqaoj8Twsq8h8l02g3AFRNC5H/p4OK/EfJ07QbAKqeDpH/6UFF/qNkOu0GgKrpIfL/TFCR/yh5hnYDQNUzIfI/I6jIf5TMoN0AUDUjRP5nBhX5j5KZtBsAqmaGyP+soCL/UTKLdgNA1awQ+Z8dVOQ/SmbTbgComh0i/3OCivxHyRzaDQBVc0Lk/9mgIv9R8iztBoCqZ0Pkf25Qkf8omUu7AaBqboj8PxdU5D9KnqPdAFD1XIj8zwsq8h8l82g3AFTNC5H/54OK/EfJ87QbAKqeD5H/+UFF/qNkPu0GgKr5IfK/IKjIf5QsoN0AULUgRP4XBhX5j5KFtBsAqhaGyP+ioCL/UbKIdgNA1aIQ+V8cVOQ/ShbTbgCoWhwi/y8EFfmPkhdoNwD/DP6PXeyFEPlfElTkP0qW0G4AqFoSIv8vBhX5j5IXaTcAVL0YIv9Lg4r8R8lS2g0AVUtD5P+loCL/UfIS7QaAqpdC5H9ZUJH/KFlGuwGgalmI/L8cVOQ/Sl6m3QBQ9XKI/C8PKvIfJctpNwBULQ+R/xVBRf6jZAXtBoCqFSHyvzKoyH+UrKTdAFC1MkT+Xwkq8h8lr9BuAKh6JUT+Xw0q8h8lr9JuAKh6NUT+Xwsq8h8lr9FuAKh6LUT+VwUV+Y+SVbQbAKpWhcj/60FF/qPkddoNAFWvh8j/6qAi/1GymnYDQNXqEPl/I6jIf5S8QbsBoOqNEPlfE1TkP0rW0G4AqFoTIv9vBhX5j5I3aTcAVL0ZIv9rg4r8R8la2g0AVWtD5P+toCL/UfIW7QaAqrdC5H9dUJH/KFlHuwGgal2I/K8PKvIfJetpNwBUrQ+R/7eDivxHydu0GwCq3g6R/w1BRf6jZAPtBoCqDSHy/05Qkf8oeYd2A0DVOyHyvzGoyH+UbKTdAFC1MUT+3w0q8h8l79JuAKh6N0T+NwUV+Y+STbQbAKo2hcj/5qAi/1GymXYDQNXmEPl/L6jIf5S8R7sBoOq9EPl/P6jIf5S8T7sBoOr9EPnfElTkP0q20G4AqNoSIv8fBBX5j5IPaDcAVH0QIv9bg4r8R8lW2g0AVVtD5P/DoCL/UfIh7QaAqg9D5H9bUJH/KNlGuwGgaluI/G8PKvIfJdtpNwBUbQ+R/x1BRf6jZAftBoCqHSHyvzOoyH+U7KTdAFC1M0T+dwUV+Y+SXbQbAKp2hcj/7qAi/1Gym3YDQNXuEPnfE1TkP0r20G4AqNoTIv97g4r8R8le2g0AVXtD5P+joCL/UfIR7QaAqo9C5H9fUJH/KNlHuwGgal+I/O8PKvIfJftpNwBU7Q+R/wNBRf6j5ADtBoCqAyHyfzCoyH+UHKTdAFB1MET+DwUV+Y+SQ7QbAKoOhcj/4aAi/1FymHYDQNXhEPk/ElTkP0qO0G4AqDoSIv8fBxX5j5KPaTcAVH0cIv9Hg4r8R8lR2g0AVUdD5P+ToCL/UfIJ7QaAqk9C5P9YUJH/KDlGuwGg6liI/H8aVOQ/Sj6l3QBQ9WmI/B8PKvIfJcdpNwBUHScM4ZN8m5AEO3mOTwhhCbHl4FxmconJSRg2OCMkEEISLp/WMl8+b18xn/jJl2eS57uXq+YnXzbtPOKTtxgv9XJa6uWYo+nmkcxkEXHTLT/Xb8ufc8V8AAAAAAAAAPjD0r5WT/+6HQCipEadyk3zEuWK+XkJIatEQk5ayecNso+52vX5eO1EGgSnhHhNWmTm73p+H3OtKdHjA6jJEzF+VuYSSQXSh/QhvUhl0p50COYyJPl4pBx+ORmkXU5F0oa0I5VIV9KX9A7mSvG/i6Q1qRduOSn/VsKkX44ULKcz6UO6kTakJ5Hiy2lNaoUbPyE+YEL68YVg/B6kB+lDOpOuJPm4qfYH+zfI/7if7JT+q5D+pA9pT7qTdiT5MCv7Jx4HPt0zJu3jUIv0IB1J1aD/9mnvRMKQ1qRmuOV0jV+1a/r7iecSSW1SlTRK9zAx4W9H/Dh5yjTt7UgevzbpTHqRXsnH0ePJUsI/n658PBJSHo+GpD25n/QlvUj7eHzUPzE+G6SaxB/RtM/XxqQnqUTakN6kffxfBrm/o//U8ZuQHkHmupH2qeM1JZX/6vjBI8JwBYPzCamPb6N04+6zewTXv9Y05WnaLj7u5XEKBI9gh/jzM4mQoP/kS2SLLydjnqdxXYPxSo3pdnl6edTgfMr8jP0nEGIXCK6ZspxCwfwc1xg/Pi5zrWnK7VDT3I5m8asnj184ePxz/sHxU+6f1PETk8fNe1P6++m3/osE8zOMn7x6+lvGL5ru/rNTn8nwxxm0GwCq8Phf3/D4X9/w+F/fDHL51UQjUoHUIZVJBdKAVCatSA1Sh1QldUkDUptUII1IDVKX1PmHOrDTnC4ff+/hZdXj08Sgg0akAalBKpLGpBGpQlqRWqRG0Pc/LyHN6aQ0py/FJZKqpAapFXRVh1QgtUmVf6Gr3xRKc7oiIfFXUYRUjO8MJ5K6pCKpSaqQSqRR8NhW/lf7K3+N0ykv8S8//y731jh4hBuRZqQVqUyqkIakUjCnHmkUPBP/KfXSnL7649uE1CW1SOPgkf33H+PWaU6XT/saJ/X+S9/fv5ndy3pm6C/lsF7KNDFYr1xew9CRdI35vz2+NYJ1XxXSlLQiDUhdUvdfWa+kmJDmdPnf7a8CqUVqkbqk0r/y2F42J83pq+ejYpDby8+2ev9wL1ez7Hf7a0CqkHrBtq1hkJB6pG5wn/47j/K6a/SX8mAnkiqkAoXcptieoSU5fjplmtwfPdf+hHryCjAxyEM1Uo1UCfZdGgf3Xa3UbUnDYN+hSrDW/kekOZKXdK0/APxHXWIu/d1yhlh80u8NJv3OABeG/KWbf63dA4DrwlmXO5d2UzUo2HLxSZdffzeNz0v+TFCx+GsPn4wmbob3BWVOnpfh80C/d/6y+okrgrGSQix/NnPl8oN5f2L5cw4fqcgyv22u28WXXyjN/njy8rMnX4RL9xmnoP6R5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx/ctblzhHmt/ODCCEM4ZOqE0Kaxuf5hBCWFCNs/Nxo4hIm+TqCG0wyJ89LvoCQQAhJYMnvnr+sfuKKYKykEMufzVy5/GDen1j+nMNHKrJMsNBAu/jyCxFCyqdbfvbki3A+ucTkTFl+UP/IcgD+mxjCEo7wRCAikYhMFKISjejEICaxiE0c4hKP+CRGMpEbSGaShWQl2Uh2ciPJQXKSBJKL5CY3kURyM8lDbiF5ya0kH7mN5CcFphYkt5NCpDApQoqSYqQ4KUFKklKkNLmDlCF3krLkLlKOlCcVSEVSiVQmVUhVUo1UJzVITXI3qUVqkzqkLqlH6pMGpCFpRBqTJuQe0pQ0I83JvaQFuY+0JK1I6z91/YfJIPIIGUyGkCQylAwjj5Lh5DEygowko8hoMoY8TsaSJ8g4Mp5MIBPJk2QSmUyeIlPIVDKNPE2mk2fIDDKTzCKzyRzyLJlLniPzyPNkPllAFpJFZDF5gSwhL5Kl5CWyjLxMlpMVZCV5hbxKXiOryOtkNXmDrCFvkrXkLbKOrCdvkw3kHbKRvEs2kc3kPfI+2UI+IFvJh2Qb2U52kJ1kF9lN9pC95COyj+wnB8hBcogcJkfIxyGv/1OG6/dnCEMYlmEZnuEZkREZmZEZlVEZndEZkzEZm7EZl3EZn/GZTEwmJjOTmcnKZGWyM9mZHEwOJoFJYHIzuZlEJpHJw+Rh8jJ5mXxMPiY/k58pyBRkCjGFmSJMEaYYU4wpwZRgSjGlmdJMGaYMU5Ypy5RjyjEVmApMJaYSU4WpwlRjqjE1mJpMTaYWU4upw9Rh6jH1mAZMA6YR04hpwjRhmjJNmeZMc6YF04JpybRkWjOtmbZMW6Yd047pwHRgOjGdmC5MF6Yr05XpznRnejI9mV5ML6YP04fpx/Rj+jMDmAHMw8zDzCPMI8wQphI7lBnGDGOGM8OZEcxIZiQzmhnDPM48zjzBjGPGMxOYicxEZhIzmfmRmcJMZaYx05iy7DPMDGYmk8DOZuYwc5i5zFxmHjOPmc8sYBYwi5jFzAvMEmYJs5R5iXmJeZlZzqxgVjCvMK8wrzGrmFXMauYNZg2zhlnL/MSsY9YzbzMbmHeYjcw7zCZmM7OJeZ/ZwrzPbGW2MtuYbcwOZgezi9nF7GH2MB8xHzH7mf3MQeYgM445whxhjjJHmWPMMeY4c5w5wZxgTjInmVPMKeY0c5o5w5xhzjLfMN8y3zDfM98zPzI/MeeYc8x55jxzgbnAXGQuXg4/exnP8qzIiqzMyqzKqqzO6qzJmqzN2qzLuqzP+mwmNhObmc3MZmWzstnZ7GwONgebwOZic7O52UQ2kc3D5mHzsnnZfGw+Nj+bny3IFmQLsYXYImwRthhbnC3BlmRLsaXZO9gybBm2LHsXW44tz1ZgK7CV2MpsFbYqW5WtzlZna7I12VpsLbYOW4ftkb9b/gbsUGYE05i9/Mg0ZcczzdkJTAv2PrYl24qdxLRh27KTmXZse7YD25GdykxhurBt83dlu7Hd2RlMT7Z7/plMb7YPO5vpxz7E9mcHsAPZh9lBbLv8g9kh7HxmKDuMXcQMZx9jR7Aj2aVMZfbyI1aFfYIdx45nJ7AT2deYSexk9il2CjuVncY+zU5nn2FnsDPZWexsdg77LDuXfY6dxz7PzmcXsAvZRexi9gV2Cfsiu5R9iV3GvswuZ1ewK9lX2FfZ19hV7OvsavYNdg37JruWfYtdx65n32Y3sO+wG9l32U3sZvY99n12C/sBu5X9kN3Gbmd3sDvZXexudg+7l/2I3cfuZw+wB9lD7GH2CPsxe5T9hD3GfsoeZz9jT7CfsyfZL9hT7JfsafYr9gz7NXuW/Yb9lv2O/Z79gf2R/Yk9x/7Mnmd/YS+wv7IX2Uss4RiO5TiO5wRO5CRO5hRO5TRO5wzO5CzO5hzO5TzO52JcJu4GLjOXhcvKZeOyczdyObicXAKXi8vN3cQlcjdzebhbuLzcrVw+7jYuP1eAK8jdzhXiCnNFuKJcMa44V4IryZXiSnN3cGW4O7my3F1cOa48V4GryFXiKnNVuKpcNa46V4Oryd3N1eJqc3W4ulw9rj7XgGvINeIac024e7imXDOuOXcv14K7j2vJteJac224ttz9XDuuPdeB68h14jpzXbgHuK5cN64714PryfXkenG9uD5cX64f14/rzw3gBnK/che5S9xgbgiXxA3lhnGPcsO5x7gR3EhuFDeaG8M9zo3lnuDGceO5CdxE7kluEjeZe4qbwk3lpnFPc9O5Z7gZ3ExuFjebm8M9y83lnuPmcc9z87kF3EJuEbeYe4EbER9p2R+4/ttXuf7YYOnbuO3cDm4nt4vbze3h9nLbuH3cPu4Ad4A7xB3ijnBHuKPcUe4Yd4w7zh3nTnAnuJPcSe4Ud4o7zZ3mznBnuLPcN9zP3Hfc99wP3I/cT9xP3M/cee48dyF+HxCe4Vme43le4EVe4mVe4VVe43Xe4E3e4m3e4V3e430+xmfib+Az81n4rHw2Pjt/I5+Dz8kn8Ln43PxNfCJ/M5+Hv4XPy9/K5+Nv4/PzBfiC/O1/+fq/119rvjXflm/Lt+Pb8R34DnwnvhPfhe/Cd+W78t357nxPviffi+/F9+H78P34fnx/vj8/kB/ID+IH8YP5wXwSn8QP4x/lh/OP8SP4kfwofjQ/hh/Dj+XH8uP4cfwEfgL/JP8kP5mfzE/hp/DT+Gn8dH46P4Ofwc/iZ/Fz+Dn8XH4uP4+fx8/n5/ML+YX8Yn4xv4Rfwi/ll/LL+GX8cn45v5Jfyb/Kv8qv4lfxq/nV/Bp+Db+WX8uv49fz6/kN/AZ+I7+R38Rv4t/j3+O38Fv4rfxWfh2/nd/O7+R38rv53fxefi+/j9/HH+AP8If4Q/wR/gh/lD/KH+OP8cf54/wJ/gR/kj/Jn+JP8af50/wZ/gx/lj/Lf8t/y3/Pf8//yP/In+PP8ef58/wF/gJ/kb94ebdPYAVW4AVeEAVRkAVZUAVV0AVdMAVTsAVbcAVX8AVfyCRkEjILmYWsQlYhu5BdyCHkEBKEBCG3kFtIFG4W8gi3CHmFW4V8wm1CfqGAUFC4XSgkFBaKCEWFYkJxoYRQUigllBbuEMoIdwplhbuEckJ5oYJQUagkVBaqCFWFakJ1oYZQU7hbqCXUFuoIdYV6Qn2hgdBQaCQ0FpoI9whNhWZCc+FeoYVwn9BSaCW0/lvHHymMEkYLY4THhbHCE8I4YbwwQZjIPilMEiYLTwlThKnCNOFpYbrwjDBDmCnMEmYLc4RnhbnCc8I84XlhvrBAWCgsEhYLLwhLhBeFpcJLwjLhZWG5sEJYKbwivCq8JqwSXhdWC28Ia4Q3hbXCW8I6Yb3wtrBBeEfYKLwrbBI2C+8J7wtbhA+ErcKHwjZhu7BD2CnsEnYLe4S9wkfCPmG/cEA4KBwSDgtHhI+Fo8InwjHhU+G48JlwQvhcOCl8IZwSvhROC18JZ4SvhbPCN8K3wnfC98IPwo/CT8I54WfhvPCLcEH4VbgoXBKIyIisyIm8KIiiKImyqIiqqIm6aIimaIm26Iiu6Im+GBMziTeImcUsYlYxm5hdvFHMIeYUE8RcYm7xJjFRvFnMI94i5hVvFfOJt4n5xQJiQfF2sZBYWCwiFhWLicXFEmJJsZRYWrxDLCPeKZYV7xLLieXFCmJFsZJYWawiVhWridXFGmJN8W6xllhbrCPWFeuJ9cUGYkOxkdhYbCLeIzYVm4nNxXvFFuJ9YkuxldhabCO2Fe8X24ntxQ5iR7GT2FnsIj4gdhW7id3FHmJP8UGxl9hb7CP2FfuJD4n9xQHiQPFhcZD4iDhYHCImiUPFYeKj4nDxMXGEOFIcJY4Wx4iPi2PFJ8Rx4nhxgjhRfFKcJE4WnxKniFPFaeLT4nTxGXGGOFOcJc4W54jPinPF58R54vPifHGBuFBcJC4WXxCXiC+KS8WXxGXiy+JycYW4UnxFfFV8TVwlvi6uFt8Q14hvimvFt8R14nrxbXGD+I64UXxX3CRuFt8T3xe3iB+IW8UPxW3idnGHuFPcJe4W94h7xY/EfeJ+8YB4UDwkHhaPiB+LR8VPxGPip+Jx8TPxhPi5eFL8QjwlfimeFr8Sz4hfi2fFb8Rvxe/E78UfxB/Fn8Rz4s/iefEX8YL4q3hRvCQSiZFYiZN4SZBESZJkSZFUSZN0yZBMyZJsyZFcyZN8KSZlkm6QMktZpKxSNim7dKOUQ8opJUi5pNzSTVKidLOUR7pFyivdKuWTbpPySwWkgtLtUiGpsFREKioVk4pLJaSSUimptHSHVEa6Uyor3SWVk8pLFaSKUiWpslRFqipVk6pLNaSa0t1SLam2VEeqK9WT6ksNpIZSI6mx1ES6R2oqNZOaS/dKLaT7pJZSK6m11EZqK90vtZPaSx2kjlInqbPURXpA6ip1k7pLPaSe0oNSL6m31EfqK/WTHpL6SwOkgdLD0iDpEWmwNERKkoZKw6RHpeHSY9IIaaQ0ShotjZEel8ZKT0jjpPHSBGmi9KQ0SZosPSVNkaZK06SnpenSM9IMaaY0S5otzZGeleZKz0nzpOel+dICaaG0SFosvSAtkV6UlkovScukl6Xl0gpppfSK9Kr0mrRKel1aLb0hrZHelNZKb0nrpPXS29IG6R1po/SutEnaLL0nvS9tkT6QtkofStuk7dIOaae0S9ot7ZH2Sh9J+6T90gHpoHRIOiwdkT6WjkqfSMekT6Xj0mfSCelz6aT0hXRK+lI6LX0lnZG+ls5K30jfSt9J30s/SD9KP0nnpJ+l89Iv0gXpV+midEkiMiOzMifzsiCLsiTLsiKrsibrsiGbsiXbsiO7sif7ckzOJN8gZ5azyFnlbHJ2+UY5h5xTTpBzybnlm+RE+WY5j3yLnFe+Vc4n3ybnlwvIBeXb5UJyYbmIXFQuJheXS8gl5VJyafkOuYx8p1xWvksuJ5eXK8gV5UpyZbmKXFWuJleXa8g15bvlWnJtuY5cV64n15cbyA3lRnJjuYl8j9xUbiY3l++VW8j3yS3lVnJruY3cVr5fbie3lzvIHeVOcme5i/yA3FXuJneXe8g95QflXnJvuY/cV+4nPyT3lwfIA+WH5UHyI/JgeYicJA+Vh8mPysPlx+QR8kh5lDxaHiM/Lo+Vn5DHyePlCfJE+Ul5kjxZfkqeIk+Vp8lPy9PlZ+QZ8kx5ljxbniM/K8+Vn5Pnyc/L8+UF8kJ5kbxYfkFeIr8oL5VfkpfJL8vL5RXySvkV+VX5NXmV/Lq8Wn5DXiO/Ka+V35LXyevlt+UN8jvyRvldeZO8WX5Pfl/eIn8gb5U/lLfJ2+Ud8k55l7xb3iPvlT+S98n75QPyQfmQfFg+In8sH5U/kY/Jn8rH5c/kE/Ln8kn5C/mU/KV8Wv5KPiN/LZ+Vv5G/lb+Tv5d/kH+Uf5LPyT/L5+Vf5Avyr/JF+ZJMFEZhFU7hFUERFUmRFUVRFU3RFUMxFUuxFUdxFU/xlZiSSblByaxkUbIq2ZTsyo1KDiWnkqDkUnIrNymJys1KHuUWJa9yq5JPuU3JrxRQCiq3K4WUwkoRpahSTCmulFBKKqWU0sodShnlTqWscpdSTimvVFAqKpWUykoVpapSTamu1FBqKncrtZTaSh2lrlJPqa80UBoqjZTGShPlHqWp0kxprtyrtFDuU1oqrZTWShulrXK/0k5pr3RQOiqdlM5KF+UBpavSTemu9FB6Kg8qvZTeSh+lr9JPeUjprwxQBioPK4OUR5TByhAlSRmqDFMeVYYrjykjlJHKKGW0MkZ5XBmrPKGMU8YrE5SJypPKJGWy8pQyRZmqTFOeVqYrzygzlJnKLGW2Mkd5VpmrPKfMU55X5isLlIXKImWx8oKyRHlRWaq8pCxTXlaWKyuUlcoryqvKa8oq5XVltfKGskZ5U1mrvKWsU9YrbysblHeUjcq7yiZls/Ke8r6yRflA2ap8qGxTtis7lJ3KLmW3skfZq3yk7FP2KweUg8oh5bByRPlYOap8ohxTPlWOK58pJ5TPlZPKF8op5UvltPKVckb5WjmrfKN8q3ynfK/8oPyo/KScU35Wziu/KBeUX5WLyiWFqIzKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp7qqzE1k3qDmlnNomZVs6nZ1RvVHGpONUHNpeZWb1IT1ZvVPOotal71VjWfepuaXy2gFlRvVwuphdUialG1mFpcLaGWVEuppdU71DLqnWpZ9S61nFperaBWVCupldUqalW1mlpdraHWVO9Wa6m11TpqXbWeWl9toDZUG6mN1SbqPWpTtZnaXL1XbaHep7ZUW6mt1TZqW/V+tZ3aXu2gdlQ7qZ3VLuoDale1m9pd7aH2VB9Ue6m91T5qX7Wf+pDaXx2gDlQfVgepj6iD1SFqkjpUHaY+qg5XH1NHqCPVUepodYz6uDpWfUIdp45XJ6gT1SfVSepk9Sl1ijpVnaY+rU5Xn1FnqDPVWepsdY76rDpXfU6dpz6vzlcXqAvVRepi9QV1ifqiulR9SV2mvqwuV1eoK9VX1FfV19RV6uvqavUNdY36prpWfUtdp65X31Y3qO+oG9V31U3qZvU99X11i/qBulX9UN2mbld3qDvVXepudY+6V/1I3afuVw+oB9VD6mH1iPqxelT9RD2mfqoeVz9TT6ifqyfVL9RT6pfqafUr9Yz6tXpW/Ub9Vv1O/V79Qf1R/Uk9p/6snld/US+ov6oX1Usq0RiN1TiN1wRN1CRN1hRN1TRN1wzN1CzN1hzN1TzN12JaJu0GLbOWRcuqZdOyazdqObScWoKWS8ut3aQlajdrebRbtLzarVo+7TYtv1ZAK6jdrhXSCmtFtKJaMa24VkIrqZXSSmt3aGW0O7Wy2l1aOa28VkGrqFXSKmtVtKpaNa26VkOrqd2t1dJqa3W0ulo9rb7WQGuoNdIaa020e7SmWjOtuXav1kK7T2uptdJaa220ttr9WjutvdZB66h10jprXbQHtK5aN6271kPrqT2o9dJ6a320vlo/7SGtvzZAG6g9rA3SHtEGa0O0JG2oNkx7VBuuPaaN0EZqo7TR2hjtcW2s9oQ2ThuvTdAmak9qk7TJ2lPaFG2qNk17WpuuPaPN0GZqs7TZ2hztWW2u9pw2T3tem68t0BZqi7TF2gvaEu1Fban2krZMe1lbrq3QVmqvaK9qr2mrtNe11dob2hrtTW2t9pa2Tluvva1t0N7RNmrvapu0zdp72vvaFu0Dbav2obZN267t0HZqu7Td2h5tr/aRtk/brx3QDmqHtMPaEe1j7aj2iXZM+1Q7rn2mndA+105qX2intC+109pX2hnta+2s9o32rfad9r32g/aj9pN2TvtZO6/9ol3QftUuapc0ojM6q3M6rwu6qEu6rCu6qmu6rhu6qVu6rTu6q3u6r8f0TPoNemY9i55Vz6Zn12/Uc+g59QQ9l55bv0lP1G/W8+i36Hn1W/V8+m0MIUQvqN+uF9IL60X0onoxvbheQi+pl9JL63foZfQ79bL6XXo5vbxeQa+oV9Ir61X0qno1vbpeQ6+p363X0mvrdfS6ej29vt5Ab6g30hvrTfR79KZ6M725fq/eQr9Pb6m30lvrbfS2+v16O7293kHvqHfSO+td9Af0rno3vbveQ++pP6j30nvrffS+ej/9Ib2/PkAfqD+sD9If0QfrQ/Qkfag+TH9UH64/po/QR+qj9NH6GP1xfaz+hD5OH69P0CfqT+qT9Mn6U/oUfao+TX9an64/o8/QZ+qz9Nn6HP1Zfa7+nD5Pf16fry/QF+qL9MX6C/oS/UV9qf6Svkx/WV+ur9BX6q/or+qv6av01/XV+hv6Gv1Nfa3+lr5OX6+/rW/Q39E36u/qm/TN+nv6+/oW/QN9q/6hvk3fru/Qd+q79N36Hn2v/pG+T9+vH9AP6of0w/oR/WP9qP6Jfkz/VD+uf6af0D/XT+pf6Kf0L/XT+lf6Gf1r/az+jf6t/p3+vf6D/qP+k35O/1k/r/+iX9B/1S/ql3RiMAZrcAZvCIZoSIZsKIZqaIZuGIZpWIZtOIZreIZvxIxMxg1GZiOLkdXIZmQ3bjRyGDmNBCOXkdu4yUg0bjbyGLcYeY1bjXzGbUZ+o4BR0LjdKGQUNooYRY1iRnGjhFHSKGWUNu4wyhh3GmWNu4xyRnmjglHRqGRUNqoYVY1qRnWjhlHTuNuoZdQ26hh1jXpGfaOB0dBoZDQ2mhj3GE2NZkZz416jhXGf0dJoZbQ22hhtjfuNdkZ7o4PR0ehkdDa6GA8YXY1uRnejh9HTeNDoZfQ2+hh9jX7GQ0Z/Y4Ax0HjYGGQ8Ygw2hhhJxlBjmPGoMdx4zBhhjDRGGaONMcbjxljjCWOcMd6YYEw0njQmGZONp4wpxlRjmvG0Md14xphhzDRmGbONOcazxlzjOWOe8bwx31hgLDQWGYuNF4wlxovGUuMlY5nxsrHcWGGsNF4xXjVeM1YZrxurjTeMNcabxlrjLWOdsd5429hgvGNsNN41NhmbjfeM940txgfGVuNDY5ux3dhh7DR2GbuNPcZe4yNjn7HfOGAcNA4Zh40jxsfGUeMT45jxqXHc+Mw4YXxunDS+ME4ZXxqnja+MM8bXxlnjG+Nb4zvje+MH40fjJ+Oc8bNx3vjFuGD8alw0LhnEZEzW5EzeFEzRlEzZVEzV1EzdNEzTtEzbdEzX9EzfjJmZzBvMzGYWM6uZzcxu3mjmMHOaCWYuM7d5k5lo3mzmMW8x85q3mvnM28z8ZgGzoHm7WcgsbBYxi5rFzOJmCbOkWcosbd5hljHvNMuad5nlzPJmBbOiWcmsbFYxq5rVzOpmDbOmebdZy6xt1jHrmvXM+mYDs6HZyGxsNjHvMZuazczm5r1mC/M+s6XZymxttjHbmveb7cz2Zgezo9nJ7Gx2MR8wu5rdzO5mD7On+aDZy+xt9jH7mv3Mh8z+5gBzoPmwOch8xBxsDjGTzKHmMPNRc7j5mDnCHGmOMkebY8zHzbHmE+Y4c7w5wZxoPmlOMiebT5lTzKnmNPNpc7r5jDnDnGnOMmebc8xnzbnmc+Y883lzvrnAXGguMhebL5hDzRfNpeZL5jLzZXO5ucJcab5ivmq+Zq4yXzdXm2+Ya8w3zbXmW+Y6c735trnBfMfcaL5rbjI3m++Z75tbzA/MreaH5jZzu7nD3GnuMnebe8y95kfmPnO/ecA8aB4yD5tHzI/No+Yn5jHzU/O4+Zl5wvzcPGl+YZ4yvzRPm1+ZZ8yvzbPmN+a35nfm9+YP5o/mT+Y582fzvPmLecH81bxoXjKJxVisxVm8JViiJVmypViqpVm6ZVimZVm25Viu5Vm+FbMyWTdYma0sVlYrm5XdutHKYeW0EqxcVm7rJivRutnKY91i5bVutfJZt1n5rQJWQet2q5BV2CpiFbWKWcWtElZJq5RV2rrDKmPdaZW17rLKWeWtClZFq5JV2apiVbWqWdWtGlZN626rllXbqmPVtepZ9a0GVkOrkdXYamLdYzW1mlnNrXutFtZ9VkurldXaamO1te632lntrQ5WR6uT1dnqYj1gdbW6Wd2tHlZP60Grl9Xb6mP1tfpZD1n9rQHWQOtha5D1iDXYGmIlWUOtYdaj1nDrMWuENdIaZY22xliPW2OtJywmabw1wZpoPWlNsiZbT1lTrKnWNOtpa7r1jDXDmmnNsmZbc6xnrbnWc9Y863lrvrXAWmgtshZbL1hLrBetpdZL1jLrZWu5tcJaab1ivWq9Zq2yXrdWW29Ya6w3rbXWW9Y6a731trXBesfaaL1rbbI2W+9Z71tbrA+srdaH1jZru7XD2mntsnZbe6y91kfWPmu/dcA6aB2yDltHrI+to9Yn1jHrU+u49Zl1wvrcOml9YZ2yvrROW19ZZ6yvrbPWN9a31nfW99YP1o/WT9Y562frvPWLdcH61bpoXbKIzdiszdm8LdiiLdmyrdiqrdm6bdimbdm27diu7dm+HbMz2TfYme0sdlY7m53dvtHOYee0E+xcdm77JjvRvtnOY99i57VvtfPZt9n57QJ2Qft2u5Bd2C5iF7WL2cXtEnZJu5Rd2r7DLmPfaZe177LL2eXtCnZFu5Jd2a5iV7Wr2dXtGnZN+267ll3brmPXtevZ9e0GdkO7kd3YbmLfYze1m9nN7XvtFvZ9dku7ld3abmO3te+329nt7Q52R7uT3dnuYj9gd7W72d3tHnZP+0G7l93b7mP3tfvZD9n97QH2QPthe5D9iD3YHmIn2UPtYfaj9nD7MXuEPdIeZY+2x9iP22PtJ+xx9nh7gj3RftKeZE+2n7Kn2FPtafbT9nT7GXuGPdOeZc+259jP2nPt5+x59vP2fHuBvdBeZC+2X7CX2C/aS+2X7GX2y/Zye4W90n7FftV+zV5lv26vtt+w19hv2mvtt+x19nr7bXuD/Y690X7X3mRvtt+z37e32B/YW+0P7W32dnuHvdPeZe+299h77Y/sffZ++4B90D5kH7aP2B/bR+1P7GP2p/Zx+zP7hP25fdL+wj5lf2mftr+yz9hf22ftb+xv7e/s7+0f7B/tn+xz9s/2efsX+4L9q33RvmQTh3FYh3N4R3BER3JkR3FUR3N0x3BMx3Jsx3Fcx3N8J+Zkcm5wMjtZnKxONie7c6OTw8npJDi5nNzOTU6ic7OTx7nFyevc6uRzbnPyOwWcgs7tTiGnsFPEKeoUc4o7JZySTimntHOHU8a50ynr3OWUc8o7FZyKTiWnslPFqepUc6o7NZyazt1OLae2U8ep69Rz6jsNnIZOI6ex08S5x2nqNHOaO/c6LZz7nJZOK6e108Zp69zvtHPaOx2cjk4np7PTxXnA6ep0c7o7PZyezoNOL6e308fp6/RzHnL6OwOcgc7DziDnEWewM8RJcoY6w5xHneHOY84IZ6QzyhntjHEed8Y6TzjjnPHOBGei86QzyZnsPOVMcaY605ynnenOM84MZ6Yzy5ntzHGedeY6zznznOed+c4CZ6GzyFnsvOAscV50ljovOcucl53lzgpnpfOK86rzmrPKed1Z7bzhrHHedNY6bznrnPXO284G5x1no/Ous8nZ7LznvO9scT5wtjofOtuc7c4OZ6ezy9nt7HH2Oh85+5z9zgHnoHPIOewccT52jjqfOMecT53jzmfOCedz56TzhXPK+dI57XzlnHG+ds463zjfOt853zs/OD86PznnnJ+d884vzoVFvzoXnUsOcRmXdTmXdwVXdCVXdhVXdTVXdw3XdC3Xdh3XdT3Xd2NuJvcGN7Obxc3qZnOzuze6OdycboKby83t3uQmuje7edxb3LzurW4+9zY3v1vALeje7hZyC7tF3KJuMbe4W8It6ZZyS7t3uGXcO92y7l1uObe8W8Gt6FZyK7tV3KpuNbe6W8Ot6d7t1nJru3Xcum49t77bwG3oNnIbu03ce9ymbjO3uXuv28K9z23ptnJbu23ctu79bju3vdvB7eh2kuNva3K7ud3dHm5P90G3l9vb7eP2dfu5D7n93QHuQPdhd5D7iDvYHeImuUPdYe6j7nD3MXeEO9Id5Y52x7iPu2PdJ9xx7nh3gjvRfdKd5E52n3KnuFPdae7T7nT3GXeGO9Od5c5257jPunPd59x57vPufHeBu9Bd5C52X3CXuC+6S92X3GXuy+5yd4W70n3FfdV9zV3lvu6udt9w17hvumvdt9x17nr3bXeD+4670X3X3eRudt9z33e3uB+4W90P3W3udneHu9Pd5e5297h73Y/cfe5+94B70D3kHnaPuB+7R91P3GPup+5x9zP3hPu5e9L9wj3lfumedr9yz7hfu2fdb9xv3e/c790f3B/dn9xz7s/uefcX94L7q3vRveQSj/FYj/N4T/BET/JkT/FUT/N0z/BMz/Jsz/Fcz/N8L+Zl8m7wMntZvKxeNi+7d6OXw8vpJXi5vNzeTV6id7OXx7vFy+vd6uXzbvPyewW8gt7tXiGvsFfEK+oV84p7JbySXimvtHeHV8a70yvr3eWV88p7FbyKXiWvslfFq+pV86p7Nbya3t1eLa+2V8er69Xz6nsNvIZeI6+x18S7x2vqNfOae/d6Lbz7vJZeK6+118Zr693vtfPaex28jl4nr7PXxXvA6+p187p7Pbye3oNeL6+318fr6/XzHvL6ewO8gd7D3iDvEW+wN8RL8oZ6w7xHveHeY94Ib6Q3yhvtjfEe98Z6T3jjvPHeBG+i96Q3yZvsPeVN8aZ607ynveneM94Mb6Y3y5vtzfGe9eZ6z3nzvOe9+d4Cb6G3yFvsveAt8V70lnovecu8l73l3gpvpfeK96r3mrfKe91b7b3hrfHe9NZ6b3nrvPXe294G7x1vo/eut8nb7L3nve9t8T7wtnofetu87d4Ob6e3y9vt7fH2eh95+7z93gHvoHfIO+wd8T72jnqfeMe8T73j3mfeCe9z76T3hXfK+9I77X3lnfG+9s5633jfet9533s/eD96P3nnvJ+9894v3gXvV++id8kjPuOzPufzvuCLvuTLvuKrvubrvuGbvuXbvuO7vuf7fszP5N/gZ/az+Fn9bH52/0Y/h5/TT/Bz+bn9m/xE/2Y/j3+Ln9e/1c/n3+bn9wv4Bf3b/UJ+Yb+IX9Qv5hf3S/gl/VJ+af8Ov4x/p1/Wv8sv55f3K/gV/Up+Zb+KX9Wv5lf3a/g1/bv9Wn5tv45f16/n1/cb+A39Rn5jv4l/j9/Ub+Y39+/1W/j3+S39Vn5rv43f1r/fb+e39zv4Hf1Ofme/i/+A39Xv5nf3e/g9/Qf9Xn5vv4/f1+/nP+T39wf4A/2H/UH+I/5gf4if5A/1h/mP+sP9x/wR/kh/lD/aH+M/7o/1n/DH+eP9Cf5E/0l/kj/Zf8qf4k/1p/lP+9P9Z/wZ/kx/lj/bn+M/68/1n/Pn+c/78/0F/kJ/kb/Yf8Ff4r/oL/Vf8pf5L/vL/RX+Sv8V/1X/NX+V/7q/2n/DX+O/6a/13/LX+ev9t/0N/jv+Rv9df5O/2X/Pf9/f4n/gb/U/9Lf52/0d/k5/l7/b3+Pv9T/y9/n7/QP+Qf+Qf9g/4n/sH/U/8Y/5n/rH/c/8E/7n/kn/C/+U/6V/2v/KP+N/7Z/1v/G/9b/zv/d/8H/0f/LP+T/75/1f/Av+r/5F/5JPYkyMjXExPibExJgUk2NKTI1pMT1mxMyYFbNjTsyNeTE/Fotlit0QyxzLEssayxbLHrsxliOWM5YQyxXLHbsplhi7OZYndkssb+zWWL7YbbH8sQKxgrHbY4VihWNFYkVjxWLFYyViJWOlYqVjd8TKxO6MlY3dFSsXKx+rEKsYqxSrHKsSqxqrFqseqxGrGbs7VitWO1YnVjdWL1Y/1iDWMNYo1jjWJHZPrGmsWax57N5Yi9h9sZaxVrHWsTaxtrH7Y+1i7WMdYh1jnWKdY11iD8S6xrrFusd6xHrGHoz1ivWO9Yn1jfWLPRTrHxsQGxh7ODYo9khscGxILCk2NDYs9mhseOyx2P/Rbo/PfgRtA+djOxnbMz0zPf7Ftm3btm3btu0TOzk5sW2d2MlJsnU/VbtVz94vtmprt999qqu7ru8fcI1CRiNjkLHIOGQ8MgGZiExCJiNTkKnINGQ6MgOZicxCZiNzkLnIPGQ+sgBZiCxCFiNLkKXIMmQ5sgJZiaxCViNrkLXIOmQ9sgHZiGxCNiNbkK3INmQ7sgPZiexCdiN7kL3IPmQ/EoccQA4ih5DDyBHkKHIMOY6cQE4ip5DTyBnkLHIOiUfOIwnIBeQicgm5jFxBriLXkOvIDeQmcgu5jdxB7iL3kPvIA+Qh8gh5jDxBniLPkOdD/iEvkVfIa+QNkoi8Rd4h75EPyEfkE/IZ+YJ8Rb4h35EfyE/kF/IbSUL+IH+Rf0gyNDmaAk2JpkJTo2nQtGg6ND2aAc2IZkIzo1nQrGg2NDuaA82J5kIRFEUxFEcJlEQplEYZlEU5lEcFVEQlVEYVVEU1VEcNFKAmaqE2ClEHdVEP9dEADdEIjaG50TxoXjQfmh8tgBZEC6GF0SJoUbQYWhwtgZZES6Gl0TJoWbQcWh6tgFZEK6GV0SpoVbQaWh2tgdZEa6G10TpoXbQeWh9tgDZEG6GN0SZoU7QZ2hxtgbZEW6Gt0TZoW7Qd2h7tgHZEO6Gd0S5oV7Qb2h3tgfZEe6G90T5oX7Qf2h8dgA5EB6GD0SHoUHQYOhwdgY5ER6Gj0THoWHQcOh6dgE5EJ6GT0SnoVHQaOh2dgc5EZ6Gz0TnoXHQeOh9dgC5EF6GL0SXoUnQZuhxdga5EV6Gr0TXoWnQduh7dgG5EN6Gb0S3oVnQbuh3dge5Ed6G70T3oXnQfuh+NQw+gB9FD6GH0CHoUPYYeR0+gJ9FT6Gn0DHoWPYfGo+fRBPQCehG9hF5Gr6BX0WvodfQGehO9hd5G76B30XvoffQB+hB9hD5Gn6BP0Wfoc/QF+hJ9hb5G36CJ6Fv0Hfoe/YB+RD+hn9Ev6Ff0G/od/YH+RH+hv9Ek9A/6F/2HJsOSYymwlFgqLDWWBkuLpcPSYxmwjFgmLDOWBcuKZcOyYzmwnFguDMFQDMNwjMBIjMJojMFYjMN4TMBETMJkTMFUTMN0zMAAZmIWZmMQczAX8zAfC7AQi7AYlhvLg+XF8mH5sQJYQawQVhgrghXFimHFsRJYSawUVhorg5XFymHlsQpYRawSVhmrglXFqmHVsRpYTawWVhurg9XF6mH1sQZYQ6wR1hhrgjXFmmHNsRZYS6wV1hprg7XF2mHtsQ5YR6wT1hnrgnXFumHdsR5YT6wX1hvrg/XF+mH9sQHYQGwQNhgbgg3FhmHDsRHYSGwUNhobg43FxmHjsQnYRGwSNhmbgk3FpmHTsRnYTGwWNhubg83F5mHzsQXYQmwRthhbgi3FlmHLUyVLlgxbha3G1mBrsXXYemwDthHbhG3GtmBbsW3YdmwHthPbhe3G9mB7sX3YfiwOO4AdxA5hh7Ej2FHsGHYcO4GdxE5hp7Ez2FnsHBaPnccSsAvYRewSdhm7gl3FrmHXsRvYTewWdhu7g93F7mH3sQfYQ+wR9hh7gj3FnmHPsRfYS+wV9hp7gyVib7F32HvsA/YR+4R9xr5gX7Fv2HfsB/YT+4X9xpKwP9hf7B+WDE+Op8BT4qnw1HgaPC2eDk+PZ8Az4pnwzHgWPCueDc+O58Bz4rlwBEdxDMdxAidxCqdxBmdxDudxARdxCZdxBVdxDddxAwe4iVu4jUPcwV3cw308wEM8wmN4bjwPnhfPh+fHC+AF8UJ4YbwIXhQvhhfHS+Al8VJ4abwMXhYvh5fHK+AV8Up4ZbwKXhWvhlfHa+A18Vp4bbwOXhevh9fHG+AN8UZ4Y7wJ3hRvhjfHW+At8VZ4a7wN3hZvh7fHO+Ad8U54Z7wL3hXvhnfHe+A98V54b7wP3hfvh/fHB+AD8UH4YHwIPhQfhg/HR+Aj8VH4aHwMPhYfh4/HJ+AT8Un4ZHwKPhWfhk/HZ+Az8Vn4bHwOPhefh8/HF+AL8UX4YnwJvhRfhi/HV+Ar8VX4anwNvhZfh6/HN+Ab8U34ZnwLvhXfhm/Hd+A78V34bnwPvhffh+/H4/AD+EH8EH4YP4IfxY/hx/ET+En8FH4aP4Ofxc/h8fh5PAG/gF/EL+GX8Sv4Vfwafh2/gd/Eb+G38Tv4Xfwefh9/gD/EH+GP8Sf4U/wZ/hx/gb/EX+Gv8Td4Iv4Wf4e/xz/gH/FP+Gf8C/4V/4Z/x3/gP/Ff+G88Cf+D/8X/4cmI5EQKIiWRikhNpCHSEumI9EQGIiORichMZCGyEtmI7EQOIieRi0AIlMAInCAIkqAImmAIluAInhAIkZAImVAIldAInTAIQJiERdgEJBzCJTzCJwIiJCIiRuQm8hB5iXxEfqIAUZAoRBQmihBFiWJEcaIEUZIoRZQmyhBliXJEeaICUZGoRFQmqhBViWpEdaIGUZOoRdQm6hB1iXpEfaIB0ZBoRDQmmhBNiWZEc6IF0ZJoRbQm2hBtiXZEe6ID0ZHoRHQmuhBdiW5Ed6IH0ZPoRfQm+hB9iX5Ef2IAMZAYRAwmhhBDiWHEcGIEMZIYRYwmxhBjiXHEeGICMZGYREwmphBTiWnEdGIGMZOYRcwm5hBziXnEfGIBsZBYRCwmlhBLiWXEcmIFsZJYRawm1hBriXXEemIDsZHYRGwmthBbiW3EdmIHsZPYRewm9hB7iX3EfiKOOEAcJA4Rh4kjxFHiGHGcOEGcJE4Rp4kzxFniHBFPnCcSiAvEReIScZm4QlwlrhHXiRvETeIWcZu4Q9wl7hH3iQfEQ+IR8Zh4QjwlnhHPiRfES+IV8Zp4QyQSb4l3xHviA/GR+ER8Jr4QX4lvxHfiB/GT+EX8JpKIP8Rf4h+RjExOpiBTkqnI1GQaMi2ZjkxPZiAzkpnIzGQWMiuZjcxO5iBzkrlIhERJjMRJgiRJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgwSkSVqkTULSIV3SI30yIEMyImNkbjIPmZfMR+YnC5AFyUJkYbIIWZQsRhYnS5AlyVJkabIMWZYsR5YnK5AVyUpkZbJKuqpkNbI6WYOsSdYia5N1yLpkPbI+2YBsSDYiG5NNyKZkM7I52YJsSbYiW5NtyLZkO7I92YHsSHYiO5NdyK5kN7I72YPsSfYie5N9yL5kP7I/OYAcSA4iB5NDyKHkMHI4OYIcSY4iR5NjyLHkOHI8OYGcSE4iJ5NTyKnkNHI6OYOcSc4iZ5NzyLnkPHI+uYBcSC4iF5NLyKXkMnI5uYJcSa4iV5NryLXkOnI9uYHcSG4iN5NbyK3kNnI7uYPcSe4id5N7yL3kPnI/GUceIA+Sh8jD5BHyKHmMPE6eIE+Sp8jT5BnyLHmOjCfPkwnkBfIieYm8TF4hr5LXyOvkDfImeYu8Td4h75L3yPvkA/Ih+Yh8TD4hn5LPyOfkC/Il+Yp8Tb4hE8m35DvyPfmB/Eh+Ij+TX8iv5DfyO/mD/En+In+TSeQf8i/5j0xGJadSUCmpVFRqKg2VlkpHpacyUBmpTFRmKguVlcpGZadyUDmpXBRCoRRG4RRBkRRF0RRDsRRH8ZRAiZREyZRCqZRG6ZRBAcqkLMqmIOVQLuVRPhVQIRVRMSo3lYf6P/fOClKFqMJUEaooVYwqTpWgSlKlqNJUGaosVY4qT1WgKlKVqMpUFaoqVY2qTtWgalK1qNpUHaouVY+qTzWgGlKNqMZUE6op1YxqTrWgWlKtqNZUG6ot1Y5qT3WgOlKdqM5UF6or1Y3qTvWgelK9qN5UH6ov1Y/qTw2gBlKDqMHUEGooNYwaTo2gRlKjqNHUGGosNY4aT02gJlKTqMnUFGoqNY2aTs2gZlKzqNnUHGouNY+aTy2gFlKLqMXUEmoptYxaTq2gVlKrqNXUGmottY5aT22gNlKbqM3UFmortY3aTu2gdlK7qN3UHmovtY/aT8VRB6iD1CHqMHWEOkodo45TJ6iT1CnqNHWGOkudo+Kp81QCdYG6SF2iLlNXqKvUNeo6dYO6Sd2iblN3qLvUPeo+9YB6SD2iHlNPqKfUM+o59YJ6Sb2iXlNvqETqLfWOek99oD5Sn6jP1BfqK/WN+k79oH5Sv6jfVBL1h/pL/aOS0cnpFHRKOhWdmk5Dp6XT0enpDHRGOhOdmc5CZ6Wz0dnpHHROOheN0CiN0ThN0CRN0TTN0CzN0Twt0CIt0TKt0Cqt0Tpt0IA2aYu2aUg7tEt7tE8HdEhHdIzOTeeh89L56Px0AbogXYguTBehi9LF6OJ0CbokXYouTZehy9Ll6PJ0BboiXYmuTFehq9LV6Op0DbomXYuuTdeh69L16Pp0A7oh3YhuTDehm9LN6OZ0C7ol3YpuTbeh29Lt6PZ0B7oj3YnuTHehu9Ld6O50D7on3YvuTfeh+9L96P70AHogPYgeTA+hh9LD6OH0CHokPYoeTY+hx9Lj6PH0BHoiPYmeTE+hp9LT6On0DHomPYueTc+h59Lz6Pn0AnohvYheTC+hl9LL6OX0CnolvYpeTa+h19Lr6PX0BnojvYneTG+ht9Lb6O30DnonvYveTe+h99L76P10HH2APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dk6nj5PJ9AX6Iv0JfoyfYW+Sl+jr9M36Jv0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZOpN/S7+j39Af6I/2J/kx/ob/S3+jv9A/6J/2L/k0n0X/ov/Q/OhmTnEnBpGRSMamZNExaJh2TnsnAZGQyMZmZLExWJhuTncnB5GRyMQiDMhiDMwRDMhRDMwzDMhzDMwIjMhIjMwqjMhqjMwYDGJOxGJuBjMO4jMf4TMCETMTEmNxMHiYvk4/JzxRgCjKFmMJMEaYoU4wpzpRgSjKlmNJMGaYsU44pz1RgKjKVmMpMFaYqU42pztRgajK1mNpMHaYuU4+pzzRgGjKNmMZME6Yp04xpzrRgWjKtmNZMG6Yt045pz3RgOjKdmM5MF6Yr043pzvRgejK9mN5MH2bg6n5Mf2YA09waxAxmhjBDmWHMcGYEM5IZxYxmxjBjmXHMeGYCM5GZxExmpjBTmWnMdGYGM5OZxcxm5jBzmXnMfGYBs5BZxCxmljBLmWXMcmYFs5JZxaxm1jBrmXXMemYDs5HZxGxmtjBbmW3MdmYHs5PZxexm9jB7mX3MfiaOOcAcZA4xh5kjzFHmGHOcOcGcZE4xp5kzzFnmHBPPnGcSmAvMReYSc5m5wlxlrjHXmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5wyQyb5l3zHvmA/OR+cR8Zr4wX5lvzHfmB/OT+cX8ZpKYP8xf5h+TjE3GpmBTsKnYVGwaNg2bjk3HZmAzsJnYTGwWNgubjc3G5mBzsLnYXCzKoizO4izJkizN0ux/Ds/yrMiKrMzKrMqqrM7qLGABa7EWC1nIuqzL+qzPhmzIxtgYm4fNw+Zj87EF2AJsIbYQW4QtwhZji7El2BJsKbYUW4Ytw5Zjy7EV2ApsJbYSW4WtwlZjq7E12BpsLbYWW4etw9Zj67EN2AZsI7YR24RtwjZjm7Et2BZsK7YV24Ztw7Zj27Ed2A5sJ7YT24XtwnZju7E92B5sL7YX24ftw/Zj+7ED2AHsIHYQO4Qdwg5jh7Ej2BHsKHYUO4Ydw45jx7ET2AnsJHYSO4Wdwk5jp7Ez2BnsLHY2O4edy85j57ML2IXsInYxu4Rdwi5jl7Er2BXsKnYVu4Zdw65j17Eb2A3sJnYTu4Xdwm5jt7E72B3sLnYXu4fdw+5j97FxbBx7kD3IHmYPs0fZo+xx9jh7kj3JnmZPs2fZs2w8G88msAnsRfYie5m9zF5lr7LX2evsTfYme5u9zd5l77L32fvsQ/Yh+5h9zD5ln7LP2efsS/Yl+5p9zSayiew79h37gf3AfmI/sV/YL+w39hv7g/3B/mJ/sUlsEvuX/cum49JzGbiMXCYuM5eFy8r9341zBEdyFEdzDIdy2P8yy3Gczhkc4EzO4mwOcs5/OQ+Xl8vH5ecKcAW5Qlzh/3IZrixXjivPVeAqcqW40v/LlbjKXBWuLleNq8/V4BpytbjGXB2uLlePq8814BpyjbjGXBuuLdeOa8914DpynbjO/+V93H7uNHeGO8ud425zd7gf3E/uNfeG+8X95gZxg7kx3FhuHDeem8BN5CZxk//Lc7i53DxuPreAW8gt4hb/l9dwa7l13HpuA7eR28Rt/i/v4fZy27g4bge3k9vF7f4f/2emOO4Ad5A7xB3mjnBHuXjuOHeCO8md+r9mjefOcwncBe4md4u7zF3hrnLXuOvcjf/xfzrucve4+9wD7iX3invMPeGeconcc+7F//g/fYncW+4d9577wH3kPnFJ3BfuK/eN+/4//f9pT+L+cH+5f1wyPjmfgk/Jp+JT82n4tHw6Pj2fgc/IZ+Iz81n4rHw2Pjufg8/J5+IRHuUxHucJnuQpnuYZnuU5nucFXuQlXuYVXuU1XucNHvAmb/E2D3mHd3mP9/mAD/mIj/G5+Tx8Xj4fn58vwBfkC/GF+SJ8Ub4YX5wvwZfkS/Gl+TJ8Wb4cX56vwFfkK/GV+Sp8Vb4aX52vwdfka/G1+Tp8Xb4eX59vwDfkG/GN+SZ8U74Z35xvwbfkW/Gt+TZ8W74d357vwHfkO/Gd+S58V74b353vwffke/G9+T58X74f358fwA/kB/GD+SH8UH4YP5wfwY/kR/Gj+TH8WH4cP56fwE/kJ/GT+Sn8VH4aP52fwc/kZ/Gz+Tn8XH4eP59fwC/kF/GL+SX8Un4Zv5xfwa/kV/Gr+TX8Wn4dv57fwG/kN/Gb+S38Vn4bv53fwe/kd/G7+T38Xn4fv5+P4w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8fH8+f5BP4Cf5G/xF/mr/BX+Wv8df4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/m3/CJ/Fv+Hf+e/8B/5D/xn/kv/Ff+G/+d/8H/5H/xv/kk/g//l//HJxOSCymElEIqIbWQRkgrpBPSCxmEjEImIbOQRcgqZBOyCzmEnEIuARFQARNwgRBIgRJogRFYgRN4QRBEQRJkQRFUQRN0wRCAYAqWYAtQcARX8ARfCIRQiISYkFvII+QV8gn5hQJCQaGQUFgoIhQVignFhRJCSaGUUFooI5QVygnlhQpCRcEXKgtVhKpCNaG6UEOoKdQSagt1hLpCPaG+0EBoKDQSGgtNhKZCM6G50EJoKbQSWgtthLZCO6G90EHoKHQSOv8/3g8RhgrDhOHCcGGkMEoYLYwRxgrjhPHCBGGiMEmYLEwRpgrThOnCDGGmMEuYLcwR5grzhPnCAmGhsEhYLCwRlgrLhOXCCmGlsEpYLawR1grrhPXCBmGjsEnYLGwRtgrbhO3CDmGnsEvYLewR9gr7hP1CnHBAOCgcEg4LR4SjwjHhuHBCOCmcEk4LZ4SzwjkhXjgvJAgXhIvCJeGycEW4KlwTrgs3hJvCLeG2cEe4K9wT7gsPhIfCI+Gx8ER4KjwTngsvhJfCK+G18EZIFN4K74T3wgfho/BJ+Cx8Eb4K34Tvwg/hp/BL+C0kCX+Ev8I/IZmYXEwhphRTianFNGJaMZ2YXswgZhQziZnFLGJWMZuYXcwh5hRziYiIipiIi4RIipRIi4zIipzIi4IoipIoi4qoipqoi4YIRFO0RFuEoiO6oif6YiCGYiTGxNxiHjGvmE/MLxYQC4qFxMJiEbGoWEwsLpYQS4qlxNJiGbGsWE4sL1YQK4qVxMpiFbGqWE2sLtYQa4q1xNpiHbGuWE+sLzYQG4qNxMZiE7Gp2ExsLrYQW4qtxNZiG7Gt2E5sL3YQO4qdxM5iFzGt2E3sLvYQe4q9xN5iH7Gv2E/sLw4QB4qDxMHiEHGoOEwcLo4QR4qjxNHiGHGsOE4cL04QJ4qTxMniFHGqOE2cLs4QZ4qzxNniHHGuOE+cLy4QF4qLxMXiEnGpuExcLq4QV4qrxNXiGnGtuE5cL24QN4qbxM3iFnGruE3cLu4Qd4q7xN3iHnGvuE/cL8aJB8SD4iHxsHhEPCoeE4+LJ8ST4inxtHhGPCueE+PF82KCeEG8KF4SL4tXxKviNfG6eEO8Kd4Sb4t3xLviPfG++EB8KD4SH4tPxKfiM/G5+EJ8Kb4SX4tvxETxrfhOfC9+ED+Kn8TP4hfxq/hN/C7+EH+Kv8TfYpL4R/wr/hOTScmlFFJKKZWUWkojpZXSSemlDFJGKZOUWcoiZZWySdmlHFJOKZeESKiESbhESKRESbTESKzESbwkSKIkSbKkSKqkSbpkSEAyJUuyJSg5kit5ki8FUihFUkzKLeWR8kr5pPxSAamgVEgqLBWRikrFpOJSCamkVEoqLZWRykrlpPJSBamiVEmqLFWRqkrVpOpSDammVEuqLdWR6kr1pPpSA6mh1EhqLDWRmkrNpOZSC6ml1EpqLbWR2krtpPZSB6mj1EnqLHWRukrdpO5SD6mn1EvqLfWR+kr9pP7SAGmgNEgaLA2RhkrDpOHSCGmkNEoaLY2RxkrjpPHSBGmiNEmaLE2RpkrTpOnSDGmmNEuaLc2R5krzpPnSAmmhtEhaLC2RlkrLpOXSCmmltEpaLa2R1krrpPXSBmmjtEnaLG2RtkrbpO3SDmmntEvaLe2R9kr7pP1SnHRAOigdkg5LR6Sj0jHpuHRCOimdkk5LZ6Sz0jkpXjovJUgXpIvSJemydEW6Kl2Trks3pJvSLem2dEe6K92T7ksPpIfSI+mx9ER6Kj2TnksvpJfSK+m19EZKlN5K76T30gfpo/RJ+ix9kb5K36Tv0g/pp/RL+i0lSX+kv9I/KZmcXE4hp5RTyanlNHJaOZ2cXs4gZ5QzyZnlLHJWOZucXc4h55RzyYiMypiMy4RMypRMy4zMypzMy4IsypIsy4qsypqsy4YMZFO2ZFuGsiO7sif7ciCHciTH5NxyHjmvnE/OLxeQC8qF5MJyEbmoXEwuLpeQS8ql5NJyGbmsXE4uL1eQK8qV5MpyFbmqXE2uLteQa8q15NpyHbmuXE+uLzeQG8qN5MZyE7mp3ExuLreQW8qt5NZyG7mt3E5uL3eQO8qd5M5yF7mr3E3uLveQe8q95N5yH7mv3E/uLw+QB8qD5MHyEHmoPEweLo+QR8qj5NHyGHmsPE4eL0+QJ8qT5MnyFHmqPE2eLs+QZ8qz5NnyHHmuPE+eLy+QF8qL5MXyEnmpvExeLq+QV8qr5NXyGnmtvE5eL2+QN8qb5M3yFnmrvE3eLu+Qd8q75N3yHnmvvE/eL8fJB+SD8iH5sHxEPiofk4/LJ+ST8in5tHxGPiufk+Pl83KCfOH/1ZvX8hs5UX4rv5Pfyx/kj/In+bP8Rf4qf5O/yz/kn/Iv+becJP+R/8r/5GRKciWFklJJpaRW0ihplXRKeiWDklHJpGRWsihZlWxKdiWHklPJpSAKqmAKrhAKqVAKrTAKq3AKrwiKqEiKrCiKqmiKrhgKUEzFUmwFKo7iKp7iK4ESKpESU3IreZS8Sj4lv1JAKagUUgorRZSiSjGluFJCKamUUkorZZSySjmlvFJBqahUUiorVZSqSjWlulJDqanUUmordZS6Sj2lvtJAaag0UhorTZSmSjOludJCaam0UlorbZS2SjulvdJB6ah0UjorXZSuSjelu9JD6an0UnorfZS+Sj+lvzJAGagMUgYrQ5ShyjBluDJCGamMUkYrY5SxyjhlvDJBmahMUiYrU5SpyjRlujJDmanMUmYrc5S5yjxlvrJAWagsUhYrS5SlyjJlubJCWamsUlYra5S1yjplvbJB2ahsUjYrW5StyjZlu7JD2ansUnYre5S9yj5lvxKnHFAOKoeUw8oR5ahyTDmunFBOKqeU08oZ5axyTolXzisJygXlonJJuaxcUa4q15Tryg3lpnJLua3cUe4q95T7ygPlofJIeaw8UZ4qz5TnygvlpfJKea28URKVt8o75b3yQfmofFI+K1+Ur8o35bvyQ/mp/FJ+K0nKH+Wv8k9JpiZXU6gp1VRqajWNmlZNp6ZXM6gZ1UxqZjWLmlXNpmZXc6g51VwqoqIqpuIqoZIqpdIqo7Iqp/KqoIqqpMqqoqqqpuqqoQLVVC3VVqHqqK7qqb4aqKEaqTE1t5pHzavmU/OrBdSCaiG1sFpELaoWU4urJdSSaim1tFpGLauWU8urFdSKaiW1slpFrapWU6urNdSaai21tlpHravWU+urDdSGaiO1sdpEbao2U5urLdSWaiu1tdpGbau2U9urHdSOaie1s9pF7ap2U7urPdSeai+1t9pH7av2U/urA9SB6iB1sDpEHaoOU4erI9SR6ih1tDpGHauOU8erE9SJ6iR1sjpFnapOU6erM9SZ6ix1tjpHnavOU+erC9SF6iJ1sbpEXaouU5erK9SV6ip1tbpGXauuU9erG9SN6iZ1s7pF3apuU7erO9Sd6i51t7pH3avuU/erceoB9aB6SD2sHlGPqsfU4+oJ9aR6Sj2tnlHPqufUePW8mqBeUC+ql9TL6hX1qnpNva7eUG+qt9Tb6h31rnpPva8+UB+qj9TH6hP1qfpMfa6+UF+qr9TX6hs1UX2rvlPfqx/Uj+on9bP6Rf2qflO/qz/Un+ov9beapP5R/6r/1GRaci2FllJLpaXW0mhptXRaei2DllHLpGXWsmhZtWxadi2HllPLpSEaqmEarhEaqVEarTEaq3EarwmaqEmarCmaqmmarhka0EzN0mwNao7map7ma4EWapEW03JrebS8Wj4tv1ZAK6gV0gprRbSiWjGtuFZCK6mV0kprZbSyWjmtvFZBq6hV0iprVbSqWjWtulZDq6nV0mprdbS6Wj2tvtZAa6g10hprTbSmWjOtudZCa6m10lprbbS2WjutvdZB66h10jprXbSuWjetu9ZD66n10nprfbS+Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0iZrU7Sp2jRtujZDm6nN0mZrc7S52jxtvrZAW6gt0hZrS7Sl2jJtubZCW6mt0lZra7S12jptvbZB26ht0jZrW7St2jZtu7ZD26nt0nZre7S92j5tvxanHdAOaoe0w9oR7ah2TDuundBOaqe009oZ7ax2TovXzmsJ2gXtonZJu6xd0a5q17Tr2g3tpnZLu63d0e5q97T72gPtofZIe6w90Z5qz7Tn2gvtpfZKe6290RK1t9o77b32QfuofdI+a1+0r9o37bv2Q/up/dJ+a0naH+2v9k9LpifXU+gp9VR6aj2NnlZPp6fXM+gZ9Ux6Zj2LnlXPpmfXc+g59Vw6oqM6puM6oZM6pdM6o7M6p/O6oIu6pMu6oqu6puu6oQPd1C3d1qHu6K7u6b4e6KEe6TE9t55Hz6vn0/PrBfSCeiG9sF5EL6oX04vrJfSSeim9tF5GL6uX08vrFfSKeiW9sl5Fr6pX06vrNfSaei29tl5Hr6vX0+vrDfSGeiO9sd5Eb6o305vrLfSWeiu9td5Gb6u309vrHfSOeie9s95F76p307vrPfSeei+9t95H76v30/vrA/SB+iB9sD5EH6oP04frI/SR+ih9tD5GH6uP08frE/SJ+iR9sj5Fn6pP06frM/SZ+ix9tj5Hn6vP0+frC/SF+iJ9sb5EX6ov05frK/SV+ip9tb5GX6uv09frG/SN+iZ9s75F36pv07frO/Sd+i59t75H36vv0/frcfoB/aB+SD+sH9GP6sf04/oJ/aR+Sj+tn9HP6uf0eP28nqBf0C/ql/TL+hX9qn5Nv67f0G/qt/Tb+h39rn5Pv68/0B/qj/TH+hP9qf5Mf66/0F/qr/TX+hs9UX+rv9Pf6x/0j/on/bP+Rf+qf9O/6z/0n/ov/beepP/R/+r/9GRGciOFkdJIZaQ20hhpjXRGeiODkdHIZGQ2shhZjWxGdiOHkdPIZSAGamAGbhAGaVAGbTAGa3AGbwiGaEiGbCiGamiGbhgGMEzDMmwDGo7hGp7hG4ERGpERM3IbeYy8Rj4jv1HAKGgUMgobRYyiRjGjuFHCKGmUMkobZYyyRjmjvFHBqGhUMiobVYyqRjWjulHDqGnUMmobdYy6Rj2jvtHAaGg0MhobTYymRjOjudHCaGm0MlobbYy2RjujvdHB6Gh0MjobXYyuRjeju9HD6Gn0MnobfYy+Rj+jvzHAGGgMMgYbQ4yhxrDkqYwRxkhjlDHaGGOMNcYZ440JxkRjkjHZmGJMNaYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ+40444Bx0DhkHDaOGEeNY8Zx44Rx0jhlnDbOGGeNc0a8cd5IMC4YF41LxmXjinHVuGZcN24YN41bxm3jjnHXuGfcNx4YD41HxmPjifHUeGY8N14YL41XxmvjjZFovDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx20gy/hh/jX9GMpAcpAApQSqQGqQBaUE6kB5kABlBJpAZZAFZQTaQHeQAOUEugAAUYAAHBCABBWjAABZwgAcCEIEEZKAAFWhABwYAwAQWsAEEDnCBB3wQgBBEIAZygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoMaoCaoBWqDOqAuqAfqgwagIWgEGoMmoCloBpqDFqAlaAVagzagLWgH2oMOoCPoBDqDLqAr6Aa6gx6gJ+gFeoM+oC/oB/qDAWAgGAQGgyFgKBgGhoMRYCQYBUaDMWAsGAfGgwlgIpgEJoMpYCqYBqaDGWAmmAVmgzlgLpgH5oMFYCFYBBaDJWApWAaWgxVgJVgFVoM1YC1YB9aDDWAj2AQ2gy1gK9gGtoMdYCfYBXaDPWAv2Af2gzhwABwEh8BhcAQcBcfAcXACnASnwGlwBpwF50A8OA8SwAVwEVwCl8EVcBVcA9fBDXAT3AK3wR1wF9wD98ED8BA8Ao/BE/AUPAPPwQvwErwCr8EbkAjegnfgPfgAPoJP4DP4Ar6Cb+A7+AF+gl/gN0gCf8Bf8A8kM5ObKcyUZioztZnGTGumM9ObGcyMZiYzs5nFzGpmM7ObOcycZi4TMVETM3GTMEmTMmmTMVmTM3lTMEVTMmVTMVVTM3XTMIFpmpZpm9B0TNf0TN8MzNCMzJiZ28xj5jXzmfnNAmZBs5BZ2CxiFjWLmcXNEmZJs5RZ2ixjljXLmeXNCmZFs5JZ2axiVjWrmdXNGmZNs5ZZ26xj1jXrmfXNBmZDs5HZ2GxiNjWbmc3NFmZLs5XZ2mxjtjXbme3NDmZHs5PZ2exidjW7md3NHmZPs5fZ2+xj9jX7mf3NAeZAc5A52BxiDjWHmcPNEeZIc5Q52hxjjjXHmePNCeZEc5I52ZxiTjWnmdPNGeZMc5Y525xjzjXnmfPNBeZCc5G52FxiLjWXmcvNFeZKc5W52lxjrjXXmevNDeZGc5O52dxibjW3mdvNHeZOc5e529xj7jX3mfvNOPOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXNmvHneTDAvmBfNS+Zl84p51bxmXjdvmDfNW+Zt845517xn3jcfmA/NR+Zj84n51HxmPjdfmC/NV+Zr842ZaL4135nvzQ/mR/OT+dn8Yn41v5nfzR/mT/OX+dtMMv+Yf81/ZjIruZXCSmmlslJbaay0VjorvZXBymhlsjJbWaysVjYru5XDymnlshALtTALtwiLtCiLthiLtTiLtwRLtCRLthRLtTRLtwwLWKZlWbYFLcf6//f/xlYTq4nVzGputbDypSiUorXV2mprtbXaW+2tjlYnq7PVxepqdbO6WT2snlZPq7fVx+pr9bP6WwOsgdYga7A1xBpiDbOGWSOsEdYoa5Q1xhpjjbPGWROsCdYka5I1xZpiTbOmWTOsGdYsa5Y1x5pjzbPmWQusBdYia5G1xFpiLbOWWSusFdYqa5W1xlpjrbPWWRusDdYma5O1xdpibbO2WTusHdYua5e1x9pj7bP2WXFWnHXQOmgdtg5bR62j1nHruHXSOmmdtk5bZ62zVrwVbyVYCdZF66J12bpsXbWuWtet69ZN66Z127pt3bXuWvet+9ZD66H12HpsPbWeWc+tF9ZL65X12npjJVpvrXfWe+uD9dH6ZH22vlhfrW/Wd+uH9dP6Zf22kqw/1l/rn/X/5f6iamu2bhs2sE3bsm0b2o7t2p7t24Ed2pEds3Pbeey8dj47v13ALmgXsgvbReyidjG7uF3CLmmXskvbZeyydjm7vF3BrmhXsivbVeyqdjW7ul3DrmnXsmvbdey6dj27vt3Abmg3shvbTeymdjO7ud3Cbmm3slvbbey2dju7vd3B7mh3sjvbXeyudje7u93D7mn3snvbfey+dj+7vz3AHmgPsgfbQ+yh9jB7uD3CHmmPskfbY+yx9jh7vD3BnmhPsifbU+yp9jR7uj3DnmnPsmfbc+y59jx7vr3AXmgvshfbS+yl9jJ7ub3CXmmvslfba+y19jp7vb3B3mhvsjfbW+yt9jZ7u73D3mnvsnfbe+y99j57vx1nH7AP2ofsw/YR+6h9zD5un7BP2qfs0/YZ+6x9zo63z9sJ9gX7on3Jvmxfsa/a1+zr9g37pn3Lvm3fse/a9+z79gP7of3Ifmw/sZ/az+zn9gv7pf3Kfm2/sRPtt/Y7+739wf5of7I/21/sr/Y3+7v9w/5p/7J/20n2H/uv/c9OBpPDFDAlTAVTwzQwLUwH08MMMCPMBDPDLDArzAazwxwwJ8wFEYhCDOKQgCSkIA0ZyEIO8lCAIpSgDBWoQg3q0IAAmtCCNoTQgS70oA8DGMIIxmBumAfmhflgflgAFoSFYGFYBBaFxWBxWAKWhKVgaVgGloXlYHlYAVaElWBlWAVWhdVgdVgD1oS1YG1YB9aF9WB92AA2hI1gY9gENoXNYHPYAraErWBr2Aa2he1ge9gBdoSdYGfYBXaF3WB32AP2hL1gb9gH9oX9YH84AA6Eg+BgOAQOhcPgcDgCjoSj4Gg4Bo6F4+B4OAFOhJPgZDgFToXT4HQ4A86Es+BsOAfOhfPgfLgALoSL4GK4BC6Fy+ByuAKuhKvgargGroXr4Hq4AW6Em+BmuAVuhdvgdrgD7oS74G64B+6F++B+GAcPwIPwEDwMj8Cj8Bg8Dk/Ak/AUPA3PwLPwHIyH52ECvAAvwkvwMrwCr8Jr8Dq8AW/CW/A2vAPvwnvwPnwAH8JH8DF8Ap/CZ/A5fAFfwlfwNXwDE+Fb+A6+hx/gR/gJfoZf4Ff4DX6HP+BP+Av+hknwD/wL/8FkTnInhZPSSeWkdtI4aZ10Tnong5PRyeRkdrI4WZ1sTnYnh5PTyeUgDupgDu4QDulQDu0wDutwDu8IjuhIjuwojupoju4YDnBMx3JsBzqO4zqe4zuBEzqRE3NyO3mcvE4+J79TwCnoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7pTw6np1HJqO3Wcuk49p77TwGnoNHIaO02cpk4zp7nTwmnptHJaO22ctk47p73TwenodHI6O12crk43p7vTw+np9HJ6O32cvk4/p78zwBnoDHIGO0Ococ4wZ7gzwhnpjHJGO2Ocsc44Z7wzwZnoTHImO1Ocqc40Z7ozw5npzHJmO3Ocuc48Z76zwFnoLHIWO0ucpc4yZ7mzwlnprHJWO2uctc46Z72zwdnobHI2O1ucrc42Z7uzw9np7HJ2O3ucvc4+Z78T5xxwDjqHnMPOEeeoc8w57pxwTjqnnNPOGeesc86Jd847Cc4F56JzybnsXHGuOtec684N56Zzy7nt3HHuOvec+84D56HzyHnsPHGeOs+c584L56XzynntvHESnbfOO+e988H56HxyPjtfnK/ON+e788P56fxyfjtJzh/nr/PPSeYmd1O4Kd1Ubmo3jZvWTeemdzO4Gd1MbmY3i5vVzeZmd3O4Od1cLuKiLubiLuGSLuXSLuOyLufyruCKruTKruKqrubqruEC13Qt13ah67iu67m+G7ihG7kxN7ebx83r5nPzuwXcgm4ht7BbxC3qFnOLuyXckm4pt7Rbxi3rlnPLuxXcim4lt7Jbxa3qVnOruzXcmm4tt7Zbx63r1nPruw3chm4jt7HbxG3qNnObuy3clm4rt7Xbxm3rtnPbux3cjm4nt7Pbxe3qdnO7uz3cnm4vt7fbx+3r9nP7uwPcge4gd7A7xB3qDnOHuyPcke4od7Q7xh3rjnPHuxPcie4kd7I7xZ3qTnOnuzPcme4sd7Y7x53rznPnuwvche4id7G7xF3qLnOXuyvcle4qd7W7xl3rrnPXuxvcje4md7O7xd3qbnO3uzvcne4ud7e7x93r7nP3u3HuAfege8g97B5xj7rH3OPuCfeke8o97Z5xz7rn3Hj3vJvgXnAvupfcy+4V96p7zb3u3nBvurfc2+4d9657z73vPnAfuo/cx+4T96n7zH3uvnBfuq/c1+4bN9F9675z37sf3I/uJ/ez+8X96n5zv7s/3J/uL/e3m+T+cf+6/9xkXnIvhZfSS+Wl9tJ4ab10Xnovg5fRy+Rl9rJ4Wb1sXnYvh5fTy+UhHuphHu4RHulRHu0xHutxHu8JnuhJnuwpnuppnu4ZHvBMz/JsD3qO53qe53uBF3qRF/Nye3m8vF4+L79XwCvoFfIKe0W8ol4xr7hXwivplfJKe2W8sl45r7xXwavoVfIqe1W8ql41r7pXw6vp1fJqe3W8ul49r77XwGvoNfIae028pl4zr7nXwmvptfJae228tl47r73XwevodfI6e128rl43r7vXw+vp9fJ6e328vl4/r783wBvoDfIGe0O8od4wb7g3whvpjfJGe2O8sd44b7w3wZvoTfIme1O8qd40b7o3w5vpzfJme3O8ud48b763wFvoLfIWe0u8pd4yb7m3wlvprfJWe2u8td46b723wdvobfI2e1u8rd42b7u3w9vp7fJ2e3u8vd4+b78X5x3wDnqHvMPeEe+od8w77p3wTnqnvNPeGe+sd86L9857Cd4F76J3ybvsXfGuete8694N76Z3y7vt3fHueve8+94D76H3yHvsPfGees+8594L76X3ynvtvfESvbfeO++998H76H3yPntfvK/eN++798P76f3yfntJ3h/vr/fPS+Yn91P4Kf1Ufmo/jZ/WT+en9zP4Gf1MfmY/i5/Vz+Zn93P4Of1cPuKjPubjPuGTPuXTPuOzPufzvuCLvuTLvuKrvubrvuED3/Qt3/ah7/iu7/m+H/ihH/kxP7efx8/r5/Pz+wX8gn4hv7BfxC/qF/OL+yX8kn4pv7Rfxi/rl/PL+xX8in4lv7Jfxa/qV/Or+zX8mn4tv7Zfx6/r1/Pr+w38hn4jv7HfxG/qN/Ob+y38ln4rv7Xfxm/rt/Pb+x38jn4nv7Pfxe/qd/O7+z38nn4vv7ffx+/r9/P7+wP8gf4gf7A/xB/qD/OH+yP8kf4of7Q/xh/rj/PH+xP8if4kf7I/xZ/qT/On+zP8mf4sf7Y/x5/rz/Pn+wv8hf4if7G/xF/qL/OX+yv8lf4qf7W/xl/rr/PX+xv8jf4mf7O/xd/qb/O3+zv8nf4uf7e/x9/r7/P3+3H+Af+gf8g/7B/xj/rH/OP+Cf+kf8o/7Z/xz/rn/Hj/vJ/gX/Av+pf8y/4V/6p/zb/u3/Bv+rf82/4d/65/z7/vP/Af+o/8x/4T/6n/zH/uv/Bf+q/81/4bP9F/67/z3/sf/I/+J/+z/8X/6n/zv/s//J/+L/+3n+T/8f/6//xkQfIgRZAySBWkDtIEaYN0QfogQ5AxyBRkDrIEWYNsQfYgR5AzyBUgARpgAR4QARlQAR0wARtwAR8IgRhIgRwogRpogR4YAQjMwArsAAZO4AZe4AdBEAZREAtyB3mCvEG+IH9QICgYFAoKB0WCokGxoHhQIigZlApKB2WCskG5oHxQIagYVAoqB1WCqkG1oHpQI6gZ1ApqB3WCukG9oH7QIGgYNAoaB02CpkGzoHnQImgZtApaB22CtkG7oH3QIegYdAo6B12CrkG3oHvQI+gZ9Ap6B32CvkG/oH8wIBgYDAoGB0OCocGwYHgwIhgZjApGB2OCscG4YHwwIZgYTAomB1OCqcG0YHowI5gZzApmB3OCucG8YH6wIFgYLAoWB0uCpcGyYHmwIlgZrApWB2uCtcG6YH2wIdgYbAo2B1uCrcG2YHuwI9gZ7Ap2B3uCvcG+YH8QFxwIDgaHgsPBkeBocCw4HpwITgangtPBmeBscC6ID84HCcGF4GJwKbgcXAmuBteC68GN4GZwK7gd3AnuBveC+8GD4GHwKHgcPAmeBs+C58GL4GXwKngdvAkSg7fBu+B98CH4GHwKPgdfgq/Bt+B78CP4GfwKfgdJwZ/gb/AvSBYmD1OEKcNUYeowTZg2TBemDzOEGcNMYeYwS5g1zBZmD3OEOcNcIRKiIRbiIRGSIZWbDpmQDbmQD4VQDKVQDpVQDbVQD40QhGZohXYIQyd0Qy/0wyAMwyiMhbnDPGHeMF+YPywQFgwLhYXDImHRsFhYPCwRlgxLhaXDMmHZsFxYPqwQVgwrhZXDKmHVsFpYPawR1gxrhbXDOmHdsF5YP2wQNgwbhY3DJmHTsFnYPGwRtgxbha3DNmHbsF3YPuwQdgw7hZ3DLmHXsFvYPewR9gx7hb3DPmHfsF/YPxwQDgwHhYPDIeHQcFg4PBwRjgxHhaPDMeHYcFw4PpwQTgwnhZPDKeHUcFo4PZwRzgxnhbPDOeHccF44P1wQLgwXhYvDJeHScFm4PFwRrgxXhavDNeHacF24PtwQbgw3hZvDLeHWcFu4PdwR7gx3hbvDPeHecF+4P4wLD4QHw0Ph4fBIeDQ8Fh4PT4Qnw1Ph6fBMeDY8F8aH58OE8EJ4MbwUXg6vhFfDa+H18EZ4M7wV3g7vhHfDe+H98EH4MHwUPg6fhE/DZ+Hz8EX4MnwVvg7fhInh2/Bd+D78EH4MP4Wfwy/h1/Bb+D38Ef4Mf4W/w6TwT/g3/Bcmi5JHKaKUUaoodZQmShuli9JHGaKMUaYoc5Qlyhpli7JHOaKcUa4IidAIi/CIiMiIiuiIidiIi/hIiMRIiuRIidRIi/TIiEBkRlZkRzByIjfyIj8KojCKoliUO8oT5Y3yRfmjAlHBqFBUOCoSFY2KRcWjElHJqFRUOioTlY3KReWjClHFqFJUOaoSVY2qRdWjGlHNqFZUO6oT1Y3qRfWjBlHDqFHUOGoSNY2aRc2jFlHLqFXUOmoTtY3aRe2jDlHHqFPUOeoSdY26Rd2jHlHPqFfUO+oT9Y36Rf2jAdHAaFA0OBoSDY2GRcOjEdHIaFQ0OhoTjY3GReOjCdHEaFI0OZoSTY2mRdOjGdHMaFY0O5oTzY3mRfOjBdHCaFG0OFoSLY2WRcujFdHKaFW0OloTrY3WReujDdHGaFO0OdoSbY22RdujHdHOaFe0O9oT7Y32RfujuOhAdDA6FB2OjkRHo2PR8ehEdDI6FZ2OzkRno3NRfHQ+SoguRBejS9Hl6Ep0NboWXY9uRDejW9Ht6E50N7oX3Y8eRA+jR9Hj6En0NHoWPY9eRC+jV9Hr6E2UGL2N3kXvow/Rx+hT9Dn6En2NvkXfox/Rz+hX9DtKiv5Ef6N/UbJY8liKWMpYqljqWJpY2li6WPpYhljGWKZY5liWWNZYtlj2WI5YzliuGBJDY1gMjxExMkbF6BgTY2NcjI8JMTEmxeSYElNjWkyPGTEQM2NWzI7BmBNzY17MjwWxMBbFYrHcsTyxvLF8sfyxArGCsUKxwrEisaKxYrHisRKxkrFSsdKxMrGysXKx8rEKsYqxSrHKsSqxqrFqseqxGrGasVqx2rE6sbqxerH6sQaxhrFG/wcB8ACY9RIAAHxx2bZt/G1bd/dl2zaXbdt2L9u23bJt7f2wRlhjrAnWFGuGNcdaYC2xVlhrrA3WFmuHtcc6YB2xTlhnrAvWFeuGdcd6YD2xXlhvrA/WF+uH9ccGYAOxQdhgLAEbgg3FhmHDsRHYSGwUNhobg43FxmHjsQnYRGwSNhmbgk3FpmHTsRnYTGwWNhubg83F5mHzsQXYQmwRthhbgi3FlmHLsRXYSmwVthpbg63F1mHrsQ3YRmwTthnbgm3F/sO2YduxHdhObBe2G9uD7cX2YfuxA9hB7BB2GDuCHcWOYcexE9hJ7BR2GjuDncXOYeexC9hF7BJ2GbuCXcWuYdexG9hN7BZ2G7uD3cXuYfexB9hDLBF7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmBfsW/Yd+wH9hP7hf3G/mB/sX9YEhaHJ8OT4ynwlHgqPDUej6fB0+Lp8PR4BjwjngnPjGfBs+LZ8Ox4DjwnngvPjefB8+L58Px4AbwgXggvjBfBi+LF8OJ4CbwkXgovjZfBy+Ll8PJ4BbwiXgmvjFfBq+LV8Op4DbwmjuE4TuAkTuE0zuAszuE8LuAiLuEyruAqruE6buAmbuE27uAu7uE+HuAhHuEAhzjCY3gtvDZeB6+L18Pr4w3whngjvDHeBG+KN8Ob4y3wlngrvDXeBm+Lt8Pb4x3wjngnvDPeBe+Kd8O74z3wnngvvDfeB++L98P74wPwgfggfDCegA/Bh+LD8OH4CHwkPgofjY/Bx+Lj8PH4BHwiPgmfjE/Bp+LT8On4DHwmPgufjc/B5+Lz8Pn4AnwhvghfjC/Bl+LL8OX4Cnwlvgpfja/B1+Lr8PX4BnwjvgnfjG/Bt+L/4dvw7fgOfCe+C9+N78H34vvw/fgB/CB+CD+MH8GP4sfw4/gJ/CR+Cj+Nn8HP4ufw8/gF/CJ+Cb+MX8Gv4tfw6/gN/CZ+C7+N38Hv4vfw+/gD/CGeiD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8K/4N/w7/gP/if/Cf+N/8L/4PzwJjyOSEcmJFERKIhWRmogn0hBpiXREeiIDkZHIRGQmshBZiWxEdiIHkZPIReQm8hB5iXxEfqIAUZAoRBQmihBFiWJEcaIEUZIoRZQmyhBliXJEeaICUZGoRFQmqhBViWpEdaIGUZPACJwgCJKgCJpgCJbgCJ4QCJGQCJlQCJXQCJ0wCJOwCJtwCJfwCJ8IiJCICEBAAhExohZRm6hD1CXqEfWJBkRDohHRmGhCNCWaEc2JFkRLohXRmmhDtCXaEe2JDkRHohPRmehCdCW6Ed2JHkRPohfRm+hD9CX6Ef2JAcRAYhAxmEgghhBDiWHEcGIEMZIYRYwmxhBjiXHEeGICMZGYREwmphBTiWnEdGIGMZOYRcwm5hBziXnEfGIBsZBYRCwmlhBLiWXEcmIFsZJYRawm1hBriXXEemIDsZHYRGwmthBbif+IbcR2Ygexk9hF7Cb2EHuJfcR+4gBxkDhEHCaOEEeJY8Rx4gRxkjhFnCbOEGeJc8R54gJxkbhEXCauEFeJa8R14gZxk7hF3CbuEHeJe8R94gHxkEgkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS/EV+Ib8Z34QfwkfhG/iT/EX+IfkUTEkcnI5GQKMiWZikxNxpNpyLRkOjI9mYHMSGYiM5NZyKxkNjI7mYPMSeYic5N5yLxkPjI/WYAsSBYiC5NFyKJkMbI4WYIsSZYiS5NlyLJkObI8WYGsSFYiK5NVyKpkNbI6WYOsSWIkThIkSVIkTTIkS3IkTwqkSEqkTCqkSmqkThqkSVqkTTqkS3qkTwZkSEYkICGJyBhZi6xN1iHrkvXI+mQDsiHZiGxMNiGbks3I5mQLsiXZimxNtiHbku3I9mQHsiPZiexMdiG7kt3I7mQPsifZi+xN9iH7kv3I/uQAciA5iBxMJpBDyKHkMHI4OYIcSY4iR5NjyLHkOHI8OYGcSE4iJ5NTyKnkNHI6OYOcSc4iZ5NzyLnkPHI+uYBcSC4iF5NLyKXkMnI5uYJcSa4iV5NryLXkOnI9uYHcSG4iN5NbyK3kf+Q2cju5g9xJ7iJ3k3vIveQ+cj95gDxIHiIPk0fIo+Qx8jh5gjxJniJPk2fIs+Q58jx5gbxIXiIvk1fIq+Q18jp5g7xJ3iJvk3fIu+Q98j75gHxIJpKPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kH/Iv+Y9MIuOoZFRyKgWVkkpFpabiqTRUWiodlZ7KQGWkMlGZqSxUVioblZ3KQeWkclG5qTxUXioflZ8qQBWkClGFqSJUUaoYVZwqQZWkSlGlqTJUWaocVZ6qQFWkKlGVqSpUVaoaVZ2qQdWkMAqnCIqkKIqmGIqlOIqnBEqkJEqmFEqlNEqnDMqkLMqmHMqlPMqnAiqkIgpQkEJUjKpF1abqUHWpelR9qgHVkGpENaaaUE2pZlRzqgXVkmpFtabaUG2pdlR7qgPVkepEdaa6UF2pblR3qgfVk+pF9ab6UH2pflR/agA1kBpEDaYSqCHUUGoYNZwaQY2kRlGjqTHUWGocNZ6aQE2kJlGTqSnUVGoaNZ2aQc2kZlGzqTnUXGoeNZ9aQC2kFlGLqSXUUmoZtZxaQa2kVlGrqTXUWmodtZ7aQG2kNlGbqS3UVuo/ahu1ndpB7aR2UbupPdReah+1nzpAHaQOUYepI9RR6hh1nDpBnaROUaepM9RZ6hx1nrpAXaQuUZepK9RV6hp1nbpB3aRuUbepO9Rd6h51n3pAPaQSqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R72nPlAfqU/UZ+oL9ZX6Rn2nflA/qV/Ub+oP9Zf6RyVRcXQyOjmdgk5Jp6JT0/F0GjotnY5OT2egM9KZ6Mx0FjornY3OTuegc9K56Nx0HjovnY/OTxegC9KF6MJ0EbooXYwuTpegS9Kl6NJ0GbosXY4uT1egK9KV6Mp0FboqXY2uTtega9IYjdMETdIUTdMMzdIczdMCLdISLdMKrdIardMGbdIWbdMO7dIe7dMBHdIRDWhIIzpG16Jr03XounQ9uj7dgG5IN6Ib003opnQzujndgm5Jt6Jb023otnQ7uj3dge5Id6I7013ornQ3ujvdg+5J96J7033ovnQ/uj89gB5ID6IH0wn0EHooPYweTo+gR9Kj6NH0GHosPY4eT0+gJ9KT6Mn0FHoqPY2eTs+gZ9Kz6Nn0HHouPY+eTy+gF9KL6MX0EnopvYxeTq+gV9Kr6NX0GnotvY5eT2+gN9Kb6M30Fnor/R+9jd5O76B30rvo3fQeei+9j95PH6AP0ofow/QR+ih9jD5On6BP0qfo0/QZ+ix9jj5PX6Av0pfoy/QV+ip9jb5O36Bv0rfo2/Qd+i59j75PP6Af0on0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZ+S7+j39Mf6I/0J/oz/YX+Sn+jv9M/6J/0L/o3/Yf+S/+jk+g4JhmTnEnBpGRSMamZeCYNk5ZJx6RnMjAZmUxMZiYLk5XJxmRncjA5mVxMbiYPk5fJx+RnCjAFmUJMYaYIU5QpxhRnSjAlmVJMaaYMU5Ypx5RnKjAVmUpMZaYKU5WpxlRnajA1GYzBGYIhGYqhGYZhGY7hGYERGYmRGYVRGY3RGYMxGYuxGYdxGY/xmYAJmYgBDGQQE2NqMbWZOkxdph5Tn2nANGQaMY2ZJkxTphnTnGnBtGRaMa2ZNkxbph3TnunAdGQ6MZ2ZLkxXphvTnenB9GR6Mb2ZPkxfph/TnxnADGQGMYOZBGYIM5QZxgxnRjAjmVHMaGYMM5YZx4xnJjATmUnMZGYKM5WZxkxnZjAzmVnMbGYOM5eZx8xnFjALmUXMYmYJs5RZxixnVjArmVXMamYNs5ZZx6xnNjAbmU3MZmYLs5X5j9nGbGd2MDuZXcxuZg+zl9nH7GcOMAeZQ8xh5ghzlDnGHGdOMCeZU8xp5gxzljnHnGcuMBeZS8xl5gpzlbnGXGduMDeZW8xt5g5zl7nH3GceMA+ZROYR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wnxlvjHfmR/MT+YX85v5w/xl/jFJTBybjE3OpmBTsqnY1Gw8m4ZNy6Zj07MZ2IxsJjYzm4XNymZjs7M52JxsLjY3m4fNy+Zj87MF2IJsIbYwW4QtyhZji7Ml2JJsKbY0W4Yty5Zjy7MV2IpsJbYyW4WtylZjq7M12JosxuIswZIsxdIsw7Isx/KswIqsxMqswqqsxuqswZqsxdqsw7qsx/pswIZsxAIWsoiNsbXY2mwdti5bj63PNmAbso3YxmwTtinbjG3OtmBbsq3Y1mwbti3bjm3PdmA7sp3YzmwXtivbje3O9mB7sr3Y3mwfti/bj+3PDmAHsoPYwWwCO4Qdyg5jh7Mj2JHsKHY0O4Ydy45jx7MT2InsJHYyO4Wdyk5jp7Mz2JnsLHY2O4edy85j57ML2IXsInYxu4Rdyi5jl7Mr2JXsKnY1u4Zdy65j17Mb2I3sJnYzu4Xdyv7HbmO3szvYnewudje7h93L7mP3swfYg+wh9jB7hD3KHmOPsyfYk+wp9jR7hj3LnmPPsxfYi+wl9jJ7hb3KXmOvszfYm+wt9jZ7h73L3mPvsw/Yh2wi+4h9zD5hn7LP2OfsC/Yl+4p9zb5h37Lv2PfsB/Yj+4n9zH5hv7Lf2O/sD/Yn+4v9zf5h/7L/2CQ2jkvGJedScCm5VFxqLp5Lw6Xl0nHpuQxcRi4Tl5nLwmXlsnHZuRxcTi4Xl5vLw+Xl8nH5uQJcQa4QV5grwhXlinHFuRJcSa4UV5orw5XlynHluQpcRa4SV5mrwlXlqnHVuRpcTQ7jcI7gSI7iaI7hWI7jeE7gRE7iZE7hVE7jdM7gTM7ibM7hXM7jfC7gQi7iAAc5xMW4Wlxtrg5Xl6vH1ecacA25RlxjrgnXlGvGNedacC25Vlxrrg3XlmvHtec6cB25TlxnrgvXlevGded6cD25Xlxvrg/Xl+vH9ecGcAO5QdxgLoEbwg3lhnHDuRHcSG4UN5obw43lxnHjuQncRG4SN5mbwk3lpnHTuRncTG4WN5ubw83l5nHzuQXcQm4Rt5hbwi3llnHLuRXcSm4Vt5pbw63l1nHruQ3cRm4Tt5nbwm3l/uO2cdu5HdxObhe3m9vD7eX2cfu5A9xB7hB3mDvCHeWOcce5E9xJ7hR3mjvDneXOcee5C9xF7hJ3mbvCXeWucde5G9xN7hZ3m7vD3eXucfe5B9xDLpF7xD3mnnBPuWfcc+4F95J7xb3m3nBvuXfce+4D95H7xH3mvnBfuW/cd+4H95P7xf3m/nB/uX9cEhfHJ+OT8yn4lHwqPjUfz6fh0/Lp+PR8Bj4jn4nPzGfhs/LZ+Ox8Dj4nn4vPzefh8/L5+Px8Ab4gX4gvzBfhi/LF+OJ8Cb4kX4ovzZfhy/Ll+PJ8Bb4iX4mvzFfhq/LV+Op8Db4mj/E4T/AkT/E0z/Asz/E8L/AiL/Eyr/Aqr/E6b/Amb/E27/Au7/E+H/AhH/GAhzziY3wtvjZfh6/L1+Pr8w34hnwjvjHfhG/KN+Ob8y34lnwrvjXfhm/Lt+Pb8x34jnwnvjPfhe/Kd+O78z34nnwvvjffh+/L9+P78wP4gfwgfjCfwA/hh/LD+OH8CH4kP4ofzY/hx/Lj+PH8BH4iP4mfzE/hp/LT+On8DH4mP4ufzc/h5/Lz+Pn8An4hv4hfzC/hl/LL+OX8Cn4lv4pfza/h1/Lr+PX8Bn4jv4nfzG/ht/KJcdv47fwOfie/i9/N7+H38vv4/fwB/iB/iD/MH+GP8sf44/wJ/iR/ij/Nn+HP8uf48/wF/iJ/ib/MX+Gv8tf46/wN/iZ/i7/N3+Hv8vf4+/wD/iGfyD/iH/NP+Kf8M/45/4J/yb/iX/Nv+Lf8O/49/4H/yH/iP/Nf+K/8N/47/4P/yf/if/N/+L/8Pz6JjxOSCcmFFEJKIZWQWogX0ghphXRCeiGDkFHIJGQWsghZhWxCdiGHkFPIJeQW8gh5hXxCfqGAUFAoJBQWighFhWJCcaGEUFIoJZQWyghlhXJCeaGCUFGoJFQWqghVhWpCdaGGUFPABFwgBFKgBFpgBFbgBF4QBFGQBFlQBFXQBF0wBFOwBFtwBFfwBF8IhFCIBCBAAQkxoZZQW6gj1BXqCfWFBkJDoZHQWGgiNBWaCc2FFkJLoZXQWmgjtBXaCe2FDkJHoZPQWegidBW6Cd2FHkJPoZfQW+gj9BX6Cf2FAcJAYZAwWEgQhghDhWHCcGGEMFIYJYwWxghjhXHCeGGCMFGYJEwWpghThWnCdGGGMFOYJcwW5ghzhXnCfGGBsFBYJCwWlghLhWXCcmGFsFJYJawW1ghrhXXCemGDsFHYJGwWtghbhf+EbcJ2YYewU9gl7Bb2CHuFfcJ+4YBwUDgkHBaOCEeFY8Jx4YRwUjglnBbOCGeFc8J54YJwUbgkXBauCFeFa8J14YZwU7gl3BbuCHeFe8J94YHwUEgUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS/CV+Gb8F34IfwUfgm/hT/CX+GfkCTEicnE5GIKMaWYSkwtxotpxLRiOjG9mEHMKGYSM4tZxKxiNjG7mEPMKeYSc4t5xLxiPjG/WEAsKBYSC4tFxKJiMbG4WEIsKZYSS4tlxLJiObG8WEGsKFYSK4tVxKpiNbG6WEOsKWIiLhIiKVIiLTIiK3IiLwqiKEqiLCqiKmqiLhqiKVqiLTqiK3qiLwZiKEYiEKGIxJhYS6wt1hHrivXE+mIDsaHYSGwsNhGbis3E5mILsaXYSmwtthHbiu3E9mIHsaPYSewsdhG7it3E7mIPsafYS+wt9hH7iv3E/uIAcaA4SBwsJohDxKHiMHG4OEIcKY4SR4tjxLHiOHG8OEGcKE4SJ4tTxKniNHG6OEOcKc4SZ4tzxLniPHG+uEBcKC4SF4tLxKXiMnG5uEJcKa4SV4trxLXiOnG9uEHcKG4SN4tbxK3if+I2cbu4Q9wp7hJ3i3vEveI+cb94QDwoHhIPi0fEo+Ix8bh4QjwpnhJPi2fEs+I58byYJF4UL4mXxSviVfGaeF28Id4Ub4m3xTviXfGeeF98ID4UE8VH4mPxifhUfCY+F1+IL8VX4mvxjfhWfCe+Fz+IH8VP4mfxi/hV/CZ+F3+IP8Vf4m/xj/hX/CcmiXFSMim5lEJKKaWSUkvxUhoprZROSi9lkDJKmaTMUhYpq5RNyi7lkHJKuaTcUh4pr5RPyi8VkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkGpKmIRLhERKlERLjMRKnMRLgiRKkiRLiqRKmqRLhmRKlmRLjuRKnuRLgRRKkQQkKCEpJtWSakt1pLpSPam+1EBqKDWSGktNpKZSM6m51EJqKbWSWkttpLZSO6m91EHqKHWSOktdpK5SN6m71EPqKfWSekt9pL5SP6m/NEAaKA2SBksJ0hBpqDRMGi6NkEZKo6TR0hhprDROGi9NkCZKk6TJ0hRpqjRNmi7NkGZKs6TZ0hxprjRPmi8tkBZKi6TF0hJpqbRMWi6tkFZKq6TV0hpprbROWi9tkDZKm6TN0hZpq/SftE3aLu2Qdkq7pN3SHmmvtE/aLx2QDkqHpMPSEemodEw6Lp2QTkqnpNPSGemsdE46L12QLkqXpMvSFemqdE26Lt2Qbkq3pNvSHemudE+6Lz2QHkqJ0iPpsfREeio9k55LL6SX0ivptfRGeiu9k95LH6SP0ifps/RF+ip9k75LP6Sf0i/pt/RH+iv9k5KkODmZnFxOIaeUU8mp5Xg5jZxWTienlzPIGeVMcmY5i5xVziZnl3PIOeVccm45j5xXzifnlwvIBeVCcmG5iFxULiYXl0vIJeVScmm5jFxWLieXlyvIFeVKcmW5ilxVriZXl2vINWVMxmVCJmVKpmVGZmVO5mVBFmVJlmVFVmVN1mVDNmVLtmVHdmVP9uVADuVIBjKUkRyTa8m15TpyXbmeXF9uIDeUG8mN5SZyU7mZ3FxuIbeUW8mt5TZyW7md3F7uIHeUO8md5S5yV7mb3F3uIfeUe8m95T5yX7mf3F8eIA+UB8mD5QR5iDxUHiYPl0fII+VR8mh5jDxWHiePlyfIE+VJ8mR5ijxVniZPl2fIM+VZ8mx5jjxXnifPlxfIC+VF8mJ5ibxUXiYvl1fIK+VV8mp5jbxWXievlzfIG+VN8mZ5i7xV/k/eJm+Xd8g75V3ybnmPvFfeJ++XD8gH5UPyYfmIfFQ+Jh+XT8gn5VPyafmMfFY+J5+XL8gX5UvyZfmKfFW+Jl+Xb8g35VvybfmOfFe+J9+XH8gP5UT5kfxYfiI/lZ/Jz+UX8kv5lfxafiO/ld/J7+UP8kf5k/xZ/iJ/lb/J3+Uf8k/5l/xb/iP/lf/JSXKckkxJrqRQUiqplNRKvJJGSaukU9IrGZSMSiYls5JFyapkU7IrOZScSi4lt5JHyavkU/IrBZSCSiGlsFJEKaoUU4orJZSSSimltFJGKauUU8orFZSKSiWlslJFqapUU6orNZSaCqbgCqGQCqXQCqOwCqfwiqCIiqTIiqKoiqboSnxcXJyl2IqjuIqn+EqghEqkAAUqSIkptZTaSh2lrlJPqa80UBoqjZTGShOlqdJMaa60UFoqrZTWShulrdJOaa90UDoqnZTOShelq9JN6a70UHoqvZTeSh+lr9JP6a8MUAYqg5TBSoIyRBmqDFOGKyOUkcooZbQyRhmrjFPGKxOUicokZbIyRZmqTFOmKzOUmcosZbYyR5mrzFPmKwuUhcoiZbGyRFmqLFOWKyuUlcoqZbWyRlmrrFPWKxuUjcomZbOyRdmq/KdsU7YrO5Sdyi5lt7JH2avsU/YrB5SDyiHlsHJEOaocU44rJ5STyinltHJGOaucU84rF5SLyiXlsnJFuapcU64rN5Sbyi3ltnJHuavcU+4rD5SHSqLySHmsPFGeKs+U58oL5aXySnmtvFHeKu+U98oH5aPySfmsfFG+Kt+U78oP5afyS/mt/FH+Kv+UJCVOTaYmV1OoKdVUamo1Xk2jplXTqenVDGpGNZOaWc2iZlWzqdnVHGpONZeaW82j5lXzqfnVAmpBtZBaWC2iFlWLqcXVEmpJtZRaWi2jllXLqeXVCmpFtZJaWa2iVlWrqdXVGmpNFVNxlVBJlVJplVFZlVN5VVBFVVJlVVFVVVN11VBN1VJt1VFd1VN9NVBDNVKBClWkxtRaam21jlpXrafWVxuoDdVGamO1idpUbaY2V1uoLdVWamu1jdpWbae2VzuoHdVOame1i9pV7aZ2V3uoPdVeam+1j9pX7af2VweoA9VB6mA1QR2iDlWHqcPVEepIdZQ6Wh2jjlXHqePVCepEdZI6WZ2iTlWnqdPVGepMdZY6W52jzlXnqfPVBepCdZG6WF2iLlWXqcvVFepKdZW6Wl2jrlXXqevVDepGdZO6Wd2iblX/U7ep29Ud6k51l7pb3aPuVfep+9UD6kH1kHpYPaIeVY+px9UT6kn1lHpaPaOeVc+p59UL6kX1knpZvaJeVa+p19Ub6k31lnpbvaPeVe+p99UH6kM1UX2kPlafqE/VZ+pz9YX6Un2lvlbfqG/Vd+p79YP6Uf2kfla/qF/Vb+p39Yf6U/2l/lb/qH/Vf2qSGqcl05JrKbSUWiottRavpdHSaum09FoGLaOWScusZdGyatm07FoOLaeWS8ut5dHyavm0/FoBraBWSCusFdGKasW04loJraRWSiutldHKauW08loFraJWSausVdGqatW06loNraaGabhGaKRGabTGaKzGabwmaKImabKmaKqmabpmaKZmabbmaK7mab4WaKEWaUCDGtJiWi2ttlZHq6vV0+prDbSGWiOtsdZEa6o105prLbSWWiuttdZGa6u109prHbSOWiets9ZF66p107prPbSeWi+tt9ZH66v10/prA7SB2iBtsJagDdGGasO04doIbaQ2ShutjdHGauO08doEbaI2SZusTdGmatO06doMbaY2S5utzdHmavO0+doCbaG2SFusLdGWasu05doKbaW2SlutrdHWauu09doGbaO2SdusbdG2av9p27Tt2g5tp7ZL263t0fZq+7T92gHtoHZIO6wd0Y5qx7Tj2gntpHZKO62d0c5q57Tz2gXtonZJu6xd0a5q17Tr2g3tpnZLu63d0e5q97T72gPtoZaoPdIea0+0p9oz7bn2QnupvdJea2+0t9o77b32QfuofdI+a1+0r9o37bv2Q/up/dJ+a3+0v9o/LUmL05PpyfUUeko9lZ5aj9fT6Gn1dHp6PYOeUc+kZ9az6Fn1bHp2PYeeU8+l59bz6Hn1fHp+vYBeUC+kF9aL6EX1YnpxvYReUi+ll9bL6GX1cnp5vYJeUa+kV9ar6FX1anp1vYZeU8d0XCd0Uqd0Wmd0Vud0Xhd0UZd0WVd0Vdd0XTd0U7d0W3d0V/d0Xw/0UI90oEMd6TG9ll5br6PX1evp9fUGekO9kd5Yb6I31ZvpzfUWeku9ld5ab6O31dvp7fUOeke9k95Z76J31bvp3fUeek+9l95b76P31fvp/fUB+kB9kD5YT9CH6EP1YfpwfYQ+Uh+lj9bH6GP1cfp4fYI+UZ+kT9an6FP1afp0fYY+U5+lz9bn6HP1efp8fYG+UF+kL9aX6Ev1ZfpyfYW+Ul+lr9bX6Gv1dfp6fYO+Ud+kb9a36Fv1//Rt+nZ9h75T36Xv1vfoe/V9+n79gH5QP6Qf1o/oR/Vj+nH9hH5SP6Wf1s/oZ/Vz+nn9gn5Rv6Rf1q/oV/Vr+nX9hn5Tv6Xf1u/od/V7+n39gf5QT9Qf6Y/1J/pT/Zn+XH+hv9Rf6a/1N/pb/Z3+Xv+gf9Q/6Z/1L/pX/Zv+Xf+h/9R/6b/1P/pf/Z+epMcZyYzkRgojpZHKSG3EG2mMtEY6I72RwchoZDIyG1mMrEY2I7uRw8hp5DJyG3mMvEY+I79RwChoFDIKG0WMokYxo7hRwihplDJKG2WMskY5o7xRwahoVDIqG1WMqkY1o7pRw6hpYAZuEAZpUAZtMAZrcAZvCIZoSIZsKIZqaIZuGIZpWIZtOIZreIZvBEZoRAYwoIGMmFHLqG3UMeoa9Yz6RgOjodHIaGw0MZoazYzmRgujpdHKaG20Mdoa7Yz2Rgejo9HJ6Gx0Mboa3YzuRg+jp9HL6G30Mfoa/Yz+xgBjoDHIGGwkGEOMocYwY7gxwhhpjDJGG2OMscY4Y7wxwZhoTDImG1OMqcY0Y7oxw5hpzDJmG3OMucY8Y76xwFhoLDIWG0uMpcYyY7mxwlhprDJWG2uMtcY6Y72xwdhobDI2G1uMrcZ/xjZju7HD2GnsMnYbe4y9xj5jv3HAOGgcMg4bR4yjxjHjuHHCOGmcMk4bZ4yzxjnjvHHBuGhcMi4bV4xUxjXjunHDuGncMm4bd4y7xj3jvvHAeGgkGo+Mx8YT46nxzHhuvDBeGq+M18Yb463xznhvfDA+Gp+Mz8YX46vxzfhu/DB+Gr+M38Yf46/xz0gy4sxkZnIzhZnSTGWmNuPNNGZaM52Z3sxgZjQzmZnNLGZWM5uZ3cxh5jRzmbnNPGZeM5+Z3yxgFjQLmYXNImZRs5hZ3CxhljRLmaXNMmZZs5xZ3qxgVjQrmZXNKmZVs5pZ3axh1jQxEzcJkzQpkzYZkzU5kzcFUzQlUzYVUzU1UzcN0zQt0zYd0zU90zcDMzQjE5jQRGbMrGXWNuuYdc16Zn2zgdnQbGQ2NpuYTc1mZnOzhdnSbGW2NtuYbc12Znuzg9nR7GR2NruYXc1uZnezh9nT7GX2NvuYfc1+Zn9zgDnQHGQONhPMIeZQc5g53BxhjjRHmaPNMeZYc5w53pxgTjQnmZPNKeZUc5o53ZxhzjRnmbPNOeZcc54531xgLjQXmYvNJeZSc5m53FxhrjRXmavNNeZac5253txgbjQ3mZvNLeZW8z9zm7nd3GHuNHeZu8095l5zn7nfPGAeNA+Zh80j5lHzmHncPGGeNE+Zp80z5lnznHnevGBeNC+Zl80r5lXzmnndvGHeNG+Zt8075l3znnnffGA+NBPNR+Zj84n51HxmPjdfmC/NV+Zr84351nxnvjc/mB/NT+Zn84v51fxmfjd/mD/NX+Zv84/51/xnJplxVjIruZXCSmmlslJb8VYaK62VzkpvZbAyWpmszFYWK6uVzcpu5bByWrms3FYeK6+Vz8pvFbAKWoWswlYRq6hVzCpulbBKWqWs0lYZq6xVzipvVbAqWpWsylYVq6pVzapu1bBqWpiFW4RFWpRFW4zFWpzFW4IlWpIlW4qlWpqlW4ZlWpZlW47lWp7lW4EVWpEFLGghK2bVsmpbday6Vj2rvtXAamg1shpbTaymVjOrudXCamm1slpbbay2VjurvdXB6mh1sjpbXayuVjeru9XD6mn1snpbfay+Vj+rvzXAGmgNsgZbCdYQa6g1zBpujbBGWqOs0dYYa6w1zhpvTbAmWpOsydYUa6o1zZpuzbBmWrOs2dYca641z5pvLbAWWousxdYSa6m1zFpurbBWWqus1dYaa621zlpvbbA2WpuszdYWa6v1n7XN2m7tsHZau6zd1h5rr7XP2m8dsA5ah6zD1hHrqHXMOm6dsE5ap6zT1hnrrHXOOm9dsC5al6zL1hXrqnXNum7dsG5at6zb1h3rrnXPum89sB5aidYj67H1xHpqPbOeWy+sl9Yr67X1xnprvbPeWx+sj9Yn67P1xfpqfbO+Wz+sn9Yv67f1x/pr/bOSrDg7mZ3cTmGntFPZqe14O42d1k5np7cz2BntTHZmO4ud1c5mZ7dz2DntXHZuO4+d185n57cL2AXtQnZhu4hd1C5mF7dL2CXtUnZpu4xd1i5nl7cr2BXtSnZlu4pd1a5mV7dr2DVtzMZtwiZtyqZtxmZtzuZtwRZtyZZtxVZtzdZtwzZty7Ztx3Ztz/btwA7tyAY2tJEds2vZte06dl27nl3fbmA3tBvZje0mdlO7md3cbmG3tFvZre02dlu7nd3e7mB3tDvZne0udle7m93d7mH3tHvZve0+dl+7n93fHmAPtAfZg+0Ee4g91B5mD7dH2CPtUfZoe4w91h5nj7cn2BPtSfZke4o91Z5mT7dn2DPtWfZse449155nz7cX2AvtRfZie4m91F5mL7dX2CvtVfZqe4291l5nr7c32BvtTfZme4u91f7P3mZvt3fYO+1d9m57j73X3mfvtw/YB+1D9mH7iH3UPmYft0/YJ+1T9mn7jH3WPmefty/YF+1L9mX7in3VvmZft2/YN+1b9m37jn3Xvmfftx/YD+1E+5H92H5iP7Wf2c/tF/ZL+5X92n5jv7Xf2e/tD/ZH+5P92f5if7W/2d/tH/ZP+5f92/5j/7X/2Ul2nJPMSe6kcFI6qZzUTryTxknrpHPSOxmcjE4mJ7OTxcnqZHOyOzmcnE4uJ7eTx8nr5HPyOwWcgk4hp7BTxCnqFHOKOyWckk4pp7RTxinrlHPKOxWcik4lp7JTxanqVHOqOzWcmg7m4A7hkA7l0A7jsA7n8I7giI7kyI7iqI7m6I7hmI7l2I7juI7n+E7ghE7kAAc6yIk5tZzaTh2nrlPPqe80cBo6jZzGThOnqdPMae60cFo6rZzWThunrdPOae90cDo6nZzOThenq9PN6e70cHo6vZzeTh+nr9PP6e8McAY6g5zBToIzxBnqDHOGOyOckc4oZ7QzxhnrjHPGOxOcic4kZ7IzxZnqTHOmOzOcmQmznNnOHGeuM8+Z7yxwFjqLnMXOEmeps8xZ7qxwVjqrnNXOGmets85Z72xwNjqbnM3OFmer85+zzdnu7HB2Oruc3c4eZ6+zz9nvHHAOOoecw84R56hzzDnunHBOOqec084Z56xzzjnvXHAuOpecy84V56pzzbnu3HBuOrec284d565zz7nvPHAeOonOI+ex88R56jxznjsvnJfOK+e188Z567xz3jsfnI/OJ+ez88X56nxzvjs/nJ/OL+e388f56/xzkpw4N5mb3E3hpnRTuandeDeNm9ZN56Z3M7gZ3UxuZjeLm9XN5mZ3c7g53VxubjePm9fN5+Z3C7gF3UJuYbeIW9Qt5hZ3S7gl3VJuabeMW9Yt55Z3K7gV3UpuZbeKW9Wt5lZ3a7g1XczFXcIlXcqlXcZlXc7lXcEVXcmVXcVVXc3VXcM1Xcu1Xcd1Xc/13cAN3cgFLnSRG3NrubXdOm5dt55b323gNnQbuY3dJm5Tt5nb3G3htnRbua3dNm5bt53b3u3gdnQ7uZ3dLm5Xt5vb3e3h9nR7ub3dPm5ft5/b3x3gDnQHuYPdBHeIO9Qd5g53R7gj3VHuaHeMO9Yd5453J7gT3UnuZHeKO9Wd5k53Z7gz3VnubHeOO9ed5853F7gL3UXuYneJu9Rd5i53V7gr3VXuaneNu9Zd5653N7gb3U3uZneLu9X9z93mbnd3uDvdXe5ud4+7193n7ncPuAfdQ+5h94h71D3mHndPuCfdU+5p94x71j3nnncvuBfdS+5l94p71b3mXndvuDfdW+5t9457173n3ncfuA/dRPeR+9h94j51n7nP3RfuS/eV+9p9475137nv3Q/uR/eT+9n94n51v7nf3R/uT/eX+9v94/51/7lJbpyXzEvupfBSeqm81F68l8ZL66Xz0nsZvIxeJi+zl8XL6mXzsns5vJxeLi+3l8fL6+Xz8nsFvIJeIa+wV8Qr6hXzinslvJJeKa+0V8Yr65XzynsVvIpeJa+yV8Wr6lXzqns1vJoe5uEe4ZEe5dEe47Ee5/Ge4Ime5Mme4qme5ume4Zme5dme47me5/le4IVe5AEPesiLebW82l4dr65Xz6vvNfAaeo28xl4Tr6nXzGvutfBaeq281l4br63XzmvvdfA6ep28zl4Xr6vXzevu9fB6er283l4fr6/Xz+vvDfAGeoO8wV6CN8Qb6g3zhnsjvJHeKG+0N8Yb643zxnsTvIneJG+yN8Wb6k3zpnszvJneLG+2N8eb683z5nsLvIXeIm+xt8Rb6i3zlnsrvJXeKm+1t8Zb663z1nsbvI3eJm+zt8Xb6v3nbfO2ezu8nd4ub7e3x9vr7fP2ewe8g94h77B3xDvqHfOOeye8k94p77R3xjvrnfPOexe8i94l77J3xbvqXfOueze8m94t77Z3x7vr3fPuew+8h16i98h77D3xnnrPvOfeC++l98p77b3x3nrvvPfeB++j98n77H3xvnrfvO/eD++n98v77f3x/nr/vCQvzk/mJ/dT+Cn9VH5qP95P46f10/np/Qx+Rj+Tn9nP4mf1s/nZ/Rx+Tj+Xn9vP4+f18/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Rp+TR/zcZ/wSZ/yaZ/xWZ/zeV/wRV/yZV/xVV/zdd/wTd/ybd/xXd/zfT/wQz/ygQ995Mf8Wn5tv45f16/n1/cb+A39Rn5jv4nf1G/mN/db+C39Vn5rv43f1m/nt/c7+B39Tn5nv4vf1e/md/d7+D39Xn5vv4/f1+/n9/cH+AP9Qf5gP8Ef4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9nf4m/1//O3+dv9Hf5Of5e/29/j7/X3+fv9A/5B/5B/2D/iH/WP+cf9E/5J/5R/2j/jn/XP+ef9C/5F/5J/2b/iX/Wv+df9G/5N/5Z/27/j3/Xv+ff9B/5DP9F/5D/2n/hP/Wf+c/+F/9J/5b/23/hv/Xf+e/+D/9H/5H/2v/hf/W/+d/+H/9P/5f/2//h//X9+kh8XJAuSBymClEGqIHUQH6QJ0gbpgvRBhiBjkCnIHGQJsgbZguxBjiBnkCvIHeQJ8gb5gvxBgaBgUCgoHBQJigbFguJBiaBkUCooHZQJygblgvJBhaBiUCmoHFQJqgbVgupBjaBmgAV4QARkQAV0wARswAV8IARiIAVyoARqoAV6YARmYAV24ARu4AV+EARhEAUggAEKYkGtoHZQJ6gb1AvqBw2ChkGjoHHQJGgaNAuaBy2ClkGroHXQJmgbtAvaBx2CjkGnoHPQJegadAu6Bz2CnkGvoHfQJ+gb9Av6BwOCgcGgYHCQEAwJhgbDguHBiGBkMCoYHYwJxgbjgvHBhGBiMCmYHEwJpgbTgunBjGBmMCuYHcwJ5gbzgvnBgmBhsChYHCwJlgbLguXBimBlsCpYHawJ1gbrgvXBhmBjsCnYHGwJtgb/BduC7cGOYGewK9gd7An2BvuC/cGB4GBwKDgcHAmOBseC48GJ4GRwKjgdnAnOBueC88GF4GJwKbgcXAmuBteC68GN4GZwK7gd3AnuBveC+8GD4GGQGDwKHgdPgqfBs+B58CJ4GbwKXgdvgrfBu+B98CH4GHwKPgdfgq/Bt+B78CP4GfwKfgd/gr/BvyApiAuThcnDFGHKMFWYOowP04Rpw3Rh+jBDmDHMFGYOs4RZw2xh9jBHmDPMFeYO84R5w3xh/rBAWDAsFBYOi4RFw2Jh8bBEWDIsFZYOy4Rlw3Jh+bBCWDGsFFYOq4RVw2ph9bBGWDPEQjwkQjKkQjpkQjbkQj4UQjGUQjlUQjXUQj00QjO0Qjt0Qjf0Qj8MwjCMQhDCEIWxsFZYO6wT1g3rhfXDBmHDsFHYOGwSNg2bhc3DFmHLsFXYOmwTtg3bhe3DDmHHsFPYOewSdg27hd3DHmHPsFfYO+wT9g37hf3DAeHAcFA4OEwIh4RDw2Hh8HBEODIcFY4Ox4Rjw3Hh+HBCODGcFE4Op4RTw2nh9HBGODOcFc4O54Rzw3nh/HBBuDBcFC4Ol4RLw2Xh8nBFuDJcFa4O14Rrw3Xh+nBDuDHcFG4Ot4Rbw//CbeH2cEe4M9wV7g73hHvDfeH+8EB4MDwUHg6PhEfDY+Hx8ER4MjwVng7PhGfDc+H58EJ4MbwUXg6vhFfDa+H18EZ4M7wV3g7vhHfDe+H98EH4MEwMH4WPwyfh0/BZ+Dx8Eb4MX4Wvwzfh2/Bd+D78EH4MP4Wfwy/h1/Bb+D38Ef4Mf4W/wz/h3/BfmBTGRcmi5FGKKGWUKkodxUdporRRuih9lCHKGGWKMkdZoqxRtih7lCPKGeWKckd5orxRvih/VCAqGBWKCkdFoqJRsah4VCIqGZWKSkdlorJRuah8VCGqGFWKKkdVoqpRtah6VCOqGWERHhERGVERHTERG3ERHwmRGEmRHCmRGmmRHhmRGVmRHTmRG3mRHwVRGEURiGCEolhUK6od1YnqRvWi+lGDqGHUKGocNYmaRs2i5lGLqGXUKmodtYnaRu2i9lGHqGPUKeocdYm6Rt2i7lGPqGfUK+od9Yn6Rv2i/tGAaGA0KBocJURDoqHRsGh4NCIaGY2KRkdjorHRuGh8NCGaGE2KJkdToqnRtGh6NCOaGc2KZkdzornRvGh+tCBaGC2KFkdLoqXRsmh5tCJaGa2KVkdrorXRumh9tCHaGG2KNkdboq3Rf9G2aHu0I9oZ7Yp2R3uivdG+aH90IDoYHYoOR0eio9Gx6Hh0IjoZnYpOR2eis9G56Hx0IboYXYouR1eiq9G16Hp0I7oZ3YpuR3eiu9G96H70IHoYJUaPosfRk+hp9Cx6Hr2IXkavotfRm+ht9C56H32IPkafos/Rl+hr9C36Hv2Ifka/ot/Rn+hv9C9KiuJAMpAcpAApQSqQGsSDNCAtSAfSgwwgI8gEMoMsICvIBrKDHCAnyAVygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoMaoCbAAA4IQAIK0IABLOAADwQgAgnIQAEq0IAODGACC9jAAS7wgA8CEIIIAAABAjFQC9QGdUBdUA/UBw1AQ9AINAZNQFPQDDQHLUBL0Aq0Bm1AW9AOtAcdQEfQCXQGXUBX0A10Bz1AT9AL9AZ9QF/QD/QHA8BAMAgMBglgCBgKhoHhYAQYCUaB0WAMGAvGgfFgApgIJoHJYAqYCqaB6WAGmAlmgdlgDpgL5oH5YAFYCBaBxWAJWAqWgeVgBVgJVoHVYA1YC9aB9WAD2Ag2gc1gC9gK/gPbwHawA+wEu8BusAfsBfvAfnAAHASHwGFwBBwFx8BxcAKcBKfAaXAGnAXnwHlwAVwEl8BlcAVcBdfAdXAD3AS3wG1wB9wF98B98AA8BIngEXgMnoCn4Bl4Dl6Al+AVeA3egLfgHXgPPoCP4BP4DL6Ar+Ab+A5+gJ/gF/gN/oC/4B9IAnEwGUwOU8CUMBVMDeNhGpgWpoPpYQaYEWaCmWEWmBVmg9lhDpgT5oK5YR6YF+aD+WEBWBAWgoVhEVgUFoPFYQlYEpaCpWEZWBaWg+VhBVgRVoKVYRVYFVaD1WENWBNiEIcEJCEFachAFnKQhwIUoQRlqEAValCHBjShBW3oQBd60IcBDGEEAYQQwRisBWvDOrAurAfrwwawIWwEG8MmsClsBpvDFrAlbAVbwzawLWwH28MOsCPsBDvDLrAr7Aa7wx6wJ+wFe8M+sC/sB/vDAXAgHAQHwwQ4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDzoSz4Gw4B86F8+B8uAAuhIvgYrgELoXL4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F/8FtcDvcAXfCXXA33AP3wn1wPzwAD8JD8DA8Ao/CY/A4PAFPwlPwNDwDz8Jz8Dy8AC/CS/AyvAKvwmvwOrwBb8Jb8Da8A+/Ce/A+fAAfwkT4CD6GT+BT+Aw+hy/gS/gKvoZv4Fv4Dr6HH+BH+Al+hl/gV/gNfoc/4E/4C/6Gf+Bf+A8mwTiUDCVHKVBKlAqlRvEoDUqL0qH0KAPKiDKhzCgLyoqyoewoB8qJcqHcKA/Ki/Kh/KgAKogKocKoCCqKiqHiqAQqiUqh0qgMKovKofKoAqqIKqHKqAqqiqqh6qgGqokwhCMCkYhCNGIQizjEIwGJSEIyUpCKNKQjA5nIQjZykIs85KMAhShCAEGEUAzVQrVRHVQX1UP1UQPUEDVCjVET1BQ1Q81RC9QStUKtURvUFrVD7VEH1BF1Qp1RF9QVdUPdUQ/UE/VCvVEf1Bf1Q/3RADQQDUKDUQIagoaiYWg4GoFGolFoNBqDxqJxaDyagCaiSWgymoKmomloOpqBZqJZaDaag+aieWg+WoAWokVoMVqClqJlaDlagVaiVWg1WoPWonVoPdqANqJNaDPagrai/9A2tB3tQDvRLrQb7UF70T60Hx1AB9EhdBgdQUfRMXQcnUAn0Sl0Gp1BZ9E5dB5dQBfRJXQZXUFX0TV0Hd1AN9EtdBvdQXfRPXQfPUAPUSJ6hB6jJ+gpeoaeoxfoJXqFXqM36C16h96jD+gj+oQ+oy/oK/qGvqMf6Cf6hX6jP+gv+oeSUFwsWSx5LEUsZSxVLHUsPpYmljaWLpY+liGWMZYpljmWJZY1li2WPZYjljOWK5Y7lieWN5Yvlj9WIFYwVihWOFYkVjRWLFY8ViJWMlYqVjpWJlY2Vi5WPlYhVjFWKVY5ViVWNVYtVj1WI1YzhsXwGBEjY1SMjjExNsbF+JgQE2NSTI4pMTWmxfSYETNjVsyOOTE35sX8WBALY1EMxGAMxWKxWrHasTqxurF6sfqxBrGG/xMAD4B15gAAgGfb62zbtq3ftpXk3dzZtm3btm3b7oz2PozHBEzEJEzGFEzFNEzHDMzELMzGHMzFPMzHAizEIgxgEENYDPsP6431wfpi/bD+2ABsIBaPDcIGY0OwodgwbDg2AhuJjcJGY2Owsdg4bDw2AZuITcImY1Owqdg0bDo2A5uJzcJmY3Owudg8bD62AFuILcIWY0uwpdgybDm2AluJrcJWY2uwtdg6bD22AduIbcI2Y1uwrdg2bDu2A9uJ7cJ2Y3uwvdg+bD92ADuIHcIOY0ewo9gx7Dh2AjuJncJOY2ews9g57Dx2AbuIXcIuY1ewq9g17Dp2A7uJ3cJuY3ewu9g97D72AHuIPcIeY0+wp9gz7Dn2AnuJvcJeY2+wt9g77D32AfuIfcI+Y1+wBOwr9g37jv3AfmK/sN/YH+wv9g9LxJKwZHhyPAWeEk+Fp8bT4GnxdHh6PAOeEc+EZ8az4FnxbHh2PAeeE8+F58bz4HnxfHh+PA4vgBfEC+GF8SJ4UbwYXhwvgZfES+Gl8TJ4WbwcXh6vgFfEK+GV8Sp4VbwaXh2vgdfEa+G18Tp4XbweXh9vgDfEG+GN8SZ4U7wZ3hxvgbfEW+Gt8TZ4W7wd3h7vgHfEO+Gd8S54V7wb3h3vgffEe+EYjuMETuIUTuMMzuIczuMCLuISLuMKruIaruMGbuIWbuMO7uIe7uMBHuIRDnCIIzyG/4f3xvvgffF+eH98AD4Qj8cH4YPxIfhQfBg+HB+Bj8RH4aPxMfhYfBw+Hp+AT8Qn4ZPxKfhUfBo+HZ+Bz8Rn4bPxOfhcfB4+H1+AL8QX4YvxJfhSfBm+HF+Br8RX4avxNfhafB2+Ht+Ab8Q34ZvxLfhWfBu+Hd+B78R34bvxPfhefB++Hz+AH8QP4YfxI/hR/Bh+HD+Bn8RP4afxM/hZ/Bx+Hr+AX8Qv4ZfxK/hV/Bp+Hb+B38Rv4bfxO/hd/B5+H3+AP8Qf4Y/xJ/hT/Bn+HH+Bv8Rf4a/xN/hb/B3+Hv+Af8Q/4Z/xL3gC/hX/hn/Hf8T/xH/hv/E/+F/8H56IJ+HJiORECiIlkYpITaQh0hLpiPREBiIjkYnITGQhshLZiOxEDiInkYvITeQh8hL5iPxEHFGAKEgUIgoTRYiiRDGiOFGCKEmUIkoTZYiyRDmiPFGBqEhUIioTVYiqRDWiOlGDqEnUImoTdYi6RD2iPtGAaEg0IhoTTYimRDOiOdGCaEm0IloTbYi2RDuiPdGB6Eh0IjoTXYiuRDeiO9GD6En0IjACJwiCJCiCJhiCJTiCJwRCJCRCJhRCJTRCJwzCJCzCJhzCJTzCJwIiJCICEJBARIz4j+hN9CH6Ev2I/sQAYiARTwwiBhNDiKHEMGI4MYIYSYwiRhNjiLHEOGI8MYGYSEwiJhNTiKnENGI6MYOYScwiZhNziLnEPGI+sYBYSCwiFhNLiKXEMmI5sYJYSawiVhNriLXEOmI9sYHYSGwiNhNbiK3ENmI7sYPYSewidhN7iL3EPmI/cYA4SBwiDhNHiKPEMeI4cYI4SZwiThNniLPEOeI8cYG4SFwiLhNXiKvENeI6cYO4SdwibhN3iLvEPeI+8YB4SDwiHhNPiKfEM+I58YJ4SbwiXhNviLfEO+I98YH4SHwiPhNfiATiK/GN+E78IH4Sv4jfxB/iL/GPSCSSiGRkcjIFmZJMRaYm05BpyXRkejIDmZHMRGYms5BZyWxkdjIHmZPMReYm85B5yXxkfjKOLEAWJAuRhckiZFGyGFmcLEGWJEuRpckyZFmyHFmerEBWJCuRlckqZFWyGlmdrEHWJGuRtck6ZF2yHlmfbEA2JBuRjckmZFOyGdmcbEG2JFuRrck2ZFuyHdme7EB2JDuRnckuZFeyG9md7EH2JHuRGImTBEmSFEmTDMmSHMmTAimSEimTCqmSGqmTBmmSFmmTDumSHumTARmSEQlISCIyRv5H9ib7kH3JfmR/cgA5kIwnB5GDySHkUHIYOZwcQY4kR5GjyTHkWHIcOZ6cQE4kJ5GTySnkVHIaOZ2cQc4kZ5GzyTnkXHIeOZ9cQC4kF5GLySXkUnIZuZxcQa4kV5GryTXkWnIduZ7cQG4kN5GbyS3kVnIbuZ3cQe4kd5G7yT3kXnIfuZ88QB4kD5GHySPkUfIYeZw8QZ4kT5GnyTPkWfIceZ68QF4kL5GXySvkVfIaeZ28Qd4kb5G3yTvkXfIeeZ98QD4kH5GPySfkU/IZ+Zx8Qb4kX5GvyTfkW/Id+Z78QH4kP5GfyS9kAvmV/EZ+J3+QP8lf5G/yD/mX/EcmkklkMio5lYJKSaWiUlNpqLRUOio9lYHKSGWiMlNZqKxUNio7lYPKSeWiclN5qLxUPio/FUcVoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSlajKVBWqKlWNqk7VoGpStajaVB2qLlWPqk81oBpSjajGVBOqKdWMak61oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSvSiMwimCIimKoimGYimO4imBEimJkimFUimN0imDMimLsimHcimP8qmACqmIAhSkEBWj/qN6U32ovlQ/qj81gBpIxVODqMHUEGooNYwaTo2gRlKjqNHUGGosNY4aT02gJlKTqMnUFGoqNY2aTs2gZlKzqNnUHGouNY+aTy2gFlKLqMXUEmoptYxaTq2gVlKrqNXUGmottY5aT22gNlKbqM3UFmortY3aTu2gdlK7qN3UHmovtY/aTx2gDlKHqMPUEeoodYw6Tp2gTlKnqNPUGeosdY46T12gLlKXqMvUFeoqdY26Tt2gblK3qNvUHeoudY+6Tz2gHlKPqMfUE+op9Yx6Tr2gXlKvqNfUG+ot9Y56T32gPlKfqM/UFyqB+kp9o75TP6if1C/qN/WH+kv9oxKpJCoZnZxOQaekU9Gp6TR0WjodnZ7OQGekM9GZ6Sx0VjobnZ3OQeekc9G56Tx0XjofnZ+OowvQBelCdGG6CF2ULkYXp0vQJelSdGm6DF2WLkeXpyvQFelKdGW6Cl2VrkZXp2vQNeladG26Dl2XrkfXpxvQDelGdGO6Cd2UbkY3p1vQLelWdGu6Dd2Wbke3pzvQHelOdGe6C92V7kZ3p3vQPeleNEbjNEGTNEXTNEOzNEfztECLtETLtEKrtEbrtEGbtEXbtEO7tEf7dECHdEQDGtKIjtH/0b3pPnRfuh/dnx5AD6Tj6UH0YHoIPZQeRg+nR9Aj6VH0aHoMPZYeR4+nJ9AT6Un0ZHoKPZWeRk+nZ9Az6Vn0bHoOPZeeR8+nF9AL6UX0YnoJvZReRi+nV9Ar6VX0anoNvZZeR6+nN9Ab6U30ZnoLvZXeRm+nd9A76V30bnoPvZfeR++nD9AH6UP0YfoIfZQ+Rh+nT9An6VP0afoMfZY+R5+nL9AX6Uv0ZfoKfZW+Rl+nb9A36Vv0bfoOfZe+R9+nH9AP6Uf0Y/oJ/ZR+Rj+nX9Av6Vf0a/oN/ZZ+R7+nP9Af6U/0Z/oLnUB/pb/R3+kf9E/6F/2b/kP/pf/RiXQSnYxJzqRgUjKpmNRMGiYtk45Jz2RgMjKZmMxMFiYrk43JzuRgcjK5mNxMHiYvk4/Jz8QxBZiCTCGmMFOEKcoUY4ozJZiSTCmmNFOGKcuUY8ozFZiKTCWmMlOFqcpUY6ozNZiaTC2mNlOHqcvUY+ozDZiGTCOmMdOEaco0Y5ozLZiWTCumNdOGacu0Y9ozHZiOTCemM9OF6cp0Y7ozPZieTC8GY3CGYEiGYmiGYViGY3hGYERGYmRGYVRGY3TGYEzGYmzGYVzGY3wmYEImYgADGcTEmP+Y3kwfpi/Tj+nPDGAGMvHMIGYwM4QZygxjhjMjmJHMKGY0M4YZy4xjxjMTmInMJGYyM4WZykxjpjMzmJnMLGY2M4eZy8xj5jMLmIXMImYxs4RZyixjljMrmJXMKmY1s4ZZy6xj1jMbmI3MJmYzs4XZymxjtjM7mJ3MLmY3s4fZy+xj9jMHmIPMIeYwc4Q5yhxjjjMnmJPMKeY0c4Y5y5xjzjMXmIvMJeYyc4W5ylxjrjM3mJvMLeY2c4e5y9xj7jMPmIfMI+Yx84R5yjxjnjMvmJfMK+Y184Z5y7xj3jMfmI/MJ+Yz84VJYL4y35jvzA/mJ/OL+c38Yf4y/5hEJolJxiZnU7Ap2VRsajYNm5ZNx6ZnM7AZ2UxsZjYLm5XNxmZnc7A52VxsbjYPm5fNx+Zn49gCbEG2EFuYLcIWZYuxxdkSbEm2FFuaLcOWZcux5dkKbEW2EluZrcJWZaux1dkabE22FlubrcPWZeux9dkGbEO2EduYbcI2ZZuxzdkWbEu2FduabcO2Zdux7dkObEe2E9uZ7cJ2Zbux3dkebE+2F4uxOEuwJEuxNMuwLMuxPCuwIiuxMquwKquxOmuwJmuxNuuwLuuxPhuwIRuxgIUsYmPsf2xvtg/bl+3H9mcHsAPZeHYQO5gdwg5lh7HD2RHsSHYUO5odw45lx7Hj2QnsRHYSO5mdwk5lp7HT2RnsTHYWO5udw85l57Hz2QXsQnYRu5hdwi5ll7HL2RXsSnYVu5pdw65l17Hr2Q3sRnYTu5ndwm5lt7Hb2R3sTnYXu5vdw+5l97H72QPsQfYQe5g9wh5lj7HH2RPsSfYUe5o9w55lz7Hn2QvsRfYSe5m9wl5lr7HX2RvsTfYWe5u9w95l77H32QfsQ/YR+5h9wj5ln7HP2RfsS/YV+5p9w75l37Hv2Q/sR/YT+5n9wiawX9lv7Hf2B/uT/cX+Zv+wf9l/bCKbxCbjknMpuJRcKi41l4ZLy6Xj0nMZuIxcJi4zl4XLymXjsnM5uJxcLi43l4fLy+Xj8nNxXAGuIFeIK8wV4YpyxbjiXAmuJFeKK82V4cpy5bjyXAWuIleJq8xV4apy1bjqXA2uJleLq83V4epy9bj6XAOuIdeIa8w14ZpyzbjmXAuuJdeKa8214dpy7bj2XAeuI9eJ68x14bpy3bjuXA+uJ9eLwzicIziSoziaYziW4zieEziRkziZUziV0zidMziTszibcziX8zifC7iQizjAQQ5xMe4/rjfXh+vL9eP6cwO4gVw8N4gbzA3hhnLDuOHcCG4kN4obzY3hxnLjuPHcBG4iN4mbzE3hpnLTuOncDG4mN4ubzc3h5nLzuPncAm4ht4hbzC3hlnLLuOXcCm4lt4pbza3h1nLruPXcBm4jt4nbzG3htnLbuO3cDm4nt4vbze3h9nL7uP3cAe4gd4g7zB3hjnLHuOPcCe4kd4o7zZ3hznLnuPPcBe4id4m7zF3hrnLXuOvcDe4md4u7zd3h7nL3uPvcA+4h94h7zD3hnnLPuOfcC+4l94p7zb3h3nLvuPfcB+4j94n7zH3hEriv3DfuO/eD+8n94n5zf7i/3D8ukUvikvHJ+RR8Sj4Vn5pPw6fl0/Hp+Qx8Rj4Tn5nPwmfls/HZ+Rx8Tj4Xn5vPw+fl8/H5+Ti+AF+QL8QX5ovwRflifHG+BF+SL8WX5svwZflyfHm+Al+Rr8RX5qvwVflqfHW+Bl+Tr8XX5uvwdfl6fH2+Ad+Qb8Q35pvwTflmfHO+Bd+Sb8W35tvwbfl2fHu+A9+R78R35rvwXflufHe+B9+T78VjPM4TPMlTPM0zPMtzPM8LvMhLvMwrvMprvM4bvMlbvM07vMt7vM8HfMhHPOAhj/gY/x/fm+/D9+X78f35AfxAPp4fxA/mh/BD+WH8cH4EP5IfxY/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wn8dH4GP5Ofxc/m5/Bz+Xn8fH4Bv5BfxC/ml/BL+WX8cn4Fv5Jfxa/m1/Br+XX8en4Dv5HfxG/mt/Bb+W38dn4Hv5Pfxe/m9/B7+X38fv4Af5A/xB/mj/BH+WP8cf4Ef5I/xZ/mz/Bn+XP8ef4Cf5G/xF/mr/BX+Wv8df4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/m3/Bv+Xf8e/4D/5H/xH/mv/AJ/Ff+G/+d/8H/5H/xv/k//F/+H5/IJ/HJhORCCiGlkEpILaQR0grphPRCBiGjkEnILGQRsgrZhOxCDiGnkEvILeQR8gr5hPxCnFBAKCgUEgoLRYSiQjGhuFBCKCmUEkoLZYSyQjmhvFBBqChUEioLVYSqQjWhulBDqCnUEmoLdYS6Qj2hvtBAaCg0EhoLTYSmQjOhudBCaCm0EloLbYS2QjuhvdBB6Ch0EjoLXYSuQjehu9BD6Cn0EjABFwiBFCiBFhiBFTiBFwRBFCRBFhRBFTRBFwzBFCzBFhzBFTzBFwIhFCIBCFBAQkz4T+gt9BH6Cv2E/sIAYaAQLwwSBgtDhKHCMGG4MEIYKYwSRgtjhLHCOGG8MEGYKEwSJgtThKnCNGG6MEOYKcwSZgtzhLnCPGG+sEBYKCwSFgtLhKXCMmG5sEJYKawSVgtrhLXCOmG9sEHYKGwSNgtbhK3CNmG7sEPYKewSdgt7hL3CPmG/cEA4KBwSDgtHhKPCMeG4cEI4KZwSTgtnhLPCOeG8cEG4KFwSLgtXhKvCNeG6cEO4KdwSbgt3hLvCPeG+8EB4KDwSHgtPhKfCM+G58EJ4KbwSXgtvhLfCO+G98EH4KHwSPgtfhAThq/BN+C78EH4Kv4Tfwh/hr/BPSBSShGRicjGFmFJMJaYW04hpxXRiejGDmFHMJGYWs4hZxWxidjGHmFPMJeYW84h5xXxifjFOLCAWFAuJhcUiYlGxmFhcLCGWFEuJpcUyYlmxnFherCBWFCuJlcUqYlWxmlhdrCHWFGuJtcU6Yl2xnlhfbCA2FBuJjcUmYlOxmdhcbCG2FFuJrcU2Yluxndhe7CB2FDuJncUuYlexm9hd7CH2FHuJmIiLhEiKlEiLjMiKnMiLgiiKkiiLiqiKmqiLhmiKlmiLjuiKnuiLgRiKkQhEKCIxJv4n9hb7iH3FfmJ/cYA4UIwXB4mDxSHiUHGYOFwcIY4UR4mjxTHiWHGcOF6cIE4UJ4mTxSniVHGaOF2cIc4UZ4mzxTniXHGeOF9cIC4UF4mLxSXiUnGZuFxcIa4UV4mrxTXiWnGduF7cIG4UN4mbxS3iVnGbuF3cIe4Ud4m7xT3iXnGfuF88IB4UD4mHxSPiUfGYeFw8IZ4UT4mnxTPiWfGceF68IF4UL4mXxSviVfGaeF28Id4Ub4m3xTviXfGeeF98ID4UH4mPxSfiU/GZ+Fx8Ib4UX4mvxTfiW/Gd+F78IH4UP4mfxS9igvhV/CZ+F3+IP8Vf4m/xj/hX/CcmikliMim5lEJKKaWSUktppLRSOim9lEHKKGWSMktZpKxSNim7lEPKKeWSckt5pLxSPim/FCcVkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkGpKtaTaUh2prlRPqi81kBpKjaTGUhOpqdRMai61kFpKraTWUhuprdROai91kDpKnaTOUhepq9RN6i71kHpKvSRMwiVCIiVKoiVGYiVO4iVBEiVJkiVFUiVN0iVDMiVLsiVHciVP8qVACqVIAhKUkBST/pN6S32kvlI/qb80QBooxUuDpMHSEGmoNEwaLo2QRkqjpNHSGGmsNE4aL02QJkqTpMnSFGmqNE2aLs2QZkqzpNnSHGmuNE+aLy2QFkqLpMXSEmmptExaLq2QVkqrpNXSGmmttE5aL22QNkqbpM3SFmmrtE3aLu2Qdkq7pN3SHmmvtE/aLx2QDkqHpMPSEemodEw6Lp2QTkqnpNPSGemsdE46L12QLkqXpMvSFemqdE26Lt2Qbkq3pNvSHemudE+6Lz2QHkqPpMfSE+mp9Ex6Lr2QXkqvpNfSG+mt9E56L32QPkqfpM/SFylB+ip9k75LP6Sf0i/pt/RH+iv9kxKlJCmZnFxOIaeUU8mp5TRyWjmdnF7OIGeUM8mZ5SxyVjmbnF3OIeeUc8m55TxyXjmfnF+OkwvIBeVCcmG5iFxULiYXl0vIJeVScmm5jFxWLieXlyvIFeVKcmW5ilxVriZXl2vINeVacm25jlxXrifXlxvIDeVGcmO5idxUbiY3l1vILeVWcmu5jdxWbie3lzvIHeVOcme5i9xV7iZ3l3vIPeVeMibjMiGTMiXTMiOzMifzsiCLsiTLsiKrsibrsiGbsiXbsiO7sif7ciCHciQDGcpIjsn/yb3lPnJfuZ/cXx4gD5Tj5UHyYHmIPFQeJg+XR8gj5VHyaHmMPFYeJ4+XJ8gT5UnyZHmKPFWeJk+XZ8gz5VnybHmOPFeeJ8+XF8gL5UXyYnmJvFReJi+XV8gr5VXyanmNvFZeJ6+XN8gb5U3yZnmLvFXeJm+Xd8g75V3ybnmPvFfeJ++XD8gH5UPyYfmIfFQ+Jh+XT8gn5VPyafmMfFY+J5+XL8gX5UvyZfmKfFW+Jl+Xb8g35VvybfmOfFe+J9+XH8gP5UfyY/mJ/FR+Jj+XX8gv5Vfya/mN/FZ+J7+XP8gf5U/yZ/mLnCB/lb/J3+Uf8k/5l/xb/iP/lf/JiXKSnExJrqRQUiqplNRKGiWtkk5Jr2RQMiqZlMxKFiWrkk3JruRQciq5lNxKHiWvkk/Jr8QpBZSCSiGlsFJEKaoUU4orJZSSSimltFJGKauUU8orFZSKSiWlslJFqapUU6orNZSaSi2ltlJHqavUU+orDZSGSiOlsdJEaao0U5orLZSWSiultdJGaau0U9orHZSOSiels9JF6ap0U7orPZSeSi8FU3CFUEiFUmiFUViFU3hFUERFUmRFUVRFU3TFUEzFUmzFUVzFU3wlUEIlUoACFaTElExKb6WP0lfpp/RXBigDlXhlkDJYGaIMVYYpw5URykhllDJaGaOMVcYp45UJykRlkjJZmaJMVaYp05UZykxlljJbmaPMVeYp85UFykJlkbJYWaIsVZYpy5UVykpllbJaWaOsVdYp65UNykZlk7JZ2aJsVbYp25Udyk5ll7Jb2aPsVfYp+5UDykHlkHJYOaIcVY4px5UTyknllHJaOaOcVc4p55ULykXlknJZuaJcVa4p15Ubyk3llnJbuaPcVe4p95UHykPlkfJYeaI8VZ4pz5UXykvllfJaeaO8Vd4p75UPykflk/JZ+aIkKF+Vb8p35YfyU/ml/Fb+KH+Vf0qikqQkU5OrKdSUaio1tZpGTaumU9OrGdSMaiY1s5pFzapmU7OrOdScai41t5pHzavmU/OrcWoBtaBaSC2sFlGLqsXU4moJtaRaSi2tllHLquXU8moFtaJaSa2sVlGrqtXU6moNtaZaS62t1lHrqvXU+moDtaHaSG2sNlGbqs3U5moLtaXaSm2ttlHbqu3U9moHtaPaSe2sdlG7qt3U7moPtafaS8VUXCVUUqVUWmVUVuVUXhVUUZVUWVVUVdVUXTVUU7VUW3VUV/VUXw3UUI1UoEIVqTH1P7W32kftq/ZT+6sD1IFqvDpIHawOUYeqw9Th6gh1pDpKHa2OUceq49Tx6gR1ojpJnaxOUaeq09Tp6gx1pjpLna3OUeeq89T56gJ1obpIXawuUZeqy9Tl6gp1pbpKXa2uUdeq69T16gZ1o7pJ3axuUbeq29Tt6g51p7pL3a3uUfeq+9T96gH1oHpIPaweUY+qx9Tj6gn1pHpKPa2eUc+q59Tz6gX1onpJvaxeUa+q19Tr6g31pnpLva3eUe+q99T76gP1ofpIfaw+UZ+qz9Tn6gv1pfpKfa2+Ud+q79T36gf1o/pJ/ax+URPUr+o39bv6Q/2p/lJ/q3/Uv+o/NVFNUpNpybUUWkotlZZaS6Ol1dJp6bUMWkYtk5ZZy6Jl1bJp2bUcWk4tl5Zby6Pl1fJp+bU4rYBWUCukFdaKaEW1YlpxrYRWUiulldbKaGW1clp5rYJWUaukVdaqaFW1alp1rYZWU6ul1dbqaHW1elp9rYHWUGukNdaaaE21ZlpzrYXWUmultdbaaG21dlp7rYPWUeukdda6aF21blp3rYfWU+ulYRquERqpURqtMRqrcRqvCZqoSZqsKZqqaZquGZqpWZqtOZqreZqvBVqoRRrQoIa0mPaf1lvro/XV+mn9tQHaQC1eG6QN1oZoQ7Vh2nBthDZSG6WN1sZoY7Vx2nhtgjZRm6RN1qZoU7Vp2nRthjZTm6XN1uZoc7V52nxtgbZQW6Qt1pZoS7Vl2nJthbZSW6Wt1tZoa7V12nptg7ZR26Rt1rZoW7Vt2nZth7ZT26Xt1vZoe7V92n7tgHZQO6Qd1o5oR7Vj2nHthHZSO6Wd1s5oZ7Vz2nntgnZRu6Rd1q5oV7Vr2nXthnZTu6Xd1u5od7V72n3tgfZQe6Q91p5oT7Vn2nPthfZSe6W91t5ob7V32nvtg/ZR+6R91r5oCdpX7Zv2Xfuh/dR+ab+1P9pf7Z+WqCVpyfTkego9pZ5KT62n0dPq6fT0egY9o55Jz6xn0bPq2fTseg49p55Lz63n0fPq+fT8epxeQC+oF9IL60X0onoxvbheQi+pl9JL62X0sno5vbxeQa+oV9Ir61X0qno1vbpeQ6+p19Jr63X0uno9vb7eQG+oN9Ib6030pnozvbneQm+pt9Jb6230tno7vb3eQe+od9I76130rno3vbveQ++p99IxHdcJndQpndYZndU5ndcFXdQlXdYVXdU1XdcN3dQt3dYd3dU93dcDPdQjHehQR3pM/0/vrffR++r99P76AH2gHq8P0gfrQ/Sh+jB9uD5CH6mP0kfrY/Sx+jh9vD5Bn6hP0ifrU/Sp+jR9uj5Dn6nP0mfrc/S5+jx9vr5AX6gv0hfrS/Sl+jJ9ub5CX6mv0lfra/S1+jp9vb5B36hv0jfrW/Stcdv07foOfae+S9+t79H36vv0/foB/aB+SD+sH9GP6sf04/oJ/aR+Sj+tn9HP6uf08/oF/aJ+Sb+sX9Gv6tf06/oN/aZ+S7+t39Hv6vf0+/oD/aH+SH+sP9Gf6s/05/oL/aX+Sn+tv9Hf6u/09/oH/aP+Sf+sf9ET9K/6N/27/kP/qf/Sf+t/9L/6Pz1RT9KTGcmNFEZKI5WR2khjpDXSGemNDEZGI5OR2chiZDWyGdmNHEZOI5eR28hj5DXyGfmNOKOAUdAoZBQ2ihhFjWJGcaOEUdIoZZQ2yhhljXJGeaOCUdGoZFQ2qhhVjWpGdaOGUdOoZdQ26hh1jXpGfaOB0dBoZDQ2mhhNjWZGc6OF0dJoZbQ22hhtjXZGe6OD0dHoZHQ2uhhdjW5Gd6OH0dPoZWAGbhAGaVAGbTAGa3AGbwiGaEiGbCiGamiGbhiGaViGbTiGa3iGbwRGaEQGMKCBjJjxn9Hb6GP0NfoZ/Y0BxkAj3hhkDDaGGEONYcZwY4Qx0hhljDbGGGONccZ4Y4Ix0ZhkTDamGFONacZ0Y4Yx05hlzDbmGHONecZ8Y4Gx0FhkLDaWGEuNZcZyY4Wx0lhlrDbWGGuNdcZ6Y4Ox0dhkbDa2GFuNbcZ2Y4ex09hl7Db2GHuNfcZ+44Bx0DhkHDaOGEeNY8Zx44Rx0jhlnDbOGGeNc8Z544Jx0bhkXDauGFeNa8Z144Zx07hl3DbuGHeNe8Z944Hx0HhkPDaeGE+NZ8Zz44Xx0nhlvDbeGG+Nd8Z744Px0fhkfDa+GAnGV+Ob8d34Yfw0fhm/jT/GX+OfkWgkGcnM5GYKM6WZykxtpjHTmunM9GYGM6OZycxsZjGzmtnM7GYOM6eZy8xt5jHzmvnM/GacWcAsaBYyC5tFzKJmMbO4WcIsaZYyS5tlzLJmObO8WcGsaFYyK5tVzKpmNbO6WcOsadYya5t1zLpmPbO+2cBsaDYyG5tNzKZmM7O52cJsabYyW5ttzLZmO7O92cHsaHYyO5tdzK5mN7O72cPsafYyMRM3CZM0KZM2GZM1OZM3BVM0JVM2FVM1NVM3DdM0LdM2HdM1PdM3AzM0IxOY0ERmzPzP7G32Mfua/cz+5gBzoBlvDjIHm0PMoeYwc7g5whxpjkpMSkoyx5rjzPHmBHOiOcmcbE4xp5rTzOnmDHOmOcucbc4x55rzzPnmAnOhuchcbC4xl5rLzOXmCnOlucpcba4x15rrzPXmBnOjucncbG4xt5rbzO3mDnOnucvcbe4x95r7zP3mAfOgecg8bB4xj5rHzOPmCfOkeco8bZ4xz5rnzPPmBfOiecm8bF4xr5rXzOvmDfOmecu8bd4x75r3zPvmA/Oh+ch8bD4xn5rPzOfmC/Ol+cp8bb4x35rvzPfmB/Oj+cn8bH4xE8yv5jfzu/nD/Gn+Mn+bf8y/5j8z0Uwyk1nJrRRWSiuVldpKY6W10lnprQxWRiuTldnKYmW1slnZrRxWTiuXldvKY+W18ln5rTirgFXQKmQVtopYRa1iVnGrhFXSKmWVtspYZa1yVnmrglXRqmRVtqpYVa1qVnWrhlXTqmXVtupYda16Vn2rgdXQamQ1tppYTa1mVnOrhdXSamW1ttpYba12Vnurg9XR6mR1trpYXa1uVnerh9XT6mVhFm4RFmlRFm0xFmtxFm8JlmhJlmwplmpplm4ZlmlZlm05lmt5lm8FVmhFFrCghayY9Z/V2+pj9bX6Wf2tAdZAK94aZA22hlhDrWHWcGuENdIaZY22xlhjrXHWeGuCNdGaZE22plhTrWnWdGuGNdOaZc225lhzrXnWfGuBtdBaZC22llhLrWXWcmuFtdJaZa221lhrrXXWemuDtdHaZG22tlhbrW3WdmuHtdPaZe229lh7rX3WfuuAddA6ZB22jlhHrWPWceuEddI6ZZ22zlhnrXPWeeuCddG6ZF22rlhXrWvWdeuGddO6Zd227lh3rXvWfeuB9dB6ZD22nlhPrWfWc+uF9dJ6Zb223lhvrXfWe+uD9dH6ZH22vlgJ1lfrm/Xd+mH9tH5Zv60/1l/rn5VoJVnJ7OR2CjulncpObaex09rp7PR2BjujncnObGexs9rZ7Ox2DjunncvObeex89r57Px2nF3ALmgXsgvbReyidjG7uF3CLmmXskvbZeyydjm7vF3BrmhXsivbVeyqdjW7ul3DrmnXsmvbdey6dj27vt3Abmg3shvbTeymdjO7ud3Cbmm3slvbbey2dju7vd3B7mh3sjvbXeyudje7u93D7mn3sjEbtwmbtCmbthmbtTmbtwVbtCVbthVbtTVbtw3btC3bth3btT3btwM7tCMb2NBGdsz+z+5t97H72v3s/vYAe6Adbw+yB9tD7KH2MHu4PcIeaY+yR9tj7LH2OHu8PcGeaE+yJ9tT7Kn2NHu6PcOeac+yZ9tz7Ln2PHu+vcBeaC+yF9tL7KX2Mnu5vcJeaa+yV9tr7LX2Onu9vcHeaG+yN9tb7K32Nnu7vcPeae+yd9t77L32Pnu/fcA+aB+yD9tH7KP2Mfu4fcI+aZ+yT9tn7LP2Ofu8fcG+aF+yL9tX7Kv2Nfu6fcO+ad+yb9t37Lv2Pfu+/cB+aD+yH9tP7Kf2M/u5/cJ+ab+yX9tv7Lf2O/u9/cH+aH+yP9tf7AT7q/3N/m7/sH/av+zf9h/7r/3PTrST7GROcieFk9JJ5aR20jhpnXROeieDk9HJ5GR2sjhZnWxOdieHk9PJ5eR28jh5nXxOfifOKeAUdAo5hZ0iTlGnmFPcKeGUdEo5pZ0yTlmnnFPeqeBUdCo5lZ0qTlWnmlPdqeHUdGo5tZ06Tl2nnlPfaeA0dBo5jZ0mTlOnmdPcaeG0dFo5rZ02TlunndPe6eB0dDo5nZ0uTlenm9Pd6eH0dHo5mIM7hEM6lEM7jMM6nMM7giM6kiM7iqM6mqM7hmM6lmM7juM6nuM7gRM6kQMc6CAn5vzn9Hb6OH2dfk5/Z4Az0Il3BjmDnSHOUGeYM9wZ4Yx0RjmjnTHOWGecM96Z4Ex0JjmTnSnOVGeaM92Z4cx0ZjmznTnOXGeeM99Z4Cx0FjmLnSXOUmeZs9xZ4ax0VjmrnTXOWmeds97Z4Gx0NjmbnS3OVmebs93Z4ex0djm7nT3OXmefs9854Bx0DjmHnSPOUeeYc9w54Zx0TjmnnTPOWeecc9654Fx0LjmXnSvOVeeac9254dx0bjm3nTvOXeeec9954Dx0HjmPnSfOU+eZ89x54bx0XjmvnTfOW+ed89754Hx0PjmfnS9OgvPV+eZ8d344P51fzm/nj/PX+eckOklOMje5m8JN6aZyU7tp3LRuOje9m8HN6GZyM7tZ3KxuNje7m8PN6eZyc7t53LxuPje/G+cWcAu6hdzCbhG3qFvMLe6WcEu6pdzSbhm3rFvOLe9WcCu6ldzKbhW3qlvNre7WcGu6tdzabh23rlvPre82cBu6jdzGbhO3qdvMbe62cFu6rdzWbhu3rdvObe92cDu6ndzObhe3q9vN7e72cHu6vVzMxV3CJV3KpV3GZV3O5V3BFV3JlV3FVV3N1V3DNV3LtV3HdV3P9d3ADd3IBS50kRtz/3N7u33cvm4/t787wB3oxruD3MHuEHeoO8wd7o5wR7qj3NHuGHesO84d705wJ7qT3MnuFHeqO82d7s5wZ7qz3NnuHHeuO8+d7y5wF7qL3MXuEnepu8xd7q5wV7qr3NXuGnetu85d725wN7qb3M3uFneru83d7u5wd7q73N3uHnevu8/d7x5wD7qH3MPuEfeoe8w97p5wT7qn3NPuGfese849715wL7qX3MsJV9yr7jX3unvDvenecm+7d9y77j33vvvAfeg+ch+7T9yn7jP3ufvCfem+cl+7b9y37jv3vfvB/eh+cj+7X9wE96v7zf3u/nB/ur/c3+4f96/7z010k9xkXnIvhZfSS+Wl9tJ4ab10Xnovg5fRy+Rl9rJ4Wb1sXnYvh5fTy+Xl9vJ4eb18Xn4vzivgFfQKeYW9Il5Rr5hX3CvhlfRKeaW9Ml5Zr5xX3qvgVfQqeZW9Kl5Vr5pX3avh1fRqebW9Ol5dr55X32vgNfQaeY29Jl5Tr5nX3GvhtfRaea29Nl5br53X3uvgdfQ6eZ29Ll5Xr5vX3evh9fR6eZiHe4RHepRHe4zHepzHe4InepIne4qnepqne4ZnepZne47nep7ne4EXepEHPOghL+b95/X2+nh9vX5ef2+AN9CL9wZ5g70h3lBvmDfcG+GN9EZ5o70x3lhvnDfem+BN9CZ5k70p3lRvmjfdm+HN9GZ5s7053lxvnjffW+At9BZ5i70l3lJvmbfcW+Gt9FZ5q7013lpvnbfe2+Bt9DZ5m70t3lZvm7fd2+Ht9HZ5u7093l5vn7ffO+Ad9A55h70j3lHvmHfcO+Gd9E55p70z3lnvnHfeu+Bd9C55l70r3lXvmnfdu+Hd9G55t7073l3vnnffe+A99B55j70n3lPvmffce+G99F55r7033lvvnffe++B99D55n70vXoL31fvmffd+eD+9X95v74/31/vnJXpJXjI/uZ/CT+mn8lP7afy0fjo/vZ/Bz+hn8jP7WfysfjY/u5/Dz+nn8nP7efy8fj4/vx/nF/AL+oX8wn4Rv6hfzC/ul/BL+qX80n4Zv6xfzi/vV/Ar+pX8yn4Vv6pfza/u1/Br+rX82n4dv65fz6/vN/Ab+o38xn4Tv6nfzG/ut/Bb+q381n4bv63fzm/vd/A7+p38zn4Xv6vfze/u9/B7+r18zMd9wid9yqd9xmd9zud9wRd9yZd9xVd9zdd9wzd9y7d9x3d9z/f9wA/9yAc+9JEf8//ze/t9/L5+P7+/P8Af6Mf7g/zB/hB/qD/MH+6P8Ef6o/zR/hh/rD/OH+9P8Cf6k/zJ/hR/qj/Nn+7P8Gf6s/zZ/hx/rj/Pn+8v8Bf6i/zF/hJ/qb/MX+6v8Ff6q/zV/hp/rb/OX+9v8Df6m/zN/hZ/q7/N3+7v8Hf6u/zd/h5/r7/P3+8f8A/6h/zD/hH/qH/MP+6f8E/6p/zT/hn/rH/OP+9f8C/6l/zL/hX/qn/Nv+7f8G/6t/zb/h3/rn/Pv+8/8B/6j/zH/hP/qf/Mf+6/8F/6r/zX/hv/rf/Of+9/8D/6n/zP/hc/wf/qf/O/+z/8n/4v/7f/x//r//MT/SQ/WZA8SBGkDFIFqYM0QdogXZA+yBBkDDIFmYMsQdYgW5A9yBHkDHIFuYM8Qd4gX5A/iAsKBAWDQkHhoEhQNCgWFA9KBCWDUkHpoExQNigXlA8qBBWDSkHloEpQNagWVA9qBDWDWkHtoE5QN6gX1A8aBA2DRkHjoEnQNGgWNA9aBC2DVkHroE3QNmgXtA86BB2DTkHnoEvQNegWdA96BD2DXgEW4AERkAEV0AETsAEX8IEQiIEUyIESqIEW6IERmIEV2IETuIEX+EEQhEEUgAAGKIgF/wW9gz5B36Bf0D8YEAwM4oNBweBgSDA0GBYMD0YEI4NRwehgTDA2GBeMDyYEE4NJweRgSjA1mBZMD2YEM4NZwexgTjA3mBfMDxYEC4NFweJgSbA0WBYsD1YEK4NVwepgTbA2WBesDzYEG4NNweZgS7A12BZsD3YEO4Ndwe5gT7A32BfsDw4EB4NDweHgSHA0OBYcD04EJ4NTwengTHA2OBecDy4EF4NLweXgSnA1uBZcD24EN4Nbwe3gTnA3uBfcDx4ED4NHwePgSfA0eBY8D14EL4NXwevgTfA2eBe8Dz4EH4NPwefgS5AQfA2+Bd+DH8HP4FfwO/gT/A3+BYlBUpAsTB6mCFOGqcLUYZowbZguTB9mCDOGmcLMYZYwa5gtzB7mCHOGucLcYZ4wb5gvzB/GhQXCgmGhsHBYJCwaFguLhyXCkmGpsHRYJiwblgvLhxXCimGlsHJYJawaVgurhzXCmmGtsHZYJ6wb1gvrhw3ChmGjsHHYJGwaNgubhy3ClmGrsHXYJmwbtgvbhx3CjmGnsHPYJewadgu7hz3CnmGvEAvxkAjJkArpkAnZkAv5UAjFUArlUAnVUAv10AjN0Art0And0Av9MAjDMApBCEMUxsL/wt5hn7Bv2C/sHw4IB4bx4aBwcDgkHBoOC4eHI8KR4ahwdDgmHBuOC8eHE8KJ4aRwcjglnBpOC6eHM8KZ4axwdjgnnBvOC+eHC8KF4aJwcbgkXBouC5eHK8KV4apwdbgmXBuuC9eHG8KN4aZwc7gl3BpuC7eHO8Kd4a5wd7gn3BvuC/eHB8KD4aHwcHgkPBoeC4+HJ8KT4anwdHgmPBueC8+HF8KL4aXwcnglvBpeC6+HN8Kb4a3wdngnvBveC++HD8KH4aPwcfgkfBo+C5+HL8KX4avwdfgmfBu+C9+HH8KP4afwc/glTAi/ht/C7+GP8Gf4K/wd/gn/hv/CxDApTBYlj1JEKaNUUeooTZQ2SheljzJEGaNMUeYoS5Q1yhZlj3JEOaNcUe4oT5Q3yhflj+KiAlHBqFBUOCoSFY2KRcWjElHJqFRUOioTlY3KReWjClHFqFJUOaoSVY2qRdWjGlHNqFZUO6oT1Y3qRfWjBlHDqFHUOGoSNY2aRc2jFlHLqFXUOmoTtY3aRe2jDlHHqFPUOeoSdY26Rd2jHlHPqFeERXhERGRERXTERGzERXwkRGIkRXKkRGqkRXpkRGZkRXbkRG7kRX4URGEURSCCEYpi0X9R76hP1DfqF/WPBkQDo/hoUDQ4GhINjYZFw6MR0choVDQ6GhONjcZF46MJ0cRoUjQ5mhJNjaZF06MZ0cxoVjQ7mhPNjeZF86MF0cJoUbQ4WhItjZZFy6MV0cpoVbQ6WhOtjdZF66MN0cZoU7Q52hJtjbZF26Md0c5oV7Q72hPtjfZF+6MD0cHoUHQ4OhIdjY5Fx6MT0cnoVHQ6OhOdjc5F56ML0cXoUnQ5uhJdja5F16Mb0c3oVnQ7uhPdje5F96MH0cPoUfQ4ehI9jZ5Fz6MX0cvoVfQ6ehO9jd5F76MP0cfoU/Q5+hIlRF+jb9H36Ef0M/oV/Y7+RH+jf1FilBQlA8lBCpASpAKpQRqQFqQD6UEGkBFkAplBFpAVZAPZQQ6QE+QCuUEekBfkA/lBHCgACoJCoDAoAoqCYqA4KAFKglKgNCgDyoJyoDyoACqCSqAyqAKqgmqgOqgBaoJaoDaoA+qCeqA+aAAagkagMWgCmoJmoDloAVqCVqA1aAPagnagPegAOoJOoDPoArqCbqA76AF6gl4AAzggAAkoQAMGsIADPBCACCQgAwWoQAM6MIAJLGADB7jAAz4IQAgiAAAECMTAf6A36AP6gn6gPxgABoJ4MAgMBkPAUDAMDAcjwEgwCowGY8BYMA6MBxPARDAJTAZTwFQwDUwHM8BMMAvMBnPAXDAPzAcLwEKwCCwGS8BSsAwsByvASrAKrAZrwFqwDqwHG8BGsAlsBlvAVrANbAc7wE6wC+wGe8BesA/sBwfAQXAIHAZHwFFwDBwHJ8BJcAqcBmfAWXAOnAcXwEVwCVwGV8BVcA1cBzfATXAL3AZ3wF1wD9wHD8BD8Ag8Bk/AU/AMPAcvwEvwCrwGb8Bb8A68Bx/AR/AJfAZfQAL4Cr6B7+AH+Al+gd/gD/gL/oFEkASSweQwBUwJU8HUMA1MC9PB9DADzAgzwcwwC8wKs8HsMAfMCXPB3DAPzAvzwfwwDhaABWEhWBgWgUVhMVgcloAlYSlYGpaBZWE5WB5WgBVhJVgZVoFVYTVYHdaANWEtWBvWgXVhPVgfNoANYSPYGDaBTWEz2By2gC1hK9gatoFtYTvYHnaAHWEn2Bl2gV1hN9gd9oA9YS+IQRwSkIQUpCEDWchBHgpQhBKUoQJVqEEdGtCEFrShA13oQR8GMIQRBBBCBGPwP9gb9oF9YT/YHw6AA2E8HAQHwyFwKBwGh8MRcCQcBUfDMXAsHAfHwwlwIpwEJ8MpcCqcBqfDGXAmnAVnwzlwLpwH58MFcCFcBBfDJXApXAaXwxVwJVwFV8M1cC1cB9fDDXAj3AQ3wy1wK9wGt8MdcCfcBXfDPXAv3Af3wwPwIDwED8Mj8Cg8Bo/DE/AkPAVPwzPwLDwHz8ML8CK8BC/DK/AqvAavwxvwJrwFb8M78C68B+/DB/AhfAQfwyfwKXwGn8MX8CV8BV/DN/AtfAffww/wI/wEP8MvMAF+hd/gd/gD/oS/4G/4B/6F/2AiTILJUHKUAqVEqVBqlAalRelQepQBZUSZUGaUBWVF2VB2lAPlRLlQbpQH5UX5UH4UhwqggqgQKoyKoKKoGCqOSqCSqBQqjcqgsqgcKo8qoIqoEqqMqqCqqBqqjmqgmqgWqo3qoLqoHqqPGqCGqBFqjJqgpqgZao5aoJaoFWqN2qC2qB1qjzqgjqgT6oy6oK6oG+qOeqCeqBfCEI4IRCIK0YhBLOIQjwQkIgnJSEEq0pCODGQiC9nIQS7ykI8CFKIIAQQRQjH0H+qN+qC+qB/qjwaggSgeDUKD0RA0FA1Dw9EINBKNQqPRGDQWjUPj0QQ0EU1Ck9EUNBVNQ9PRDDQTzUKz0Rw0F81D89ECtBAtQovRErQULUPL0Qq0Eq1Cq9EatBatQ+vRBrQRbUKb0Ra0FW1D29EOtBPtQrvRHrQX7UP70QF0EB1Ch9ERdBQdQ8fRCXQSnUKn0Rl0Fp1D59EFdBFdQpfRFXQVXUPX0Q10E91Ct9EddBfdQ/fRA/QQPUKP0RP0FD1Dz9EL9BK9Qq/RG/QWvUPv0Qf0EX1Cn9EXlIC+om/oO/qBfqJf6Df6g/6ifygRJaFkseSxFLGUsVSx1LE0sbSxdLH0sQyxjLFMscyxLLGssWyx7LEcsZyxXLHcsTyxvLF8sfyxuFiBWMFYoVjhWJFY0VixWPFYiVjJWKlY6ViZWNlYuVj5WIVYxVilWOVYlVjVWLVY9ViNWM1YrVjtWJ1Y3Vi9WP1Yg1jDWKNY41iTWNNYs1jzWItYy1irWOtYm1jbWLtY+1iHWMdYp1jnWJdY11i3WPdYj1jPWK8YFsNjRIyMUTE6xsTYGPc/i/W4mGeTAAA0aVPbtm3bto3U5mPbmpm3tm3btm3bbvfHfucqDjYAG4gNwgZjidgQbCg2DBuOjcBGYqOw0dgYbCw2DhuPTcAmYpOwydgUbCqGYThGYCRGYTTGYCzGYTwmYCImYTKmYCqmYTpmYCZmYTbmYC7mYT4WYCEWYQCDGMJi2DRsOjYDm4nNwmZjc7C52DxsPrYAW4gtwhZjS7Cl2DJsObYCW4mtwlZja7C12DpsPbYB24htwjZjW7Ct2DZsO7YD24ntwnZje7C92D5sP3YAO4gdwg5jR7Cj2DHsOHYCO4mdwk5jZ7Cz2DnsPHYBu4hdwi5jV7Cr2DXsOnYDu4ndwm5jd7C72D3sPvYAe4g9wh5jT7Cn2DPsOfYCe4m9wl5jb7C32DvsPfYB+4h9wj5jX7Cv2DfsO/YD+4n9wn5jf7C/2D8sDo/Hk+BJ8QQ8GZ4cT4GnxFPhqfE0eFo8HZ4ez4BnxDPhmfEseFY8G54dz4HnxHPhufE8eF48H54fL4AXxAvhhfEieFG8GF4cL4GXxEvhpfEyeFm8HF4er4BXxCvhlfEqeFW8Gl4dr4HXxGvhtfE6eF28Hl4fb4A3xBvhjfEmeFO8Gd4cb4G3xFvhrfE2eFu8Hd4e74B3xDvhnfEueFe8G94d74H3xHvhvfE+eF+8H94fH4APxAfhg/FEfAg+FB+GD8dH4CPxUfhofAw+Fh+Hj8cn4BPxSfhkfAo+FcdwHCdwEqdwGmdwFudwHhdwEZdwGVdwFddwHTdwE7dwG3dwF/dwHw/wEI9wgEMc4TF8Gj4dn4HPxGfhs/E5+Fx8Hj4fX4AvxBfhi/El+FJ8Gb4cX4GvxFfhq/E1+Fp8Hb4e34BvxDfhm/Et+FZ8G74d34HvxHfhCXF78L34Pnw/fgA/iB/CD+NH8KP4Mfw4fgI/iZ/CT+Nn8LP4Ofw8fgG/iF/CL+NX8Kv4Nfw6fgO/id/Cb+N38Lv4Pfw+/gB/iD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8K/4N/w7/gP/if/Cf+N/8L/4PzyOiCeSEEmJBCIZkZxIQaQkUhGpiTREWiIdkZ7IQGQkMhGZiSxEViIbkZ3IQeQkchG5iTxEXiIfkZ8oQBQkChGFiSJEUaIYUZwoQZQkShGliTJEWaIcUZ6oQFQkKhGViSpEVaIaUZ2oQdQkahG1iTpEXaIeUZ9oQDQkGhGNiSZEU6IZ0ZxoQbQkWhGtiTZEW6Id0Z7oQHQkOhGdiS5EV6Ib0Z3oQfQkehG9iT5EX6If0Z8YQAwkBhGDiURiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVwAicIAiSoAiaYAiW4AieEAiRkAiZUAiV0AidMAiTsAibcAiX8AifCIiQiAhAQAIRMWIaMZ2YQcwkZhGziTnEXGIeMZ9YQCwkFhGLiSXEUmIZsZxYQawkVhGriTXEWmIdsZ7YQGwkNhGbiS3EVmIbsZ3YQewkdhG7iT3EXmIfsZ84QBwkDhGHiSPEUeIYcZw4QZwkThGniTPEWeIccZ64QFwkLhGXiSvEVeIacZ24QdwkbhG3iTvEXeIecZ94QDwkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS/EV+Ib8Z34QfwkfhG/iT/EX+IfEUfGk0nIpGQCmYxMTqYgU5KpyNRkGjItmY5MT2YgM5KZyMxkFjIrmY3MTuYgc5K5yNxkHjIvmY/MTxYgC5KFyMJkEbIoWYwsTpYgS5KlyNJkGbIsWY4sT1YgK5KVyMpkFbIqWY2sTtYga5K1yNpkHbIuWY+sTzYgG5KNyMZkE7Ip2YxsTrYgW5KtyNZkG7It2Y5sT3YgO5KdyM5kF7Ir2Y3sTvYge5K9yN5kH7Iv2Y/sTw4gB5KDyMFkIjmEHEoOI4eTI8iR5ChyNDmGHEuOI8eTE8iJ5CRyMjmFnEpiJE4SJElSJE0yJEtyJE8KpEhKpEwqpEpqpE4apElapE06pEt6pE8GZEhGJCAhicgYOY2cTs4gZ5KzyNnkHHIuOY+cTy4gF5KLyMXkEnIpuYxcTq4gV5KryNXkGnItuY5cT24gN5KbyM3kFnIruY3cTu4gd5K7yN3kHnIvuY/cTx4gD5KHyMPkEfIoeYw8Tp4gT5KnyNPkGfIseY48T14gL5KXyMvkFfIqeY28Tt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kH/Iv+Y+Mo+KpJFRSKoFKRiWnUlApqVRUaioNlZZKR6WnMlAZqUxUZioLlZXKRmWnclA5qVxUbioPlZfKR+WnClAFqUJUYaoIVZQqRhWnSlAlqVJUaaoMVZYqR5WnKlAVqUpUZaoKVZWqRlWnalA1qVpUbaoOVZeqR9WnGlANqUZUY6oJ1ZRqRjWnWlAtqVZUa6oN1ZZqR7WnOlAdqU5UZ6oL1ZXqRnWnelA9qV5Ub6oP1ZfqR/WnBlADqUHUYCqRGkINpYZRw6kR1EhqFDWaGkONpcZR46kJ1ERqEjWZmkJNpTAKpwiKpCiKphiKpTiKpwRKpCRKphRKpTRKpwzKpCzKphzKpTzKpwIqpCIKUJBCVIyaRk2nZlAzqVnUbGoONZeaR82nFlALqUXUYmoJtZRaRi2nVlArqVXUamoNtZZaR62nNlAbqU3UZmoLtZXaRm2ndlA7qV3UbmoPtZfaR+2nDlAHqUPUYeoIdZQ6Rh2nTlAnqVPUaeoMdZY6R52nLlAXqUvUZeoKdZW6Rl2nblA3qVvUbeoOdZe6R92nHlAPqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R72nPlAfqU/UZ+oL9ZX6Rn2nflA/qV/Ub+oP9Zf6R8XR8XQSOimdQCejk9Mp6JR0Kjo1nYZOS6ej09MZ6Ix0JjoznYXOSmejs9M56Jx0Ljo3nYfOS+ej89MF6IJ0IbowXYQuSheji9Ml6JJ0Kbo0XYYuS5ejy9MV6Ip0JboyXYWuSlejq9M16Jp0Lbo2XYeuS9ej69MN6IZ0I7ox3YRuSjejm9Mt6JZ0K7o13YZuS7ej29Md6I50J7oz3YXuSneju9M96J50L7o33YfuS/ej+9MD6IH0IHownUgPoYfSw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafSGI3TBE3SFE3TDM3SHM3TAi3SEi3TCq3SGq3TBm3SFm3TDu3SHu3TAR3SEQ1oSCM6Rk+jp9Mz6Jn0LHo2PYeeS8+j59ML6IX0InoxvYReSi+jl9Mr6JX0Kno1vYZeS6+j19Mb6I30JnozvYXeSm+jt9M76J30Lno3vYfeS++j99MH6IP0IfowfYQ+Sh+jj9Mn6JP0Kfo0fYY+S5+jz9MX6Iv0JfoyfYW+Sl+jr9M36Jv0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZ+S7+j39Mf6I/0J/oz/YX+Sn+jv9M/6J/0L/o3/Yf+S/+j45h4JgmTlElgkjHJmRRMSiYVk5pJw6Rl0jHpmQxMRiYTk5nJwmRlsjHZmRxMTiYXk5vJw+Rl8jH5mQJMQaYQU5gpwhRlijHFmRJMSaYUU5opw5RlyjHlmQpMRaYSU5mpwlRlqjHVmRpMTaYWU5upw9Rl6jH1mQZMQ6YR05hpwjRlmjHNmRZMS6YV05ppw7Rl2jHtmQ5MR6YT05npwnRlujHdmR5MT6YX05vpw/Rl+jH9mQHMQGYQM5hJZIYwQ5lhzHBmBDOSGcWMZsYwY5lxzHhmAjORmcRMZqYwUxmMwRmCIRmKoRmGYRmO4RmBERmJkRmFURmN0RmDMRmLsRmHcRmP8ZmACZmIAQxkEBNjpjHTmRnMTGYWM5uZw8xl5jHzmQXMQmYRs5hZwixlljHLmRXMSmYVs5pZw6xl1jHrmQ3MRmYTs5nZwmxltjHbmR3MTmYXs5vZw+xl9jHxCQeYg8wh5jBzhDnKHGOOMyeYk8wp5jRzhjnLnGPOMxeYi8wl5jJzhbnKXGOuMzeYm8wt5jZzh7nL3GPuMw+Yh8wj5jHzhHnKPGOeMy+Yl8wr5jXzhnnLvGPeMx+Yj8wn5jPzhfnKfGO+Mz+Yn8wv5jfzh/nL/GPi2Hg2CZuUTWCTscnZFGxKNhWbmk3DpmXTsenZDGxGNhObmc3CZmWzsdnZHGxONhebm83D5mXzsfnZAmxBthBbmC3CFmWLscXZEmxJthRbmi3DlmXLseXZCmxFthJbma3CVmWrsdXZGmxNthZbm63D1mXrsfXZBmxDthHbmG3CNmWbsc3ZFmxLthXbmm3DtmXbse3ZDmxHthPbme3CdmW7sd3ZHmxPthfbm+3D9mX7sf3ZAexAdhA7mE1kh7BD2WHscHYEO5IdxY5mx7Bj2XHseHYCO5GdxE5mp7BTWYzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYu1WYd1WY/12YAN2YgFLGQRG2OnsdPZGexMdhY7m53DzmXnsfPZBexCdhG7mF3CLmWXscvZFexKlo9bza5h17Lr2PXsBnYju4ndzG5ht7Lb2O3sDnYnu4vdze5h97L72P3sAfYge4g9zB5hj7LH2OPsCfYke4o9zZ5hz7Ln2PPsBfYie4m9zF5hr7LX2OvsDfYme4u9zd5h77L32PvsA/Yh+4h9zD5hn7LP2OfsC/Yl+4p9zb5h37Lv2PfsB/Yj+4n9zH5hv7Lf2O/sD/Yn+4v9zf5h/7L/2DgunkvCJeUSuGRcci4Fl5JLxaXm0nBpuXRcei4Dl5HLxGXmsnBZuWxcdi4Hl5PLxeXm8nB5uXxcfq4AV5ArxBXminBFuWJcca4EV5IrxZXmynBluXJcea4CV5GrxFXmqnBVuWpcda4GV5OrxdXm6nB1uXpcfa4B15BrxDXmmnBNuWZcc64F15JrxbXm2nBtuXZce64D15HrxHXmunBduW5cd64H15PrxfXm+nB9uX5cf24AN5AbxA3mErkh3FBuGDecG8GN5EZxo7kx3FhuHDeem8BN5CZxk7kp3FQO43CO4EiO4miO4ViO43hO4ERO4mRO4VRO43TO4EzO4mzO4VzO43wu4EIu4gAHOcTFuGncdG4GN5Obxc3m5nBzuXncfG4Bt5BbxC3mlnBLuWXccm4Ft5Jbxa3m1nBruXXcem4Dt5HbxG3mtnBbuW3cdm4Ht5Pbxe3m9nB7uX3cfu4Ad5A7xB3mjnBHuWPcce4Ed5I7xZ3mznBnuXPcee4Cd5G7xF3mrnBXuWvcde4Gd5O7xd3m7nB3uXvcfe4B95B7xD3mnnBPuWfcc+4F95J7xb3m3nBvuXfce+4D95H7xH3mvnBfuW/cd+4H95P7xf3m/nB/uX9cHB/PJ+GT8gl8Mj45n4JPyafiU/Np+LR8Oj49n4HPyGfiM/NZ+Kx8Nj47n4PPyefic/N5+Lx8Pj4/X4AvyBfiC/NF+KJ8Mb44X4IvyZfiS/Nl+LJ8Ob48X4GvyFfiK/NV+Kp8Nb46X4Ovydfia/N1+Lp8Pb4+34BvyDfiG/NN+KZ8M74534JvybfiW/Nt+LZ8O74934HvyHfiO/Nd+K58N74734Pvyffie/N9+L58P74/P4AfyA/iB/OJ/BB+KD+MH86P4Efyo/jR/Bh+LD+OH89P4Cfyk/jJ/BR+Ko/xOE/wJE/xNM/wLM/xPC/wIi/xMq/wKq/xOm/wJm/xNu/wLu/xPh/wIR/xgIc84mP8NH46P4Ofyc/iZ/Nz+Ln8PH4+v4BfyC/iF/NL+KX8Mn45v4Jfya/iV/Nr+LX8On49v4HfyG/iN/Nb+K38Nn47v4Pfye/id/N7+L38Pn4/f4A/yB/iD/NH+KP8Mf44f4I/yZ/iT/Nn+LP8Of48f4G/yF/iL/NX+Kv8Nf46f4O/yd/ib/N3+Lv8Pf4+/4B/yD/iH/NP+Kf8M/45/4J/yb/iX/Nv+Lf8O/49/4H/yH/iP/Nf+K/8N/47/4P/yf/if/N/+L/8Pz5OiBeSCEmFBCGZkFxIIaQUUgmphTRCWiGdkF7IIGQUMgmZhSxCViGbkF3IIeQUcgm5hTxCXiGfkF8oIBQUCgmFhSJCUaGYUFwoIZQUSgmlhTJCWaGcUF6oIFQUKgmVhSpCVaGaUF2oIdQUagm1hTpCXaGeUF9oIDQUGgmNhSZCU6GZ0FxoIbQUWgmthTZCW6Gd0F7oIHQUOgmdhS5CV6Gb0F3oIfQUegm9hT5CX6Gf0F8YIAwUBgmDhURhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVwARcIARSoARaYARW4AReEARRkARZUARV0ARdMARTsARbcARX8ARfCIRQiAQgQAEJMWGaMF2YIcwUZgmzhTnCXGGeMF9YICwUFgmLhSXCUmGZsFxYIawUVgmrhTXCWmGdsF7YIGwUNgmbhS3CVmGbsF3YIewUdgm7hT3CXmGfsF84IBwUDgmHhSPCUeGYcFw4IZwUTgmnhTPCWeGccF64IFwULgmXhSvCVeGacF24IdwUbgm3hTvCXeGecF94IDwUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS/CV+Gb8F34IfwUfgm/hT/CX+GfECfGi0nEpGKCmExMLqYQU4qpxNRiGjGtmE5ML2YQM4qZxMxiFjGrmE3MLuYQc4q5xNxiHjGvmE/MLxYQC4qFxMJiEbGoWEwsLpYQS4qlxNJiGbGsWE4sL1YQK4qVxMpiFbGqWE2sLtYQa4q1xNpiHbGuWE+sLzYQG4qNxMZiE7Gp2ExsLrYQW4qtxNZiG7Gt2E5sL3YQO4qdxM5iF7Gr2E3sLvYQe4q9xN5iH7Gv2E/sLw4QB4qDxMFiojhEHCoOE4eLI8SR4ihxtDhGHCuOE8eLE8SJ4iRxsjhFnCpiIi4SIilSIi0yIityIi8KoihKoiwqoipqoi4aoilaoi06oit6oi8GYihGIhChiMSYOE2cLs4QZ4qzxNniHHGuOE+cLy4QF4qLxMXiEnGpuExcLq4QV4qrxNXiGnGtuE5cL24QN4qbxM3iFnGruE3cLu4Qd4q7xN3iHnGvuE/cLx4QD4qHxMPiEfGoeEw8Lp4QT4qnxNPiGfGseE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iF/Gr+E38Lv4Qf4q/xN/iH/Gv+E+Mk+KlJFJSKUFKJiWXUkgppVRSaimNlFZKJ6WXMkgZpUxSZimLlFXKJmWXckg5pVxSbimPlFfKJ+WXCkgFpUJSYamIVFQqJhWXSkglpVJSaamMVFYqJ5WXKkgVpUpSZamKVFWqJlWXakg1pVpSbamOVFeqJ9WXGkgNpUZSY6mJ1FRqJjWXWkgtpVZSa6mN1FZqJ7WXOkgdpU5SZ6mL1FXqJnWXekg9pV5Sb6mP1FfqJ/WXBkgDpUHSYClRGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlTAJlwiJlCiJlhiJlTiJlwRJlCRJlhRJlTRJlwzJlCzJlhzJlTzJlwIplCIJSFBCUkyaJk2XZkgzpVnSbGmONFeaJ82XFkgLpUXSYmmJtFRaJi2XVkgrpVXSammNtFZaJ62XNkgbpU3SZmmLtFXaJm2Xdkg7pV3SbmmPtFfaJ+2XDkgHpUPSYemIdFQ6Jh2XTkgnpVPSaemMdFY6J52XLkgXpUvSZemKdFW6Jl2Xbkg3pVvSbemOdFe6J92XHkgPpUfSY+mJ9FR6Jj2XXkgvpVfSa+mN9FZ6J72XPkgfpU/SZ+mL9FX6Jn2Xfkg/pV/Sb+mP9Ff6J8XJ8XISOamcICeTk8sp5JRyKjm1nEZOK6eT08sZ5IxyJjmznEXOKmeTs8s55JxyLjm3nEfOK+eT88sF5IJyIbmwXEQuKheTi8sl5JJyKbm0XEYuK5eTy8sV5IpyJbmyXEWuKleTq8s15JpyLbm2XEeuK9eT68sN5IZyI7mx3ERuKjeTm8st5JZyK7m13EZuK7eT28sd5I5yJ7mz3EXuKneTu8s95J5yL7m33EfuK/eT+8sD5IHyIHmwnCgPkYfKw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafKmIzLhEzKlEzLjMzKnMzLgizKkizLiqzKmqzLhmzKlmzLjuzKnuzLgRzKkQxkKCM5Jk+Tp8sz5JnyLHm2PEeeK8+T58sL5IXyInmxvEReKi+Tl8sr5JXyKnm1vEZeK6+T18sb5I3yJnmzvEXeKm+Tt8s75J3yLnm3vEfeK++T98sH5IPyIfmwfEQ+Kh+Tj8sn5JPyKfm0fEY+K5+Tz8sX5IvyJfmyfEW+Kl+Tr8s35JvyLfm2fEe+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZ+K7+T38sf5I/yJ/mz/EX+Kn+Tv8s/5J/yL/m3/Ef+K/+T45R4JYmSVElQkinJlRRKSiWVklpJo6RV0inplQxKRiWTklnJomRVsinZlRxKTiWXklvJo+RV8in5lQJKQaWQUlgpohRViinFlRJKSaWUUlopo5RVyinllQpKRaWSUlmpolRVqinVlRpKTaWWUlupo9RV6in1lQZKQ6WR0lhpojRVminNlRZKS6WV0lppo7RV2intlQ5KR6WT0lnponRVuindlR5KT6WX0lvpo/RV+in9lQHKQGWQMlhJVIYoQ5VhynBlhDJSGaWMVsYoY5VxynhlgjJRmaRMVqYoUxVMwRVCIRVKoRVGYRVO4RVBERVJkRVFURVN0RVDMRVLsRVHcRVP8ZVACZVIAQpUkBJTpinTlRnKTGWWMluZo8xV5inzlQXKQmWRslhZoixVlinLlRXKSmWVslpZo6xV1inrlQ3KRmWTslnZomxVtinblR3KTmWXslvZo+xV9in7lQPKQeWQclg5ohxVjinHlRPKSeWUclo5o5xVzinnlQvKReWSclm5olxVrinXlRvKTeWWclu5o9xV7in3lQfKQ+WR8lh5ojxVninPlRfKS+WV8lp5o7xV3invlQ/KR+WT8ln5onxVvinflR/KT+WX8lv5o/xV/ilxaryaRE2qJqjJ1ORqCjWlmkpNraZR06rp1PRqBjWjmknNrGZRs6rZ1OxqDjWnmkvNreZR86r51PxqAbWgWkgtrBZRi6rF1OJqCbWkWkotrZZRy6rl1PJqBbWiWkmtrFZRq6rV1OpqDbWmWkutrdZR66r11PpqA7Wh2khtrDZRm6rN1OZqC7Wl2kptrbZR26rt1PZqB7Wj2kntrHZRu6rd1O5qD7Wn2kvtrfZR+6r91P7qAHWgOkgdrCaqQ9Sh6jB1uDpCHamOUkerY9Sx6jh1vDpBnahOUierU9SpKqbiKqGSKqXSKqOyKqfyqqCKqqTKqqKqqqbqqqGaqqXaqqO6qqf6aqCGaqQCFapIjanT1OnqDHWmOkudrc5R56rz1PnqAnWhukhdrC5Rl6rL1OXqCnWlukpdra5R16rr1PXqBnWjukndrG5Rt6rb1O3qDnWnukvdre5R96r71P3qAfWgekg9rB5Rj6rH1OPqCfWkeko9rZ5Rz6rn1PPqBfWiekm9rF5Rr6rX1OvqDfWmeku9rd5R76r31PvqA/Wh+kh9rD5Rn6rP1OfqC/Wl+kp9rb5R36rv1PfqB/Wj+kn9rH5Rv6rf1O/qD/Wn+kv9rf5R/6r/1DgtXkuiJdUStGRaci2FllJLpaXW0mhptXRaei2DllHLpGXWsmhZtWxadi2HllPLpeXW8mh5tXxafq2AVlArpBXWimhFtWJaca2EVlIrpZXWymhltXJaea2CVlGrpFXWqmhVtWpada2GVlOrpdXW6mh1tXpafa2B1lBrpDXWmmhNtWZac62F1lJrpbXW2mhttXZae62D1lHrpHXWumhdtW5ad62H1lPrpfXW+mh9tX5af22ANlAbpA3WErUh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lQN03CN0EiN0miN0ViN03hN0ERN0mRN0VRN03TN0EzN0mzN0VzN03wt0EIt0oAGNaTFtGnadG2GNlObpc3W5mhztXnafG2BtlBbpC3WlmhLtWXacm2FtlJbpa3W1mhrtXXaem2DtlHbpG3WtmhbtW3adm2HtlPbpe3W9mh7tX3afu2AdlA7pB3WjmhHtWPace2EdlI7pZ3WzmhntXPaee2CdlG7pF3WrmhXtWvade2GdlO7pd3W7mh3tXvafe2B9lB7pD3WnmhPtWfac+2F9lJ7pb3W3mhvtXfae+2D9lH7pH3WvmhftW/ad+2H9lP7pf3W/mh/tX9anB6vJ9GT6gl6Mj25nkJPqafSU+tp9LR6Oj29nkHPqGfSM+tZ9Kx6Nj27nkPPqefSc+t59Lx6Pj2/XkAvqBfSC+tF9KJ6Mb24XkIvqZfSS+tl9LJ6Ob28XkGvqFfSK+tV9Kp6Nb26XkOvqdfSa+t19Lp6Pb2+3kBvqDfSG+tN9KZ6M7253kJvqbfSW+tt9LZ6O7293kHvqHfSO+td9K56N7273kPvqffSe+t99L56P72/PkAfqA/SB+uJ+hB9qD5MH66P0Efqo/TR+hh9rD5OH69P0Cfqk/TJ+hR9qo7puE7opE7ptM7orM7pvC7ooi7psq7oqq7pum7opm7ptu7oru7pvh7ooR7pQIc60mP6NH26PkOfqc/SZ+tz9Ln6PH2+vkBfqC/SF+tL9KX6Mn25vkJfqa/SV+tr9LX6On29vkHfqG/SN+tb9K36Nn27vkPfqe/Sd+t79L36Pn2/fkA/qB/SD+tH9KP6Mf24fkI/qZ/ST+tn9LP6Of28fkG/qF/SL+tX9Kv6Nf26fkO/qd/Sb+t39Lv6Pf2+/kB/qD/SH+tP9Kf6M/25/kJ/qb/SX+tv9Lf6O/29/kH/qH/SP+tf9K/6N/27/kP/qf/Sf+t/9L/6Pz3OiDeSGEmNBCOZkdxIYaQ0UhmpjTRGWiOdkd7IYGQ0MhmZjSxGViObkd3IYeQ0chm5jTxGXiOfkd8oYBQ0ChmFjSJGUaOYUdwoYZQ0ShmljTJGWaOcUd6oYFQ0KhmVjSpGVaOaUd2oYdQ0ahm1jTpGXaOeUd9oYDQ0GhmNjSZGU6OZ0dxoYbQ0WhmtjTZGW6Od0d7oYHQ0OhmdjS5GV6Ob0d3oYfQ0ehm9jT5GX6Of0d8YYAw0BhmDjURjiDHUGGYMN0YYI41RxmhjjDHWGGeMNyYYE41JxmRjijHVwAzcIAzSoAzaYAzW4AzeEAzRkAzZUAzV0AzdMAzTsAzbcAzX8AzfCIzQiAxgQAMZMWOaMd2YYcw0ZhmzjTnGXGOeMd9YYCw0FhmLjSXGUmOZsdxYYaw0VhmrjTXGWmOdsd7YYGw0NhmbjS3GVmObsd3YYew0dhm7jT3GXmOfsd84YBw0DhmHjSPGUeOYcdw4YZw0ThmnjTPGWeOccd64YFw0LhmXjSvGVeOacd24Ydw0bhm3jTvGXeOecd94YDw0HhmPjSfGU+OZ8dx4Ybw0XhmvjTfGW+Od8d74YHw0PhmfjS/GV+Ob8d34Yfw0fhm/jT/GX+OfEWfGm0nMpGaCmcxMbqYwU5qpzNRmGjOtmc5Mb2YwM5qZzMxmFjOrmc3MbuYwc5q5zNxmHjOvmc/MbxYwC5qFzMJmEbOoWcwsbpYwS5qlzNJmGbOsWc4sb1YwK5qVzMpmFbOqWc2sbtYwa5q1zNpmHbOuWc+sbzYwG5qNzMZmE7Op2cxsbrYwW5qtzNZmG7Ot2c5sb3YwO5qdzM5mF7Or2c3sbvYwe5q9zN5mH7Ov2c/sbw4wB5qDzMFmojnEHGoOM4ebI8yR5ihztDnGHGuOM8ebE8yJ5iRzsjnFnGpiJm4SJmlSJm0yJmtyJm8KpmhKpmwqpmpqpm4apmlapm06pmt6pm8GZmhGJjChicyYOc2cbs4wZ5qzzNnmHHOuOc+cby4wF5qLzMXmEnOpucxcbq4wV5qrzNXmGnOtuc5cb24wN5qbzM3mFnOruc3cbu4wd5q7zN3mHnOvuc/cbx4wD5qHzMPmEfOoecw8bp4wT5qnzNPmGfOsec48b14wL5qXzMvmFfOqec28bt4wb5q3zNvmHfOuec+8bz4wH5qPzMfmE/Op+cx8br4wX5qvzNfmG/Ot+c58b34wP5qfzM/mF/Or+c38bv4wf5q/zN/mH/Ov+c+Ms+KtJFZSK8FKZiW3UlgprVRWaiuNldZKZ6W3MlgZrUxWZiuLldXKZmW3clg5rVxWbiuPldfKZ+W3ClgFrUJWYauIVdQqZhW3SlglrVJWaauMVdYqZ5W3KlgVrUpWZauKVdWqZlW3alg1rVpWbauOVdeqZ9W3GlgNrUZWY6uJ1dRqZjW3WlgtrVZWa6uN1dZqZ7W3OlgdrU5WZ6uL1dXqZnW3elg9rV5Wb6uP1dfqZ/W3BlgDrUHWYCvRGmINtYZZw60R1khrlDXaGmONtcZZ460J1kRrkjXZmmJNtTALtwiLtCiLthiLtTiLtwRLtCRLthRLtTRLtwzLtCzLthzLtTzLtwIrtCILWNBCVsyaZk23ZlgzrVnWbGuONdeaZ823FlgLrUXWYmuJtdRaZi23VlgrrVXWamuNtdZaZ623NlgbrU3WZmuLtdXaZm23dlg7rV3WbmuPtdfaZ+23DlgHrUPWYeuIddQ6Zh23TlgnrVPWaeuMddY6Z523LlgXrUvWZeuKddW6Zl23blg3rVvWbeuOdde6Z923HlgPrUfWY+uJ9dR6Zj23XlgvrVfWa+uN9dZ6Z723PlgfrU/WZ+uL9dX6Zn23flg/rV/Wb+uP9df6Z8XZ8XYSO6mdYCezk9sp7JR2Kju1ncZOa6ez09sZ7Ix2JjuzncXOamezs9s57Jx2Lju3ncfOa+ez89sF7IJ2IbuwXcQuahezi9sl7JJ2Kbu0XcYua5ezy9sV7Ip2JbuyXcWualezq9s17Jp2Lbu2Xceua9ez69sN7IZ2I7ux3cRuajezm9st7JZ2K7u13cZua7ez29sd7I52J7uz3cXuanezu9s97J52L7u33cfua/ez+9sD7IH2IHuwnWgPsYfaw+zh9gh7pD3KHm2Pscfa4+zx9gR7oj3JnmxPsafamI3bhE3alE3bjM3anM3bgi3aki3biq3amq3bhm3alm3bju3anu3bgR3akQ1saCM7Zk+zp9sz7Jn2LHu2Pceea8+z59sL7IX2InuxvcReai+zl9sr7JX2Knu1vcZea6+z19sb7I32JnuzvcXeam+zt9s77J32Lnu3vcfea++z99sH7IP2IfuwfcQ+ah+zj9sn7JP2Kfu0fcY+a5+zz9sX7Iv2JfuyfcW+al+zr9s37Jv2Lfu2fce+a9+z79sP7If2I/ux/cR+aj+zn9sv7Jf2K/u1/cZ+a7+z39sf7I/2J/uz/cX+an+zv9s/7J/2L/u3/cf+a/+z45x4J4mT1ElwkjnJnRROSieVk9pJ46R10jnpnQxORieTk9nJ4mR1sjnZnRxOTieXk9vJ4+R18jn5nQJOQaeQU9gp4hR1ijnFnRJOSaeUU9op45R1yjnlnQpORaeSU9mp4lR1qjnVnRpOTaeWU9up49R16jn1nQZOQ6eR09hp4jR1mjnNnRZOS6eV09pp47R12jntnQ5OR6eT09np4nR1ujndnR5OT6eX09vp4/R1+jn9nQHOQGeQM9hJdIY4Q51hznBnhDPSGeWMdsY4Y51xznhngjPRmeRMdqY4Ux3MwR3CIR3KoR3GyRr3f6IjObKjOKqjObpjOKZjObbjOK7jOb4TOKETOcCBDnJizjRnujPDmenMcmY7c5y5zjxnvrPAWegschY7S5ylzjJnubPCWemsclY7a5y1zjpnvbPB2ehscjY7W5ytzjZnu7PD2enscnY7e5y9zj5nv3PAOegccg47R5yjzjHnuHPCOemcck47Z5yzzjnnvHPBuehcci47V5yrzjXnunPDuenccm47d5y7zj3nvvPAeeg8ch47T5ynzjPnufPCeem8cl47b5y3zjvnvfPB+eh8cj47X5yvzjfnu/PD+en8cn47f5y/zj8nzo13k7hJ3QQ3mZvcTeGmdFO5qd00blo3nZvezeBmdDO5md0sblY3m5vdzeHmdHO5ud08bl43n5vfLeAWdAu5hd0iblG3mFvcLeGWdEu5pd0yblm3nFvereBWdCu5ld0qblW3mlvdreHWdGu5td06bl23nlvfbeA2dBu5jd0mblO3mdvcbeG2dFu5rd02blu3ndve7eB2dDu5nd0uble3m9vd7eH2dHu5vd0+bl+3n9vfHeAOdAe5g91Ed4g71B3mDndHuCPdUe5od4w71h3njncnuBPdSe5kd4o71cVc3CVc0qVc2mVc1uVc3hVc0ZVc2VVc1dVc3TVc07Vc23Vc1/Vc3w3c0I1c4EIXuTF3mjvdneHOdGe5s9057lx3njvfXeAudBe5i90l7lJ3mbvcXeGudFe5q9017lp3nbve3eBudDe5m90t7lZ3m7vd3eHudHe5u9097l53n7vfPeAedA+5h90j7lH3mHvcPeGedE+5p90z7ln3nHveveBedC+5l90r7lX3mnvdveHedG+5t9077l33nnvffeA+dB+5j90n7lP3mfvcfeG+dF+5r9037lv3nfve/eB+dD+5n90v7lf3m/vd/eH+dH+5v90/7l/3nxvnxXtJvKRegpfMS+6l8FJ6qbzUXhovrZfOS+9l8DJ6mbzMXhYvq5fNy+7l8HJ6ubzcXh4vr5fPy+8V8Ap6hbzCXhGvqFfMK+6V8Ep6pbzSXhmvrFfOK+9V8Cp6lbzKXhWvqlfNq+7V8Gp6tbzaXh2vrlfPq+818Bp6jbzGXhOvqdfMa+618Fp6rbzWXhuvrdfOa+918Dp6nbzOXhevq9fN6+718Hp6vbzeXh+vr9fP6+8N8AZ6g7zBXqI3xBvqDfOGeyO8kd4ob7Q3xhvrjfPGexO8id4kb7I3xZvqYR7uER7pUR7tMR7rcR7vCZ7oSZ7sKZ7qaZ7uGZ7pWZ7tOZ7reZ7vBV7oRR7woIe8mDfNm+7N8GZ6s7zZ3hxvrjfPm+8t8BZ6i7zF3hJvqbfMW+6t8FZ6q7zV3hpvrbfOW+9t8DZ6m7zN3hZvq7fN2+7t8HZ6u7zd3h5vr7fP2+8d8A56h7zD3hHvqHfMO+6d8E56p7zT3hnvrHfOO+9d8C56l7zL3hXvqnfNu+7d8G56t7zb3h3vrnfPu+898B56j7zH3hPvqffMe+698F56r7zX3hvvrffOe+998D56n7zP3hfvq/fN++798H56v7zf3h/vr/fPi/Pj/SR+Uj/BT+Yn91P4Kf1Ufmo/jZ/WT+en9zP4Gf1MfmY/i5/Vz+Zn93P4Of1cfm4/j5/Xz+fn9wv4Bf1CfmG/iF/UL+YX90v4Jf1Sfmm/jF/WL+eX9yv4Ff1KfmW/il/Vr+ZX92v4Nf1afm2/jl/Xr+fX9xv4Df1GfmO/id/Ub+Y391v4Lf1Wfmu/jd/Wb+e39zv4Hf1Ofme/i9/V7+Z393v4Pf1efm+/j9/X7+f39wf4A/1B/mA/0R/iD/WH+cP9Ef5If5Q/2h/jj/XH+eP9Cf5Ef5I/2Z/iT/UxH/cJn/Qpn/YZn/U5n/cFX/QlX/YVX/U1X/cN3/Qt3/Yd3/U93/cDP/QjH/jQR37Mn+ZP92f4M/1Z/mx/jj/Xn+fP9xf4C/1F/mJ/ib/UX+Yv91f4K/1V/mp/jb/WX+ev9zf4G/1N/mZ/i7/V3+Zv93f4O/1d/m5/j7/X3+fv9w/4B/1D/mH/iH/UP+Yf90/4J/1T/mn/jH/WP+ef9y/4F/1L/mX/in/Vv+Zf92/4N/1b/m3/jn/Xv+ff9x/4D/1H/mP/if/Uf+Y/91/4L/1X/mv/jf/Wf+e/9z/4H/1P/mf/i//V/+Z/93/4P/1f/m//j//X/+fHBfFBkiBpkBAkC5IHKYKUQaogdZAmSBukC9IHGYKMQaYgc5AlyBpkC7IHOYKcQa4gd5AnyBvkC/IHBYKCQaGgcFAkKBoUC4oHJYKSQamgdFAmKBuUC8oHFYKKQaWgclAlqBpUC6oHNYKaQa2gdlAnqBvUC+oHDYKGQaOgcdAkaBo0C5oHLYKWQaugddAmaBu0C9oHHYKOQaegc9Al6Bp0C7oHPYKeQa+gd9An6Bv0C/oHA4KBwaBgcJAYDAmGBsOC4cGIYGQwKhgdjAnGBuOC8cGEYGIwKZgcTAmmBliAB0RABlRAB0zABlzAB0IgBlIgB0qgBlqgB0ZgBlZgB07gBl7gB0EQBlEAAhigIBZM++8MccHsYE4wN5gXzA8WBAuDRcHiYEmwNFgWLA9WBCuDVcHqYE2wNlgXrA82BBuDTcHmYEuwNdgWbA92BDuDXcHuYE+wN9gX7A8OBAeDQ8Hh4EhwNDgWHA9OBCeDU8Hp4ExwNjgXnA8uBBeDS8Hl4EpwNbgWXA9uBDeDW8Ht4E5wN7gX3A8eBA+DR8Hj4EnwNHgWPA9eBC+DV8Hr4E3wNngXvA8+BB+DT8Hn4EvwNfgWfA9+BD+DX8Hv4E/wN/gXxIXxYZIwaZgQJguThynClGGqMHWYJkwbpgvThxnCjGGmMHOYJcwaZguzhznCnGGuMHeYJ8wb5gvzhwXCgmGhsHBYJCwaFguLhyXCkmGpsHRYJiwblgvLhxXCimGlsHJYJawaVgurhzXCmmGtsHZYJ6wb1gvrhw3ChmGjsHHYJGwaNgubhy3ClmGrsHXYJmwbtgvbhx3CjmGnsHPYJewadgu7hz3CnmGvsHfYJ+wb9gv7hwPCgeGgcHCYGA4Jh4bDwuHhiHBkOCocHY4Jx4bjwvHhhHBiOCmcHE4Jp4ZYiIdESIZUSIdMyIZcyIdCKIZSKIdKqIZaqIdGaIZWaIdO6IZe6IdBGIZRCEIYojAWTgunhzPCmeGscHY4J5wbzgvnhwvCheGicHG4JFwaLguXhyvCleGqcHW4JlwbrgvXhxvCjeGmcHO4Jdwabgu3hzvCneGucHe4J9wb7gv3hwfCg+Gh8HB4JDwaHguPhyfCk+Gp8HR4JjwbngvPhxfCi+Gl8HJ4JbwaXguvhzfCm+Gt8HZ4J7wb3gvvhw/Ch+Gj8HH4JHwaPgufhy/Cl+Gr8HX4Jnwbvgvfhx/Cj+Gn8HP4Jfwafgu/hz/Cn+Gv8Hf4J/wb/gvjovgoSZQ0SoiSRcmjFFHKKFWUOkoTpY3SRemjDFHGKFOUOcoSZY2yRdmjHFHOKFeUO8oT5Y3yRfmjAlHBqFBUOCoSFY2KRcWjElHJqFRUOioTlY3KReWjClHFqFJUOaoSVY2qRdWjGlHNqFZUO6oT1Y3qRfWjBlHDqFHUOGoSNY2aRc2jFlHLqFXUOmoTtY3aRe2jDlHHqFPUOeoSdY26Rd2jHlHPqFfUO+oT9Y36Rf2jAdHAaFA0OEqMhkRDo2HR8GhENDIaFY2OxkRjo3HR+GhCNDGaFE2OpkRTIyzCIyIiIyqiIyZiIy7iIyESIymSIyVSIy3SIyMyIyuyIydyIy/yoyAKoygCEYxQFIumRdOjGdHMaFY0O5oTzY3mRfOjBdHCaFG0OFoSLY2WRcujFdHKaFW0OloTrY3WReujDdHGaFO0OdoSbY22RdujHdHOaFe0O9oT7Y32RfujA9HB6FB0ODoSHY2ORcejE9HJ6FR0OjoTnY3OReejC9HF6FJ0OboSXY2uRdejG9HN6FZ0O7oT3Y3uRfejB9HD6FH0OHoSPY2eRc+jF9HL6FX0OnoTvY3eRe+jD9HH6FP0OfoSfY2+Rd+jH9HP6Ff0O/oT/Y3+RXEgHiQBSUECSAaSgxQgJUgFUoM0IC1IB9KDDCAjyAQygywgK8gGsoMcICfIBXKDPCAvyAfygwKgICgECoMioCgoBoqDEqAkKAVKgzKgLCgHyoMKoCKoBCqDKqAqqAaqgxqgJqgFaoM6oC6oB+qDBqAhaAQagyagKWgGmoMWoCVoBVqDNqAtaAfagw6gI+gEOoMuoCvoBrqDHqAn6AV6gz6gL+gH+oMBYCAYBAaDRDAEDAXDwHAwAowEo8BoMAaMBePAeDABTASTwGQwBUwFGMABAUhAARowgAUc4IEARCABGShABRrQgQFMYAEbOMAFHvBBAEIQAQAgQCAGpoHpYAaYCWaB2WAOmAvmgflgAVgIFoHFYAlYCpaB5WAFWAlWgdVgDVgL1oH1YAPYCDaBzWAL2Aq2ge1gB9gJdoHdYA/YC/aB/eAAOAgOgcPgCDgKjoHj4AQ4CU6B0+AMOAvOgfPgArgILoHL4Aq4Cq6B6+AGuAlugdvgDrgL7oH74AF4CB6Bx+AJeAqegefgBXgJXoHX4A14C96B9+AD+Ag+gc/gC/gKvoHv4Af4CX6B3+AP+Av+gTgYD5PApDABJoPJYQqYEqaCqWEamBamg+lhBpgRZoKZYRaYFWaD2WEOmBPmgrlhHpgX5oP5YQFYEBaChWERWBQWg8VhCVgSloKlYRlYFpaD5WEFWBFWgpVhFVgVVoPVYQ1YE9aCtWEdWBfWg/VhA9gQNoKNYRPYFDaDzWEL2BK2gq1hG9gWtoPtYQfYEXaCnWEX2BV2g91hD9gT9oK9YR/YF/aD/eEAOBAOgoNhIhwCh8JhcDgcAUfCUXA0HAPHwnFwPJwAJ8JJcDKcAqdCDOKQgCSkIA0ZyEIO8lCAIpSgDBWoQg3q0IAmtKANHehCD/owgCGMIIAQIhiD0+B0OAPOhLPgbDgHzoXz4Hy4AC6Ei+BiuAQuhcvgcrgCroSr4Gq4Bq6F6+B6uAFuhJvgZrgFboXb4Ha4A+6Eu+BuuAfuhfvgfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoXn4Hl4AV6El+BleAVehdfgdXgD3oS34G14B96F9+B9+AA+hI/gY/gEPoXP4HP4Ar6Er+Br+Aa+he/ge/gBfoSf4Gf4BX6F3+B3+AP+hL/gb/gH/oX/YByKR0lQUpSAkqHkKAVKiVKh1CgNSovSofQoA8qIMqHMKAvKirKh7CgHyolyodwoD8qL8qH8qAAqiAqhwqgIKoqKoeKoBCqJSqHSqAwqi8qh8qgCqogqocqoCqqKqqHqqAaqiWqh2qgOqovqofqoAWqIGqHGqAlqipqh5qgFaolaodaoDWqL2qH2qAPqiDqhzqgL6oq6oe6oB+qJeqHeqA/qi/qh/mgAGogGocEoEQ1BQ9EwNByNQCPRKDQajUFj0Tg0Hk1AE9EkNBlNQVMRhnBEIBJRiEYMYhGHeCQgEUlIRgpSkYZ0ZCATWchGDnKRh3wUoBBFCCCIEIqhaWg6moFmolloNpqD5qJ5aD5agBaiRWgxWoKWomVoOVqBVqJVaDVag9aidWg92oA2ok1oM9qCtqJtaDvagXaiXWg32oP2on1oPzqADqJD6DA6go6iY+g4OoFOolPoNDqDzqJz6Dy6gC6iS+gyuoKuomvoOrqBbqJb6Da6g+6ie+g+eoAeokfoMXqCnqJn6Dl6gV6iV+g1eoPeonfoPfqAPqJP6DP6gr6ib+g7+oF+ol/oN/qD/qJ/KC4WH0sSSxpLiCWLJY+liKWMpYqljqWJpY2li6WPZYhljGWKZY5liWWNZYtlj+WI5YzliuWOxcXnjeWL5Y8ViBWMFYoVjhWJFY0VixWPlYiVjJWKlY6ViZWNlYuVj1WIVYxVilWOVYlVjVWLVY/ViNWM1YrVjtWJ1Y3Vi9WPNYg1jDWKNY41iTWNNYs1j7WItYy1irWOtYm1jbWLtY91iHWMdYp1jnWJdY11i3WP9Yj1jPWK9Y71ifWN9Yv1jw2IDYwNig2OJcb+x6I9LebZJAAATm3btvvXtm0zTZXatq3XtjUzX23btm0ze7L38cRjI7AEbCQ2ChuNjcHGYonYOGw8NgGbiE3CJmNTsKnYNGw6NgObic3CZmNzsLnYPGw+tgBbiC3CFmNLsKXYMmw5tgJbia3CVmNrsLXYOmw9tgHbiG3CNmNbsK3YNgzDcIzASIzCaIzBWIzDeEzAREzCZEzBVEzDdMzATMzCbMzBXMzDfCzAQizCAAYxhMWw7dgObCe2C9uN7cH2Yvuw/dgB7CB2CDuMHcGOYsew49gJ7CR2CjuNncHOYuew89gF7CJ2CbuMXcGuYtew69gN7CZ2C7uN3cHuYvew+9gD7CH2CHuMPcGeYs+w59gL7CX2CnuNvcHeYu+w99gH7CP2CfuMfcG+Yt+w79gP7Cf2C/uN/cH+Yv+wJCwOT4Ynx1PgKfFUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG48D54Xz4fnxwvgBfFCeGG8CF4UL4YXx0vgJfFSeGm8DF4WL4eXxyvgFfFKeGW8Cl4Vr4ZXx//Da+A18Vp4bbwOXhevh9fHG+AN8UZ4Y7wJ3hRvhjfHW+At8VZ4a7wN3hZvh7fHO+Ad8U54Z7wL3hXvhnfHe+A98V54b7wP3hfvh/fHB+AD8UH4YHwIPhQfhg/H4/EReAI+Eh+Fj8bH4GPxRHwcPh6fgE/EJ+GT8Sn4VHwaPh2fgc/EZ+Gz8Tn4XHwePh9fgC/EF+GL8SX4UnwZvhxfga/EV+Gr8TX4Wnwdvh7fgG/EN+Gb8S34VnwbjuE4TuAkTuE0zuAszuE8LuAiLuEyruAqruE6buAmbuE27uAu7uE+HuAhHuEAhzjCY/h2fAe+E9+F78b34Hvxffh+/AB+ED+EH8aP4EfxY/hx/AR+Ej+Fn8bP4Gfxc/h5/AJ+Eb+EX8av4Ffxa/h1/AZ+E7+F38bv4Hfxe/h9/AH+EH+EP8af4E/xZ/hz/AX+En+Fv8bf4G/xd/h7/AP+Ef+Ef8a/4F/xb/h3/Af+E/+F/8b/4H/xf3gSHkckI5ITKYiURCoiNZGGSEukI9ITGYiMRCYiM5GFyEpkI7ITOYicRC4iN5GHyEvkI/ITBYiCRCGiMFGEKEoUI4oTJYiSRCmiNFGGKEuUI8oTFYiKRCWiMlGFqEpUI6oT/xE1iJpELaI2UYeoS9Qj6hMNiIZEI6Ix0YRoSjQjmhMtiJZEK6I10YZoS7Qj2hMdiI5EJ6Iz0YXoSnQjuhM9iJ5EL6I30YfoS/Qj+hMDiIHEIGIwMYQYSgwjhhPxxAgigRhJjCJGE2OIsUQiMY4YT0wgJhKTiMnEFGIqMY2YTswgZhKziNnEHGIuMY+YTywgFhKLiMXEEmIpsYxYTqwgVhKriNXEGmItsY5YT2wgNhKbiM3EFmIrsY3ACJwgCJKgCJpgCJbgCJ4QCJGQCJlQCJXQCJ0wCJOwCJtwCJfwCJ8IiJCICEBAAhExYjuxg9hJ7CJ2E3uIvcQ+Yj9xgDhIHCIOE0eIo8Qx4jhxgjhJnCJOE2eIs8Q54jxxgbhIXCIuE1eIq8Q14jpxg7hJ3CJuE3eIu8Q94j7xgHhIPCIeE0+Ip8Qz4jnxgnhJvCJeE2+It8Q74j3xgfhIfCI+E1+Ir8Q34jvxg/hJ/CJ+E3+Iv8Q/IomII5ORyckUZEoyFZmaTEOmJdOR6ckMZEYyE5mZzEJmJbOR2ckcZE4yF5mbzEPmJfOR+ckCZEGyEFmYLEIWJYuRxckSZEmyFFmaLEOWJcuR5ckKZEWyElmZrEJWJauR1cn/yBpkTbIWWZusQ9Yl65H1yQZkQ7IR2ZhsQjYlm5HNyRZkS7IV2ZpsQ7Yl25HtyQ5kR7IT2ZnsQnYlu5HdyR5kT7IX2ZvsQ/Yl+5H9yQHkQHIQOZgcQg4lh5HDyXhyBJlAjiRHkaPJMeRYMpEcR44nJ5ATyUnkZHIKOZWcRk4nZ5AzyVnkbHIOOZecR84nF5ALyUXkYnIJuZRcRi4nV5AryVXkanINuZZcR64nN5AbyU3kZnILuZXcRmIkThIkSVIkTTIkS3IkTwqkSEqkTCqkSmqkThqkSVqkTTqkS3qkTwZkSEYkICGJyBi5ndxB7iR3kbvJPeRech+5nzxAHiQPkYfJI+RR8hh5nDxBniRPkafJM+RZ8hx5nrxAXiQvkZfJK+RV8hp5nbxB3iRvkbfJO+Rd8h55n3xAPiQfkY/JJ+RT8hn5nHxBviRfka/JN+Rb8h35nvxAfiQ/kZ/JL+RX8hv5nfxB/iR/kb/JP+Rf8h+ZRMZRyajkVAoqJZWKSk2lodJS6aj0VAYqI5WJykxlobJS2ajsVA4qJ5WLyk3lofJS+aj8VAGqIFWIKkwVoYpSxajiVAmqJFWKKk2VocpS5ajyVAWqIlWJqkxVoapS1ajq1H9UDaomVYuqTdWh6lL1qPpUA6oh1YhqTDWhmlLNqOZUC6ol1YpqTbWh2lLtqPZUB6oj1YnqTHWhulLdqO5UD6on1YvqTfWh+lL9qP7UAGogNYgaTA2hhlLDqOFUPDWCSqBGUqOo0dQYaiyVSI2jxlMTqInUJGoyNYWaSk2jplMzqJnULGo2NYeaS82j5lMLqIXUImoxtYRaSi2jllMrqJXUKmo1tYZaS62j1lMbqI3UJmoztYXaSm2jMAqnCIqkKIqmGIqlOIqnBEqkJEqmFEqlNEqnDMqkLMqmHMqlPMqnAiqkIgpQkEJUjNpO7aB2Uruo3dQe6l9SUtJ+6gB1kDpEHaaOUEepY9Rx6gR1kjpFnabOUGepc9R56gJ1kbpEXaauUFepa9R16gZ1k7pF3abuUHepe9R96gH1kHpEPaaeUE+pZ9Rz6gX1knpFvabeUG+pd9R76gP1kfpEfaa+UF+pb9R36gf1k/pF/ab+UH+pf1QSFUcno5PTKeiUdCo6NZ2GTkuno9PTGeiMdCY6M52Fzkpno7PTOeicdC46N52Hzkvno/PTBeiCdCG6MF2ELkoXo4vTJeiSdCm6NF2GLkuXo8vTFeiKdCW6Ml2FrkpXo6vT/9E16Jp0Lbo2XYeuS9ej69MN6IZ0I7ox3YRuSjejm9Mt6JZ0K7o13YZuS7ej29Md6I50J7oz3YXuSneju9M96J50L7o33YfuS/ej+9MD6IH0IHowPYQeSg+jh9Px9Ag6gR5Jj6JH02PosXQiPY4eT0+gJ9KT6Mn0FHoqPY2eTs+gZ9Kz6Nn0HHouPY+eTy+gF9KL6MX0EnopvYxeTq+gV9Kr6NX0GnotvY5eT2+gN9Kb6M30FnorvY3GaJwmaJKmaJpmaJbmaJ4WaJGWaJlWaJXWaJ02aJO2aJt2aJf2aJ8O6JCOaEBDGtExeju9g95J76J303vovfQ+ej99gD5IH6IP00foo/Qx+jh9gj5Jn6JP02fos/Q5+jx9gb5IX6Iv01foq/Q1+jp9g75J36Jv03fou/Q9+j79gH5IP6If00/op/Qz+jn9gn5Jv6Jf02/ot/Q7+j39gf5If6I/01/or/Q3+jv9g/5J/6J/03/ov/Q/OomOY5IxyZkUTEomFZOaScOkZdIx6ZkMTEYmE5OZycJkZbIx2ZkcTE4mF5ObycPkZfIx+ZkCTEGmEFOYKcIUZYoxxZkSTEmmFFOaKcOUZcox5ZkKTEWmElOZqcJUZaox1Zn/mBpMTaYWU5upw9Rl6jH1mQZMQ6YR05hpwjRlmjHNmRZMS6YV05ppw7Rl2jHtmQ5MR6YT05npwnRlujHdmR5MT6YX05vpw/Rl+jH9mQHMQGYQM5gZwgxlhjHDmXhmBJPAjGRGMaOZMcxYJpEZx4xnJjATmUnMZGYKM5WZxkxnZjAzmVnMbGYOM5eZx8xnFjALmUXMYmYJs5RZxixnVjArmVXMamYNs5ZZx6xnNjAbmU3MZmYLs5XZxmAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMymiMzhiMyViMzTiMy3iMzwRMyEQMYCCDmBizndnB7GR2MbuZPcxeZh+znznAHGQOMYeZI8xR5hhznDnBnGROMaeZM8xZ5hxznrnAXGQuMZeZK8xV5hpznbnB3GRuMbeZO8xd5h5zn3nAPGQeMY+ZJ8xT5hnznHnBvGReMa+ZN8xb5h3znvnAfGQ+MZ+ZL8xX5hvznfnB/GR+Mb+ZP8xf5h+TxMSxydjkbAo2JZuKTc2mYdOy6dj0bAY2I5uJzcxmYbOy2djsbA42J5uLzc3mYfOy+dj8bAG2IFuILcwWYYuyxdjibAm2JFuKLc2WYcuy5djybAW2IluJrcxWYauy1djq7H9sDbYmW4utzdZh67L12PpsA7Yh24htzDZhm7LN2OZsC7Yl24ptzbZh27Lt2PZsB7Yj24ntzHZhu7Ld2O5sD7Yn24vtzfZh+7L92P7sAHYgO4gdzA5hh7LD2OFsPDuCTWBHsqPY0ewYdiybyI5jx7MT2InsJHYyO4Wdyk5jp7Mz2JnsLHY2O4edy85j57ML2IXsInYxu4Rdyi5jl7Mr2JXsKnY1u4Zdy65j17Mb2I3sJnYzu4Xdym5jMRZnCZZkKZZmGZZlOZZnBVZkJVZmFVZlNVZnDdZkLdZmHdZlPdZnAzZkIxawkEVsjN3O7mB3srvY3ewedi+7j93PHmAPsofYw+wR9ih7jD3OnmBPsqfY0+wZ9ix7jj3PXmAvspfYy+wV9ip7jb3O3mBvsrfY2+wd9i57j73PPmAfso/Yx+wT9in7jH3OvmBfsq/Y1+wb9i37jn3PfmA/sp/Yz+wX9iv7jf3O/mB/sr/Y3+wf9i/7j01i47hkXHIuBZeSS8Wl5tJwabl0XHouA5eRy8Rl5rJwWblsXHYuB5eTy8Xl5vJwebl8XH6uAFeQK8QV5opwRbliXHGuBFeSK8WV5spwZblyXHmuAleRq8RV5qpwVblqXHXuP64GV5OrxdXm6nB1uXpcfa4B15BrxDXmmnBNuWZcc64F15JrxbXm2nBtuXZce64D15HrxHXmunBduW5cd64H15PrxfXm+nB9uX5cf24AN5AbxA3mhnBDuWHccC6eG8ElcCO5Udxobgw3lkvkxnHjuQncRG4SN5mbwk3lpnHTuRncTG4WN5ubw83l5nHzuQXcQm4Rt5hbwi3llnHLuRXcSm4Vt5pbw63l1nHruQ3cRm4Tt5nbwm3ltnEYh3MER3IUR3MMx3Icx3MCJ3ISJ3MKp3Iap3MGZ3IWZ3MO53Ie53MBF3IRBzjIIS7Gbed2cDu5Xdxubg+3l9vH7ecOcAe5Q9xh7gh3lDvGHedOcCe5U9xp7gx3ljvHnecucBe5S9xl7gp3lbvGXeducDe5W9xt7g53l7vH3ececA+5R9xj7gn3lHvGPedecC+5V9xr7g33lnvHvec+cB+5T9xn7gv3lfvGfed+cD+5X9xv7g/3l/vHJXFxfDI+OZ+CT8mn4lPzafi0fDo+PZ+Bz8hn4jPzWfisfDY+O5+Dz8nn4nPzefi8fD4+P1+AL8gX4gvzRfiifDG+OF+CL8mX4kvzZfiyfDm+PF+Br8hX4ivzVfiqfDW+Ov8fX4Ovydfia/N1+Lp8Pb4+34BvyDfiG/NN+KZ8M74534JvybfiW/Nt+LZ8O74934HvyHfiO/Nd+K58N74734Pvyffie/N9+L58P74/P4AfyA/iB/ND+KH8MH44H8+P4BP4kfwofjQ/hh/LJ/Lj+PH8BH4iP4mfzE/hp/LT+On8DH4mP4ufzc/h5/Lz+Pn8An4hv4hfzC/hl/LL+OX8Cn4lv4pfza/h1/Lr+PX8Bn4jv4nfzG/ht/LbeIzHeYIneYqneYZneY7neYEXeYmXeYVXeY3XeYM3eYu3eYd3eY/3+YAP+YgHPOQRH+O38zv4nfwufje/h9/L7+P38wf4g/wh/jB/hD/KH+OP8yf4k/wp/jR/hj/Ln+PP8xf4i/wl/jJ/hb/KX+Ov8zf4m/wt/jZ/h7/L3+Pv8w/4h/wj/jH/hH/KP+Of8y/4l/wr/jX/hn/Lv+Pf8x/4j/wn/jP/hf/Kf+O/8z/4n/wv/jf/h//L/+OT+DghmZBcSCGkFFIJqYU0QlohnZBeyCBkFDIJmYUsQlYhm5BdyCHkFHIJuYU8Ql4hn5BfKCAUFAoJhYUiQlGhmFBcKCGUFEoJpYUyQlmhnFBeqCBUFCoJlYUqQlWhmlBd+E+oIdQUagm1hTpCXaGeUF9oIDQUGgmNhSZCU6GZ0FxoIbQUWgmthTZCW6Gd0F7oIHQUOgmdhS5CV6Gb0F3oIfQUegm9hT5CX6Gf0F8YIAwUBgmDhSHCUGGYMFyIF0YICcJIYZQwWhgjjBUShXHCeGGCMFGYJEwWpghThWnCdGGGMFOYJcwW5ghzhXnCfGGBsFBYJCwWlghLhWXCcmGFsFJYJawW1ghrhXXCemGDsFHYJGwWtghbhW0CJuACIZACJdACI7ACJ/CCIIiCJMiCIqiCJuiCIZiCJdiCI7iCJ/hCIIRCJAABCkiICduFHcJOYZewW9gj7BX2CfuFA8JB4ZBwWDgiHBWOCceFE8JJ4ZRwWjgjnBXOCeeFC8JF4ZJwWbgiXBWuCdeFG8JN4ZZwW7gj3BXuCfeFB8JD4ZHwWHgiPBWeCc+FF8JL4ZXwWngjvBXeCe+FD8JH4ZPwWfgifBW+Cd+FH8JP4ZfwW/gj/BX+CUlCnJhMTC6mEFOKqcTUYhoxrZhOTC9mEDOKmcTMYhYxq5hNzC7mEHOKucTcYh4xr5hPzC8WEAuKhcTCYhGxqFhMLC6WEEuKpcTSYhmxrFhOLC9WECuKlcTKYhWxqlhNrC7+J9YQa4q1xNpiHbGuWE+sLzYQG4qNxMZiE7Gp2ExsLrYQW4qtxNZiG7Gt2E5sL3YQO4qdxM5iF7Gr2E3sLvYQe4q9xN5iH7Gv2E/sLw4QB4qDxMHiEHGoOEwcLsaLI8QEcaQ4ShwtjhHHioniOHG8OEGcKE4SJ4tTxKniNHG6OEOcKc4SZ4tzxLniPHG+uEBcKC4SF4tLxKXiMnG5uEJcKa4SV4trxLXiOnG9uEHcKG4SN4tbxK3iNhETcZEQSZESaZERWZETeVEQRVESZVERVVETddEQTdESbdERXdETfTEQQzESgQhFJMbE7eIOcae4S9wt7hH3ivvE/eIB8aB4SDwsHhGPisfE4+IJ8aR4SjwtnhHPiufE8+IF8aJ4SbwsXhGvitfE6+IN8aZ4S7wt3hHvivfE++ID8aH4SHwsPhGfis/E5+IL8aX4SnwtvhHfiu/E9+IH8aP4SfwsfhG/it/E7+IP8af4S/wt/hH/iv/EJDFOSiYll1JIKaVUUmopjZRWSiellzJIGaVMUmYpi5RVyiZll3JIOaVcUm4pj5RXyifllwpIBaVCUmGpiFRUKiYVl0pIJaVSUmmpjFRWKieVlypIFaVKUmWpilRVqiZVl/6Takg1pVpSbamOVFeqJ9WXGkgNpUZSY6mJ1FRqJjWXWkgtpVZSa6mN1FZqJ7WXOkgdpU5SZ6mL1FXqJnWXekg9pV5Sb6mP1FfqJ/WXBkgDpUHSYGmINFQaJg2X4qURUoI0UholjZbGSGOlRGmcNF6aIE2UJkmTpSnSVGmaNF2aIc2UZkmzpTnSXGmeNF9aIC2UFkmLpSXSUmmZtFxaIa2UVkmrpTXSWmmdtF7aIG2UNkmbpS3SVmmbhEm4REikREm0xEisxEm8JEiiJEmypEiqpEm6ZEimZEm25Eiu5Em+FEihFElAghKSYtJ2aYe0U9ol7Zb2SHulfdJ+6YB0UDokHZaOSEelY9Jx6YR0UjolnZbOSGelc9J56YJ0UbokXZauSFela9J16YZ0U7ol3ZbuSHele9J96YH0UHokPZaeSE+lZ9Jz6YX0UnolvZbeSG+ld9J76YP0UfokfZa+SF+lb9J36Yf0U/ol/Zb+SH+lf1KSFCcnk5PLKeSUcio5tZxGTiunk9PLGeSMciY5s5xFzipnk7PLOeScci45t5xHzivnk/PLBeSCciG5sFxELioXk4vLJeSScim5tFxGLiuXk8vLFeSKciW5slxFripXk6vL/8k15JpyLbm2XEeuK9eT68sN5IZyI7mx3ERuKjeTm8st5JZyK7m13EZuK7eT28sd5I5yJ7mz3EXuKneTu8s95J5yL7m33EfuK/eT+8sD5IHyIHmwPEQeKg+Th8vx8gg5QR4pj5JHy2PksXKiPE4eL0+QJ8qT5MnyFHmqPE2eLs+QZ8qz5NnyHHmuPE+eLy+QF8qL5MXyEnmpvExeLq+QV8qr5NXyGnmtvE5eL2+QN8qb5M3yFnmrvE3GZFwmZFKmZFpmZFbmZF4WZFGWZFlWZFXWZF02ZFO2ZFt2ZFf2ZF8O5FCOZCBDGckxebu8Q94p75J3y3vkvfI+eb98QD4oH5IPy0fko/Ix+bh8Qj4pn5JPy2fks/I5+bx8Qb4oX5Ivy1fkq/I1+bp8Q74p35Jvy3fku/I9+b78QH4oP5Ify0/kp/Iz+bn8Qn4pv5Jfy2/kt/I7+b38Qf4of5I/y1/kr/I3+bv8Q/4p/5J/y3/kv/I/OUmOU5IpyZUUSkollZJaSaOkVdIp6ZUMSkYlk5JZyaJkVbIp2ZUcSk4ll5JbyaPkVfIp+ZUCSkGlkFJYKaIUVYopxZUSSkmllFJaKaOUVcop5ZUKSkWlklJZqaJUVaop1ZX/lBpKTaWWUlupo9RV6in1lQZKQ6WR0lhpojRVminNlRZKS6WV0lppo7RV2intlQ5KR6WT0lnponRVuindlR5KT6WX0lvpo/RV+in9lQHKQGWQMlgZogxVhinDlXhlhJKgjFRGKaOVMcpYJVEZp4xXJigTlUnKZGWKMlWZpkxXZigzlVnKbGWOMleZp8xXFigLlUXKYmWJslRZpixXVigrlVXKamWNslZZp6xXNigblU3KZmWLslXZpmAKrhAKqVAKrTAKq3AKrwiKqEiKrCiKqmiKrhiKqViKrTiKq3iKrwRKqEQKUKCClFia/+tBZbeyR9mr7FP2KweUg8oh5bByRDmqHFOOKyeUk8op5bRyRjmrnFPOKxeUi8ol5bJyRbmqXFOuKzeUm8ot5bZyR7mr3FPuKw+Uh8oj5bHyRHmqPFOeKy+Ul8or5bXyRnmrvFPeKx+Uj8on5bPyRfmqfFO+Kz+Un8ov5bfyR/mr/FOSlDg1mZpcTaGmVFOpqdU0alo1nZpezaBmVDOpmdUsalY1m5pdzaHmVHOpudU8al41n5pfLaAWVAuphdUialG1mFpcLaGWVEuppdUyalm1nFperaBWVCupldUqalW1mlpd/U+todZUa6m11TpqXbWeWl9toDZUG6mN1SZqU7WZ2lxtobZUW6mt1TZqW7Wd2l7toHZUO6md1S5qV7Wb2l3tofZUe6m91T5qX7Wf2l8doA5UB6mD1SHqUHWYOlyNV0eoCepIdZQ6Wh2jjlUT1XHqeHWCOlGdpE5Wp6hT1WnqdHWGOlOdpc5W56hz1XnqfHWBulBdpC5Wl6hL1WXqcnWFulJdpa5W16hr1XXqenWDulHdpG5Wt6hb1W0qpuIqoZIqpdIqo7Iqp/KqoIqqpMqqoqqqpuqqoZqqpdqqo7qqp/pqoIZqpAIVqkiNqdvVHepOdZe6W92j7lX3qfvVA+pB9ZB6WD2iHlWPqcfVE+pJ9ZR6Wj2jnlXPqefVC+pF9ZJ6Wb2iXlWvqdfVG+pN9ZZ6W72j3lXvqffVB+pD9ZH6WH2iPlWfqc/VF+pL9ZX6Wn2jvlXfqe/VD+pH9ZP6Wf2iflW/qd/VH+pP9Zf6W/2j/lX/qUlqnJZMS66l0FJqqbTUWhotrZZOS69l0DJqmbTMWhYtq5ZNy67l0HJqubTcWh4tr5ZPy68V0ApqhbTCWhGtqFZMK66V0EpqpbTSWhmtrFZOK69V0CpqlbTKWhWtqlZNq679p9XQamq1tNpaHa2uVk+rrzXQGmqNtMZaE62J1kxrprXQWmittFZaG62N1k5rp3XQOmidtE5aF62L1k3rpvXQemi9tF5aH62P1k/rpw3QBmiDtEHaEG2oNkwbpsVr8VqClqCN0kZpY7QxWqKWqI3XJmgTtUnaZG2KNlWbpk3XZmgztVnabG2ONlebp83XFmgLtYXaYm2xtlRbqi3XlmsrtZXaam21tlZbq63X1msbtY3aZm2ztlXbqmEaphEaqVEarTEaq3EarwmaqEmarCmaqmmarhmaqVmarTmaq3marwVaqEUa0KCGtJi2Xduh7dR2abu1PdpebZ+2XzugHdQOaYe1I9pR7Zh2XDuhndROaae1M9pZ7Zx2XrugXdQuaZe1K9pV7Zp2Xbuh3dRuabe1O9pd7Z52X3ugPdQeaY+1J9pT7Zn2XHuhvdReaa+1N9pb7Z32XvugfdQ+aZ+1L9pX7Zv2Xfuh/dR+ab+1P9pf7Z+WpMXpyfTkego9pZ5KT62n0dPq6fT0egY9o55Jz6xn0bPq2fTseg49p55Lz63n0fPq+fT8egG9oF5IL6wX0YvqxfTienG9pF5SL62X1svqZfXyenm9ol5Rr6xX1qvq1fTqenW9hl5Dr6XX0uvodfR6ej29gd5Ab6Q30pvoTfRmejO9hd5Cb6W30tvobfR2eju9g95B76R30rvoXfRueje9h95D76X30vvoffR+ej99gD5AH6QP0ofoQ/Rh+jA9Xo/XE/QEfZQ+Sh+jj9ET9UR9vD5en6hP0ifrU/Sp+jR9uj5Dn6nP0mfpc/Q5+jx9vj5fX6gv1Bfri/Wl+lJ9ub5cX6mv0lfra/Q1+jp9vb5B36hv0jfrW/St+jYd03Gd0Emd0mmd0Vmd03ld0EVd0mVd0VVd03Xd0E3d0m3d0V3d03090EM90oEOdaTH9O36Dn2nvkvfre/R9+r79P36Af2gfkg/rB/Rj+rH9OP6Cf2kfko/rZ/Rz+rn9PP6Bf2ifkm/rF/Rr+rX9Ov6Df2mfku/rd/R7+r39Pv6A/2h/kh/rD/Rn+rP9Of6C/2l/kp/rb/R3+rv9Pf6B/2j/kn/rH/Rv+rf9O/6D/2n/kv/rf/R/+r/9CQ9zkhmJDdSGCmNVEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDf+M2oYNY1aRm2jjlHXqGfUNxoYDY1GRmOjidHUaGY0N1oYLY1WRmujjdHWaGe0NzoYHY1ORmeji9HV6GZ0N3oYPY1eRm+jj9HX6Gf0NwYYA41BxmBjiDHUGGYMN+KNEUaCMdIYZYw2xhhjjURjnDHemGBMNCYZk40pxlRjmjHdmGHMNGYZs405xlxjnjHfWGAsNBYZi40lxlJjmbHcWGGsNFYZq401xlpjnbHe2GBsNDYZm40txlZjm4EZuEEYpEEZtMEYrMEZvCEYoiEZsqEYqqEZumEYpmEZtuEYruEZvhEYoREZwIAGMmLGdmOHsdPYZew29hh7jX3GfuOAcdA4ZBw2jhhHjWPGceOEcdI4ZZw2zhhnjXPGeeOCcdG4ZFw2rhhXjWvGdeOGcdO4Zdw27hh3jXvGfeOB8dB4ZDw2nhhPjWfGc+OF8dJ4Zbw23hhvjXfGe+OD8dH4ZHw2vhhfjW/Gd+OH8dP4Zfw2/hh/jX9GkhFnJjOTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xrJpr5zQJmQbOQWdgsYhY1i5nFzRJmSbOUWdosY5Y1y5nlzQpmRbOSWdmsYlY1q5nVzf/MGmZNs5ZZ26xj1jXrmfXNBmZDs5HZ2GxiNjWbmc3NFmZLs5XZ2mxjtjXbme3NDmZHs5PZ2exidjW7md3NHmZPs5fZ2+xj9jX7mf3NAeZAc5A52BxiDjWHmcPNeHOEmWCONEeZo80x5lgz0RxnjjcnmBPNSeZkc4o51ZxmTjdnmDPNWeZsc44515xnzjcXmAvNReZic4m51FxmLjdXmCvNVeZqc4251lxnrjc3mBvNTeZmc4u51dxmYiZuEiZpUiZtMiZrciZvCqZoSqZsKqZqaqZuGqZpWqZtOqZreqZvBmZoRiYwoYnMmLnd3GHuNHeZu8095l5zn7nfPGAeNA+Zh80j5lHzmHncPGGeNE+Zp80z5lnznHnevGBeNC+Zl80r5lXzmnndvGHeNG+Zt8075l3znnnffGA+NB+Zj80n5lPzmfncfGG+NF+Zr8035lvznfne/GB+ND+Zn80v5lfzm/nd/GH+NH+Zv80/5l/zn5lkxlnJrORWCiullcpKbaWx0lrprPRWBiujlcnKbGWxslrZrOxWDiunlcvKbeWx8lr5rPxWAaugVcgqbBWxilrFrOJWCaukVcoqbZWxylrlrPJWBauiVcmqbFWxqlrVrOrWf1YNq6ZVy6pt1bHqWvWs+lYDq6HVyGpsNbGaWs2s5lYLq6XVympttbHaWu2s9lYHq6PVyepsdbG6Wt2s7lYPq6fVy+pt9bH6Wv2s/tYAa6A1yBpsDbGGWsOs4Va8NcJKsEZao6zR1hhrrJVojbPGWxOsidYka7I1xZpqTbOmWzOsmdYsa7Y1x5przbPmWwushdYia7G1xFpqLbOWWyusldYqa7W1xlprrbPWWxusjdYma7O1xdpqbbMwC7cIi7Qoi7YYi7U4i7cES7QkS7YUS7U0S7cMy7Qsy7Ycy7U8y7cCK7QiC1jQQlbM2m7tsHZau6zd1h5rr7XP2m8dsA5ah6zD1hHrqHXMOm6dsE5ap6zT1hnrrHXOOm9dsC5al6zL1hXrqnXNum7dsG5at6zb1h3rrnXPum89sB5aj6zH1hPrqfXMem69sF5ar6zX1hvrrfXOem99sD5an6zP1hfrq/XN+m79sH5av6zf1h/rr/XPSrLi7GR2cjuFndJOZae209hp7XR2ejuDndHOZGe2s9hZ7Wx2djuHndPOZee289h57Xx2fruAXdAuZBe2i9hF7WJ2cbuEXdIuZZe2y9hl7XJ2ebuCXdGuZFe2q9hV7Wp29W2Z4uLsmnYtu7Zdx65r17Pr2w3shnYju7HdxG5qN7Ob2y3slnYru7Xdxm5rt7Pb2x3sjnYnu7Pdxe5qd7O72z3snnYvu7fdx+5r97P72wPsgfYge7A9xB5qD7OH2/H2CDvBHmmPskfbY+yxdqI9zh5vT7An2pPsyfYUe6o9zZ5uz7Bn2rPs2fYce649z55vL7AX2ovsxfYSe6m9zF5ur7BX2qvs1fYae629zl5vb7A32pvszfYWe6u9zcZs3CZs0qZs2mZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs3w7s0I5sYEMb2TF7u73D3mnvsnfbe+y99j57v33APmgfsg/bR+yj9jH7uH3CPmmfsk/bZ+yz9jn7vH3Bvmhfsi/bV+yr9jX7un3Dvmnfsm/bd+y79j37vv3Afmg/sh/bT+yn9jP7uf3Cfmm/sl/bb+y39jv7vf3B/mh/sj/bX+yv9jf7u/3D/mn/sn/bf+y/9j87yY5zkjnJnRROSieVk9pJ46R10jnpnQxORieTk9nJ4mR1sjnZnRxOTieXk9vJ4+R18jn5nQJOQaeQU9gp4hR1ijnFnRJOSaeUU9op45R1yjnlnQpORaeSU9mp4lR1qjnVnf+cGk5Np5ZT26nj1HXqOfWdBk5Dp5HT2GniNHWaOc2dFk5Lp5XT2mnjtHXaOe2dDk5Hp5PT2enidHW6Od2dHk5Pp5fT2+nj9HX6Of2dAc5AZ5Az2BniDHWGOcOdeGeEk+CMdEY5o50xzlgn0RnnjHcmOBOdSc5kZ4oz1ZnmTHdmODOdWc5sZ44z15nnzHcWOAudRc5iZ4mz1FnmLHdWOCudVc7qlHHOWmeds97Z4Gx0NjmbnS3OVmebgzm4QzikQzm0wziswzm8IziiIzmyoziqozm6YzimYzm24ziu4zm+EzihEznAgQ5yYs52Z4ez09nl7Hb2OHudfc5+54Bz0DnkHHaOOEedY85x54Rz0jnlnHbOOGedc85554Jz0bnkXHauOFeda85154Zz07nl3HbuOHede85954Hz0HnkPHaeOE+dZ85z54Xz0nnlvHbeOG+dd85754Pz0fnkfHa+OF+db85354fz0/nl/Hb+OH+df06SE+cmc5O7KdyUbio3tZvGTeumc9O7GdyMbiY3s5vFzepmc7O7Odycbi43t5vHzevmc/O7BdyCbiG3sFvELeoWc4u7JdySbim3tFvGLeuWc8u7FdyKbiW3slvFrepWc6u7/7k13JpuLbe2W8et69Zz67sN3IZuI7ex28Rt6jZzm7st3JZuK7e128Zt67Zz27sd3I5uJ7ez28Xt6nZzu7s93J5uL7e328ft6/Zz+7sD3IHuIHewO8Qd6g5zh7vx7gg3wR3pjnJHu2PcsW6iO84d705wJ7qT3MnuFHeqO82d7s5wZ7qz3NnuHHeuO8+d7y5wF7qL3MXuEnepu8xd7q5wV7qr3NXuGnetu85d725wN7qb3M3uFneru83FXNwlXNKlXNplXNblXN4VXNGVXNlVXNXVXN01XNO1XNt1XNf1XN8N3NCNXOBCF7kxd7u7w93p7nJ3u3vcve4+d797wD3oHnIPu0fco+4x97h7wj3pnnJPu2fcs+4597x7wb3oXnIvu1fcq+4197p7w73p3nJvu3fcu+499777wH3oPnIfu0/cp+4z97n7wn3pvnJfu2/ct+479737wf3ofnI/u1/cr+4397v7w/3p/nJ/u3/cv+4/N8mN85J5yb0UXkovlZfaS+Ol9dJ56b0MXkYvk5fZy+Jl9bJ52b0cXk4vl5fby+Pl9fJ5+b0CXkGvkFfYK+IV9Yp5xb0SXkmvlFfaK+OV9cp55b0KXkWvklfZq+JV9ap51b3/vBpeTa+WV9ur49X16nn1vQZeQ6+R19hr4jX1mnnNvRZeS6+V19pr47X12nntvQ5eR6+T19nr4nX1unndvR5eT6+X19vr4/X1+nn9vQHeQG+QN9gb4g31hnnDvXhvhJfgjfRGeaO9Md5YL9Eb5433JngTvUneZG+KN9Wb5k33ZngzvVnebG+ON9eb5833FngLvUXeYm+Jt9Rb5i33VngrvVXeam+Nt9Zb5633NngbvU3eZm+Lt9Xb5mEe7hEe6VEe7TEe63Ee7wme6Eme7Cme6mme7hme6Vme7Tme63me7wVe6EUe8KCHvJi33dvh7fR2ebu9Pd5eb5+33zvgHfQOeYe9I95R75h33DvhnfROeae9M95Z75x33rvgXfQueZe9K95V75p33bvh3fRuebe9O95d755333vgPfQeeY+9J95T75n33HvhvfReea+9N95b75333vvgffQ+eZ+9L95X75v33fvh/fR+eb+9P95f75+X5MX5yfzkfgo/pZ/KT+2n8dP66fz0fgY/o5/Jz+xn8bP62fzsfg4/p5/Lz+3n8fP6+fz8fgG/oF/IL+wX8Yv6xfzifgm/pF/KL+2X8cv65fzyfgW/ol/Jr+xX8av61fzq/n9+Db+mX8uv7dfx6/r1/Pp+A7+h38hv7Dfxm/rN/OZ+C7+l38pv7bfx2/rt/PZ+B7+j38nv7Hfxu/rd/O5+D7+n38vv7ffx+/r9/P7+AH+gP8gf7A/xh/rD/OF+vD/CT/BH+qP80f4Yf6yf6I/zx/sT/In+JH+yP8Wf6k/zp/sz/Jn+LH+2P8ef68/z5/sL/IX+In+xv8Rf6i/zl/sr/JX+Kn+1v8Zf66/z1/sb/I3+Jn+zv8Xf6m/zMR/3CZ/0KZ/2GZ/1OZ/3BV/0JV/2FV/1NV/3Dd/0Ld/2Hd/1Pd/3Az/0Ix/40Ed+zN/u7/B3+rv83f4ef6+/z9/vH/AP+of8w/4R/6h/zD/un/BP+qf80/4Z/6x/zj/vX/Av+pf8y/4V/6p/zb/u3/Bv+rf82/4d/65/z7/vP/Af+o/8x/4T/6n/zH/uv/Bf+q/81/4b/63/zn/vf/A/+p/8z/4X/6v/zf/u//B/+r/83/4f/6//z0/y44JkQfIgRZAySBWkDtIEaYN0QfogQ5AxyBRkDrIEWYNsQfYgR5AzyBXkDvIEeYN8Qf6gQFAwKBQUDooERYNiQfGgRFAyKBWUDsoEZYNyQfmgQlAxqBRUDqoEVYNqQfXgv6BGUDOoFdQO6gR1g3pB/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BH0DPoFfQO+gR9g35B/2BAMDAYFAwOhgRDg2HB8CA+GBEkBCODUcHoYEwwNkgMxgXjgwnBxGBSMDmYEkwNpgXTgxnBzGBWMDuYE8wN5gXzgwXBwmBRsDhYEiwNlgXLgxXBymBVsDpYE6wN1gXrgw3BxmBTsDnYEmwNtgVYgAdEQAZUQAdMwAZcwAdCIAZSIAdKoAZaoAdGYAZWYAdO4AZe4AdBEAZRAAIYoCAWbA92BDuDXcHuYE+wN9gX7A8OBAeDQ8Hh4EhwNDgWHA9OBCeDU8Hp4ExwNjgXnA8uBBeDS8Hl4EpwNbgWXA9uBDeDW8Ht4E5wN7gX3A8eBA+DR8Hj4EnwNHgWPA9eBC+DV8Hr4E3wNngXvA8+BB+DT8Hn4EvwNfgWfA9+BD+DX8Hv4E/wN/gXJAVxYbIweZgiTBmmClOHacK0YbowfZghzBhmCjOHWcKsYbYwe5gjzBnmCnOHecK8Yb4wf1ggLBgWCguHRcKiYbGweFgiLBmWCkuHZcKyYbmwfFghrBhWCiuHVcKqYbWwevhfWCOsGdYKa4d1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B72CPsGfYKe4d9wr5hv7B/OCAcGA4KB4dDwqHhsHB4GB+OCBPCkeGocHQ4JhwbJobjwvHhhHBiOCmcHE4Jp4bTwunhjHBmOCucHc4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbQizEQyIkQyqkQyZkQy7kQyEUQymUQyVUQy3UQyM0Qyu0Qyd0Qy/0wyAMwygEIQxRGAu3hzvCneGucHe4J9wb7gv3hwfCg+Gh8HB4JDwaHguPhyfCk+Gp8HR4JjwbngvPhxfCi+Gl8HJ4JbwaXguvhzfCm+Gt8HZ4J7wb3gvvhw/Ch+Gj8HH4JHwaPgufhy/Cl+Gr8HX4Jnwbvgvfhx/Cj+Gn8HP4Jfwafgu/hz/Cn+Gv8Hf4J/wb/guTwrgoWZQ8ShGljFJFqaM0UdooXZQ+yhBljDJFmaMsUdYoW5Q9yhHljHJFuaM8Ud4oX5Q/KhAVjApFhaMiUdGoWFQ8KhGVjEpFpaMyUdmoXFQ+qhBVjCpFlaMqUdWoWlQ9+i+qEdWMakW1ozpR3aheVD9qEDWMGkWNoyZR06hZ1DxqEbWMWkWtozZR26hd1D7qEHWMOkWdoy5R16hb1D3qEfWMekW9oz5R36hf1D8aEA2MBkWDoyHR0GhYNDyKj0ZECdHIaFQ0OhoTjY0So3HR+GhCNDGaFE2OpkRTo2nR9GhGNDOaFc2O5kRzo3nR/GhBtDBaFC2OlkRLo2XR8mhFtDJaFa2O1kRro3XR+mhDtDHaFG2OtkRbo20RFuEREZERFdERE7ERF/GREImRFMmREqmRFumREZmRFdmRE7mRF/lREIVRFIEIRiiKRdujHdHOaFe0O9oT7Y32RfujA9HB6FB0ODoSHY2ORcejE9HJ6FR0OjoTnY3OReejC9HF6FJ0OboSXY2uRdejG9HN6FZ0O7oT3Y3uRfejB9HD6FH0OHoSPY2eRc+jF9HL6FX0OnoTvY3eRe+jD9HH6FP0OfoSfY2+Rd+jH9HP6Ff0O/oT/Y3+RUlRHEgGkoMUICVIBVKDNCAtSAfSgwwgI8gEMoMsICvIBrKDHCAnyAVygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoP/QA1QE9QCtUEdUBfUA/VBA9AQNAKNQRPQFDQDzUEL0BK0Aq1BG9AWtAPtQQfQEXQCnUEX0BV0A91BD9AT9AK9QR/QF/QD/cEAMBAMAoPBEDAUDAPDQTwYARLASDAKjAZjwFiQCMaB8WACmAgmgclgCpgKpoHpYAaYCWaB2WAOmAvmgflgAVgIFoHFYAlYCpaB5WAFWAlWgdVgDVgL1oH1YAPYCDaBzWAL2Aq2AQzggAAkoAANGMACDvBAACKQgAwUoAIN6MAAJrCADRzgAg/4IAAhiAAAECAQA9vBDrAT7AK7wR6wF+wD+8EBcBAcAofBEXAUHAPHwQlwEpwCp8EZcBacA+fBBXARXAKXwRVwFVwD18ENcBPcArfBHXAX3AP3wQPwEDwCj8ET8BQ8A8/BC/ASvAKvwRvwFrwD78EH8BF8Ap/BF/AVfAPfwQ/wE/wCv8Ef8Bf8A0kgDiaDyWEKmBKmgqlhGpgWpoPpYQaYEWaCmWEWmBVmg9lhDpgT5oK5YR6YF+aD+WEBWBAWgoVhEVgUFoPFYQlYEpaCpWEZWBaWg+VhBVgRVoKVYRVYFVaD1eF/sAasCWvB2rAOrAvrwfqwAWwIG8HGsAlsCpvB5rAFbAlbwdawDWwL28H2sAPsCDvBzrAL7Aq7we6wB+wJe8HesA/sC/vB/nAAHAgHwcFwCBwKh8HhMB6OgAlwJBwFR8MxcCxMhOPgeDgBToST4GQ4BU6F0+B0OAPOhLPgbDgHzoXz4Hy4AC6Ei+BiuAQuhcvgcrgCroSr4Gq4Bq6F6+B6uAFuhJvgZrgFboXbIAZxSEASUpCGDGQhB3koQBFKUIYKVKEGdWhAE1rQhg50oQd9GMAQRhBACBGMwe1wB9wJd8HdcA/cC/fB/fAAPAgPwcPwCDwKj8Hj8AQ8CU/B0/AMPAvPwfPwArwIL8HL8Aq8Cq/B6/AGvAlvwdvwDrwL78H78AF8CB/Bx/AJfAqfwefwBXwJX8HX8A18C9/B9/AD/Ag/wc/wC/wKv8Hv8Af8CX/B3/AP/Av/wSQYh5Kh5CgFSolSodQoDUqL0qH0KAPKiDKhzCgLyoqyoewoB8qJcqHcKA/Ki/Kh/KgAKogKocKoCCqKiqHiqAQqiUqh0qgMKovKofKoAqqIKqHKqAqqiqqh6ug/VAPVRLVQbVQH1UX1UH3UADVEjVBj1AQ1Rc1Qc9QCtUStUGvUBrVF7VB71AF1RJ1QZ9QFdUXdUHfUA/VEvVBv1Af1Rf1QfzQADUSD0GA0BA1Fw9BwFI9GoAQ0Eo1Co9EYNBYlonFoPJqAJqJJaDKagqaiaWg6moFmolloNpqD5qJ5aD5agBaiRWgxWoKWomVoOVqBVqJVaDVag9aidWg92oA2ok1oM9qCtqJtCEM4IhCJKEQjBrGIQzwSkIgkJCMFqUhDOjKQiSxkIwe5yEM+ClCIIgQQRAjF0Ha0A+1Eu9ButAftRfvQfnQAHUSH0GF0BB1Fx9BxdAKdRKfQaXQGnUXn0Hl0AV1El9BldAVdRdfQdXQD3US30G10B91F99B99AA9RI/QY/QEPUXP0HP0Ar1Er9Br9Aa9Re/Qe/QBfUSf0Gf0BX1F39B39AP9RL/Qb/QH/UX/UBKKiyWLJY+liKWMpYqljqWJpY2li6WPZYhljGWKZY5liWWNZYtlj+WI5YzliuWO5YnljeWL5Y8ViBWMFYoVjhWJFY0VixWPlYiVjJWKlY6ViZWNlYuVj1WIVYxVilWOVYlVjVWLVY/9F6sRqxmrFasdqxOrG6sXqx9rEGsYaxRrHGsSaxprFmseaxFrGWsVax1rE2sbaxdrH+sQ6xjrFOsc6xLrGusW6x7rEesZ6xXrHesT6xvrF+sfGxAbGBsUGxwbEhsaGxYbHouPjYglxP5Hsj0tjK0kAAD+a9u2bdu2bdu2bfvUVpxMbM8ktW1be7EP8o3ARmKjsNHYGGwsNg4bj03AJmKTsMnYFGwqNg2bjs3AZmKzsNnYHGwuNg+bjy3AFmKLsMXYEmwptgxbjq3AVmKrsNXYGmwttg5bj23ANmKbsM3YFmwrtg3bju3AdmK7sN3YHmwvtg/bjx3ADmKHsMPYEew/7Ch2DDuOncBOYqew09gZ7Cx2DjuPXcAuYpewy9gV7CqGYThGYCRGYTTGYCzGYQDjMQETMQmTMQVTMQ3TMQMzMQuzMQdzMQ/zsQALMYghLMJi7Bp2HbuB3cRuYbexO9hd7B52H3uAPcQeYY+xJ9hT7Bn2HHuBvcReYa+xN9hb7B32HvuAfcQ+YZ+xL9hX7Bv2HfuB/cR+Yb+xP9hf7B+WgCfCE+NJ8KR4Mjw5ngJPiafCU+Np8LR4Ojw9ngHPiGfCM+NZ8Kx4Njw7ngPPiefCc+N58Lx4Pjw/XgAviBfCC+NF8KJ4Mbw4XgIviZfCS+Nl8LJ4Obw8XgGviFfCK+NV8Kp4Nbw6XgOvidfCa+N18Lp4Pbw+3gBviDfCG+NN8KZ4M7w53gJvibfCW+Nt8LZ4O7w93gHviHfCO+Nd8K54N7w73gPviffCe+N98L54P7w/PgAfiA/CB+ND8KH4MHw4PgIfiY/CR+Nj8LH4OHw8PgGfiE/CJ+NT8Kn4NHw6PgOfic/CZ+Nz8Ln4PHw+vgBfiC/CF+NL8KX4Mnw5vgJfia/CV+Nr8LX4Onw9vgHfiG/CN+Nb8K34Nnw7vgPfie/Cd+N78L34Pnw/fgA/iB/CD+NH8P/wo/gx/Dh+Aj+Jn8JP42fws/g5/Dx+Ab+IX8Iv41fwqziG4ziBkziF0ziDsziHA5zHBVzEJVzGFVzFNVzHDdzELdzGHdzFPdzHAzzEIY7wCI/xa/h1/AZ+E7+F38bv4Hfxe/h9/AH+EH+EP8af4E/xZ/hz/AX+En+Fv8bf4G/xd/h7/AP+Ef+Ef8a/4F/xb/h3/Af+E/+F/8b/4H/xf3gCkYhITCQhkhLJiORECiIlkYpITaQh0hLpiPREBiIjkYnITGQhshLZiOxEDiInkYvITeQh8hL5iPxEAaIgUYgoTBQhihLFiOJECaIkUYooTZQhyhLliPJEBaIiUYmoTFQhqhLViOpEDaImUYuoTdQh6hL1iPpEA6Ih0YhoTDQhmhLNiOZEC6Il0YpoTbQh2hLtiPZEB6Ij0YnoTHQhuhLdiO5ED6In0YvoTfQh+hL9iP7EAGIgMYgYTAwhhhLDiOHECGIkMYoYTYwhxhLjiPHEBGIiMYmYTEwhphLTiOnEDGImMYuYTcwh5hLziPnEAmIhsYhYTCwhlhLLiOXECmIlsYpYTawh1hLriPXEBmIjsYnYTGwhthLbiO3EDmInsYvYTewh9hL7iP3EAeIgcYg4TBwh/iOOEseI48QJ4iRxijhNnCHOEueI88QF4iJxibhMXCGuEhiBEwRBEhRBEwzBEhwBCJ4QCJGQCJlQCJXQCJ0wCJOwCJtwCJfwCJ8IiJCABCIiIiauEdeJG8RN4hZxm7hD3CXuEfeJB8RD4hHxmHhCPCWeEc+JF8RL4hXxmnhDvCXeEe+JD8RH4hPxmfhCfCW+Ed+JH8RP4hfxm/hD/CX+EQlkIjIxmYRMSiYjk5MpyJRkKjI1mYZMS6Yj05MZyIxkJjIzmYXMSmYjs5M5yJxkLjI3mYfMS+Yj85MFyIJkIbIwWYQsShYji5MlyJJkKbI0WYYsS5Yjy5MVyIpkJbIyWYWsSlYjq5M1yJpkLbI2WYesS9Yj65MNyIZkI7Ix2YRsSjYjm5MtyJZkK7I12YZsS7Yj25MdyI5kJ7Iz2YXsSnYju5M9yJ5kL7I32YfsS/Yj+5MDyIHkIHIwOYQcSg4jh5MjyJHkKHI0OYYcS44jx5MTyInkJHIyOYWcSk4jp5MzyJnkLHI2OYecS84j55MLyIXkInIxuYRcSi4jl5MryJXkKnI1uYZcS64j15MbyI3kJnIzuYXcSm4jt5M7yJ3kLnI3uYfcS+4j95MHyIPkIfIweYT8jzxKHiOPkyfIk+Qp8jR5hjxLniPPkxfIi+Ql8jJ5hbxKYiROEiRJUiRNMiRLciQgeVIgRVIiZVIhVVIjddIgTdIibdIhXdIjfTIgQxKSiIzImLxGXidvkDfJW+Rt8g55l7xH3icfkA/JR+Rj8gn5lHxGPidfkC/JV+Rr8g35lnxHvic/kB/JT+Rn8gv5lfxGfid/kD/JX+Rv8g/5l/xHJlCJqMRUEioplYxKTqWgUlKpqNRUGiotlY5KT2WgMlKZqMxUFiorlY3KTuWgclK5qNxUHiovlY/KTxWgClKFqMJUEaooVYwqTpWgSlKlqNJUGaosVY4qT1WgKlKVqMpUFaoqVY2qTtWgalK1qNpUHaouVY+qTzWgGlKNqMZUE6op1YxqTrWgWlKtqNZUG6ot1Y5qT3WgOlKdqM5UF6or1Y3qTvWgelK9qN5UH6ov1Y/qTw2gBlKDqMHUEGooNYwaTo2gRlKjqNHUGGosNY4aT02gJlKTqMnUFGoqNY2aTs2gZlKzqNnUHGouNY+aTy2gFlKLqMXUEmoptYxaTq2gVlKrqNXUGmottY5aT22gNlKbqM3UFmortY3aTu2gdlK7qN3UHmovtY/aTx2gDlKHqMPUEeo/6ih1jDpOnaBOUqeo09QZ6ix1jjpPXaAuUpeoy9QV6iqFUThFUCRFUTTFUCzFUYDiKYESKYmSKYVSKY3SKYMyKYuyKYdyKY/yqYAKKUghKqJi6hp1nbpB3aRuUbepO9Rd6h51n3pAPaQeUY+pJ9RT6hn1nHpBvaReUa+pN9Rb6h31nvpAfaQ+UZ+pL9RX6hv1nfpB/aR+Ub+pP9Rf6h+VQCeiE9NJ6KR0Mjo5nYJOSaeiU9Np6LR0Ojo9nYHOSGeiM9NZ6Kx0Njo7nYPOSeeic9N56Lx0Pjo/XYAuSBeiC9NF6KJ0Mbo4XYIuSZeiS9Nl6LJ0Obo8XYGuSFeiK9NV6Kp0Nbo6XYOuSdeia9N16Lp0Pbo+3YBuSDeiG9NN6KZ0M7o53YJuSbeiW9Nt6LZ0O7o93YHuSHeiO9Nd6K50N7o73YPuSfeie9N96L50P7o/PYAeSA+iB9ND6KH0MHo4PYIeSY+iR9Nj6LH0OHo8PYGeSE+iJ9NT6Kn0NHo6PYOeSc+iZ9Nz6Ln0PHo+vYBeSC+iF9NL6KX0Mno5vYJeSa+iV9Nr6LX0Ono9vYHeSG+iN9Nb6K30Nno7vYPeSe+id9N76L30Pno/fYA+SB+iD9NHfqVISKCP0cfpE/RJ+hR9mj5Dn6XP0efpC/RF+hJ9mb5CX6UxGqcJmqQpmqYZmqU5GtA8LdAiLdEyrdAqrdE6bdAmbdE27dAu7dE+HdAhDWlER3RMX6Ov0zfom/Qt+jZ9h75L36Pv0w/oh/Qj+jH9hH5KP6Of0y/ol/Qr+jX9hn5Lv6Pf0x/oj/Qn+jP9hf5Kf6O/0z/on/Qv+jf9h/5L/6MTmERMYiYJk5RJxiRnUjApmVRMaiYNk5ZJx6RnMjAZmUxMZiYLk5XJxmRncjA5mVxMbiYPk5fJx+RnCjAFmUJMYaYIU5QpxhRnSjAlmVJMaaYMU5Ypx5RnKjAVmUpMZaYKU5WpxlRnajA1mVpMbaYOU5epx9RnGjANmUZMY6YJ05RpxjRnWjAtmVZMa6YN05Zpx7RnOjAdmU5MZ6YL05XpxnRnejA9mV5Mb6YP05fpx/RnBjADmUHMYGYIM5QZxgxnRjAjmVHMaGYMM5YZx4xnJjATmUnMZGYKM5WZxkxnZjAzmVnMbGYOM5eZx8xnFjALmUXMYmYJs5RZxixnVjArmVXMamYNs5ZZx6xnNjAbmU3MZmYLs5XZxmxndjA7mV3MbmYPs5fZx+xnDjAHmUPMYeYI8x9zlDnGHGdOMCeZU8xp5gxzljnHnGcuMBeZS8xl5gpzlcEYnCEYkqEYmmEYluEYwPCMwIiMxMiMwqiMxuiMwZiMxdiMw7iMx/hMwIQMZBATMTFzjbnO3GBuMreY28wd5i5zj7nPPGAeMo+Yx8wT5inzjHnOvGBeMq+Y18wb5i3zjnnPfGA+Mp+Yz8wX5ivzjfnO/GB+Mr+Y38wf5i/zj0lgE7GJ2SRsUjYZm5xNwaZkU7Gp2TRsWjYdm57NwGZkM7GZ2SxsVjYbm53NweZkc7G52TxsXjYfm58twBZkC7GF2SJsUbYYW5wtwZZkS7Gl2TJsWbYcW56twFZkK7GV2SpsVbYaW52twdZka7G12TpsXbYeW59twDZkG7GN2SZsU7YZ25xtwbZkW7Gt2TZsW7Yd257twHZkO7Gd2S5sV7Yb253twfZke7G92T5sX7Yf258dwA5kB7GD2SHsUHYYOzxR0v/7CnYMO5Ydx45nJ7AT2UnsZHYKO5Wdxk5nZ7Az2VnsbHYOO5edx85nF7AL2UXsYnYJu5Rdxi5nV7Ar2VXsanYNu5Zdx65nN7Ab2U3sZnYLu5Xdxm5nd7A72V3sbnYPu5fdx+5nD7AH2UPsYfYI+x97lD3GHmdPsCfZU+xp9gx7lj3HnmcvsBfZS+xl9gp7lcVYnCVYkqVYmmVYluVYwPKswIqsxMqswqqsxuqswZqsxdqsw7qsx/pswIYsZBEbsTF7jb3O3mBvsrfY2+wd9i57j73PPmAfso/Yx+wT9in7jH3OvmBfsq/Y1+wb9i37jn3PfmA/sp/Yz+wX9iv7jf3O/mB/sr/Y3+wf9i/7j03gEnGJuSRcUi4Zl5xLwaXkUnGpuTRcWi4dl57LwGXkMnGZuSxcVi4bl53LweXkcnG5uTxcXi4fl58rwBXkCnGFuSJcUa4YV5wrwZXkSnGluTJcWa4cV56rwFXkKnGVuSpcVa4aV52rwdXkanG1uTpcXa4eV59rwDXkGnGNuSZcU64Z15xrwbXkWnGtuTZcW64d157rwHXkOnGduS5cV64b153rwfXkenG9uT5cX64f158bwA3kBnGDuSHcUG4YN5wbwY3kRnGjuTHcWG4cN56bwE3kJnGTuSncVG4aN52bwc3kZnGzuTncXG4eN59bwC3kFnGLuSXcUm4Zt5xbwa3kVnGruTXcWm4dt57bwG3kNnGbuS3cVm4bt53bwe3kdnG7uT3cXm4ft587wB3kDnGHuSPcf9xR7hh3nDvBneROcae5M9xZ7hx3nrvAXeQucZe5K9xVDuNwjuBIjuJojuFYjuMAx3MCJ3ISJ3MKp3Iap3MGZ3IWZ3MO53Ie53MBF3KQQ1zExdw17jp3g7vJ3eJuc3e4u9w97j73gHvIPeIec0+4p9wz7jn3gnvJveJec2+4t9w77j33gfvIfeI+c1+4r9w37jv3g/vJ/eJ+c3+4v9w/LgEkAolBEpAUJAPJQQqQEqQCqUEakBakA+lBBpARZAKZQRaQFWQD2UEOkBPkArlBHpAX5AP5QQFQEBQChUERUBQUA8VBCVASlAKlQRlQFpQD5UEFUBFUApVBFVAVVAPVQQ1QE9QCtUEdUBfUA/VBA9AQNAKNQRPQFDQDzUEL0BK0Aq1BG9AWtAPtQQfQEXQCnUEX0BV0A91BD9AT9AK9QR/QF/QD/cEAMBAMAoPBEDAUDAPDwQgwEowCo8EYMBaMA+PBBDARTAKTwRQwFUwD08EMMBPMArPBHDAXzAPzwQKwECwCi8ESsBQsA8vBCrASrAKrwRqwFqwD68EGsBFsApvBFrAVbAPbwQ6wE+wCu8EesBfsA/vBAXAQHAKHwRHwHzgKjoHj4AQ4CU6B0+AMOAvOgfPgArgILoHL4Aq4CjCAAwKQgAI0YAALOAAADwQgAgnIQAEq0IAODGACC9jAAS7wgA8CEAIIEIhADK6B6+AGuAlugdvgDrgL7oH74AF4CB6Bx+AJeAqegefgBXgJXoHX4A14C96B9+AD+Ag+gc/gC/gKvoHv4Af4CX6B3+AP+Av+gQQ+EZ+YT8In5ZPxyfkUfEo+FZ+aT8On5dPx6fkMfEY+E5+Zz8Jn5bPx2fkcfE4+F5+bz8Pn5fPx+fkCfEG+EF+YL8IX5YvxxfkSfEm+FF+aL8OX5cvx5fkKfEW+El+Zr8JX5avx1fkafE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3fkefE++F9+b78P35fvx/fkB/EB+ED+YH8IP5Yfxw/kR/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+YX8Iv5Zfxy/kV/Ep+Fb+aX8Ov5dfx6/kN/EZ+E7+Z38Jv5bfx2/kd/E5+F7+b38Pv5ffx+/kD/EH+EH+YP8L/xx/lj/HH+RP8Sf4Uf5o/w5/lz/Hn+Qv8Rf4Sf5m/wl/lMR7nCT4JT/E0z/Asz/GA53mBF3mJl3mFV3mN13mDN3mLt3mHd3mP9/mAD3nIIz7iY/4af52/wd/kb/G3+Tv8Xf4ef59/wD/kH/GP+Sf8U/4Z/5x/wb/kX/Gv+Tf8W/4d/57/wH/kP/Gf+S/8V/4b/53/wf/kf/G/+T/8X/4fnyAkEhILSYSkQjIhuZBCSCmkElILaYS0QjohvZBByChkEjILWYSsQjYhu5BDyCnkEnILeYS8Qj4hv1BAKCgUEgoLRYSiQjGhuFBCKCmUEkoLZYSyQjmhvFBBqChUEioLVYSqQjWhulBDqCnUEmoLdYS6Qj2hvtBAaCg0EhoLTYSmQjOhudBCaCm0EloLbYS2QjuhvdBB6Ch0EjoLXYSuQjehu9BD6Cn0EnoLfYS+Qj+hvzBAGCgMEgYLQ4ShwjBhuDBCGCmMEkYLY4SxwjhhvDBBmChMEiYLU4SpwjRhujBDmCnMEmYLc4S5wjxhvrBAWCgsEhYLS4SlwjJhubBCWCmsElYLa4S1wjphvbBB2ChsEjYLW4StwjZhu7BD2CnsEnYLe4S9wj5hv3BAOCgcEg4LR4T/hKPCMeG4cEI4KZwSTgtnhLPCOeG8cEG4KFwSLgtXhKsCJuACIZACJdACI7ACJwCBFwRBFCRBFhRBFTRBFwzBFCzBFhzBFTzBFwIhFKCAhEiIhWvCdeGGcFO4JdwW7gh3hXvCfeGB8FB4JDwWnghPhWfCc+GF8FJ4JbwW3ghvhXfCe+GD8FH4JHwWvghfhW/Cd+GH8FP4JfwW/gh/hX9CgphITCwmEZOKycTkYgoxpZhKTC2mEdOK6cT0YgYxo5hJzCxmEbOK2cTsYg4xp5hLzC3mEfOK+cT8YgGxoFhILCwWEYuKxcTiYgmxpFhKLC2WEcuK5cTyYgWxolhJrCxWEauK1cTqYg2xplhLrC3WEeuK9cT6YgOxodhIbCw2EZuKzcTmYguxpdhKbC22EduK7cT2Ygexo9hJ7Cx2EbuK3cTuYg+xp9hL7C32EfuK/cT+4gBxoDhIHCwOEYeKw8Th4ghxpDhKHC2OEceK48Tx4gRxojhJnCxOEaeK08Tp4gxxpjhLnC3OEeeK88T54gJxobhIXCwuEZeKy8Tl4gpxpbhKXC2uEdeK68T14gZxo7hJ3CxuEbeK28Tt4g5xp7hL3C3uEfeK+8T94gHxoHhIPCweEf8Tj4rHxOPiCfGkeEo8LZ4Rz4rnxPPiBfGieEm8LF4Rr4qYiIuESIqUSIuMyIqcCEReFERRlERZVERV1ERdNERTtERbdERX9ERfDMRQhCISIzEWr4nXxRviTfGWeFu8I94V74n3xQfiQ/GR+Fh8Ij4Vn4nPxRfiS/GV+Fp8I74V34nvxQ/iR/GT+Fn8In4Vv4nfxR/iT/GX+Fv8I/4V/4kJUiIpsZRESiolk5JLKaSUUioptZRGSiulk9JLGaSMUiYps5RFyiplk7JLOaScUq5UCQkJUl4pn5RfKiAVlApJhaUiUlGpmFRcKiGVlEpJpaUyUlmpnFReqiBVlCpJlaUqUlWpmlRdqiHVlGpJtaU6Ul2pnlRfaiA1lBpJjaUmUlOpmdRcaiG1lFpJraU2UlupndRe6iB1lDpJnaUuUlepm9Rd6iH1lHpJvaU+Ul+pn9RfGiANlAZJg6Uh0lBpmDRcGiGNlEZJo6Ux0lhpnDRemiBNlCZJk6Up0lRpmjRdmiHNlGZJs6U50lxpnjRfWiAtlBZJi6Ul0lJpmbRcWiGtlFZJq6U10lppnbRe2iBtlDZJm6Ut0lZpm7Rd2iHtlHZJu6U90l5pn7RfOiAdlA5Jh6Uj0n/SUemYdFw6IZ2UTkmnpTPSWemcdF66IF2ULkmXpSvSVQmTcImQSImSaImRWImTgMRLgiRKkiRLiqRKmqRLhmRKlmRLjuRKnuRLgRRKUEJSJMXSNem6dEO6Kd2Sbkt3pLvSPem+9EB6KD2SHktPpKfSM+m59EJ6Kb2SXktvpLfSO+m99EH6KH2SPktfpK/SN+m79EP6Kf2Sfkt/pL/SPylBTiQnlpPISeVkcnI5hZxSTiWnltPIaeV0cno5g5xRziRnlrPIWeVscnY5h5xTziXnlvPIeeV8cn65gFxQLiQXlovIReVicnG5hFxSLiWXlsvIZeVycnm5glxRriRXlqvIVeVqcnW5hlxTriXXluvIdeV6cn25gdxQbiQ3lpvITeVmcnO5hdxSbiW3ltvIbeV2cnu5g9xR7iR3lrvIXeVucne5h9xT7iX3lvvIfeV+cn95gDxQHiQPlofIQ+Vh8nB5hDxSHiWPlsfIY+Vx8nh5gjxRniRPlqfIU+Vp8nR5hjxTniXPlufIc+V58nx5gbxQXiQvlpfIS+Vl8nJ5hbxSXiWvltfIa+V18np5g7xR3iRvlrfIW+Vt8nZ5h7xT3iXvlvfIe+V98n75gHxQPiQflo/I/8lH5WPycfmEfFI+JZ+Wz8hn5XPyefmCfFG+JF+Wr8hXZUzGZUImZUqmZUZmZU4GMi8LsihLsiwrsiprsi4bsilbsi07sit7si8HcihDGcmRHMvX5OvyDfmmfEu+Ld+R78r35PvyA/mh/Eh+LD+Rn8rP5OfyC/ml/Ep+Lb+R38rv5PfyB/mj/En+LH+Rv8rf5O/yD/mn/Ev+Lf+R/8r/5AQlkZJYSaIkVZIpyZUUSkollZJaSaOkVdIp6ZUMSkYlk5JZyaJkVbIp2ZUcSk4ll5JbyaPkVfIp+ZUCSkGlkFJYKaIUVYopxZUSSkmllFJaKaOUVcop5ZUKSkWlklJZqaJUVaop1ZUaSk2lllJbqaPUVeop9ZUGSkOlkdJYaaI0VZopzZUWSkulldJaaaO0Vdop7ZUOSkelk9JZ6aJ0Vbop3ZUeSk+ll9Jb6aP0Vfop/ZUBykBlkDJYGaIMVYYpw5URykhllDJaGaOMVcYp45UJykRlkjJZmaJMVaYp05UZykxlljJbmaPMVeYp85UFykJlkbJYWaIsVZYpy5UVykpllbJaWaOsVdYp65UNykZlk7JZ2aJsVbYp25Udyk5ll7Jb2aPsVfYp+5UDykHlkHJYOaL8pxxVjinHlRPKSeWUclo5o5xVzinnlQvKReWSclm5olxVMAVXCIVUKIVWGIVVOAUovCIooiIpsqIoqqIpumIopmIptuIoruIpvhIooQIVpERKrFxTris3lJvKLeW2cke5q9xT7isPlIfKI+Wx8kR5qjxTnisvlJfKK+W18kZ5q7xT3isflI/KJ+Wz8kX5qnxTvis/lJ/KL+W38kf5q/xTEtREamI1iZpUTaYmV1OoKdVUamo1jZpWTaemVzOoGdVMamY1i5pVzaZmV3OoOdVcam41j5pXzafmVwuoBdVCamG1iFpULaYWV0uoJdVSamm1jFpWLaeWVyuoFdVKamW1ilpVraZWV2uoNdVaam21jlpXrafWVxuoDdVGamO1idpUbaY2V1uoLdVWamu1jdpWbae2VzuoHdVOame1i9pV7aZ2V3uoPdVeam+1j9pX7af2VweoA9VB6mB1iDpUHaYOV0eoI9VR6mh1jDpWHaeOVyeoE9VJ6mR1ijpVnaZOV2eoM9VZ6mx1jjpXnafOVxeoC9VF6mJ1ibpUXaYuV1eoK9VV6mp1jbpWXaeuVzeoG9VN6mZ1i7pV3aZuV3eoO9Vd6m51j7pX3afuVw+oB9VD6mH1iPqfelQ9ph5XT6gn1VPqafWMelY9p55XL6gX1UvqZfWKelXFVFwlVFKlVFplVFblVKDyqqCKqqTKqqKqqqbqqqGaqqXaqqO6qqf6aqCGKlSRGqmxek29rt5Qb6q31NvqHfWuek+9rz5QH6qP1MfqE/Wp+kx9rr5QX6qv1NfqG/Wt+k59r35QP6qf1M/qF/Wr+k39rv5Qf6q/1N/qH/Wv+k9N0BJpibUkWlItmZZcS6Gl1FJpqbU0WlotnZZey6Bl1DJpmbUsWlYtm5Zdy6Hl1HJpubU8Wl4tn5ZfK6AV1ApphbUiWlGtmFZcK6GV1EpppbUyWlmtnFZeq6BV1CpplbUqWlWtmlZdq6HV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11HppvbU+Wl+tn9ZfG6AN1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1DZpm7Ut2lZtm7Zd26Ht1HZpu7U92l5tn7ZfO6Ad1A5ph7Uj2n/aUe2Ydlw7oZ3UTmmntTPaWe2cdl67oF3ULmmXtSvaVQ3TcI3QSI3SaI3RWI3TgMZrgiZqkiZriqZqmqZrhmZqlmZrjuZqnuZrgRZqUENapMXaNe26dkO7qd3Sbmt3tLvaPe2+9kB7qD3SHmtPtKfaM+259kJ7qb3SXmtvtLfaO+299kH7qH3SPmtftK/aN+279kP7qf3Sfmt/tL/aPy1BT6Qn1pPoSfVkenI9hZ5ST6Wn1tPoafV0eno9g55Rz6Rn1rPoWfVsenY9h55Tz6Xn1vPoefV8en69gF5QL6QX1ovoRfVienG9hF5SL6WX1svoZfVyenm9gl5Rr6RX1qvoVfVqenW9hl5Tr6XX1uvodfV6en29gd5Qb6Q31pvoTfVmenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95T76X31vvoffV+en99gD5QH6QP1ofoQ/Vh+nB9hD5SH6WP1sfoY/Vx+nh9gj5Rn6RP1qfoU/Vp+nR9hj5Tn6XP1ufoc/V5+nx9gb5QX6Qv1pfoS/Vl+nJ9hb5SX6Wv1tfoa/V1+np9g75R36Rv1rfoW/Vt+nZ9h75T36Xv1vfoe/V9+n79gH5QP6Qf1o/o/+lH9WP6cf2EflI/pZ/Wz+hn9XP6ef2CflG/pF/Wr+hXdUzHdUIndUqndUZndU4HOq8LuqhLuqwruqpruq4buqlbuq07uqt7uq8HeqhDHemRHuvX9Ov6Df2mfku/rd/R7+r39Pv6A/2h/kh/rD/Rn+rP9Of6C/2l/kp/rb/R3+rv9Pf6B/2j/kn/rH/Rv+rf9O/6D/2n/kv/rf/R/+r/9AQjkZHYSGIkNZIZyY0URkojlZHaSGOkNdIZ6Y0MRkYjk5HZyGJkNbIZ2Y0cRk4jl5HbyGPkNfIZ+Y0CRkGjkFHYKGIUNYoZxY0SRkmjlFHaKGOUNcoZ5Y0KRkWjklHZqGJUNaoZ1Y0aRk2jllHbqGPUNeoZ9Y0GRkOjkdHYaGI0NZoZzY0WRkujldHaaGO0NdoZ7Y0ORkejk9HZ6GJ0NboZ3Y0eRk+jl9Hb6GP0NfoZ/Y0BxkBjkDHYGGIMNYYZw40RxkhjlDHaGGOMNcYZ440JxkRjkjHZmGJMNaYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ+40DxkHjkHHYOGL8Zxw1jhnHjRPGSeOUcdo4Y5w1zhnnjQvGReOScdm4Ylw1MAM3CIM0KIM2GIM1OAMYvCEYoiEZsqEYqqEZumEYpmEZtuEYruEZvhEYoQENZERGbFwzrhs3jJvGLeO2cce4a9wz7hsPjIfGI+Ox8cR4ajwznhsvjJfGK+O18cZ4a7wz3hsfjI/GJ+Oz8cX4anwzvhs/jJ/GL+O38cf4a/wzEsxEZmIziZnUTGYmN1OYKc1UZmozjZnWTGemNzOYGc1MZmYzi5nVzGZmN3OYOc1cZm4zj5nXzGfmNwuYBc1CZmGziFnULGYWN0uYJc1SZmmzjFnWLGeWNyuYFc1KZmWzilnVrGZWN2uYNc1aZm2zjlnXrGfWNxuYDc1GZmOzidnUbGY2N1uYLc1WZmuzjdnWbGe2NzuYHc1OZmezi9nV7GZ2N3uYPc1eZm+zj9nX7Gf2NweYA81B5mBziDnUHGYON0eYI81R5mhzjDnWHGeONyeYE81J5mRzijnVnGZON2eYM81Z5mxzjjnXnGfONxeYC81F5mJzibnUXGYuN1eYK81V5mpzjbnWXGeuNzeYG81N5mZzi7nV3GZuN3eYO81d5m5zj7nX3GfuNw+YB81D5mHziPmfedQ8Zh43T5gnzVPmafOMedY8Z543L5gXzUvmZfOKedXETNwkTNKkTNpkTNbkTGDypmCKpmTKpmKqpmbqpmGapmXapmO6pmf6ZmCGJjSRGZmxec28bt4wb5q3zNvmHfOuec+8bz4wH5qPzMfmE/Op+cx8br4wX5qvzNfmG/Ot+c58b34wP5qfzM/mF/Or+c38bv4wf5q/zN/mH/Ov+c9MsBJZia0kVlIrmZXcSmGltFJZqa00VlornZXeymBltDJZma0sVlYrm5XdymHltHJZua08Vl4rn5XfKmAVtApZha0iVlGrmFXcKmGVtEpZpa0yVlmrnFXeqmBVtCpZla0qVlWrmlXdqmHVtGpZta06Vl2rnlXfamA1tBpZja0mVlOrmdXcamG1tFpZra02VlurndXe6mB1tDpZna0uVlerm9Xd6mH1tHpZva0+Vl+rn9XfGmANtAZZg60h1lBrmDXcGmGNtEZZo60x1lhrnDXemmBNtCZZk60p1lRrmjXdmmHNtGZZs6051lxrnjXfWmAttBZZi60l1lJrmbXcWmGttFZZq6011lprnbXe2mBttDZZm60t1lZrm7Xd2mHttHZZu6091l5rn7XfOmAdtA5Zh60j1n/WUeuYddw6YZ20TlmnrTPWWeucdd66YF20LlmXrSvWVQuzcIuwSIuyaIuxWIuzgMVbgiVakiVbiqVamqVbhmValmVbjuVanuVbgRVa0EJWZMXWNeu6dcO6ad2yblt3rLvWPeu+9cB6aD2yHltPrKfWM+u59cJ6ab2yXltvrLfWO+u99cH6aH2yPltfrK/WN+u79cP6af2yflt/rL/WPyvBTmQntpPYSe1kdnI7hZ3STmWnttPYae10dno7g53RzmRntrPYWe1sdnY7h53TzmXntvPYee18dn67gF3QLmQXtovYRe1idnG7hF3SLmWXtsvYZe1ydnm7gl3RrmRXtqvYVe1qdnW7hl3TrmXXtuvYde16dn27gd3QbmQ3tpvYTe1mdnO7hd3SbmW3ttvYbe12dnu7g93R7mR3trvYXe1udne7h93T7mX3tvvYfe1+dn97gD3QHmQPtofYQ+1h9nB7hD3SHmWPtsfYY+1x9nh7gj3RnmRPtqfYU+1p9nR7hj3TnmXPtufYc+159nx7gb3QXmQvtpfYS+1l9nJ7hb3SXmWvttfYa+119np7g73R3mRvtrfYW+1t9nZ7h73T3mXvtvfYe+199n77gH3QPmQfto/Y/9lH7WP2cfuEfdI+ZZ+2z9hn7XP2efuCfdG+ZF+2r9hXbczGbcImbcqmbcZmbc4GNm8LtmhLtmwrtmprtm4btmlbtm07tmt7tm8HdmhDG9mRHdvX7Ov2Dfumfcu+bd+x79r37Pv2A/uh/ch+bD+xn9rP7Of2C/ul/cp+bb+x39rv7Pf2B/uj/cn+bH+xv9rf7O/2D/un/cv+bf+x/9r/7AQnkZPYSeIkdZI5yZ0UTkonlZPaSeOkddI56Z0MTkYnk5PZyeJkdbI52Z0cTk4nl5PbyePkdfI5+Z0CTkGnkFPYKeIUdYo5xZ0STkmnlFPaKeOUdco55Z0KTkWnklPZqeJUdao51Z0aTk2nllPbqePUdeo59Z0GTkOnkdPYaeI0dZo5zZ0WTkunldPaaeO0ddo57Z0OTkenk9PZ6eJ0dbo53Z0eTk+nl9Pb6eP0dfo5/Z0BzkBnkDPYGeIMdYY5w50RzkhnlDPaGeOMdcY5450JzkRnkjPZmeJMdaY5050ZzkxnljPbmePMdeY5850FzkJnkbPYWeIsdZY5y50VzkpnlbPaWeOsddY5650NzkZnk7PZ2eJsdbY5250dzk5nl7Pb2ePsdfY5+50DzkHnkHPYOeL85xx1jjnHnRPOSeeUc9o545x1zjnnnQvOReeSc9m54lx1MAd3CId0KId2GId1OAc4vCM4oiM5sqM4qpOQOCHBcEzHcmzHcVzHc3wncEIHOsiJnNi55lx3bjg3nVvObeeOc9e559x3HjgPnUfOY+eJ89R55jx3XjgvnVfOa+eN89Z557x3PjgfnU/OZ+eL89X55nx3fjg/nV/Ob+eP89f55yS4idzEbhI3qZvMTe6mcFO6qdzUbho3rZvOTe9mcDO6mdzMbhY3q5vNze7mcHO6udzcbh43r5vPze8WcAu6hdzCbhG3qFvMLe6WcEu6pdzSbhm3rFvOLe9WcCu6ldzKbhW3qlvNre7WcGu6tdzabh23rlvPre82cBu6jdzGbhO3qdvMbe62cFu6rdzWbhu3rdvObe92cDu6ndzObhe3q9vN7e72cHu6vdzebh+3r9vP7e8OcAe6g9zB7hB3qDvMHe6OcEe6o9zR7hh3rDvOHe9OcCe6k9zJ7hR3qjvNne7OcGe6s9zZ7hx3rjvPne8ucBe6i9zF7hJ3qbvMXe6ucFe6q9zV7hp3rbvOXe9ucDe6m9zN7hZ3q7vN3e7ucHe6u9zd7h53r7vP3e8ecA+6h9zD7hH3P/eoe8w97p5wT7qn3NPuGfese849715wL7qX3MvuFfeqi7m4S7ikS7m0y7isy7nA5V3BFV3JlV3FVV3N1V3DNV3LtV3HdV3P9d3ADV3oIjdyY/eae9294d50b7m33TvuXfeee9994D50H7mP3SfuU/eZ+9x94b50X7mv3TfuW/ed+9794H50P7mf3S/uV/eb+9394f50f7m/3T/uX/efm+Al8hJ7SbykXjIvuZfCS+ml8lJ7aby0XjovvZfBy+hl8jJ7WbysXjYvu5fDy+nl8nJ7eby8Xj4vv1fAK+gV8gp7RbyiXjGvuFfCK+mV8kp7ZbyyXjmvvFfBq+hV8ip7VbyqXjWvulfDq+nV8mp7dby6Xj2vvtfAa+g18hp7TbymXjOvudfCa+m18lp7bby2XjuvvdfB6+h18jp7XbyuXjevu9fD6+n18np7fby+Xj+vvzfAG+gN8gZ7Q7yh3jBvuDfCG+mN8kZ7Y7yx3jhvvDfBm+hN8iZ7U7yp3jRvujfDm+nN8mZ7c7y53jxvvrfAW+gt8hZ7S7yl3jJvubfCW+mt8lZ7a7y13jpvvbfB2+ht8jZ7W7yt3jZvu7fD2+nt8nZ7e7y93j5vv3fAO+gd8g57R96DDWm8Y95x74R30jvlnfbOeGe9c95574J30bvkXfaueFc9zMM9wiM9yqM9xmM9zgMe7wme6Eme7Cme6mme7hme6Vme7Tme63me7wVe6EEPeZEXe9e8694N76Z3y7vt3fHueve8+94D76H3yHvsPfGees+8594L76X3ynvtvfHeeu+8994H76P3yfvsffG+et+8794P76f3y/vt/fH+ev+8BD+Rn9hP4if1k/nJ/RR+Sj+Vn9pP46f10/np/Qx+Rj+Tn9nP4mf1s/nZ/Rx+Tj+Xn9vP4+f18/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Rp+Tb+WX9uv49f16/n1/QZ+Q7+R39hv4jf1m/nN/RZ+S7+V39pv47f12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9nf4m/1t/nb/R3+Tn+Xv9vf4+/19/n7/QP+Qf+Qf9g/4v/nH/WP+cf9E/5J/5R/2j/jn/XP+ef9C/5F/5J/2b/iX/UxH/cJn/Qpn/YZn/U5H/i8L/iiL/myr/iqr/m6b/imb/m27/iu7/m+H/ihD33kR37sX/Ov+zf8m/4t/7Z/x7/r3/Pv+w/8h/4j/7H/xH/qP/Of+y/8l/4r/7X/xn/rv/Pf+x/8j/4n/7P/xf/qf/O/+z/8n/4v/7f/x//r//MTgkRB4iBJkDRIFiQPUgQpg1RB6iBNkDZIF6QPMgQZg0xB5iBLkDXIFmQPcgQ5g1xB7iBPkDfIF+QPCgQFg0JB4aBIUDQoFhQPSgQlg1JB6aBMUDYoF5QPKgQVg0pB5aBKUDWoFlQPagQ1g1pB7aBOUDeoF9QPGgQNg0ZB46BJ0DRoFjQPWgQtg1ZB66BN0DZoF7QPOgQdg05B56BL0DXoFnQPegQ9g15B76BP0DfoF/QPBgQDg0HB4GBIMDQYFgwPRgQjg1HB6GBMMDYYF4wPJgQTg0nB5GBKMDWYFkwPZgQzg1nB7GBOMDeYF8wPFgQLg0XB4mBJsDRYFiwPVgQrg1XB6mBNsDZYF6wPNgQbg03B5mBLsDXYFmwPdgQ7g13B7mBPsDfYF+wPDgQHg0PB4eBI8F9wNDgWHA9OBCeDU8Hp4ExwNjgXnA8uBBeDS8Hl4EpwNcACPCACMqACOmACNuACEPCBEIiBFMiBEqiBFuiBEZiBFdiBE7iBF/hBEIQBDFAQBXFwLbge3AhuBreC28Gd4G5wL7gfPAgeBo+Cx8GT4GnwLHgevAheBq+C18Gb4G3wLngffAg+Bp+Cz8GX4GvwLfge/Ah+Br+C38Gf4G/wL0gIE4WJwyRh0jBZmDxMEaYMU4WpwzRh2jBdmD7MEGYMM4WZwyxh1jBbmD3MEeYMc4W5wzxh3jBfmD8sEBYMC4WFwyJh0bBYWDwsEZYMS4WlwzJh2bBcWD6sEFYMK4WVwyph1bBaWD2sEdYMa4W1wzph3bBeWD9sEDYMG4WNwyZh07BZ2DxsEbYMW4WtwzZh27Bd2D7sEHYMO4Wdwy5h17Bb2D3sEfYMe4W9wz5h37Bf2D8cEA4MB4WDwyHh0HBYODwcEY4MR4WjwzHh2HBcOD6cEE4MJ4WTwynh1HBaOD2cEc4MZ4Wzwznh3HBeOD9cEC4MF4WLwyXh0nBZuDxcEa4MV4WrwzXh2nBduD7cEG4MN4Wbwy3h1nBbuD3cEe4Md4W7wz3h3nBfuD88EB4MD4WHwyPhf+HR8Fh4PDwRngxPhafDM+HZ8Fx4PrwQXgwvhZfDK+HVEAvxkAjJkArpkAnZkAtByIdCKIZSKIdKqIZaqIdGaIZWaIdO6IZe6IdBGIYwRGEUxuG18Hp4I7wZ3gpvh3fCu+G98H74IHwYPgofh0/Cp+Gz8Hn4InwZvgpfh2/Ct+G78H34IfwYfgo/h1/Cr+G38Hv4I/wZ/gp/h3/Cv+G/MAEmgolhEpgUJoPJYQqYEqaCqWEamBamg+lhBpgRZoKZYRaYFWaD2WEOmBPmgrlhHpgX5oP5YQFYEBaChWERWBQWg8VhCVgSloKlYRlYFpaD5WEFWBFWgpVhFVgVVoPVYQ1YE9aCtWEdWBfWg/VhA9gQNoKNYRPYFDaDzWEL2BK2gq1hG9gWtoPtYQfYEXaCnWEX2BV2g91hD9gT9oK9YR/YF/aD/eEAOBAOgoPhEDgUDoPD4Qg4Eo6Co+EYOBaOg+PhBDgRToKT4RQ4FU6D0+EMOBPOgrPhHDgXzoPz4QK4EC6Ci+ESuBQug8vhCrgSroKr4Rq4Fq6D6+EGuBFugpvhFrgVboPb4Q64E+6Cu+EeuBfug/vhAXgQHoKH4RH4HzwKj8Hj8AQ8CU/B0/AMPAvPwfPwArwIL8HL8Aq8CjGIQwKSkII0ZCALOQggDwUoQgnKUIEq1KAODWhCC9rQgS70oA8DGEIIEYxgDK/B6/AGvAlvwdvwDrwL78H78AF8CB/Bx/AJfAqfwefwBXwJX8HX8A18C9/B9/AD/Ag/wc/wC/wKv8Hv8Af8CX/B3/AP/Av/wQSUCCVGSVBSlAwlRylQSpQKpUZpUFqUDqVHGVBGlAllRllQVpQNZUc5UE6UC+VGeVBelA/lRwVQQVQIFUZFUFFUDBVHJVBJVAqVRmVQWVQOlUcVUEVUCVVGVVBVVA1VRzVQTVQL1UZ1UF1UD9VHDVBD1Ag1Rk1QU9QMNUctUEvUCrVGbVBb1A61Rx1QR9QJdUZdUFfUDXVHPVBP1Av1Rn1QX9QP9UcD0EA0CA1GQ9BQNAwNRyPQSDQKjUZj0Fg0Do1HE9BENAlNRlPQVDQNTUcz0Ew0C81Gc9BcNA/NRwvQQrQILUZL0FK0DC1HK9BKtAqtRmvQWrQOrUcb0Ea0CW1GW9BWtA1tRzvQTrQL7UZ70F60D+1HB9BBdAgdRkfQf+goOoaOoxPoJDqFTqMz6Cw6h86jC+giuoQuoyvoKsIQjghEIgrRiEEs4hBAPBKQiCQkIwWpSEM6MpCJLGQjB7nIQz4KUIggQihCMbqGrqMb6Ca6hW6jO+guuofuowfoIXqEHqMn6Cl6hp6jF+gleoVeozfoLXqH3qMP6CP6hD6jL+gr+oa+ox/oJ/qFfqM/6C/6hxKiRFHiKEmUNEoWJY9SRCmjVFHqKE2UNkoXpY8yRBmjTFHmKEuUNcoWZY9yRDmjXFHuKE+UN8oX5Y8KRAWjQlHhqEhUNCoWFY9KRCWjUlHpqExUNioXlY8qRBWjSlHlqEpUNaoWVY9qRDWjWlHtqE5UN6oX1Y8aRA2jRlHjqEnUNGoWNY9aRC2jVlHrqE3UNmoXtY86RB2jTlHnqEvUNeoWdY96RD2jXlHvqE/UN+oX9Y8GRAOjQdHgaEg0NBoWDY9GRCOjUdHoaEw0NhoXjY8mRBOjSdHkaEo0NZoWTY9mRDOjWdHsaE40N5oXzY8WRAujRdHiaEm0NFoWLY9WRCujVdHqaE20NloXrY82RBujTdHmaEu0NdoWbY92RDujXdHuaE+qvdG+aH90IDoYHYoOR0ei/6Kj0bHoeHQiOhmdik5HZ6Kz0bnofHQhuhhdii5HV6KrERbhERGRERXREROxEReBiI+ESIykSI6USI20SI+MyIysyI6cyI28yI+CKIxghKIoiqNr0fXoRnQzuhXdju5Ed6N70f3oQfQwehQ9jp5ET6Nn0fPoRfQyehW9jt5Eb6N30fvoQ/Qx+hR9jr5EX6Nv0ffoR/Qz+hX9jv5Ef6N/UUKcKE4cJ4mTxsni5HGKOGWcKk4dp4nTxuni9HGGOGOcKc4cZ4mzxtni7HGOOGecK84d54nzxvni/HGBuGBcKC4cF4mLxsXi4nGJuGRcKi4dl4nLxuXi8nGFuGJcKa4cV4mrxtXi6nGNuGZcK64d14nrxvXi+nGDuGHcKG4cN4mbxs3i5nGLuGXcKm4dt4nbxu3i9nGHuGPcKe4cd4m7xt3i7nGPuGfcK+4d94n7xv3i/vGAeGA8KB4cD4mHxsPi4fGIeGQ86n8s3ePSGE2DANAntvnGtm3btm3btm3btm1nbFvdPXGytVXfj3MdBxuFjcbGYGOxcdh4bAI2EZuETcamYFOxadh0bAY2E5uFzcbmYHOxedh8bAG2EFuELcaWYEuxZdhybAW2EluFrcbWYGuxddh6bAO2EduEbca2YFuxbdh2bAe2E9uF7cb2YHuxfdh+7AB2EDuEHcaOYEexY9hx7AR2EjuFncbOYGexc9h57AJ2EbuEXcauYFexa9h17AZ2E7uF3cbuYHexe9h97AH2EHuEPcaeYE+xZ9hz7AX2EnuFvcbeYG+xd9h77AP2EfuEfca+YF8xDMMxAiMxCqMxBmMxDuMxARMxCZMxBVMxDdMxAzMxC7MxB3MxD/OxAAuxCAMYxBAWY9+w79gP7Cf2C/uN/cH+Yv+wBDwRnhhPgifFk+HJ8RR4SjwVnhpPg6fF0+Hp8Qx4RjwTnhnPgmfFs+HZ8Rx4Tvw/PBeeG8+D58Xz4fnxAnhBvBBeGC+CF8WL4cXxEnhJvBReGi+Dl8XL4eXxCnhFvBJeGa+CV8Wr4dXxGnhNvBZeG6+D18Xr4fXxBnhDvBHeGG+CN8Wb4c3xFnhLvBXeGm+Dt8Xb4e3xDnhHvBPeGe+Cd8W74d3xHnhPvBfeG++D98X74f3xAfhAfBA+GB+CD8WH4cPxEfhIfBQ+Gh+Dj8XH4ePxCfhEfBI+GZ+CT8Wn4dPxGfhMfBY+G5+Dz8Xn4fPxBfhCfBG+GF+CL8WX4cvxFfhKfBW+Gl+Dr8XX4evxDfhGfBO+Gd+Cb8W34dvxHfhOfBe+G9+D78X34fvxA/hB/BB+GD+CH8WP4cfxE/hJ/BR+Gj+Dn8XP4efxC/hF/BJ+Gb+CX8Wv4dfxG/hN/BZ+G7+D38Xv4ffxB/hD/BH+GH+CP8Wf4c/xF/hL/BX+Gn+Dv8Xf4e/xD/hH/BP+Gf+Cf8UxHMcJnMQpnMYZnMU5nMcFXMQlXMYVXMU1XMcN3MQt3MYd3MU93McDPMQjHOAQR3iMf8O/4z/wn/gv/Df+B/+L/8MTiEREYiIJkZRIRiQnUhApiVREaiINkZZIR6QnMhAZiUxEZiILkZXIRmQnchA5if+IXERuIg+Rl8hH5CcKEAWJQkRhoghRlChGFCdKECWJUkRpogxRlihHlCcqEBWJSkRlogpRlahGVCdqEDWJWkRtog5Rl6hH1CcaEA2JRkRjognRlGhGNCdaEC2JVkRrog3RlmhHtCc6EB2JTkRnogvRlehGdCd6ED2JXkRvog/Rl+hH9CcGEAOJQcRgYggxlBhGDCdGECOJUcRoYgwxlhhHjCcmEBOJScRkYgoxlZhGTCdmEDOJWcRsYg4xl5hHzCcWEAuJRcRiYgmxlFhGLCdWECuJVcRqYg2xllhHrCc2EBuJTcRmYguxldhGbCd2EDuJXcRuYg+xl9hH7CcOEAeJQ8Rh4ghxlDhGHCdOECeJU8Rp4gxxljhHnCcuEBeJS8Rl4gpxlbhGXCduEDeJW8Rt4g5xl7hH3CceEA+JR8Rj4gnxlHhGPCdeEC+JV8Rr4g3xlnhHvCc+EB+JT8Rn4gvxlcAInCAIkqAImmAIluAInhAIkZAImVAIldAInTAIk7AIm3AIl/AInwiIkIgIQEACETHxjfhO/CB+Er+I38Qf4i/xj0ggE5GJySRkUjIZmZxMQaYkU5GpyTRkWjIdmZ7MQGYkM5GZySxkVjIbmZ3MQeYk/yNzkbnJPGReMh+ZnyxAFiQLkYXJImRRshhZnCxBliRLkaXJMmRZshxZnqxAViQrkZXJKmRVshpZnaxB1iRrkbXJOmRdsh5Zn2xANiQbkY3JJmRTshnZnGxBtiRbka3JNmRbsh3ZnuxAdiQ7kZ3JLmRXshvZnexB9iR7kb3JPmRfsh/ZnxxADiQHkYPJIeRQchg5nBxBjiRHkaPJMeRYchw5npxATiQnkZPJKeRUcho5nZxBziRnkbPJOeRcch45n1xALiQXkYvJJeRSchm5nFxBriRXkavJNeRach25ntxAbiQ3kZvJLeRWchu5ndxB7iR3kbvJPeRech+5nzxAHiQPkYfJI+RR8hh5nDxBniRPkafJM+RZ8hx5nrxAXiQvkZfJK+RV8hp5nbxB3iRvkbfJO+Rd8h55n3xAPiQfkY/JJ+RT8hn5nHxBviRfka/JN+Rb8h35nvxAfiQ/kZ/JL+RXEiNxkiBJkiJpkiFZkiN5UiBFUiJlUiFVUiN10iBN0iJt0iFd0iN9MiBDMiIBCUlExuQ38jv5g/xJ/iJ/k3/Iv+Q/MoFKRCWmklBJqWRUcioFlZJKRaWm0lBpqXRUeioDlZHKRGWmslBZqWxUdioHlZP6j8pF5abyUHmpfFR+qgBVkCpEFaaKUEWpYlRxqgRVkipFlabKUGWpclR5qgJVkapEVaaqUFWpalR1qgZVk6pF1abqUHWpelR9qgHVkGpENaaaUE2pZlRzqgXVkmpFtabaUG2pdlR7qgPVkepEdaa6UF2pblR3qgfVk+pF9ab6UH2pflR/agA1kBpEDaaGUEOpYdRwagQ1khpFjabGUGOpcdR4agI1kZpETaamUFOpadR0agY1k5pFzabmUHOpedR8agG1kFpELaaWUEupZdRyagW1klpFrabWUGupddR6agO1kdpEbaa2UFupbdR2age1k9pF7ab2UHupfdR+6gB1kDpEHaaOUEepY9Rx6gR1kjpFnabOUGepc9R56gJ1kbpEXaauUFepa9R16gZ1k7pF3abuUHepe9R96gH1kHpEPaaeUE+pZ9Rz6gX1knpFvabeUG+pd9R76gP1kfpEfaa+UF8pjMIpgiIpiqIphmIpjuIpgRIpiZIphVIpjdIpgzIpi7Iph3Ipj/KpgAqpiAIUpBAVU9+o79QP6if1i/pN/aH+Uv+oBDoRnZhOQielk9HJ6RR0SjoVnZpOQ6el09Hp6Qx0RjoTnZnOQmels9HZ6Rx0Tvo/Ohedm85D56Xz0fnpAnRBuhBdmC5CF6WL0cXpEnRJuhRdmi5Dl6XL0eXpCnRFuhJdma5CV6Wr0dXpGnRNuhZdm65D16Xr0fXpBnRDuhHdmG5CN6Wb0c3pFnRLuhXdmm5Dt6Xb0e3pDnRHuhPdme5Cd6W70d3pHnRPuhfdm+5D96X70f3pAfRAehA9mB5CD6WH0cPpEfRIehQ9mh5Dj6XH0ePpCfREehI9mZ5CT6Wn0dPpGfRMehY9m55Dz6Xn0fPpBfRCehG9mF5CL6WX0cvpFfRKehW9ml5Dr6XX0evpDfRGehO9md5Cb6W30dvpHfROehe9m95D76X30fvpA/RB+hB9mD5CH6WP0cfpE/RJ+hR9mj5Dn6XP0efpC/RF+hJ9mb5CX6Wv0dfpG/RN+hZ9m75D36Xv0ffpB/RD+hH9mH5CP6Wf0c/pF/RL+hX9mn5Dv6Xf0e/pD/RH+hP9mf5Cf6UxGqcJmqQpmqYZmqU5mqcFWqQlWqYVWqU1WqcN2qQt2qYd2qU92qcDOqQjGtCQRnRMf6O/0z/on/Qv+jf9h/5L/6MTmERMYiYJk5RJxiRnUjApmVRMaiYNk5ZJx6RnMjAZmUxMZiYLk5XJxmRncjA5mf+YXExuJg+Tl8nH5GcKMAWZQkxhpghTlCnGFGdKMCWZUkxppgxTlinHlGcqMBWZSkxlpgpTlanGVGdqMDWZWkxtpg5Tl6nH1GcaMA2ZRkxjpgnTlGnGNGdaMC2ZVkxrpg3TlmnHtGc6MB2ZTkxnpgvTlenGdGd6MD2ZXkxvpg/Tl+nH9GcGMAOZQcxgZggzlBnGDGdGMCOZUcxoZgwzlhnHjGcmMBOZScxkZgozlZnGTGdmMDOZWcxsZg4zl5nHzGcWMAuZRcxiZgmzlFnGLGdWMCuZVcxqZg2zllnHrGc2MBuZTcxmZguzldnGbGd2MDuZXcxuZg+zl9nH7GcOMAeZQ8xh5ghzlDnGHGdOMCeZU8xp5gxzljnHnGcuMBeZS8xl5gpzlbnGXGduMDeZW8xt5g5zl7nH3GceMA+ZR8xj5gnzlHnGPGdeMC+ZV8xr5g3zlnnHvGc+MB+ZT8xn5gvzlcEYnCEYkqEYmmEYluEYnhEYkZEYmVEYldEYnTEYk7EYm3EYl/EYnwmYkIkYwEAGMTHzjfnO/GB+Mr+Y38wf5i/zj0lgE7GJ2SRsUjYZm5xNwaZkU7Gp2TRsWjYdm57NwGZkM7GZ2SxsVjYbm53NweZk/2NzsbnZPGxeNh+bny3AFmQLsYXZImxRthhbnC3BlmRLsaXZMmxZthxbnq3AVmQrsZXZKmxVthpbna3B1mRrsbXZOmxdth5bn23ANmQbsY3ZJmxTthnbnG3BtmRbsa3ZNmxbth3bnu3AdmQ7sZ3ZLmxXthvbne3B9mR7sb3ZPmxfth/bnx3ADmQHsYPZIexQdhg7nB3BjmRHsaPZMexYdhw7np3ATmQnsZPZKexUdho7nZ3BzmRnsbPZOexcdh47n13ALmQXsYvZJexSdhm7nF3BrmRXsavZNexadh27PiFpQsL/Y7ewW9lt7HZ2B7uT3cXuZvewe9l97H72AHuQPcQeZo+wR9lj7HH2BHuSPcWeZs+wZ9lz7Hn2AnuRvcReZq+wV9lr7HX2BnuTvcXeZu+wd9l77H32AfuQfcQ+Zp+wT9ln7HP2BfuSfcW+Zt+wb9l37Hv2A/uR/cR+Zr+wX1mMxVmCJVmKpVmGZVmO5VmBFVmJlVmFVVmN1VmDNVmLtVmHdVmP9dmADdmIBSxkERuz39jv7A/2J/uL/c3+Yf+y/9gELhGXmEvCJeWSccm5FFxKLhWXmkvDpeXScem5DFxGLhOXmcvCZeWycdm5HFxO7j8uF5eby8Pl5fJx+bkCXEGuEFeYK8IV5YpxxbkSXEmuFFeaK8OV5cpx5bkKXEWuEleZq8JV5apx1bkaXE2uFlebq8PV5epx9bkGXEOuEdeYa8I15ZpxzbkWXEuuFdeaa8O15dpx7bkOXEeuE9eZ68J15bpx3bkeXE+uF9eb68P15fpx/bkB3EBuEDeYG8IN5YZxw7kR3EhuFDeaG8ON5cZx47kJ3ERuEjeZm8JN5aZx07kZ3ExuFjebm8PN5eZx87kF3EJuEbeYW8It5ZZxy7kV3EpuFbeaW8Ot5dZx67kN3EZuE7eZ28Jt5bZx27kd3E5uF7eb28Pt5fZx+7kD3EHuEHeYO8Id5Y5xx7kT3EnuFHeaO8Od5c5x57kL3EXuEneZu8Jd5a5x17kb3E3uFnebu8Pd5e5x97kH3EPuEfeYe8I95Z5xz7kX3EvuFfeae8O95d5x77kP3EfuE/eZ+8J95TAO5wiO5CiO5hiO5TiO5wRO5CRO5hRO5TRO5wzO5CzO5hzO5TzO5wIu5CIOcJBDXMx9475zP7if3C/uN/eH+8v94xL4RHxiPgmflE/GJ+dT8Cn5VHxqPg2flk/Hp+cz8Bn5THxmPguflc/GZ+dz8Dn5//hcfG4+D5+Xz8fn5wvwBflCfGG+CF+UL8YX50vwJflSfGm+DF+WL8eX5yvwFflKfGW+Cl+Vr8ZX52vwNflafG2+Dl+Xr8fX5xvwDflGfGO+Cd+Ub8Y351vwLflWfGu+Dd+Wb8e35zvwHflOfGe+C9+V78Z353vwPflefG++D9+X78f35wfwA/lB/GB+CD+UH8YP50fwI/lR/Gh+DD+WH8eP5yfwE/lJ/GR+Cj+Vn8ZP52fwM/lZ/Gx+Dj+Xn8fP5xfwC/lF/GJ+Cb+UX8Yv51fwK/lV/Gp+Db+WX8ev5zfwG/lN/GZ+C7+V38Zv53fwO/ld/G5+D7+X38fv5w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8ef5y/wF/lL/GX+Cn+Vv8Zf52/wN/lb/G3+Dn+Xv8ff5x/wD/lH/GP+Cf+Uf8Y/51/wL/lX/Gv+Df+Wf8e/5z/wH/lP/Gf+C/+Vx3icJ3iSp3iaZ3iW53ieF3iRl3iZV3iV13idN3iTt3ibd3iX93ifD/iQj3jAQx7xMf+N/87/4H/yv/jf/B/+L/+PTxASCYmFJEJSIZmQXEghpBRSCamFNEJaIZ2QXsggZBQyCZmFLEJWIZuQXcgh5BT+E3IJuYU8Ql4hn5BfKCAUFAoJhYUiQlGhmFBcKCGUFEoJpYUyQlmhnFBeqCBUFCoJlYUqQlWhmlBdqCHUFGoJtYU6Ql2hnlBfaCA0FBoJjYUmQlOhmdBcaCG0FFoJrYU2QluhndBe6CB0FDoJnYUuQlehm9Bd6CH0FHoJvYU+Ql+hn9BfGCAMFAYJg4UhwlBhmDBcGCGMFEYJo4UxwlhhnDBemCBMFCYJk4UpwlRhmjBdmCHMFGYJs4U5wlxhnjBfWCAsFBYJi4UlwlJhmbBcWCGsFFYJq4U1wlphnbBe2CBsFDYJm4UtwlZhm7Bd2CHsFHYJu4U9wl5hn7BfOCAcFA4Jh4UjwlHhmHBcOCGcFE4Jp4UzwlnhnHBeuCBcFC4Jl4UrwlXhmnBduCHcFG4Jt4U7wl3hnnBfeCA8FB4Jj4UnwlPhmfBceCG8FF4Jr4U3wlvhnfBe+CB8FD4Jn4UvwlcBE3CBEEiBEmiBEViBE3hBEERBEmRBEVRBE3TBEEzBEmzBEVzBE3whEEIhEoAABSTEwjfhu/BD+Cn8En4Lf4S/wj8hQUwkJhaTiEnFZGJyMYWYUkwlphbTiGnFdGJ6MYOYUcwkZhaziFnFbGJ2MYeYU/xPzCXmFvOIecV8Yn6xgFhQLCQWFouIRcViYnGxhFhSLCWWFsuIZcVyYnmxglhRrCRWFquIVcVqYnWxhlhTrCXWFuuIdcV6Yn2xgdhQbCQ2FpuITcVmYnOxhdhSbCW2FtuIbcV2Ynuxg9hR7CR2FruIXcVuYnexh9hT7CX2FvuIfcV+Yn9xgDhQHCQOFoeIQ8Vh4nBxhDhSHCWOFseIY8Vx4nhxgjhRnCROFqeIU8Vp4nRxhjhTnCXOFueIc8V54nxxgbhQXCQuFpeIS8Vl4nJxhbhSXCWuFteIa8V14npxg7hR3CRuFreIW8Vt4nZxh7hT3CXuFveIe8V94n7xgHhQPCQeFo+IR8Vj4nHxhHhSPCWeFs+IZ8Vz4nnxgnhRvCReFq+IV8Vr4nXxhnhTvCXeFu+Id8V74n3xgfhQfCQ+Fp+IT8Vn4nPxhfhSfCW+Ft+Ib8V34nvxg/hR/CR+Fr+IX0VMxEVCJEVKpEVGZEVO5EVBFEVJlEVFVEVN1EVDNEVLtEVHdEVP9MVADMVIBCIUkRiL38Tv4g/xp/hL/C3+Ef+K/8QEKZGUWEoiJZWSScmlFFJKKZWUWkojpZXSSemlDFJGKZOUWcoiZZWySdmlHFJO6T8pl5RbyiPllfJJ+aUCUkGpkFRYKiIVlYpJxaUSUkmplFRaKiOVlcpJ5aUKUkWpklRZqiJVlapJ1aUaUk2pllRbqiPVlepJ9aUGUkOpkdRYaiI1lZpJzaUWUkupldRaaiO1ldpJ7aUOUkepk9RZ6iJ1lbpJ3aUeUk+pl9Rb6iP1lfpJ/aUB0kBpkDRYGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlaZJ06UZ0kxpljRbmiPNleZJ86UF0kJpkbRYWiItlZZJy6UV0kpplbRaWiOtldZJ66UN0kZpk7RZ2iJtlbZJ26Ud0k5pl7Rb2iPtlfZJ+6UD0kHpkHRYOiIdlY5Jx6UT0knplHRaOiOdlc5J56UL0kXpknRZuiJdla5J16Ub0k3plnRbuiPdle5J96UH0kPpkfRYeiI9lZ5Jz6UX0kvplfRaeiO9ld5J76UP0kfpk/RZ+iJ9lTAJlwiJlCiJlhiJlTiJlwRJlCRJlhRJlTRJlwzJlCzJlhzJlTzJlwIplCIJSFBCUix9k75LP6Sf0i/pt/RH+iv9kxLkRHJiOYmcVE4mJ5dTyCnlVHJqOY2cVk4np5czyBnlTHJmOYucVc4mZ5dzyDnl/+Rccm45j5xXzifnlwvIBeVCcmG5iFxULiYXl0vIJeVScmm5jFxWLieXlyvIFeVKcmW5ilxVriZXl2vINeVacm25jlxXrifXlxvIDeVGcmO5idxUbiY3l1vILeVWcmu5jdxWbie3lzvIHeVOcme5i9xV7iZ3l3vIPeVecm+5j9xX7if3lwfIA+VB8mB5iDxUHiYPl0fII+VR8mh5jDxWHiePlyfIE+VJ8mR5ijxVniZPl2fIM+VZ8mx5jjxXnifPlxfIC+VF8mJ5ibxUXiYvl1fIK+VV8mp5jbxWXievlzfIG+VN8mZ5i7xV3iZvl3fIO+Vd8m55j7xX3ifvlw/IB+VD8mH5iHxUPiYfl0/IJ+VT8mn5jHxWPiefly/IF+VL8mX5inxVviZfl2/IN+Vb8m35jnxXvifflx/ID+VH8mP5ifxUfiY/l1/IL+VX8mv5jfxWfie/lz/IH+VP8mf5i/xVxmRcJmRSpmRaZmRW5mReFmRRlmRZVmRV1mRdNmRTtmRbdmRX9mRfDuRQjmQgQxnJsfxN/i7/kH/Kv+Tf8h/5r/xPTlASKYmVJEpSJZmSXEmhpFRSKamVNEpaJZ2SXsmgZFQyKZmVLEpWJZuSXcmh5FRS/i+xz6vkU/IrBZSCSiGlsFJEKaoUU4orJZSSSimltFJGKauUU8orFZSKSiWlslJFqapUU6orNZSaSi2ltlJHqavUU+orDZSGSiOlsdJEaao0U5orLZSWSiultdJGaau0U9orHZSOSiels9JF6ap0U7orPZSeSi+lt9JH6av0U/orA5SByiBlsDJEGaoMU4YrI5SRyihltDJGGauMU8YrE5SJyiRlsjJFmapMU6YrM5SZyixltjJHmavMU+YrC5SFyiJlsbJEWaosU5YrK5SVyipltbJGWausU9YrG5SNyiZls7JF2apsU7YrO5Sdyi5lt7JH2avsU/YrB5SDyiHlsHJEOaocU44rJ5STyinltHJGOaucU84rF5SLyiXlsnJFuapcU64rN5Sbyi3ltnJHuavcU+4rD5SHyiPlsfJEeao8U54rL5SXyivltfJGeau8U94rH5SPyifls/JF+apgCq4QCqlQCq0wCqtwCq8IiqhIiqwoiqpoiq4YiqlYiq04iqt4iq8ESqhEClCggpRY+aZ8V34oP5Vfym/lj/JX+ackqInUxGoSNamaTE2uplBTqqnU1GoaNa2aTk2vZlAzqpnUzGoWNauaTc2u5lBzqv+pudTcah41r5pPza8WUAuqhdTCahG1qFpMLa6WUEuqpdTSahm1rFpOLa9WUCuqldTKahW1qlpNra7WUGuqtdTaah21rlpPra82UBuqjdTGahO1qdpMba62UFuqrdTWahu1rdpOba92UDuqndTOahe1q9pN7a72UHuqvdTeah+1r9pP7a8OUAeqg9TB6hB1qDpMHa6OUEeqo9TR6hh1rDpOHa9OUCeqk9TJ6hR1qjpNna7OUGeqs9TZ6hx1rjpPna8uUBeqi9TF6hJ1qbpMXa6uUFeqq9TV6hp1rbpOXa9uUDeqm9TN6hZ1q7pN3a7uUHequ9Td6h51r7pP3a8eUA+qh9TD6hH1qHpMPa6eUE+qp9TT6hn1rHpOPa9eUC+ql9TL6hX1qnpNva7eUG+qt9Tb6h31rnpPva8+UB+qj9TH6hP1qfpMfa6+UF+qr9TX6hv1rfpOfa9+UD+qn9TP6hf1q4qpuEqopEqptMqorMqpvCqooiqpsqqoqqqpumqopmqptuqoruqpvhqooRqpQIUqUmP1m/pd/aH+VH+pv9U/6l/1n5qgJdISa0m0pFoyLbmWQkuppdJSa2m0tFo6Lb2WQcuoZdIya1m0rFo2LbuWQ8up/afl0nJrebS8Wj4tv1ZAK6gV0gprRbSiWjGtuFZCK6mV0kprZbSyWjmtvFZBq6hV0iprVbSqWjWtulZDq6nV0mprdbS6Wj2tvtZAa6g10hprTbSmWjOtudZCa6m10lprbbS2WjutvdZB66h10jprXbSuWjetu9ZD66n10nprfbS+Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0iZrU7Sp2jRtujZDm6nN0mZrc7S52jxtvrZAW6gt0hZrS7Sl2jJtubZCW6mt0lZra7S12jptvbZB26ht0jZrW7St2jZtu7ZD26nt0nZre7S92j5tv3ZAO6gd0g5rR7Sj2jHtuHZCO6md0k5rZ7Sz2jntvHZBu6hd0i5rV7Sr2jXtunZDu6nd0m5rd7S72j3tvvZAe6g90h5rT7Sn2jPtufZCe6m90l5rb7S32jvtvfZB+6h90j5rX7SvGqbhGqGRGqXRGqOxGqfxmqCJmqTJmqKpmqbpmqGZmqXZmqO5mqf5WqCFWqQBDWpIi7Vv2nfth/ZT+6X91v5of7V/WoKeSE+sJ9GT6sn05HoKPaWeSk+tp9HT6un09HoGPaOeSc+sZ9Gz6tn07HoOPaf+n55Lz63n0fPq+fT8egG9oF5IL6wX0YvqxfTiegm9pF5KL62X0cvq5fTyegW9ol5Jr6xX0avq1fTqeg29pl5Lr63X0evq9fT6egO9od5Ib6w30ZvqzfTmegu9pd5Kb6230dvq7fT2ege9o95J76x30bvq3fTueg+9p95L76330fvq/fT++gB9oD5IH6wP0Yfqw/Th+gh9pD5KH62P0cfq4/Tx+gR9oj5Jn6xP0afq0/Tp+gx9pj5Ln63P0efq8/T5+gJ9ob5IX6wv0Zfqy/Tl+gp9pb5KX62v0dfq6/T1+gZ9o75J36xv0bfq2/Tt+g59p75L363v0ffq+/T9+gH9oH5IP6wf0Y/qx/Tj+gn9pH5KP62f0c/q5/Tz+gX9on5Jv6xf0a/q1/Tr+g39pn5Lv63f0e/q9/T7+gP9of5If6w/0Z/qz/Tn+gv9pf5Kf62/0d/q7/T3+gf9o/5J/6x/0b/qmI7rhE7qlE7rjM7qnM7rgi7qki7riq7qmq7rhm7qlm7rju7qnu7rgR7qkQ50qCM91r/p3/Uf+k/9l/5b/6P/1f/pCUYiI7GRxEhqJDOSGymMlEYqI7WRxkhrpDPSGxmMjEYmI7ORxchqZDOyGzmMnMZ/Ri4jt5HHyGvkM/IbBYyCRiGjsFHEKGoUM4obJYySRimjtFHGKGuUM8obFYyKRiWjslHFqGpUM6obNYyaRi2jtlHHqGvUM+obDYyGRiOjsdHEaGo0M5obLYyWRiujtdHGaGu0M9obHYyORiejs9HF6Gp0M7obPYyeRi+jt9HH6Gv0M/obA4yBxiBjsDHEGGoMM4YbI4yRxihjtDHGGGuMM8YbE4yJxiRjsjHFmGpMM6YbM4yZxixjtjHHmGvMM+YbC4yFxiJjsbHEWGosM5YbK4yVxipjtbHGWGusM9YbG4yNxiZjs7HF2GpsM7YbO4ydxi5jt7HH2GvsM/YbB4yDxiHjsHHEOGocM44bJ4yTxinjtHHGOGucM84bF4yLxiXjsnHFuGpcM64bN4ybxi3jtnHHuGvcM+4bD4yHxiPjsfHEeGo8M54bL4yXxivjtfHGeGu8M94bH4yPxifjs/HF+GpgBm4QBmlQBm0wBmtwBm8IhmhIhmwohmpohm4YhmlYhm04hmt4hm8ERmhEBjCggYzY+GZ8N34YP41fxm/jj/HX+GckmInMxGYSM6mZzExupjBTmqnM1GYaM62ZzkxvZjAzmpnMzGYWM6uZzcxu5jBzmv+ZuczcZh4zr5nPzG8WMAuahczCZhGzqFnMLG6WMEuapczSZhmzrFnOLG9WMCualczKZhWzqlnNrG7WMGuatczaZh2zrlnPrG82MBuajczGZhOzqdnMbG62MFuarczWZhuzrdnObG92MDuanczOZhezq9nN7G72MHuavczeZh+zr9nP7G8OMAeag8zB5hBzqDnMHG6OMEeao8zR5hhzrDnOHG9OMCeak8zJ5hRzqjnNnG7OMGeas8zZ5hxzrjnPnG8uMBeai8zF5hJzqbnMXG6uMFeaq8zV5hpzrbnOXG9uMDeam8zN5hZzq7nN3G7uMHeau8zd5h5zr7nP3G8eMA+ah8zD5hHzqHnMPG6eME+ap8zT5hnzrHnOPG9eMC+al8zL5hXzqnnNvG7eMG+at8zb5h3zrnnPvG8+MB+aj8zH5hPzqfnMfG6+MF+ar8zX5hvzrfnOfG9+MD+an8zP5hfzq4mZuEmYpEmZtMmYrMmZvCmYoimZsqmYqqmZummYpmmZtumYrumZvhmYoRmZwIQmMmPzm/nd/GH+NH+Zv80/5l/zn5lgJbISW0mspFYyK7mVwkpppbJSW2mstFY6K72VwcpoZbIyW1msrFY2K7uVw8pp/WflsnJbeay8Vj4rv1XAKmgVsgpbRayiVjGruFXCKmmVskpbZayyVjmrvFXBqmhVsipbVayqVjWrulXDqmnVsmpbday6Vj2rvtXAamg1shpbTaymVjOrudXCamm1slpbbay2VjurvdXB6mh1sjpbXayuVjeru9XD6mn1snpbfay+Vj+rvzXAGmgNsgZbQ6yh1jBruDXCGmmNskZbY6yx1jhrvDXBmmhNsiZbU6yp1jRrujXDmmnNsmZbc6y51jxrvrXAWmgtshZbS6yl1jJrubXCWmmtslZba6y11jprvbXB2mhtsjZbW6yt1jZru7XD2mntsnZbe6y91j5rv3XAOmgdsg5bR6yj1jHruHXCOmmdsk5bZ6yz1jnrvHXBumhdsi5bV6yr1jXrunXDumndsm5bd6y71j3rvvXAemg9sh5bT6yn1jPrufXCemm9sl5bb6y31jvrvfXB+mh9sj5bX6yvFmbhFmGRFmXRFmOxFmfxlmCJlmTJlmKplmbplmGZlmXZlmO5lmf5VmCFVmQBC1rIiq1v1nfrh/XT+mX9tv5Yf61/VoKdyE5sJ7GT2sns5HYKO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6f9n53Lzm3nsfPa+ez8dgG7oF3ILmwXsYvaxezidgm7pF3KLm2Xscva5ezydgW7ol3JrmxXsava1ezqdg27pl3Lrm3Xseva9ez6dgO7od3Ibmw3sZvazezmdgu7pd3Kbm23sdva7ez2dge7o93J7mx3sbva3ezudg+7p93L7m33sfva/ez+9gB7oD3IHmwPsYfaw+zh9gh7pD3KHm2Pscfa4+zx9gR7oj3JnmxPsafa0+zp9gx7pj3Lnm3Psefa8+z59gJ7ob3IXmwvsZfay+zl9gp7pb3KXm2vsdfa6+z19gZ7o73J3mxvsbfa2+zt9g57p73L3m3vsffa++z99gH7oH3IPmwfsY/ax+zj9gn7pH3KPm2fsc/a5+zz9gX7on3Jvmxfsa/a1+zr9g37pn3Lvm3fse/a9+z79gP7of3Ifmw/sZ/az+zn9gv7pf3Kfm2/sd/a7+z39gf7o/3J/mx/sb/amI3bhE3alE3bjM3anM3bgi3aki3biq3amq3bhm3alm3bju3anu3bgR3akQ1saCM7tr/Z3+0f9k/7l/3b/mP/tf/ZCU4iJ7GTxEnqJHOSOymclE4qJ7WTxknrpHPSOxmcjE4mJ7OTxcnqZHOyOzmcnM5/Ti4nt5PHyevkc/I7BZyCTiGnsFPEKeoUc4o7JZySTimntFPGKeuUc8o7FZyKTiWnslPFqepUc6o7NZyaTi2ntlPHqevUc+o7DZyGTiOnsdPEaeo0c5o7LZyWTiuntdPGaeu0c9o7HZyOTiens9PF6ep0c7o7PZyeTi+nt9PH6ev0c/o7A5yBziBnsDPEGeoMc4Y7I5yRzihntDPGGeuMc8Y7E5yJziRnsjPFmepMc6Y7M5yZzixntjPHmevMc+Y7C5yFziJnsbPEWeosc5Y7K5yVzipntbPGWeusc9Y7G5yNziZns7PF2epsc7Y7O5ydzi5nt7PH2evsc/Y7B5yDziHnsHPEOeocc447J5yTzinntHPGOeucc847F5yLziXnsnPFuepcc647N5ybzi3ntnPHuevcc+47D5yHziPnsfPEeeo8c547L5yXzivntfPGSZyQkPDe+eB8dD45n50vzlcHc3CHcEiHcmiHcViHc3hHcERHcmRHcVRHc3THcEzHcmzHcVzHc3wncEIncoADHeTEzjfnu/PD+en8cn47f5y/zj8nwU3kJnaTuEndZG5yN4Wb0k3lpnbTuGnddG56N4Ob0c3kZnazuFndbG52N4eb0/3PzeXmdvO4ed18bn63gFvQLeQWdou4Rd1ibnG3hFvSLeWWdsu4Zd1ybnm3glvRreRWdqu4Vd1qbnW3hlvTreXWduu4dd16bn23gdvQbeQ2dpu4Td1mbnO3hdvSbeW2dtu4bd12bnu3g9vR7eR2dru4Xd1ubne3h9vT7eX2dvu4fd1+bn93gDvQHeQOdoe4Q91h7nB3hDvSHeWOdse4Y91x7nh3gjvRneROdqe4U91p7nR3hjvTneXOdue4c9157nx3gbvQXeQudpe4S91l7nJ3hbvSXeWudte4a9117np3g7vR3eRudre4W91t7nZ3h7vT3eXudve4e9197n73gHvQPeQedo+4R91j7nH3hHvSPeWeds+4Z91z7nn3gnvRveRedq+4V91r7nX3hnvTveXedu+4d9177n33gfvQfeQ+dp+4T91n7nP3hfvSfeW+dt+4b9137nv3g/vR/eR+dr+4X13MxV3CJV3KpV3GZV3O5V3BFV3JlV3FVV3N1V3DNV3LtV3HdV3P9d3ADd3IBS50kRu739zv7g/3p/vL/e3+cf+6/9wEL5GX2EviJfWSecm9FF5KL5WX2kvjpfXSeem9DF5GL5OX2cviZfWyedm9HF5O7z8vl5fby+Pl9fJ5+b0CXkGvkFfYK+IV9Yp5xb0SXkmvlFfaK+OV9cp55b0KXkWvklfZq+JV9ap51b0aXk2vllfbq+PV9ep59b0GXkOvkdfYa+I19Zp5zb0WXkuvldfaa+O19dp57b0OXkevk9fZ6+J19bp53b0eXk+vl9fb6+P19fp5/b0B3kBvkDfYG+IN9YZ5w70R3khvlDfaG+ON9cZ5470J3kRvkjfZm+JN9aZ5070Z3kxvljfbm+PN9eZ5870F3kJvkbfYW+It9ZZ5y70V3kpvlbfaW+Ot9dZ5670N3kZvk7fZ2+Jt9bZ5270d3k5vl7fb2+Pt9fZ5+70D3kHvkHfYO+Id9Y55x70T3knvlHfaO+Od9c55570L3kXvknfZu+Jd9a55170b3k3vlnfbu+Pd9e55970H3kPvkffYe+I99Z55z70X3kvvlffae+O99d55770P/z56n7zP3hfvq4d5uEd4pEd5tMd4rMd5vCd4oid5sqd4qqd5umd4pmd5tud4rud5vhd4oRd5wIMe8mLvm/fd++H99H55v70/3l/vn5fgJ/IT+0n8pH4yP7mfwk/pp/JT+2n8tH46P72fwc/oZ/Iz+1n8rH42P7ufw8/p/+fn8nP7efy8fj4/v1/AL+gX8gv7RfyifjG/uF/CL+mX8kv7Zfyyfjm/vF/Br+hX8iv7VfyqfjW/ul/Dr+nX8mv7dfy6fj2/vt/Ab+g38hv7TfymfjO/ud/Cb+m38lv7bfy2fju/vd/B7+h38jv7Xfyufje/u9/D7+n38nv7ffy+fj+/vz/AH+gP8gf7Q/yh/jB/uD/CH+mP8kf7Y/yx/jh/vD/Bn+hP8if7U/yp/jR/uj/Dn+nP8mf7c/y5/jx/vr/AX+gv8hf7S/yl/jJ/ub/CX+mv8lf7a/y1/jp/vb/B3+hv8jf7W/yt/jZ/u7/D3+nv8nf7e/y9/j5/v3/AP+gf8g/7R/yj/jH/uH/CP+mf8k/7Z/yz/jn/vH/Bv+hf8i/7V/yr/jX/un/Dv+nf8m/7d/y7/j3/vv/Af+g/8h/7T/yn/jP/uf/Cf+m/8l/7b/y3/jv/vf/B/+h/8j/7X/yvPubjPuGTPuXTPuOzPufzvuCLvuTLvuKrvubrvuGbvuXbvuO7vuf7fuCHfuQDH/rIj/1v/nf/h//T/+X/9v/4f/1/fkKQKEgcJAmSBsmC5EGKIGWQKkgdpAnSBumC9EGGIGOQKcgcZAmyBtmC7EGOIGfwX5AryB3kCfIG+YL8QYGgYFAoKBwUCYoGxYLiQYmgZFAqKB2UCcoG5YLyQYWgYlApqBxUCaoG1YLqQY2gZlArqB3UCeoG9YL6QYMkCUGjoHHQJGgaNAuaBy2ClkGroHXQJmgbtAvaBx2CjkGnoHPQJegadAu6Bz2CnkGvoHfQJ+gb9Av6BwOCgcGgYHAwJBgaDAuGByOCkcGoYHQwJhgbjAvGBxOCicGkYHIwJZgaTAumBzOCmcGsYHYwJ5gbzAvmBwuChcGiYHGwJFgaLAuWByuClcGqYHWwJlgbrAvWBxuCjcGmYHOwJdgabAu2BzuCncGuYHewJ9gb7Av2BweCg8Gh4HBwJDgaHAuOByeCk8Gp4HRwJjgbnAvOBxeCi8Gl4HJwJbgaXAuuBzeCm8Gt4HZwJ7gb3AvuBw+Ch8Gj4HHwJHgaPAueBy+Cl8Gr4HXwJngbvAveBx+Cj8Gn4HPwJfgaYAEeEAEZUAEdMAEbcAEfCIEYSIEcKIEaaIEeGIEZWIEdOIEbeIEfBEEYRAEIYICCOPgWfA9+BD+DX8Hv4E/wN/gXJISJwsRhkjBpmCxMHqYIU4apwtRhmjBtmC5MH2YIM4aZwsxhljBrmC3MHuYIc4b/hbnC3GGeMG+YL8wfFggLhoXCwmGRsGhYLCwelghLhqXC0mGZsGxYLiwfVggrhpXCymGVsGpYLawe1ghrhrXC2mGdsG5YL6wfNggbho3CxmGTsGnYLGwetghbhq3C1mGbsG3YLmwfdgg7hp3CzmGXsGvYLewe9gh7hr3C3mGfsG/YL+wfDggHhoPCweGQcGg4LBwejghHhqPC0eGYcGw4LhwfTggnhpPCyeGUcGo4LZwezghnhrPC2eGccG44L5wfLggXhovCxeGScGm4LFwerghXhqvC1eGacG24Llwfbgg3hpvCzeGWcGu4Ldwe7gh3hrvC3eGecG+4L9wfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8Gx4LjwfXggvhpfCy+GV8Gp4Lbwe3ghvhrfC2+Gd8G54L7wfPggfho/Cx+GT8Gn4LHwevghfhq/C1+Gb8G34Lnwffgg/hp/Cz+GX8GuIhXhIhGRIhXTIhGzIhXwohGIohXKohGqohXpohGZohXbohG7ohX4YhGEYhSCEIQrj8Fv4PfwR/gx/hb/DP+Hf8F+YECWKEkdJoqRRsih5lCJKGaWKUkdporRRuih9lCHKGGWKMkdZoqxRtih7lCPKGf0X5YpyR3mivFG+KH9UICoYFYoKR0WiolGxqHhUIioZlYpKR2WislG5qHxUIaoYVYoqR1WiqlG1qHpUI6oZ1YpqR3WiulG9qH7UIGoYNYoaR02iplGzqHnUImoZtYpaR22itlG7qH3UIeoYdYo6R12irlG3qHvUI+oZ9Yp6R32ivlG/qH80IBoYDYoGR0OiodGwaHg0IhoZjYpGR2OisdG4aHw0IZoYTYomR1OiqdG0aHo0I5oZzYpmR3OiudG8aH60IFoYLYoWR0uipdGyaHm0IloZrYpWR2uitdG6aH20IdoYbYo2R1uirdG2aHu0I9oZ7Yp2R3uivdG+aH90IDoYHYoOR0eio9Gx6Hh0IjoZnYpOR2eis9G56Hx0IboYXYouR1eiq9G16Hp0I7oZ3YpuR3eiu9G96H70IHoYPYoeR0+ip9Gz6Hn0InoZvYpeR2+it9G76H30IfoYfYo+R1+irxEW4RERkREV0RETsREX8ZEQiZEUyZESqZEW6ZERmZEV2ZETuZEX+VEQhVEUgQhGKIqjb9H36Ef0M/oV/Y7+RH+jf1ECSAQSgyQgKUgGkoMUICVIBVKDNCAtSAfSgwwgI8gEMoMsICvIBrKDHCAn+A/kArlBHpAX5AP5QQFQEBQChUERUBQUA8VBCVASlAKlQRlQFpQD5UEFUBFUApVBFVAVVAPVQQ1QE9QCtUEdUBfUA/VBA9AQNAKNQRPQFDQDzUEL0BK0Aq1BG9AWtAPtQQfQEXQCnUEX0BV0A91BD9AT9AK9QR/QF/QD/cEAMBAMAoPBEDAUDAPDwQgwEowCo8EYMBaMA+PBBDARTAKTwRQwFUwD08EMMBPMArPBHDAXzAPzwQKwECwCi8ESsBQsA8vBCrASrAKrwRqwFqwD68EGsBFsApvBFrAVbAPbwQ6wE+wCu8EesBfsA/vBAXAQHAKHwRFwFBwDx8EJcBKcAqfBGXAWnAPnwQVwEVwCl8EVcBVcA9fBDXAT3AK3wR1wF9wD98ED8BA8Ao/BE/AUPAPPwQvwErwCr8Eb8Ba8A+/BB/ARfAKfwRfwFWAABwQgAQVowAAWcIAHAhCBBGSgABVoQAcGMIEFbOAAF3jABwEIQQQAgACBGHwD38EP8BP8Ar/BH/AX/AMJMBFMDJPApDAZTA5TwJQwFUwN08C0MB1MDzPAjDATzAyzwKwwG8wOc8Cc8D+YC+aGeWBemA/mhwVgQVgIFoZFYFFYDBaHJWBJWAqWhmVgWVgOlocVYEVYCVaGVWBVWA1WhzVgTVgL1oZ1YF1YD9aHDWBD2Ag2hk1gU9gMNoctYEvYCraGbWBb2A62hx1gR9gJdoZdYFfYDXaHPWBP2Av2hn1gX9gP9ocD4EA4CA6GQ+BQOAwOhyPgSDgKjoZj4Fg4Do6HE+BEOAlOhlPgVDgNTocz4Ew4C86Gc+BcOA/OhwvgQrgILoZL4FK4DC6HK+BKuAquhmvgWrgOrocb4Ea4CW6GW+BWuA1uhzvgTrgL7oZ74F64D+6HB+BBeAgehkfgUXgMHocn4El4Cp6GZ+BZeA6ehxfgRXgJXoZX4FV4DV6HN+BNeAvehnfgXXgP3ocP4EP4CD6GT+BT+Aw+hy/gS/gKvoZv4Fv4Dr6HH+BH+Al+hl/gV4hBHBKQhBSkIQNZyEEeClCEEpShAlWoQR0a0IQWtKEDXehBHwYwhBEEEEIEY/gNfoc/4E/4C/6Gf+Bf+A8moEQoMUqCkqJkKDlKgVKiVCg1SoPSonQoPcqAMqJMKDPKgrKibCg7yoFyov9QLpQb5UF5UT6UHxVABVEhVBgVQUVRMVQclUAlUSlUGpVBZVE5VB5VQBVRJVQZVUFVUTVUHdVANVEtVBvVQXVRPVQfNUANUSPUGDVBTVEz1By1QC1RK9QatUFtUTvUHnVAHVEn1Bl1QV1RN9Qd9UA9US/UG/VBfVE/1B8NQAPRIDQYDUFD0TA0HI1AI9EoNBqNQWPRODQeTUAT0SQ0GU1BU9E0NB3NQDPRLDQbzUFz0Tw0Hy1AC9EitBgtQUvRMrQcrUAr0Sq0Gq1Ba9E6tB5tQBvRJrQZbUFb0Ta0He1AO9EutBvtQXvRPrQfHUAH0SF0GB1BR9ExdBydQCfRKXQanUFn0Tl0Hl1AF9EldBldQVfRNXQd3UA30S10G91Bd9E9dB89QA/RI/QYPUFP0TP0HL1AL9Er9Bq9QW/RO/QefUAf0Sf0GX1BXxGGcEQgElGIRgxiEYd4JCARSUhGClKRhnRkIBNZyEYOcpGHfBSgEEUIIIgQitE39B39QD/RL/Qb/UF/0T+UECeKE8dJ4qRxsjh5nCJOGaeKU8dp4rRxujh9nCHOGGeKM8dZ4qxxtjh7nCPOGf8X54pzx3nivHG+OH9cIC4YF4oLx0XionGxuHhcIi4Zl4pLx2XisnG5uHxcIa4YV4orx1XiqnG1uHpcI64Z14prx3XiunG9uH7cIG4YN4obx03ipnGzuHncIm4Zt4pbx23itnG7uH3cIe4Yd4o7x13irnG3uHvcI+4Z94p7x33ivnG/uH88IB4YD4oHx0PiofGweHg8Ih4Zj4pHx2PisfH/sWsXQJcUB7/wzwru7rC4uzsRSEggIVgIvsACCwsLu9iii7u7u7u7u7u7u8PMdE93z1chC/clefPd+96v7psvt36/qufpPn36dPf0M/+uearOttXQartq+2pYNbzaodqx2qnaudqlGlHtWu1W7V7tUe1Z7VWNrPau9qn2rfar9q8OqA6sDqoOrg6pDq0Oqw6vjqiOrI6qjq6OqY6tjquOr06oTqxOqk6uTqlOrU6rTq/OqM6szqrOrs6pzq3Oq86vLqgurC6qLq4uqS6tLqsur66orqyuqq6urqmura6rrq9uqG6sbqpurm6pbq1uq26v7qjurO6q7q7uqe6t7qvurx6oHqweqh6uHqkerR6rHq+eqJ6snqqerp6pnq2eq56vXqherF6qXq5eqV6tXqter96o3qzeqt6u3qnerd6r3q8+qD6sPqo+rj6pPq0+qz6vvqi+rL6qvq6+qb6tvqu+r6qqrpoqVLFqq1TlqlRd1av71H3rfnX/erR69HqMesx6rHrsepx63Hq8evx6gnrCeqJ64nqSetJ6snryeop6ynqqeup6mnraerp6+nqGekA9Yz1TPXM9Sz1rPVs9ez1HPWc9Vz13PU89bz1fPX+9QL1gvVC9cL1IvWi9WL14vUS9ZL1UvXS9TL1svVy9fL1C/Yv6l/Wv6l/XK9Yr1WON+m7Z7+tV6lXrP9R/rFer/1SvXq9Rr1mvVa9d/7lep/5LvW69Xr1+vUG9Yb1RvXE9sN6k3rTerB5Ub15vUW9ZD663qreuh9Tb1NvWQ+vt6u3rYfXweod6x3qneud6l3pEvWu9W717vUe9Z71XPbLeu96n3rfer96/PqA+sD6oPrg+pD60Pqw+vD6iPrI+qj66PqY+tj6uPr4+oT6xPqk+uT6lPrU+rT69PqM+sz6rPrs+pz63Pq8+v76gvrC+qL64vqS+tL6svry+or6yvqq+ur6mvra+rr6+vqG+sb6pvrm+pb61vq2+vb6jvrO+q767vqe+t76vvr9+oH6wfqh+uH6kfrR+rH68fqJ+sn6qfrp+pn62fq5+vn6hfrF+qX65fqV+tX6tfr1+o36zfqt+u36nfrd+r36//qD+sP6o/rj+pP60/qz+vP6i/rL+qv66/qb+tv6u/r6u6rpu6lDHuq1TnetSd3Wv6dP0bfo1/ZvRmtGbMZoxm7GasZtxmnGb8ZrxmwmaCZuJmombSZpJm8mayZspmimbqZqpm2maaZvpmumbGZoBzYzNTM3MzSzNrM1szezNHM2czVzN3M08zbzNfM38zQLNgs1CzcLNIs2izWLN4s0SzZLNUs3SzTLNss1yzfLNCs0vml82v2p+3azYrNT8pvlts3Lzuz69Xu+vP80fm9WaPzWrN2s0azZrNWs3f27Waf7SrNus16zfbNBs2GzUbNwMbDZpNm02awY1mzdbNFs2g5utmq2bIc02zbbN0Ga7ZvtmWDO82aHZsdmp2bnZpRnR7Nrs1uze7NGMNupu26fZt9mv2b85oDmwOag5uDmkObQ5rDm8OaI5sjmqObo5pjm2Oa45vjmhObE5qTm5OaU5tTmtOb05ozmzOas5uzmnObc5rzm/uaC5sLmoubi5pLm0uay5vLmiubK5qrm6uaa5trmuub65obmxuam5ubmlubW5rbm9uaO5s7mrubu5p7m3ua+5v3mgebB5qHm4eaR5tHmsebx5onmyeap5unmmebZ5rnm+eaF5sXmpebl5pXm1ea15vXmjebN5q3m7ead5t3mveb/5oPmw+aj5uPmk+bT5rPm8+aL5svmq+br5pvm2+a75vqmaumma0MSmbVKTm9J0TS/0CX1Dv9A/jBZGD2OEMcNYYewwThg3jBfGDxOECcNEYeIwSZg0TBYmD1OEKcNUYeowTZg2TBemDzOEAWHGMFOYOcwSZg2zhdnDHGHOMFeYO8wT5g3zhfnDAmHBsFBYOCwSFg2LhcXDEmHJsFRYOiwTlg3LheXDCuEX4ZfhV+HXYcWwUvhN+G1YOfwu/D6sElYNfwh/DKuFP4XVwxphzbBWWDv8OawT/hLWDeuF9cMGYcOwUdg4DAybhE3DZmFQ2DxsEbYMg8NWYeswJGwTtg1Dw3Zh+zAsDA87hB3DTmHnsEsYEXYNu4Xdwx5hz7BXGBn2DvuEfcN+Yf9wQDgwHBQODoeEQ8Nh4fBwRDgyHBWODseEY8Nx4fhwQjgxnBRODqeEU8Np4fRwRjgznBXODueEc8N54fxwQbgwXBQuDpeES8Nl4fJwRbgyXBWuDteEa8N14fpwQ7gx3BRuDreEW8Nt4fZwR7gz3BXuDveEe8N94f7wQHgwPBQeDo+ER8Nj4fHwRHgyPBWeDs+EZ8Nz4fnwQngxvBReDq+EV8Nr4fXwRngzvBXeDu+Ed8N74f3wQfgwfBQ+Dp+ET8Nn4fPwRfgyfBW+Dt+Eb8N34ftQhTo0IYQY2pBCDiV0oRf7xL6xX+wfR4ujxzHimHGsOHYcJ44bx4vjxwnihHGiOHGcJE4aJ4uTxynilHGqOHWcJk4bp4vTxxnigDhjnCnOHGeJs8bZ4uxxjjhnnCvOHeeJ88b54vxxgbhgXCguHBeJi8bF4uJxibhkXCouHZeJy8bl4vJxhfiL+Mv4q/jruGJcKf4m/jauHH8Xfx9XiavGP8Q/xtXin+LqcY24Zlwrrh3/HNeJf4nrxvXi+nGDuGHcKG4cB8ZN4qZxszgobh63iFvGwXGruHUcEreJ28ahcbu4fRwWh8cd4o5xp7hz3CWOiLvG3eLucY+4Z9wrjox7x33ivnG/uH88IB4YD4oHx0PiofGweHg8Ih4Zj4pHx2PisfG4eHw8IZ4YT4onx1PiqfG0eHo8I54Zz4pnx3PiufG8eH68IF4YL4oXx0vipfGyeHm8Il4Zr4pXx2vitfG6eH28Id4Yb4o3x1virfG2eHu8I94Z74p3x3vivfG+eH98ID4YH4oPx0fio/Gx+Hh8Ij4Zn4pPx2fis/G5+Hx8Ib4YX4ovx1fiq/G1+Hp8I74Z34pvx3fiu/G9+H78IH4YP4ofx0/ip/Gz+Hn8In4Zv4pfx2/it/G7+H2sYh2bGGKMbUwxxxK72Gv7tH3bfm3/drR29HaMdsx2rHbsdpx23Ha8dvx2gnbCdqJ24naSdtJ2snbydop2ynaqdup2mnbadrp2+naGdkA7YztTO3M7SztrO1s7eztHO2c7Vzt3O087bztfO3+7QLtgu1C7cLtIu2i7WLt4u0S7ZLtUu3S7TLtsu1y7fLtC+4v2l+2v2l+3K+au69rftiu3v2t/367Srtr+of1ju1r7p3b1do12zXatdu32z+067V/addv12vXbDdoN243ajduB7Sbtpu1m7aB283aLdst2cLtVu3U7pN2m3bYd2m7Xbt8Oa4e3O7Q7tju1O7e7tCPaXdvd2t3bPdo9273ake3e7T7tvu1+7f7tAe2B7UHtwe0h7aHtYe3h7RHtke1R7dHtMe2x7XHt8e0J7YntSe3J7Sntqe1p7entGe2Z7Vnt2e057bntee357QXthe1F7cXtJe2l7WXt5e0V7ZXtVe3V7TXtte117fXtDe2N7U3tze0t7a3tbe3t7R3tne1d7d3tPe297X3t/e0D7YPtQ+3D7SPto+1j7ePtE+2T7VPt0+0z7bPtc+3z7Qvti+1L7cvtK+2r7Wvt6+0b7ZvtW+3b7Tvtu+177fvtB+2H7Uftx+0n7aftZ+3n7Rftl+1X7dftN+237Xft923V1m3Thja2bZva3Ja2a3upT+qb+qX+abQ0ehojjZnGSmOncdK4abw0fpogTZgmShOnSdKkabI0eZoiTZmmSlOnadK0abo0fZohDUgzppnSzGmWNGuaLc2e5khzprnS3GmeNG+aL82fFkgLpoXSwmmRtGhaLC2elkhLpqXS0mmZtGxaLi2fVki/SL9Mv0q/TiumldJv0m/Tyul36fdplbRq+kP6Y1ot/SmtntZIa6a10trpz2md9Je0blovrZ82SBumjdLGaWDaJG2aNkuD0uZpi7RlGpy2SlunIWmbtG0amrZL26dhaXjaIe2Ydko7p13SiLRr2i3tnvZIe6a90si0d9on7Zv2S/unA9KB6aB0cDokHZoOS4enI9KR6ah0dDomHZuOS8enE9KJ6aR0cjolnZpOS6enM9KZ6ax0djonnZvOS+enC9KF6aJ0cbokXZouS5enK9KV6ap0dbomXZuuS9enG9KN6aZ0c7ol3ZpuS7enO9Kd6a50d7on3ZvuS/enB9KD6aH0cHokPZoeS4+nJ9KT6an0dHomPZueS8+nF9KL6aX0cnolvZpeS6+nN9Kb6a30dnonvZveS++nD9KH6aP0cfokfZo+S5+nL9KX6av0dfomfZu+S9+nKtWpSSHF1KaUciqpS73cJ/fN/XL/PFoePY+Rx8xj5bHzOHncPF4eP0+QJ8wT5YnzJHnSPFmePE+Rp8xT5anzNHnaPF2ePs+QB+QZ80x55jxLnjXPlmfPc+Q581x57jxPnjfPl+fPC+QF80J54bxIXjQvlhfPS+Ql81J56bxMXjYvl5fPK+Rf5F/mX+Vf5xXzSvk3+bd55fy7/Pu8Sl41/yH/Ma+W/5RXz2vkNfNaee3857xO/kteN6+X188b5A3zRnnjPDBvkjfNm+VBefO8Rd4yD85b5a3zkLxN3jYPzdvl7fOwPDzvkHfMO+Wd8y55RN4175Z3z3vkPfNeeWTeO++T98375f3zAfnAfFA+OB+SD82H5cPzEfnIfFQ+Oh+Tj83H5ePzCfnEfFI+OZ+ST82n5dPzGfnMfFY+O5+Tz83n5fPzBfnCfFG+OF+SL82X5cvzFfnKfFW+Ol+Tr83X5evzDfnGfFO+Od+Sb8235dvzHfnOfFe+O9+T78335fvzA/nB/FB+OD+SH82P5cfzE/nJ/FR+Oj+Tn83P5efzC/nF/FJ+Ob+SX82v5dfzG/nN/FZ+O7+T383v5ffzB/nD/FH+OH+SP82f5c/zF/nL/FX+On+Tv83f5e9zlevc5JBjbnPKOZfc5V7pU/qWfqV/Ga2MXsYoY5axythlnDJuGa+MXyYoE5aJysRlkjJpmaxMXqYoU5apytRlmjJtma5MX2YoA8qMZaYyc5mlzFpmK7OXOcqcZa4yd5mnzFvmK/OXBcqCZaGycFmkLFoWK4uXJcqSZamydFmmLFuWK8uXFcovyi/Lr8qvy4plpfKb8tuycvld+X1Zpaxa/lD+WFYrfyqrlzXKmmWtsnb5c1mn/KWsW9Yr65cNyoZlo7JxGVg2KZuWzcqgsnnZomxZBpetytZlSNmmbFuGlu3K9mVYGV52KDuWncrOZZcyouxadiu7lz3KnmWvMrLsXfYp+5b9yv7lgHJgOagcXA4ph5bDyuHliHJkOaocXY4px5bjyvHlhHJiOamcXE4pp5bTyunljHJmOaucXc4p55bzyvnlgnJhuahcXC4pl5bLyuXlinJluapcXa4p15bryvXlhnJjuancXG4pt5bbyu3ljnJnuavcXe4p95b7yv3lgfJgeag8XB4pj5bHyuPlifJkeao8XZ4pz5bnyvPlhfJieam8XF4pr5bXyuvljfJmeau8Xd4p75b3yvvlg/Jh+ah8XD4pn5bPyufli/Jl+ap8Xb4p35bvyvelKnVpSiixtCWVXErpSq/r0/Xt+nX9u9G60bsxujG7sbqxu3G6cbvxuvG7CboJu4m6ibtJukm7ybrJuym6Kbupuqm7abppu+m66bsZugHdjN1M3czdLN2s3Wzd7N0c3ZzdXN3c3TzdvN183fzdAt2C3ULdwt0i3aLdYt3i3RLdkt1S3dLdMt2y3XLd8t0K/1ufX69bv9ug27DbqNu4G9ht0m3abdYN6jbvtui27AZ3W3Vbd0O6bbptu6Hddt323bBueLdDt2O3U7dzt0s3otu1263bvduj27PbqxvZ7d3t0+3b7dft3x3QHdgd1B3cHdId2h3WHd4d0R3ZHdUd3R3THdsd1x3fndCd2J3Undyd0p3andad3p3Rndmd1Z3dndOd253Xnd9d0F3YXdRd3F3SXdpd1l3eXdFd2V3VXd1d013bXddd393Q3djd1N3c3dLd2t3W3d7d0d3Z3dXd3d3T3dvd193fPdA92D3UPdw90j3aPdY93j3RPdk91T3dPdM92z3XPd+90L3YvdS93L3Svdq91r3evdG92b3Vvd29073bvde9333Qfdh91H3cfdJ92n3Wfd590X3ZfdV93X3Tfdt9133fVV3dNV3oYtd2qctd6bquBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA9WWnmVFRfo9fvpdZ9en94SvT69k/r0er3+/6Pfj9Ufe07Y6/U2/qE25Q+/fzuqNvLi8ecZEl/q88/K0f+zRfT5x6YFer3elj+N37f3ux9qfXqj/dA22v90nt6QUQONKn+ct3+/WXqr9lYafc1Rr0eOWnuf3go/W0gZVa7wY0Pq95+WE3c/bEXvqp+N0+8frmeFv9vIAb2flxP1GfOHsuu67j/bov8z/nGd/P/bf/U+G7P38/Ln91m/f5r/df4u//1GpaPvqNf/Hfnf7qfx+/ZW/6/mf8L/sND/kP8x/5b/3pq9VXuDe8N6w0a1/7NzoN/f7+uE/3k5Y/+uX++/Pb//X/X9Vy+Af6m+/5D/vv8v+e/775T/nxb/t/I/5n+V3tDeFr2VeoN7Q3qDRrX/s/z/GOaf8v934/5YztTr06+//PNv5R/z329U/t/6u/yPPuoM+LFpwlF5+TH/C/xv5v/nz/l9eqv9l3P+cz+OP0a/WXpr94b2hvR27G3TG/TDuCN/mqdvb7OfZuw/8q/X8eP/A5P+8O4io5Ixae/MPhP3+vxtltEmHvX5H9r+1mG0vz6/D+jb+1mfv3+vN+qsXOCn+fv3Jh5VG94b0du1t3VvYG/ID6fRj88jfz375vip/2i9cX/a6VF/p1FXPvKn9il/elqZ8n/5HOr/P+/C/8X6/3CfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8Rz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf2L4iF23HjhkyKBhKioqKj9V/tUnE/B/2v8I/b96JQAAAAAAAAAAAMD/qv+OrxP/q68RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH8/n65+1B/WXGmNAQMGDOj17Tuqsfl5n5G9kb1ugr/VJxzV1vX7W9mn1+v17/V6R84y70Yrb7PaOH9tG3+GO7bf/bKZ7tphnLWvG//WMXqPT7jhp18t9N7jkz8+1adlzS0HDx8wePiAbYfuMGDggE2GDt1h4CZDBg3YbPDwrecbsNqQQQOHDxoweNvhg4b97O3NhwzdbrsRAwZuu9l4Y283bNDw4QMGbjtiwNaDRgzYYeiAHYaNGDBwi4GDtx0w33zzDRhv7P+2zfu3t9Yl/08AAAD//1JKxYs=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r4, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0x6, 0x2, 0x3, 0x9, 0x2, 0x3e, 0x72, 0x1d0, 0x40, 0xec, 0x8, 0xf, 0x38, 0x1, 0x8, 0x8, 0xfffe}, [{0x60000005, 0x8, 0x2, 0x4c02, 0x5, 0x1, 0x4, 0x10000}], "9fc349e7f39f688c8bfec9ac645b670aff553580dc97d40d1fcabc7c7782e4b95eb751", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x69b) pwrite64(r4, &(0x7f0000000300)='E', 0x1, 0x47ecf) socket$kcm(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0)={[{@nombcache}]}, 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$cgroup_procs(r5, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 9.950773817s ago: executing program 5 (id=1331): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (fail_nth: 1) 9.92869109s ago: executing program 7 (id=1332): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0), 0x1, 0x921, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000080)="01fd", 0x2, 0x2a25}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000003240), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_blocks']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) listen(r0, 0xffffffff) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) 9.648000471s ago: executing program 4 (id=1334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) 9.397850686s ago: executing program 5 (id=1335): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103401, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x40045017, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x8, 0xc2, 0x4f, 0x40, 0x44, 0x80, 0x53, 0x5f, 0x44, 0x5, 0x9, 0x100000000009}, {0xb, 0xa6f3, 0x4, 0x8, 0x9, 0x60, 0x24, 0x3, 0xa, 0x7f, 0x7, 0x8, 0xfffffffffffffffb}, {0x2, 0x2001, 0xd, 0x10, 0x25, 0x9, 0x8, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x200000000008}], 0x8}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x10679, 0x6, 0xf3b8, 0x11de, 0x51, 0x400, 0x4002004c4, 0xffffffffffff0000, 0xfffffffffffffffd, 0xf3e, 0x10, 0x0, 0x3, 0x4, 0x0, 0x5], 0xc000, 0x400}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.135428816s ago: executing program 4 (id=1336): syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x1f4, 0x1a, 0x10, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x20, 0x20}, {@in6=@loopback, 0x4d6, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800000000}, {0x0, 0x0, 0x0, 0x8000004}, {0x4, 0x102, 0x1}, 0x201, 0x0, 0xa}, [@tmpl={0x104, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0xaa, 0xfffffff7}, {{@in6=@private2, 0x4d2, 0x3c}, 0xa, @in=@loopback, 0x3500, 0x2, 0x3, 0x3, 0x2, 0x7, 0x9}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x32}, 0xa, @in6=@private1, 0x0, 0x0, 0x2, 0x4d, 0x5, 0x5, 0x3}, {{@in6=@loopback, 0x4d3, 0x6c}, 0xa, @in6=@empty, 0x3502, 0x2, 0x1, 0x69, 0x3, 0xfffefffc, 0xbbd6}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000}, 0x4008804) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]}) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) r1 = dup(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000)="8862b07a655314fc766af772af800057374eb7542be1b7a88c050979815bf586a4e5dfae20d70d55e3bb5210a71bc6f98f246adcb2da66a88d8a947d140b2eae3b3c7de5eda05525beb3098d670632ed318001b6cc", 0x55) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc4c85513, &(0x7f0000000200)) 7.527883234s ago: executing program 7 (id=1337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000480)=""/116) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x8, 0xd0c, 0x1000, 0x8, 0x6, 0x0, 0x5, 0xf64, 0xfffffffe}) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r2, 0xee00, 0xee01) fchown(r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0xfff, 0x2000003, 0xffff2ceb, 0x15, "0062ba7d821f000000000000000e00fffeff00"}) r6 = syz_open_pts(r5, 0x8182) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) r7 = mmap$IORING_OFF_SQES(0x0, 0x8, 0x0, 0x12, r1, 0x10000000) syz_io_uring_submit(0x0, r3, r7, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x44, 0x0, r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', r1, 0x400}) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa00"], 0x1c) setsockopt$inet_mreqn(r8, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) ioctl$TCXONC(r4, 0x540a, 0x2) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000280), &(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x44, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x20, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8=r3, @ANYRESHEX=r3, @ANYRESHEX, @ANYBLOB="866ff9fe733e642811fc5c14f3db6649243af1096294cb829b55796c04537f706e607eb898358700a8e41d56c47d54964d75181aa57762c62788923f4929520eba67", @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d97bffea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426ba9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a600", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec8ecab677ebe3c11acdffc890d218a41f668954cb9f57fa7f41864980255fecb29d43e8b084cdf3dcf5584943ee09efe4b782455431e5d62094f53df24c0c9b4ce5a92df2df13b14c8dfe01a6672cef5bf9f7a85b28a2daf9a356628ceb1694aaf1f4d93d4f9899e9ac3e0a84f8c05d6e0950ccb425bb047f35444f226c142ab2dfff7daa29429d647ae932e8d707bbebf408fb2b90492606da41cbed08c5b70377e87b2253c9e210c13d9c13"], 0x2, 0x593, &(0x7f0000000c00)="$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") 7.424060283s ago: executing program 5 (id=1338): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xfffffffffffffffd) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x4, 0x692}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505020000004"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) sendto$inet6(r9, &(0x7f0000019080)="eedfbfc1d52aecdf4a7d74cfadd7e39eba57f68d90d5693a638d9af1910c143f3358203cb3ec462682d75f55cfc4b7aab14e4ce338ae2b15501a8905f3f01a708f1e510a0de4ff8bba9cb597fe8a0b5d", 0x50, 0xc880, &(0x7f0000019140)={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xce80}, 0x1c) close(r9) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') syz_usb_connect(0x2, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x7b, 0x0, 0x88, 0x10, 0x1410, 0x9011, 0xa27c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0xa1, 0x0, 0x20, 0x9b, "", [{{0x9, 0x4, 0xc5, 0x6, 0x0, 0x2, 0x6, 0x0, 0xb6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xff, 0x4, 0x5}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x4, 0x800}, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r9, &(0x7f0000019480)={0x2020}, 0x207c) 6.509250419s ago: executing program 1 (id=1339): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r0, 0x1) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x82, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x1ae}}}, &(0x7f0000000780)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604110, &(0x7f0000000bc0)={0x0, [[0x65ad, 0x0, 0x0, 0xc, 0x40000200, 0x0, 0x5, 0xfffffffd], [0x14, 0x100, 0x101, 0xfffffffc, 0x407f, 0xfffffffe, 0x4, 0x8], [0x2, 0x8, 0x44, 0x2, 0x1, 0x93c7, 0x8]], '\x00', [{0x0, 0x3}, {0xffffffff}, {0x400}, {0xffffffff, 0x4a}, {0x2000005}, {0x2, 0x22c685d3}, {0xf68f}, {0xb, 0xfffffff8}, {0xc51}, {0x7334486a, 0xa6a6}, {0x20000, 0xf}, {0x5e0f, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x20}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x7bd, 0x20000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e02c7457f"], 0x0) 5.448079342s ago: executing program 7 (id=1341): openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001000"/22], 0x50) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000500)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) 5.087752786s ago: executing program 1 (id=1342): r0 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xb, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000004c0)="02155e65", 0x4, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x5) connect$inet6(r3, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x4, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x8401, 0x9, 0xffff, 0x5, 0xd1, "fffffffffff200", 0x9, 0x5}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200, 0x2000) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000340)=""/192) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x40000000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x10}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local, 0x80}, 0x60, 0x0}}], 0x2, 0x4010) 4.885796573s ago: executing program 7 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="010000626f6e64000000000c0402000800"/33], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_io_uring_setup(0x5e71, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x40056}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r10, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r11 = dup3(r9, r10, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000070000ffffe694adc0989140db49ad0227e1414c90eb2a9e3115dee16a0fe991fefb3183be7cd30487ee0cbe518be44d03a0db791bef6a53656171013877638d35016f992aebbbe70730f1670c72c5afa737bf722ade48b56af3e05ae3abf8719cead097639a2c995a9e4a58f948cac81aeda8cf91afc112037abc55064732725b00ba59a12e7664b0478044cc02cb8d8fcebe270c720aa68c8efe5ac0892241104651c72e29673cbe65af5b77afe064943e27c54b2785eb00308e259a35b3f2e4d8a02c0c27e83088cc75be448ba7df10bcff7473f5fc72591a0b3fd88e4bdc854ae67b9a011a7ebe8bc1ad413b4d96acdd7a9242c476965c5ea13534c311def0cbff6c", @ANYRES32=r14, @ANYBLOB="dc28c9e65d06433f718176b1203f5f85c15502df333e264b1782b1c80d441fd92000cd09d46a4c39740d499bcbd36a7d6c0b6e820d6d4534a32e9dea58c4a5a192e1cfab3ba6789d5c2b88820ebe532d3fd1ed681346435558845c5ed82c1e2a025a239710060ccde36c8df2b7a19a3dcf90ddff3a7f4e3298fc04a877c2d9f02433199f4cde83eb23ee52b141da0de2dcb720f4a8b4764e8ea0d542230229b4e6f919ed7f57e202f28775c3e8a643d6c7f5ec903fc43ef073a4732f9a6e4546f1d70aebb1669bd5e4b76a1783da37"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_usb_connect(0x2, 0x36, 0x0, 0x0) socket(0x10, 0x3, 0x0) 4.662469974s ago: executing program 3 (id=1344): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB="866ff9fe733e642811fc5c14f3db6649243af1096294cb829b55796c04537f706e607eb898358700a8e41d56c47d54964d75181aa57762c62788923f4929520eba67", @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d97bffea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426ba9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a600", @ANYRES8, @ANYBLOB="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"], 0x2, 0x593, &(0x7f0000000c00)="$eJzs3dtu28gZwPGPjr1RVcAtukUQGE521mkBB/AqlLSRIewVS41k7kqkQFKBfRUYsRwYkZMiToHaN6lv0hZoHyK97EP0XfoAQR+gFy44pHzUIY58qvH/GQ4pcjjzDS3MF9riUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFhuzbaLljQ9v7OqhnNrYdA6epkdfWaDPD6xGNGuiJV8Sy4n99NN9399tPte8s+CzKev5iWXLHKy9/N7v/zh6+mp/vEjAj6Xf3xhTTu7e6/We73u24sK5AZ6cHf4vob2vSjwWk5DKy8KVLVSsZ+s1CNV95o6Woti3VJuqJ04CNWi+1gVq9Wy0oW1oOM3ak5T9zcuf1ey7Yr6sdDWThgF/pMfC5G74jWbnt8wZZLdSZnl5I34kxerWDstpTa3et3yuA4khYqfU6g0rlDJLpWKxVKpWHlafbps29NnNtinyJkSF/emxf+nCxy9gclMZflfmuKJLx1ZFTXwy5WahBJIa8j+TD////aJHtnu8fzfz/L3j3bPicn/D9NXD4fl/yGxXN3XjuzKnrySdelJT7ry9tojOtfXV8lpnaSGhmjxxZNIAvGkJY7ZorItSqpSkYrY8lxWpD6TtFYXT5qiJZI1iSQWPd0y765QtDgSSyChKFkUVx6LkqJUpSplUaKlIGsSSEd8aUhNHFPLpmyZ814WZQ2L8bBQcWg38v33XVdKI3pL/sfkLnD0BiZz0M//AAAAAADg1rLMb99nzPcD87ruNbV93WEBAAAAAIALZP7yP58szKezHojF9T8AAAAAALeNZe6xs0QkL9+ka5timdul+CUAAAAAAAC3hPn7/8NkYeZA+Uasw+lSuP4HAAAAAOCW+MvYOfaj9l3rX/+RMJyx9turv7G2zdy8zvad9Lg7p2uM63P/PTg4MJWYuirpYnra1fNWLi10OAnmp2yxOS4O6ygA5zCAPw0JwJrNjj4ewNfT8jf5Ni3z7Ua63Mj2/CJtJV/3mrrgBs0fiuI4s1OxXo3/8Hrrj2K6/1e/NWvlZKvXLbx409swsewntexvZxMonplHcUQs78x8C+aei4E9njE3YmTt5i3Z3Op17fbq3axmZ3sqXZk62eL72RFtfpCFtNRCNuNtvr8nbTOXtFksDOt9FkVxwp5/kEdpmUeLj9LFgChK46IoHY9i8LmYPIryuCjKE0YBANdlc0wWsuRM3v2CUe5Udk+Gvc/I7nLO7P5BFtMyi3NmYJ2eGzCi2+mInhs6otsTZrd/nnkG0rAcm7T791NZ9WNywMeh7UbNkpWcwjvvtn8v93Z2977b2l5/2X3ZfV0qlSv297b9tCQzphvZgtwDABig/4ydnEjOGpj/Rz2F5+Agyd3fZ1fV+6evqrOM96vDjxQU5IW8kZ5syJK528B84mDg/zvyxz6GsDTmqjVv0mT6hJelEVd1X5m7HPr1lkaWPRlD+Up+FgAAXJWFMXl4dP5Pr92Xxlx3n8zlo6+O88ee1gYAAC6HDj9Z+fjPVhh67efFarXoxCtahYH7kwq9WkMrz4916K44fkOrdhjEgRs0k5VnXk1HKuq020EYq3oQqnYQeatm+kCVPfo90i3Hjz03aje1E2nlBn7suLGqeZGr2p3fNb1oRYfm4KitXa/uuU7sBb6Kgk7o6oJSkdbHCno17cde3UtWfdUOvZYT5tSzoNlpaVXTkRt67ThIK+y35fn1IGyZagvXfbIBALghdnb3Xq33et23l7gysOHclXcVAABkxmRpAAAAAAAAAAAAAAAAAAAAAABwAwy5b29ZLvWOwM9f+XcW5+jCOTl/zVM3o4PHV342+odyY1f6U0HflHhYuYCVsUPH+0sblABcif8FAAD//79dS5k=") (fail_nth: 3) 4.069715454s ago: executing program 3 (id=1345): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.877331709s ago: executing program 1 (id=1346): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) unshare(0x22020600) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x40, 0x0, 0xa}, 0x28) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a14736ab557b6011da34bffab0482edfd435fa0f3d02a2e10627e2df4c6aec11dab62c274723d0ad4d48177461beda2cb0ef77257a9512fbb3e8e0"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) io_uring_setup(0x7, 0x0) 3.864279201s ago: executing program 3 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', 0x0, 0x1810004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) 3.339580888s ago: executing program 4 (id=1348): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103401, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x40045017, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x8, 0xc2, 0x4f, 0x40, 0x44, 0x80, 0x53, 0x5f, 0x44, 0x5, 0x9, 0x100000000009}, {0xb, 0xa6f3, 0x4, 0x8, 0x9, 0x60, 0x24, 0x3, 0xa, 0x7f, 0x7, 0x8, 0xfffffffffffffffb}, {0x2, 0x2001, 0xd, 0x10, 0x25, 0x9, 0x8, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x200000000008}], 0x8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x10679, 0x6, 0xf3b8, 0x11de, 0x51, 0x400, 0x4002004c4, 0xffffffffffff0000, 0xfffffffffffffffd, 0xf3e, 0x10, 0x0, 0x3, 0x4, 0x0, 0x5], 0xc000, 0x400}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.331791463s ago: executing program 1 (id=1349): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1ff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4, 0x2, 0x6, 0xff, 0x18, "22aa0a2db01821da"}) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) 3.160387249s ago: executing program 3 (id=1350): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/115, 0x0, 0x80a0000}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x90001) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18d0010}) io_uring_enter(0xffffffffffffffff, 0x0, 0x15ef, 0x4d, 0x0, 0x40) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 2.147751207s ago: executing program 4 (id=1351): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80}, 0x1c, 0x0}}], 0x2, 0x20002040) 1.160505413s ago: executing program 7 (id=1352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002020000402505a7a400018000000109024300020300c001090400000102020100052400100104000002052401000105240600010705810308000a09040100020a00000007058215004200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./dev\x00', 0x40) 1.15821919s ago: executing program 4 (id=1353): openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000500)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) 773.462934ms ago: executing program 4 (id=1354): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000d0000000700000008"], 0x50) syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)="ec04c039c2986a", &(0x7f0000000000)="9a7d8c7723148dbc76b4fe23f8bcdf3e2393f307e0ed76ecbbb0e62567199fc0181b94ddbe34dffc148957ac6867874c768df6bdb7e63bc5f030bb1c0788174d5a0cb599cf56e415d7cfe19f6e36d5e7b4b909f1f7", 0xce, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x40, 0x1, 0x5, "ff5132e103"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) clock_gettime(0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000680)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 674.837346ms ago: executing program 3 (id=1355): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 141.50124ms ago: executing program 5 (id=1356): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0), 0x1, 0x921, &(0x7f0000000a00)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01fd", 0x2, 0x2a25}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000003240), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_blocks']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) 21.992616ms ago: executing program 1 (id=1357): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 3 (id=1358): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0), 0x1, 0x921, &(0x7f0000000a00)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01fd", 0x2, 0x2a25}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000003240), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_blocks']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) kernel console output (not intermixed with test programs): etooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.543204][ T5748] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 572.547393][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 572.547423][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 572.547445][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 572.547468][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 572.614540][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.614565][ T5748] usb 2-1: Product: syz [ 572.614579][ T5748] usb 2-1: Manufacturer: syz [ 572.614593][ T5748] usb 2-1: SerialNumber: syz [ 572.667286][T11657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.667346][ T5748] usb 2-1: config 0 descriptor?? [ 572.667595][ T5983] bridge_slave_1: left allmulticast mode [ 572.667610][ T5983] bridge_slave_1: left promiscuous mode [ 572.667816][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.734416][ T5983] bridge_slave_0: left allmulticast mode [ 572.735480][ T5983] bridge_slave_0: left promiscuous mode [ 572.735675][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.924208][T10992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.942650][ T5748] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 573.589127][T12895] loop4: detected capacity change from 0 to 131072 [ 573.609642][T12895] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 573.609668][T12895] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 573.628880][T12895] F2FS-fs (loop4): invalid crc value [ 574.628957][ T5618] Bluetooth: hci1: command tx timeout [ 574.730905][ T5741] usb 2-1: USB disconnect, device number 2 [ 574.753727][T12895] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 574.784215][T12895] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 574.784246][T12895] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 574.837624][T12895] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 575.758995][T12914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 575.759019][T12914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 575.885371][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.935486][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.955928][ T5983] bond0 (unregistering): Released all slaves [ 576.016327][ T5983] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 576.016354][ T5983] veth0_to_bond: left promiscuous mode [ 576.016501][ T5983] veth0_to_bond: left allmulticast mode [ 576.021081][ T5983] bond1 (unregistering): Released all slaves [ 576.116208][T12919] Can't find a SQUASHFS superblock on nullb0 [ 576.250064][T12919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 576.250238][T12919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.250377][T12919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.250517][T12919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.250653][T12919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 576.250726][T12919] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 576.475985][T12919] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 576.572101][T12919] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1101'. [ 576.902400][ T5983] hsr_slave_0: left promiscuous mode [ 576.903094][ T5983] hsr_slave_1: left promiscuous mode [ 576.904741][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.904761][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.943346][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.943365][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.946866][T12935] loop7: detected capacity change from 0 to 512 [ 577.082002][T12935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.082089][T12935] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.132941][ T5983] veth1_macvtap: left promiscuous mode [ 577.133043][ T5983] veth1_vlan: left promiscuous mode [ 577.751597][T12915] kexec: Could not allocate control_code_buffer [ 577.877449][T10992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.836332][T10641] Bluetooth: hci0: command 0x0406 tx timeout [ 578.836376][T10641] Bluetooth: hci4: command 0x0c1a tx timeout [ 578.836402][T10641] Bluetooth: hci1: command 0x040f tx timeout [ 578.836446][T10641] Bluetooth: hci3: command 0x0c1a tx timeout [ 578.836469][T10641] Bluetooth: hci2: command 0x0c1a tx timeout [ 578.902481][ T5733] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 579.069498][ T5733] usb 2-1: New USB device found: idVendor=0710, idProduct=8001, bcdDevice=1.00 [ 579.075593][ T5733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 579.075655][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 579.115659][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.115682][ T5733] usb 2-1: Product: syz [ 579.115696][ T5733] usb 2-1: Manufacturer: syz [ 579.115710][ T5733] usb 2-1: SerialNumber: syz [ 579.187826][ T5733] whiteheat 2-1:1.0: Connect Tech - WhiteHEAT converter detected [ 579.538686][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 579.606649][T12952] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 579.690547][ T5733] usb 2-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 579.690571][ T5733] usb 2-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 579.690589][ T5733] usb 2-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 579.690606][ T5733] usb 2-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 579.701476][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 579.894572][ T5733] usb 2-1: USB disconnect, device number 3 [ 579.932629][T12969] nvme_fabrics: missing parameter 'nqn=%s' [ 580.347647][T12982] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1107'. [ 580.869060][ T5618] Bluetooth: hci1: command 0x040f tx timeout [ 581.093215][T12981] loop4: detected capacity change from 0 to 131072 [ 581.109246][ T5741] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 581.114949][T12981] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 581.114973][T12981] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 581.115595][T12981] F2FS-fs (loop4): invalid crc value [ 581.237023][T12981] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 581.261523][T12981] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 581.261550][T12981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 581.318100][T12981] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 581.383070][ T5741] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 581.385561][ T5741] usb 4-1: config 3 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.385590][ T5741] usb 4-1: config 3 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 16896, setting to 1024 [ 581.388208][ T5741] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 581.388233][ T5741] usb 4-1: Manufacturer: syz [ 581.441834][ T5741] cdc_acm 4-1:3.0: skipping garbage [ 582.983697][ T5618] Bluetooth: hci1: command 0x040f tx timeout [ 583.002528][ T5741] cdc_acm 4-1:3.0: ttyACM0: USB ACM device [ 583.328637][ T5741] usb 4-1: USB disconnect, device number 17 [ 583.732726][ T5983] IPVS: stop unused estimator thread 0... [ 584.269875][T13018] FAULT_INJECTION: forcing a failure. [ 584.269875][T13018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.269908][T13018] CPU: 1 UID: 0 PID: 13018 Comm: syz.3.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.269934][T13018] Tainted: [L]=SOFTLOCKUP [ 584.269942][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 584.269954][T13018] Call Trace: [ 584.269965][T13018] [ 584.269974][T13018] dump_stack_lvl+0xe8/0x150 [ 584.270010][T13018] should_fail_ex+0x3eb/0x540 [ 584.270047][T13018] _copy_from_user+0x2d/0xb0 [ 584.270073][T13018] __se_sys_add_key+0x2af/0x420 [ 584.270204][T13018] ? __pfx___se_sys_add_key+0x10/0x10 [ 584.270240][T13018] ? __x64_sys_add_key+0x20/0xc0 [ 584.270269][T13018] do_syscall_64+0x166/0x520 [ 584.270299][T13018] ? trace_irq_disable+0x3b/0x140 [ 584.270326][T13018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.270354][T13018] ? clear_bhb_loop+0x70/0xc0 [ 584.270378][T13018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.270398][T13018] RIP: 0033:0x7f001d39e159 [ 584.270416][T13018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.270433][T13018] RSP: 002b:00007f001e1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 584.270455][T13018] RAX: ffffffffffffffda RBX: 00007f001d625fa0 RCX: 00007f001d39e159 [ 584.270470][T13018] RDX: 00002000000008c0 RSI: 0000000000000000 RDI: 0000200000000300 [ 584.270483][T13018] RBP: 00007f001e1f6090 R08: fffffffffffffffb R09: 0000000000000000 [ 584.270497][T13018] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 584.270510][T13018] R13: 00007f001d626038 R14: 00007f001d625fa0 R15: 00007ffdc3a91518 [ 584.270540][T13018] [ 585.533315][ T5618] Bluetooth: hci1: command 0x040f tx timeout [ 585.630084][T12887] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.630230][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.630372][T12887] bridge_slave_0: entered allmulticast mode [ 585.633648][T12887] bridge_slave_0: entered promiscuous mode [ 585.666344][T12887] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.666439][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.666550][T12887] bridge_slave_1: entered allmulticast mode [ 585.668098][T12887] bridge_slave_1: entered promiscuous mode [ 585.905483][T12887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.909246][T12887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.044749][T12887] team0: Port device team_slave_0 added [ 586.062003][T12887] team0: Port device team_slave_1 added [ 586.185722][T12887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.185742][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.185761][T12887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.210416][T12887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.210455][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.210529][T12887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.514455][T12887] hsr_slave_0: entered promiscuous mode [ 586.524724][T12887] hsr_slave_1: entered promiscuous mode [ 586.531287][T12887] debugfs: 'hsr0' already exists in 'hsr' [ 586.531312][T12887] Cannot create hsr debugfs directory [ 586.778932][T13036] loop1: detected capacity change from 0 to 32768 [ 586.779856][T13036] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 586.782007][T13036] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1110 (13036) [ 586.801975][T13036] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 586.802005][T13036] BTRFS info (device loop1): using crc32c checksum algorithm [ 586.985090][T13036] BTRFS info (device loop1): rebuilding free space tree [ 587.052351][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1116'. [ 587.052381][T13044] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 587.083519][T13036] BTRFS info (device loop1): disabling free space tree [ 587.083578][T13036] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 587.083599][T13036] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 587.099789][T13036] BTRFS info (device loop1): enabling ssd optimizations [ 587.099851][T13036] BTRFS info (device loop1): turning on async discard [ 587.099891][T13036] BTRFS info (device loop1): force clearing of disk cache [ 587.099935][T13036] BTRFS info (device loop1): use zstd compression, level 3 [ 587.590090][T10641] Bluetooth: hci1: command 0x040f tx timeout [ 587.673993][T13063] Can't find a SQUASHFS superblock on nullb0 [ 588.450709][T13064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 588.451314][T13064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 588.451824][T13064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 588.452589][T13064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 588.453179][T13064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 589.092537][T12304] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 590.646917][T10641] Bluetooth: hci2: command 0x0c1a tx timeout [ 590.646960][T10641] Bluetooth: hci0: command 0x0406 tx timeout [ 590.646986][T10641] Bluetooth: hci1: command 0x040f tx timeout [ 590.647010][T10641] Bluetooth: hci3: command 0x0c1a tx timeout [ 590.647034][T10641] Bluetooth: hci4: command 0x0c1a tx timeout [ 591.495558][T13087] loop4: detected capacity change from 0 to 131072 [ 591.513324][T13087] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 591.513350][T13087] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 591.515446][T13087] F2FS-fs (loop4): invalid crc value [ 591.638874][T13087] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 591.664032][T13087] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 591.664065][T13087] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 591.715241][T13087] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 592.209815][T13096] loop1: detected capacity change from 0 to 32768 [ 592.210437][T13096] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 592.211020][T13096] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1122 (13096) [ 592.229692][T13096] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 592.229740][T13096] BTRFS info (device loop1): using crc32c checksum algorithm [ 592.386785][T13096] BTRFS info (device loop1): rebuilding free space tree [ 592.422980][T13096] BTRFS info (device loop1): disabling free space tree [ 592.423039][T13096] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 592.423063][T13096] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 592.429396][T13096] BTRFS info (device loop1): enabling ssd optimizations [ 592.429421][T13096] BTRFS info (device loop1): turning on async discard [ 592.429437][T13096] BTRFS info (device loop1): force clearing of disk cache [ 592.429455][T13096] BTRFS info (device loop1): use zstd compression, level 3 [ 593.883745][T12304] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 594.651142][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 594.691351][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.087311][T13139] FAULT_INJECTION: forcing a failure. [ 595.087311][T13139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.087341][T13139] CPU: 1 UID: 0 PID: 13139 Comm: syz.3.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.087368][T13139] Tainted: [L]=SOFTLOCKUP [ 595.087375][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 595.087387][T13139] Call Trace: [ 595.087395][T13139] [ 595.087404][T13139] dump_stack_lvl+0xe8/0x150 [ 595.087438][T13139] should_fail_ex+0x3eb/0x540 [ 595.087474][T13139] _copy_to_user+0x31/0xb0 [ 595.087500][T13139] simple_read_from_buffer+0xe1/0x170 [ 595.087532][T13139] proc_fail_nth_read+0x1bb/0x230 [ 595.087566][T13139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.087598][T13139] ? rw_verify_area+0x24a/0x4c0 [ 595.087626][T13139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.087655][T13139] vfs_read+0x213/0xa80 [ 595.087684][T13139] ? __pfx___mutex_lock+0x10/0x10 [ 595.087714][T13139] ? __pfx_vfs_read+0x10/0x10 [ 595.087740][T13139] ? __fget_files+0x2a/0x420 [ 595.087763][T13139] ? __fget_files+0x3a2/0x420 [ 595.087786][T13139] ? __fget_files+0x2a/0x420 [ 595.087814][T13139] ? fdget+0x1ac/0x250 [ 595.087844][T13139] ksys_read+0x150/0x270 [ 595.087872][T13139] ? __pfx_ksys_read+0x10/0x10 [ 595.087909][T13139] do_syscall_64+0x166/0x520 [ 595.087934][T13139] ? trace_irq_disable+0x3b/0x140 [ 595.087968][T13139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.087989][T13139] ? clear_bhb_loop+0x70/0xc0 [ 595.088013][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.088033][T13139] RIP: 0033:0x7f001d35e98e [ 595.088051][T13139] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 595.088069][T13139] RSP: 002b:00007f001e1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 595.088090][T13139] RAX: ffffffffffffffda RBX: 00007f001e1f66c0 RCX: 00007f001d35e98e [ 595.088105][T13139] RDX: 000000000000000f RSI: 00007f001e1f60a0 RDI: 0000000000000003 [ 595.088118][T13139] RBP: 00007f001e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 595.088131][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.088144][T13139] R13: 00007f001d626038 R14: 00007f001d625fa0 R15: 00007ffdc3a91518 [ 595.088175][T13139] [ 595.252642][T13136] loop7: detected capacity change from 0 to 512 [ 595.350785][T13136] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 595.393902][T13136] EXT4-fs (loop7): 1 truncate cleaned up [ 595.418561][T13136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.599566][T13136] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.1121: corrupted xattr entries [ 595.623748][T13136] EXT4-fs error (device loop7): get_max_inline_xattr_value_size:73: inode #15: comm syz.7.1121: corrupt xattr in inline inode [ 595.700878][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 595.733682][T12887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 595.748508][T13148] Can't find a SQUASHFS superblock on nullb0 [ 595.772587][T13136] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.1121: corrupted xattr entries [ 595.793276][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.794329][T12887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 595.827698][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.839895][T12887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 595.888192][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.889175][T12887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.906089][T13144] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.1121: corrupted xattr entries [ 595.926434][T13148] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 595.926579][T13148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 595.926713][T13148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.926847][T13148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.956511][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.956979][T13148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.073499][T10992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.074627][T12887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.085274][T12887] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.121609][T13128] loop1: detected capacity change from 0 to 32768 [ 596.124021][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.124114][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.124448][T13128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1124 (13128) [ 596.170921][T13147] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1127'. [ 596.173982][T13128] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 596.174056][T13128] BTRFS info (device loop1): using crc32c checksum algorithm [ 596.201705][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.201811][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.354442][T12887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 596.367042][T13128] BTRFS info (device loop1): enabling ssd optimizations [ 596.367107][T13128] BTRFS info (device loop1): turning on flush-on-commit [ 596.367154][T13128] BTRFS info (device loop1): enabling free space tree [ 596.367217][T13128] BTRFS info (device loop1): enabling auto defrag [ 596.367272][T13128] BTRFS info (device loop1): use lzo compression, level 1 [ 596.367327][T13128] BTRFS info (device loop1): max_inline set to 7 [ 596.555905][T13183] FAULT_INJECTION: forcing a failure. [ 596.555905][T13183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.555937][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.7.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.555963][T13183] Tainted: [L]=SOFTLOCKUP [ 596.555970][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 596.555983][T13183] Call Trace: [ 596.555991][T13183] [ 596.556001][T13183] dump_stack_lvl+0xe8/0x150 [ 596.556034][T13183] should_fail_ex+0x3eb/0x540 [ 596.556071][T13183] _copy_to_user+0x31/0xb0 [ 596.556096][T13183] simple_read_from_buffer+0xe1/0x170 [ 596.556128][T13183] proc_fail_nth_read+0x1bb/0x230 [ 596.556160][T13183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.556192][T13183] ? rw_verify_area+0x24a/0x4c0 [ 596.556220][T13183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.556248][T13183] vfs_read+0x213/0xa80 [ 596.556278][T13183] ? __pfx___mutex_lock+0x10/0x10 [ 596.556308][T13183] ? __pfx_vfs_read+0x10/0x10 [ 596.556335][T13183] ? __fget_files+0x2a/0x420 [ 596.556358][T13183] ? __fget_files+0x3a2/0x420 [ 596.556385][T13183] ? __fget_files+0x2a/0x420 [ 596.556414][T13183] ? fdget+0x1ac/0x250 [ 596.556445][T13183] ksys_read+0x150/0x270 [ 596.556473][T13183] ? __pfx_ksys_read+0x10/0x10 [ 596.556510][T13183] do_syscall_64+0x166/0x520 [ 596.556536][T13183] ? trace_irq_disable+0x3b/0x140 [ 596.556562][T13183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.556582][T13183] ? clear_bhb_loop+0x70/0xc0 [ 596.556607][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.556627][T13183] RIP: 0033:0x7f983035e98e [ 596.556646][T13183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 596.556662][T13183] RSP: 002b:00007f982e5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.556684][T13183] RAX: ffffffffffffffda RBX: 00007f982e5f66c0 RCX: 00007f983035e98e [ 596.556698][T13183] RDX: 000000000000000f RSI: 00007f982e5f60a0 RDI: 0000000000000006 [ 596.556712][T13183] RBP: 00007f982e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 596.556725][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.556736][T13183] R13: 00007f9830626128 R14: 00007f9830626090 R15: 00007ffedc7cfe58 [ 596.556767][T13183] [ 596.784544][ T5796] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 596.939569][ T5796] usb 2-1: device descriptor read/64, error -71 [ 596.991700][T13194] FAULT_INJECTION: forcing a failure. [ 596.991700][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 596.991740][T13194] CPU: 1 UID: 0 PID: 13194 Comm: syz.7.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.991779][T13194] Tainted: [L]=SOFTLOCKUP [ 596.991790][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 596.991806][T13194] Call Trace: [ 596.991816][T13194] [ 596.991828][T13194] dump_stack_lvl+0xe8/0x150 [ 596.991873][T13194] should_fail_ex+0x3eb/0x540 [ 596.991921][T13194] should_failslab+0xa8/0x100 [ 596.991977][T13194] __kvmalloc_node_noprof+0x171/0x820 [ 596.992015][T13194] ? nf_hook_entries_grow+0x287/0x740 [ 596.992129][T13194] ? nf_hook_entries_grow+0x287/0x740 [ 596.992158][T13194] ? __pfx___mutex_lock+0x10/0x10 [ 596.992196][T13194] nf_hook_entries_grow+0x287/0x740 [ 596.992236][T13194] __nf_register_net_hook+0x26f/0x940 [ 596.992274][T13194] nf_register_net_hook+0xb2/0x190 [ 596.992304][T13194] nf_register_net_hooks+0x44/0x1b0 [ 596.992345][T13194] nf_defrag_ipv4_enable+0x87/0x120 [ 596.992448][T13194] nf_ct_netns_do_get+0x18c/0x5c0 [ 596.992511][T13194] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 596.992541][T13194] ? trace_contention_end+0x3d/0x140 [ 596.992588][T13194] ? nf_ct_netns_get+0xe9/0x320 [ 596.992620][T13194] state_mt_check+0x53/0xf0 [ 596.992723][T13194] xt_check_match+0x602/0xce0 [ 596.992781][T13194] ? __pfx_xt_check_match+0x10/0x10 [ 596.992812][T13194] ? pcpu_alloc_noprof+0x1036/0x1900 [ 596.992844][T13194] ? xt_find_match+0x213/0x260 [ 596.992880][T13194] translate_table+0x1498/0x1f80 [ 596.992956][T13194] ? __pfx_translate_table+0x10/0x10 [ 596.992983][T13194] ? lock_acquire+0x115/0x350 [ 596.993027][T13194] ? __might_fault+0xaf/0x130 [ 596.993055][T13194] ? _copy_from_user+0x94/0xb0 [ 596.993085][T13194] do_ipt_set_ctl+0xa53/0xe20 [ 596.993114][T13194] ? rcu_is_watching+0x16/0xb0 [ 596.993157][T13194] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 596.993193][T13194] ? __mutex_unlock_slowpath+0x731/0x900 [ 596.993224][T13194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 596.993260][T13194] nf_setsockopt+0x26f/0x290 [ 596.993284][T13194] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 596.993305][T13194] do_sock_setsockopt+0x17c/0x1b0 [ 596.993341][T13194] __x64_sys_setsockopt+0x13d/0x1b0 [ 596.993369][T13194] do_syscall_64+0x166/0x520 [ 596.993394][T13194] ? trace_irq_disable+0x3b/0x140 [ 596.993417][T13194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.993436][T13194] ? clear_bhb_loop+0x70/0xc0 [ 596.993457][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.993475][T13194] RIP: 0033:0x7f983039e159 [ 596.993492][T13194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.993508][T13194] RSP: 002b:00007f983119c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 596.993527][T13194] RAX: ffffffffffffffda RBX: 00007f9830625fa0 RCX: 00007f983039e159 [ 596.993543][T13194] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 596.993556][T13194] RBP: 00007f983043506b R08: 00000000000004a0 R09: 0000000000000000 [ 596.993568][T13194] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.993580][T13194] R13: 00007f9830626038 R14: 00007f9830625fa0 R15: 00007ffedc7cfe58 [ 596.993606][T13194] [ 596.997277][T13194] cannot load conntrack support for proto=2 [ 597.221047][ T5796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 597.408893][ T5796] usb 2-1: device descriptor read/64, error -71 [ 597.505442][T13198] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1131'. [ 597.519118][ T5796] usb usb2-port1: attempt power cycle [ 597.737776][T12304] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 597.763579][T13211] FAULT_INJECTION: forcing a failure. [ 597.763579][T13211] name failslab, interval 1, probability 0, space 0, times 0 [ 597.763609][T13211] CPU: 0 UID: 0 PID: 13211 Comm: syz.4.1133 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.763636][T13211] Tainted: [L]=SOFTLOCKUP [ 597.763643][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 597.763655][T13211] Call Trace: [ 597.763663][T13211] [ 597.763672][T13211] dump_stack_lvl+0xe8/0x150 [ 597.763706][T13211] should_fail_ex+0x3eb/0x540 [ 597.763742][T13211] should_failslab+0xa8/0x100 [ 597.763780][T13211] __kmalloc_noprof+0xf9/0x710 [ 597.763804][T13211] ? tomoyo_encode+0x2ad/0x570 [ 597.763827][T13211] ? tomoyo_encode+0x2ad/0x570 [ 597.763856][T13211] tomoyo_encode+0x2ad/0x570 [ 597.763884][T13211] tomoyo_realpath_from_path+0x5fa/0x640 [ 597.763917][T13211] ? tomoyo_path_number_perm+0x219/0x5f0 [ 597.763938][T13211] tomoyo_path_number_perm+0x246/0x5f0 [ 597.763961][T13211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.763979][T13211] ? __lock_acquire+0x747/0x2de0 [ 597.764040][T13211] ? __fget_files+0x2a/0x420 [ 597.764066][T13211] ? __fget_files+0x2a/0x420 [ 597.764089][T13211] ? __fget_files+0x2a/0x420 [ 597.764116][T13211] security_file_ioctl+0xc3/0x2a0 [ 597.764147][T13211] __se_sys_ioctl+0x47/0x170 [ 597.764178][T13211] do_syscall_64+0x166/0x520 [ 597.764203][T13211] ? trace_irq_disable+0x3b/0x140 [ 597.764228][T13211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.764247][T13211] ? clear_bhb_loop+0x70/0xc0 [ 597.764270][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.764289][T13211] RIP: 0033:0x7f82bbb9e159 [ 597.764307][T13211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.764323][T13211] RSP: 002b:00007f82bcab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.764344][T13211] RAX: ffffffffffffffda RBX: 00007f82bbe26090 RCX: 00007f82bbb9e159 [ 597.764359][T13211] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 597.764371][T13211] RBP: 00007f82bcab2090 R08: 0000000000000000 R09: 0000000000000000 [ 597.764383][T13211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.764394][T13211] R13: 00007f82bbe26128 R14: 00007f82bbe26090 R15: 00007fffa42667d8 [ 597.764424][T13211] [ 597.768660][T13211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.980548][ T5741] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 597.992530][ T5618] Bluetooth: hci1: command 0x040f tx timeout [ 597.998967][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 597.999000][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 597.999050][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 597.999076][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 598.219773][ T5741] usb 4-1: Using ep0 maxpacket: 16 [ 598.243904][ T5741] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 598.261946][ T5741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.261971][ T5741] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.287759][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 598.287784][ T5741] usb 4-1: SerialNumber: syz [ 598.370011][ T5741] usb 4-1: 0:2 : does not exist [ 598.668190][T13209] loop7: detected capacity change from 0 to 131072 [ 598.688413][T13209] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 598.688441][T13209] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 598.719789][T13209] F2FS-fs (loop7): invalid crc value [ 598.798643][T13198] syzkaller1: entered promiscuous mode [ 598.798673][T13198] syzkaller1: entered allmulticast mode [ 598.805749][T13209] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 598.834290][T13209] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 598.834313][T13209] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 598.887183][T13209] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 598.976828][ T5741] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 599.000825][ T5741] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 599.063956][ T5741] usb 4-1: USB disconnect, device number 18 [ 599.101557][T12883] udevd[12883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.329339][T13233] loop4: detected capacity change from 0 to 32768 [ 599.330239][T13233] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 599.330973][T13233] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1135 (13233) [ 599.355576][T13233] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 599.355604][T13233] BTRFS info (device loop4): using crc32c checksum algorithm [ 599.492300][T13233] BTRFS info (device loop4): rebuilding free space tree [ 599.539463][T13233] BTRFS info (device loop4): disabling free space tree [ 599.539550][T13233] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 599.539573][T13233] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 599.548097][T13233] BTRFS info (device loop4): enabling ssd optimizations [ 599.548149][T13233] BTRFS info (device loop4): turning on async discard [ 599.548230][T13233] BTRFS info (device loop4): force clearing of disk cache [ 599.548272][T13233] BTRFS info (device loop4): use zstd compression, level 3 [ 600.582723][T12887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.647295][T13262] loop1: detected capacity change from 0 to 4096 [ 600.652771][T13265] loop3: detected capacity change from 0 to 128 [ 600.680336][T13265] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 600.712186][T13265] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.783120][T13262] bridge0: port 3(netdevsim1) entered blocking state [ 600.783200][T13262] bridge0: port 3(netdevsim1) entered disabled state [ 600.783347][T13262] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 600.786682][T13262] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 600.787321][T13262] bridge0: port 3(netdevsim1) entered blocking state [ 600.787434][T13262] bridge0: port 3(netdevsim1) entered forwarding state [ 600.800489][T13258] loop7: detected capacity change from 0 to 32768 [ 600.845739][T13258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1136 (13258) [ 600.880797][T13258] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 600.880834][T13258] BTRFS info (device loop7): using sha256 checksum algorithm [ 601.153961][T13262] loop1: detected capacity change from 0 to 32768 [ 601.169208][T13262] (syz.1.1137,13262,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 601.169887][T13262] (syz.1.1137,13262,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 601.231570][T13262] (syz.1.1137,13262,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 601.236072][T13262] JBD2: Ignoring recovery information on journal [ 601.312396][T13262] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 601.406410][T11657] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 601.467896][T13258] BTRFS info (device loop7): enabling ssd optimizations [ 601.468736][T13258] BTRFS info (device loop7): turning on sync discard [ 601.468825][T13258] BTRFS info (device loop7): enabling free space tree [ 601.468865][T13258] BTRFS info (device loop7): use zlib compression, level 3 [ 601.618725][ T8372] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.945972][T13302] input: syz0 as /devices/virtual/input/input15 [ 602.021091][ T5733] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 602.044369][T12887] veth0_vlan: entered promiscuous mode [ 602.088602][T12304] ocfs2: Unmounting device (7,1) on (node local) [ 602.108721][T12887] veth1_vlan: entered promiscuous mode [ 602.183531][ T5733] usb 8-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 602.193928][ T5733] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.194041][ T5733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.235616][ T5733] usb 8-1: config 0 descriptor?? [ 602.285836][T12887] veth0_macvtap: entered promiscuous mode [ 602.355854][T12887] veth1_macvtap: entered promiscuous mode [ 602.447635][ T5733] usbhid 8-1:0.0: can't add hid device: -71 [ 602.447732][ T5733] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 602.474724][ T5733] usb 8-1: USB disconnect, device number 13 [ 602.512876][T12887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.528863][ T5796] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 602.577042][T12887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.619158][ T5810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.620194][ T5810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.620230][ T5810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.620263][ T5810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.678819][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 602.679435][ T5796] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 602.680403][ T5796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.680433][ T5796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 602.680456][ T5796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 602.680478][ T5796] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 602.681696][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 602.681723][ T5796] usb 4-1: SerialNumber: syz [ 602.685100][T13305] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 602.685221][T13305] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 602.686446][ T5796] hub 4-1:1.0: bad descriptor, ignoring hub [ 602.686469][ T5796] hub 4-1:1.0: probe with driver hub failed with error -5 [ 602.694096][T13258] fuse: Unknown parameter '0x000000000000000700000000000000000008' [ 602.795881][ T5796] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 602.912400][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.927171][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.954501][ T5796] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 602.993136][ T5796] usb 4-1: USB disconnect, device number 19 [ 603.143746][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.143766][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.223958][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.223977][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.387208][T10992] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 605.417457][T13336] loop1: detected capacity change from 0 to 32768 [ 605.418373][T13336] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 605.486105][T13336] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1147 (13336) [ 605.595919][ T5796] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 605.782372][ T5796] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 605.889636][ T5796] usb 5-1: config 3 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 605.891754][ T5796] usb 5-1: config 3 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 16896, setting to 1024 [ 606.008714][ T5796] usb 5-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 606.008742][ T5796] usb 5-1: Manufacturer: syz [ 606.096863][ T5796] cdc_acm 5-1:3.0: skipping garbage [ 606.165162][T13336] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 606.165195][T13336] BTRFS info (device loop1): using crc32c checksum algorithm [ 606.290415][ T5796] cdc_acm 5-1:3.0: ttyACM0: USB ACM device [ 606.571704][T11032] usb 5-1: USB disconnect, device number 4 [ 606.721114][ T5796] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 606.903462][ T5796] usb 8-1: New USB device found: idVendor=1b96, idProduct=0004, bcdDevice=0.00 [ 606.907749][ T5796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.907794][ T5796] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.907838][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.978211][ T5796] usb 8-1: config 0 descriptor?? [ 607.212131][T13336] BTRFS info (device loop1): rebuilding free space tree [ 607.232090][T13336] BTRFS info (device loop1): disabling free space tree [ 607.232147][T13336] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 607.232170][T13336] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 607.243385][T13336] BTRFS info (device loop1): enabling ssd optimizations [ 607.243441][T13336] BTRFS info (device loop1): turning on async discard [ 607.243488][T13336] BTRFS info (device loop1): force clearing of disk cache [ 607.243530][T13336] BTRFS info (device loop1): use zstd compression, level 3 [ 607.560379][ T5796] ntrig 0003:1B96:0004.0006: bogus close delimiter [ 607.560401][ T5796] ntrig 0003:1B96:0004.0006: item 0 4 2 10 parsing failed [ 607.561151][ T5796] ntrig 0003:1B96:0004.0006: parse failed [ 607.561254][ T5796] ntrig 0003:1B96:0004.0006: probe with driver ntrig failed with error -22 [ 608.155722][T12304] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 608.658274][T13392] loop5: detected capacity change from 0 to 4096 [ 608.684688][T13392] EXT4-fs (loop5): Test dummy encryption mode enabled [ 609.005750][T13398] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 609.259842][T13392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.642016][ T5791] usb 8-1: USB disconnect, device number 14 [ 614.589403][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 614.703919][T12887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.832878][T13427] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1159'. [ 615.083011][T13433] Can't find a SQUASHFS superblock on nullb0 [ 615.169398][T13433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.169578][T13433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.169715][T13433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.169850][T13433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.208620][T13433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.015735][T13443] Can't find a SQUASHFS superblock on nullb0 [ 616.099389][T13435] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1162'. [ 616.177082][T13431] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1161'. [ 616.652127][T13460] input: syz0 as /devices/virtual/input/input16 [ 616.677282][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 616.969906][T13467] overlayfs: workdir and upperdir must reside under the same mount [ 617.192297][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 617.198970][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 617.199059][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 617.199150][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.627723][T13476] loop5: detected capacity change from 0 to 32768 [ 617.628722][T13476] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 617.635927][T13476] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1172 (13476) [ 617.649519][T13476] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 617.649547][T13476] BTRFS info (device loop5): using crc32c checksum algorithm [ 617.704037][T13474] loop7: detected capacity change from 0 to 4096 [ 617.720218][T13474] EXT4-fs (loop7): Test dummy encryption mode enabled [ 617.788557][T13476] BTRFS info (device loop5): rebuilding free space tree [ 617.795249][T13474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.816746][T13476] BTRFS info (device loop5): disabling free space tree [ 617.816804][T13476] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 617.816826][T13476] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 617.847440][T13476] BTRFS info (device loop5): enabling ssd optimizations [ 617.847512][T13476] BTRFS info (device loop5): turning on async discard [ 617.847556][T13476] BTRFS info (device loop5): force clearing of disk cache [ 617.847616][T13476] BTRFS info (device loop5): use zstd compression, level 3 [ 618.008874][ T5796] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 618.764232][ T5796] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 618.846147][ T5796] usb 2-1: config 3 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.846181][ T5796] usb 2-1: config 3 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 16896, setting to 1024 [ 619.232317][ T5796] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 619.232347][ T5796] usb 2-1: Manufacturer: syz [ 619.610554][T13510] loop4: detected capacity change from 0 to 512 [ 619.610959][ T5796] cdc_acm 2-1:3.0: skipping garbage [ 619.666466][T13510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 619.666596][T13510] System zones: 1-12 [ 619.691819][ T5796] cdc_acm 2-1:3.0: ttyACM0: USB ACM device [ 619.714351][T12887] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 619.730162][T13510] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.1174: missing EA_INODE flag [ 619.730183][T13510] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 619.746082][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 619.746147][ C0] EXT4-fs (loop4): initial error at time 1790747607: ext4_xattr_inode_iget:437: inode 12 [ 619.746227][ C0] EXT4-fs (loop4): last error at time 1790747607: ext4_xattr_inode_iget:437: inode 12 [ 619.817957][T13510] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1174: error while reading EA inode 12 err=-117 [ 619.817987][T13510] loop4: lost filesystem error report for type 5 error -117 [ 619.821113][T13510] EXT4-fs (loop4): 1 orphan inode deleted [ 619.870151][T13510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.913664][ T5796] usb 2-1: USB disconnect, device number 7 [ 620.156699][T10948] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 620.157999][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 620.665616][T10992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.699015][ T5796] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 621.637573][T11657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.648379][ T5796] usb 6-1: Using ep0 maxpacket: 8 [ 621.657050][ T5796] usb 6-1: New USB device found: idVendor=10d2, idProduct=3620, bcdDevice=83.9c [ 621.670023][ T5796] usb 6-1: config 6 has an invalid interface number: 91 but max is 0 [ 621.670039][ T5796] usb 6-1: config 6 has no interface number 0 [ 621.670057][ T5796] usb 6-1: config 6 interface 91 has no altsetting 0 [ 621.803195][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.803222][ T5796] usb 6-1: Product: syz [ 621.803237][ T5796] usb 6-1: Manufacturer: syz [ 621.803251][ T5796] usb 6-1: SerialNumber: syz [ 621.997573][ T32] audit: type=1800 audit(1790747609.352:5287): pid=13541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1177" name="syzkaller0" dev="sda1" ino=2082 res=0 errno=-22 [ 622.074605][ T5796] usblcd 6-1:6.91: USBLCD model not supported. [ 622.089435][ T5796] usb 6-1: USB disconnect, device number 2 [ 622.138899][ T32] audit: type=1800 audit(1790747609.502:5288): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1182" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 622.341721][T13554] fuse: Bad value for 'group_id' [ 622.341745][T13554] fuse: Bad value for 'group_id' [ 622.714630][T13571] loop3: detected capacity change from 0 to 4096 [ 622.738169][T13571] EXT4-fs (loop3): Test dummy encryption mode enabled [ 622.783084][T13571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.164182][T13579] loop5: detected capacity change from 0 to 4096 [ 623.430679][T13579] EXT4-fs (loop5): Test dummy encryption mode enabled [ 624.204085][T13579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.317020][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.317084][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.024950][ T8372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.421543][T13610] input: syz0 as /devices/virtual/input/input17 [ 627.560589][T12887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.187382][T13637] loop4: detected capacity change from 0 to 4096 [ 628.297712][T13637] ntfs3(loop4): Failed to load $Extend (-22). [ 628.297739][T13637] ntfs3(loop4): Failed to initialize $Extend. [ 628.508284][T13637] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1197'. [ 628.525224][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.527898][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.710384][T13660] loop3: detected capacity change from 0 to 32768 [ 630.779639][T13660] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 630.851156][T13662] loop1: detected capacity change from 0 to 32768 [ 630.852853][T13662] xfs: Unknown parameter 'dont_hash' [ 630.968763][T13680] input: syz0 as /devices/virtual/input/input18 [ 632.187750][ T8372] ocfs2: Unmounting device (7,3) on (node local) [ 633.319050][T13298] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 633.387468][T13710] Can't find a SQUASHFS superblock on nullb0 [ 633.458819][T13298] usb 2-1: device descriptor read/64, error -71 [ 633.485562][T13710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 633.485729][T13710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 633.485865][T13710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 633.486009][T13710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 633.486430][T13710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 633.600797][T13708] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1211'. [ 633.698836][T13298] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 634.501391][T13298] usb 2-1: device descriptor read/64, error -71 [ 634.609689][T13298] usb usb2-port1: attempt power cycle [ 634.709668][T13721] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 634.734558][T13721] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 634.759898][T13721] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 634.775413][T13721] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 634.775626][T13721] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 634.775783][T13721] kvm: requested 49447 ns i8254 timer period limited to 200000 ns [ 634.776666][T13721] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 634.949120][T13298] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 634.972424][T13298] usb 2-1: device descriptor read/8, error -71 [ 635.146100][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1212'. [ 635.146154][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 635.509814][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 635.515462][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 635.515548][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 635.516486][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 635.516634][T10948] Bluetooth: hci1: command 0x040f tx timeout [ 635.749870][T13298] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 635.924904][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 635.958883][T13298] usb 2-1: device not accepting address 11, error -71 [ 635.968230][T13298] usb usb2-port1: unable to enumerate USB device [ 637.412552][T13725] loop3: detected capacity change from 0 to 32768 [ 637.510773][T13725] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 637.515392][T13725] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 637.522735][T13725] XFS (loop3): log mount failed [ 637.588952][T10641] Bluetooth: hci1: command 0x040f tx timeout [ 637.676487][ T5748] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 637.705248][T13763] device-mapper: ioctl: Empty message received. [ 637.815582][T13766] FAULT_INJECTION: forcing a failure. [ 637.815582][T13766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.815613][T13766] CPU: 1 UID: 0 PID: 13766 Comm: syz.4.1220 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 637.815641][T13766] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 637.815649][T13766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 637.815662][T13766] Call Trace: [ 637.815670][T13766] [ 637.815679][T13766] dump_stack_lvl+0xe8/0x150 [ 637.815717][T13766] should_fail_ex+0x3eb/0x540 [ 637.815752][T13766] _copy_from_user+0x2d/0xb0 [ 637.815776][T13766] sk_setsockopt+0x2b5/0x2f20 [ 637.815806][T13766] ? __pfx_sk_setsockopt+0x10/0x10 [ 637.815833][T13766] ? aa_sk_perm+0x6ff/0x8f0 [ 637.815863][T13766] ? __pfx_aa_sk_perm+0x10/0x10 [ 637.815886][T13766] ? aa_sock_opt_perm+0x142/0x1e0 [ 637.815913][T13766] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 637.815944][T13766] do_sock_setsockopt+0x11b/0x1b0 [ 637.815973][T13766] __x64_sys_setsockopt+0x13d/0x1b0 [ 637.816002][T13766] do_syscall_64+0x166/0x520 [ 637.816035][T13766] ? trace_irq_disable+0x3b/0x140 [ 637.816062][T13766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.816083][T13766] ? clear_bhb_loop+0x70/0xc0 [ 637.816107][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.816127][T13766] RIP: 0033:0x7f82bbb9e159 [ 637.816145][T13766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.816162][T13766] RSP: 002b:00007f82bca91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 637.816183][T13766] RAX: ffffffffffffffda RBX: 00007f82bbe26180 RCX: 00007f82bbb9e159 [ 637.816198][T13766] RDX: 0000000000000028 RSI: 0000000000000001 RDI: 0000000000000009 [ 637.816211][T13766] RBP: 00007f82bca91090 R08: 0000000000000004 R09: 0000000000000000 [ 637.816223][T13766] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.816237][T13766] R13: 00007f82bbe26218 R14: 00007f82bbe26180 R15: 00007fffa42667d8 [ 637.816267][T13766] [ 637.844127][ T5748] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 637.864348][ T5748] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.864374][ T5748] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 637.864412][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.093304][ T5748] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 638.440779][T13776] Can't find a SQUASHFS superblock on nullb0 [ 638.442291][T13775] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 638.482423][T13775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.505964][T13775] bond1: (slave veth0_to_bond): making interface the new active one [ 638.507369][T13775] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 638.539609][T13776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 638.539836][T13776] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.540035][T13776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.540243][T13776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.540483][T13776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.543805][T13775] bond1: entered promiscuous mode [ 638.543824][T13775] veth0_to_bond: entered promiscuous mode [ 638.543988][T13775] bond1: entered allmulticast mode [ 638.544003][T13775] veth0_to_bond: entered allmulticast mode [ 638.610188][T13775] macvlan2: entered promiscuous mode [ 638.610207][T13775] macvlan2: entered allmulticast mode [ 638.614947][T13775] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 638.638996][T13775] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 638.645048][T13779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1219'. [ 638.706746][T13776] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1221'. [ 638.709081][ T32] audit: type=1326 audit(1790747626.062:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.709125][ T32] audit: type=1326 audit(1790747626.062:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.785370][ T32] audit: type=1326 audit(1790747626.142:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.785486][ T32] audit: type=1326 audit(1790747626.142:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.785632][ T32] audit: type=1326 audit(1790747626.142:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.813783][ T32] audit: type=1326 audit(1790747626.152:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.841480][ T32] audit: type=1326 audit(1790747626.192:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.841534][ T32] audit: type=1326 audit(1790747626.192:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983039e159 code=0x7ffc0000 [ 638.865377][ T32] audit: type=1326 audit(1790747626.222:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983035e98e code=0x7ffc0000 [ 638.876240][ T32] audit: type=1326 audit(1790747626.222:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.7.1214" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f983039ddeb code=0x7ffc0000 [ 639.101163][T13790] loop1: detected capacity change from 0 to 128 [ 639.132607][ T5748] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 639.176224][T13790] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 639.176627][T13790] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.303566][ T5748] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 639.314244][ T5748] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.314395][ T5748] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 639.374672][ T5748] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.374723][ T5748] usb 8-1: Product: syz [ 639.374738][ T5748] usb 8-1: Manufacturer: syz [ 639.374752][ T5748] usb 8-1: SerialNumber: syz [ 639.380001][T13804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1224'. [ 639.560307][T13808] loop4: detected capacity change from 0 to 512 [ 639.748802][T13808] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.017540][T13808] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 640.559253][T10641] Bluetooth: hci3: command 0x0c1a tx timeout [ 640.559405][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 640.559932][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 640.564253][T10948] Bluetooth: hci2: command 0x0c1a tx timeout [ 640.564603][T13734] Bluetooth: hci1: command 0x040f tx timeout [ 641.590998][ T46] usb 6-1: USB disconnect, device number 3 [ 641.594298][ T46] idmouse 6-1:1.0: disconnected [ 641.613338][ T5748] sisusb 8-1:1.0: Invalid USB2VGA device [ 641.613360][ T5748] sisusb 8-1:1.0: probe with driver sisusb failed with error -22 [ 641.653879][T13785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.654279][T13785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.757231][T13298] usb 8-1: USB disconnect, device number 15 [ 641.770581][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 641.894203][T13818] loop3: detected capacity change from 0 to 4096 [ 641.911927][T13818] EXT4-fs (loop3): Test dummy encryption mode enabled [ 641.946031][T13818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.158138][T13819] loop4: detected capacity change from 0 to 32768 [ 642.159105][T13819] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 642.173591][T13819] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1226 (13819) [ 642.387118][T13819] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 642.387152][T13819] BTRFS info (device loop4): using crc32c checksum algorithm [ 642.641720][T12304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 643.266417][T13819] BTRFS info (device loop4): rebuilding free space tree [ 643.343103][T13841] FAULT_INJECTION: forcing a failure. [ 643.343103][T13841] name failslab, interval 1, probability 0, space 0, times 0 [ 643.371883][T13841] CPU: 0 UID: 0 PID: 13841 Comm: syz.5.1229 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 643.371925][T13841] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 643.371936][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 643.371962][T13841] Call Trace: [ 643.371970][T13841] [ 643.371979][T13841] dump_stack_lvl+0xe8/0x150 [ 643.372015][T13841] should_fail_ex+0x3eb/0x540 [ 643.372052][T13841] should_failslab+0xa8/0x100 [ 643.372092][T13841] __kmalloc_noprof+0xf9/0x710 [ 643.372118][T13841] ? tomoyo_encode2+0x28b/0x540 [ 643.372141][T13841] ? tomoyo_encode2+0x28b/0x540 [ 643.372172][T13841] tomoyo_encode2+0x28b/0x540 [ 643.372203][T13841] tomoyo_check_unix_address+0x39f/0x7e0 [ 643.372239][T13841] ? tomoyo_check_unix_address+0x16d/0x7e0 [ 643.372264][T13841] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 643.372299][T13841] ? __pfx___schedule+0x10/0x10 [ 643.372325][T13841] ? __lock_acquire+0x747/0x2de0 [ 643.372358][T13841] tomoyo_socket_sendmsg_permission+0x1d9/0x300 [ 643.372395][T13841] security_socket_sendmsg+0xc0/0x280 [ 643.372426][T13841] ____sys_sendmsg+0x51d/0x850 [ 643.372459][T13841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.372493][T13841] ? import_iovec+0x73/0xa0 [ 643.372598][T13841] ___sys_sendmsg+0x2a5/0x360 [ 643.372623][T13841] ? __lock_acquire+0x747/0x2de0 [ 643.372653][T13841] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.372686][T13841] ? __schedule+0x1b5d/0x5b40 [ 643.372734][T13841] ? __fget_files+0x3a2/0x420 [ 643.372759][T13841] ? __fget_files+0x2a/0x420 [ 643.372793][T13841] __sys_sendmmsg+0x273/0x4d0 [ 643.372825][T13841] ? __pfx___sys_sendmmsg+0x10/0x10 [ 643.372879][T13841] ? rcu_is_watching+0x16/0xb0 [ 643.372917][T13841] __x64_sys_sendmmsg+0xa0/0xc0 [ 643.372946][T13841] do_syscall_64+0x166/0x520 [ 643.372973][T13841] ? trace_irq_disable+0x3b/0x140 [ 643.373000][T13841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.373021][T13841] ? clear_bhb_loop+0x70/0xc0 [ 643.373046][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.373072][T13841] RIP: 0033:0x7f5dbcf9e159 [ 643.373092][T13841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.373109][T13841] RSP: 002b:00007f5dbddce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 643.373131][T13841] RAX: ffffffffffffffda RBX: 00007f5dbd226090 RCX: 00007f5dbcf9e159 [ 643.373146][T13841] RDX: 0000000000000001 RSI: 000020000000a740 RDI: 0000000000000004 [ 643.373159][T13841] RBP: 00007f5dbddce090 R08: 0000000000000000 R09: 0000000000000000 [ 643.373173][T13841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.373185][T13841] R13: 00007f5dbd226128 R14: 00007f5dbd226090 R15: 00007ffedec28aa8 [ 643.373217][T13841] [ 644.537843][T13819] BTRFS info (device loop4): disabling free space tree [ 644.537890][T13819] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 644.537905][T13819] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 644.622885][T13819] BTRFS info (device loop4): enabling ssd optimizations [ 644.622903][T13819] BTRFS info (device loop4): turning on async discard [ 644.622915][T13819] BTRFS info (device loop4): force clearing of disk cache [ 644.622926][T13819] BTRFS info (device loop4): use zstd compression, level 3 [ 644.903458][T11657] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 646.522799][ T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 646.693512][ T8372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.694088][ T46] usb 6-1: New USB device found: idVendor=0a5c, idProduct=21e1, bcdDevice=1.00 [ 646.702213][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.932717][T13865] FAULT_INJECTION: forcing a failure. [ 646.932717][T13865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.932750][T13865] CPU: 0 UID: 0 PID: 13865 Comm: syz.7.1235 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 646.932785][T13865] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 646.932794][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 646.932806][T13865] Call Trace: [ 646.932814][T13865] [ 646.932822][T13865] dump_stack_lvl+0xe8/0x150 [ 646.932858][T13865] should_fail_ex+0x3eb/0x540 [ 646.932894][T13865] _copy_from_user+0x2d/0xb0 [ 646.932917][T13865] map_update_elem+0x573/0xa80 [ 646.932979][T13865] __sys_bpf+0x9f4/0xe00 [ 646.933016][T13865] ? __pfx___sys_bpf+0x10/0x10 [ 646.933054][T13865] ? __fget_files+0x2a/0x420 [ 646.933095][T13865] ? ksys_write+0x242/0x270 [ 646.933123][T13865] ? __pfx_ksys_write+0x10/0x10 [ 646.933154][T13865] __x64_sys_bpf+0xba/0xd0 [ 646.933183][T13865] do_syscall_64+0x166/0x520 [ 646.933211][T13865] ? trace_irq_disable+0x3b/0x140 [ 646.933237][T13865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.933260][T13865] ? clear_bhb_loop+0x70/0xc0 [ 646.933288][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.933308][T13865] RIP: 0033:0x7f983039e159 [ 646.933326][T13865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.933343][T13865] RSP: 002b:00007f983119c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.933365][T13865] RAX: ffffffffffffffda RBX: 00007f9830625fa0 RCX: 00007f983039e159 [ 646.933381][T13865] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000002 [ 646.933394][T13865] RBP: 00007f983119c090 R08: 0000000000000000 R09: 0000000000000000 [ 646.933407][T13865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.933420][T13865] R13: 00007f9830626038 R14: 00007f9830625fa0 R15: 00007ffedc7cfe58 [ 646.933450][T13865] [ 647.582937][ T5614] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 647.606365][ T5748] usb 6-1: USB disconnect, device number 4 [ 647.921773][T13885] input: syz0 as /devices/virtual/input/input19 [ 648.093803][T13888] input: syz0 as /devices/virtual/input/input20 [ 648.095568][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 649.121549][T13895] loop3: detected capacity change from 0 to 4096 [ 649.170149][T13895] EXT4-fs (loop3): Test dummy encryption mode enabled [ 649.199255][T13895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.246285][T13910] kvm: emulating exchange as write [ 652.301022][ T8372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.461350][T13930] loop4: detected capacity change from 0 to 4096 [ 652.471872][T13930] EXT4-fs: Ignoring removed orlov option [ 652.485509][T13930] EXT4-fs (loop4): Test dummy encryption mode enabled [ 652.519687][T13930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.654403][T13930] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 652.940001][ T46] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 653.028030][T11657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.092984][ T46] usb 4-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 653.094775][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.094813][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.094849][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.143682][ T46] usb 4-1: config 0 descriptor?? [ 653.356619][T13927] loop5: detected capacity change from 0 to 32768 [ 653.375050][T13927] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1248 (13927) [ 653.410289][T13937] syzkaller0: entered promiscuous mode [ 653.410310][T13937] syzkaller0: entered allmulticast mode [ 653.415714][T13927] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 653.415788][T13927] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 653.446315][T13950] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 653.583360][T13927] BTRFS info (device loop5): enabling ssd optimizations [ 653.583386][T13927] BTRFS info (device loop5): turning on flush-on-commit [ 653.583427][T13927] BTRFS info (device loop5): turning on async discard [ 653.583443][T13927] BTRFS info (device loop5): enabling free space tree [ 653.583461][T13927] BTRFS info (device loop5): force zlib compression, level 3 [ 653.583486][T13927] BTRFS info (device loop5): max_inline set to 4096 [ 653.776700][T12887] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 653.935369][ T46] usbhid 4-1:0.0: can't add hid device: -32 [ 653.935598][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 654.257204][ T5719] usb 4-1: USB disconnect, device number 20 [ 654.375270][T13980] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 654.394315][T13980] 9pnet_fd: p9_fd_create_unix (13980): problem connecting socket: ./file0: -13 [ 654.411262][T13978] vxlan0: entered allmulticast mode [ 654.427889][ T5837] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.442721][T13589] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.443745][T13588] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.443783][T13588] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.683764][T13985] FAULT_INJECTION: forcing a failure. [ 654.683764][T13985] name failslab, interval 1, probability 0, space 0, times 0 [ 654.683797][T13985] CPU: 0 UID: 0 PID: 13985 Comm: syz.4.1256 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 654.683826][T13985] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 654.683835][T13985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 654.683848][T13985] Call Trace: [ 654.683856][T13985] [ 654.683866][T13985] dump_stack_lvl+0xe8/0x150 [ 654.683900][T13985] should_fail_ex+0x3eb/0x540 [ 654.683935][T13985] ? __pfx_sock_alloc_inode+0x10/0x10 [ 654.683955][T13985] should_failslab+0xa8/0x100 [ 654.683986][T13985] ? __pfx_sock_alloc_inode+0x10/0x10 [ 654.684003][T13985] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 654.684027][T13985] ? tomoyo_supervisor+0x4d2/0x1550 [ 654.684124][T13985] ? sock_alloc_inode+0x2c/0x1a0 [ 654.684140][T13985] ? sock_alloc_inode+0x2c/0x1a0 [ 654.684163][T13985] ? __pfx_sock_alloc_inode+0x10/0x10 [ 654.684180][T13985] sock_alloc_inode+0x2c/0x1a0 [ 654.684198][T13985] ? __pfx_sock_alloc_inode+0x10/0x10 [ 654.684215][T13985] alloc_inode+0x6a/0x1b0 [ 654.684239][T13985] __sock_create+0x127/0xac0 [ 654.684267][T13985] mptcp_subflow_create_socket+0xfd/0x810 [ 654.684363][T13985] ? begin_current_label_crit_section+0x299/0x830 [ 654.684389][T13985] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 654.684421][T13985] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 654.684452][T13985] __mptcp_nmpc_sk+0x155/0x770 [ 654.684476][T13985] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 654.684504][T13985] mptcp_connect+0x6e/0x7f0 [ 654.684534][T13985] __inet_stream_connect+0x28c/0xf50 [ 654.684630][T13985] ? do_raw_spin_lock+0x12b/0x2f0 [ 654.684661][T13985] ? __pfx___inet_stream_connect+0x10/0x10 [ 654.684684][T13985] ? inet_stream_connect+0x51/0xa0 [ 654.684706][T13985] ? __local_bh_enable_ip+0xd6/0x140 [ 654.684745][T13985] inet_stream_connect+0x66/0xa0 [ 654.684768][T13985] __sys_connect+0x316/0x450 [ 654.684794][T13985] ? __pfx___sys_connect+0x10/0x10 [ 654.684828][T13985] ? __pfx_ksys_write+0x10/0x10 [ 654.684866][T13985] __x64_sys_connect+0x7a/0x90 [ 654.684890][T13985] do_syscall_64+0x166/0x520 [ 654.684916][T13985] ? trace_irq_disable+0x3b/0x140 [ 654.684941][T13985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.684962][T13985] ? clear_bhb_loop+0x70/0xc0 [ 654.684986][T13985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.685005][T13985] RIP: 0033:0x7f82bbb9e159 [ 654.685024][T13985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.685041][T13985] RSP: 002b:00007f82bcad3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 654.685062][T13985] RAX: ffffffffffffffda RBX: 00007f82bbe25fa0 RCX: 00007f82bbb9e159 [ 654.685077][T13985] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 654.685091][T13985] RBP: 00007f82bcad3090 R08: 0000000000000000 R09: 0000000000000000 [ 654.685104][T13985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.685116][T13985] R13: 00007f82bbe26038 R14: 00007f82bbe25fa0 R15: 00007fffa42667d8 [ 654.685147][T13985] [ 654.687109][T13985] socket: no more sockets [ 655.106606][T13988] loop3: detected capacity change from 0 to 128 [ 655.176857][T13988] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 655.177436][T13988] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.108501][T13974] loop7: detected capacity change from 0 to 32768 [ 656.471806][ T8372] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 656.619766][T14007] device-mapper: ioctl: Empty message received. [ 656.677866][T14012] syzkaller0: entered promiscuous mode [ 656.677887][T14012] syzkaller0: entered allmulticast mode [ 656.930137][T14015] loop3: detected capacity change from 0 to 32768 [ 656.931165][T14015] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 656.962510][T14015] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1261 (14015) [ 656.990633][T14015] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 656.990668][T14015] BTRFS info (device loop3): using crc32c checksum algorithm [ 657.118147][T14015] BTRFS info (device loop3): rebuilding free space tree [ 657.154841][T14015] BTRFS info (device loop3): disabling free space tree [ 657.154899][T14015] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 657.154921][T14015] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 657.189867][T14015] BTRFS info (device loop3): enabling ssd optimizations [ 657.189906][T14015] BTRFS info (device loop3): turning on async discard [ 657.189924][T14015] BTRFS info (device loop3): force clearing of disk cache [ 657.189943][T14015] BTRFS info (device loop3): use zstd compression, level 3 [ 658.343942][T14054] loop5: detected capacity change from 0 to 128 [ 659.354163][T14054] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 659.358516][T14054] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.697524][ T8372] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 659.833124][T12887] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 660.047455][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 660.165593][T14066] Can't find a SQUASHFS superblock on nullb0 [ 660.243789][T14066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 660.243930][T14066] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 660.244078][T14066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 660.244268][T14066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 660.681845][T14072] loop3: detected capacity change from 0 to 4096 [ 660.714444][T14072] EXT4-fs (loop3): Test dummy encryption mode enabled [ 660.763664][T14072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.794903][T14076] FAULT_INJECTION: forcing a failure. [ 660.794903][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 660.794931][T14076] CPU: 0 UID: 0 PID: 14076 Comm: syz.5.1269 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 660.794959][T14076] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 660.794967][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 660.794979][T14076] Call Trace: [ 660.794987][T14076] [ 660.794997][T14076] dump_stack_lvl+0xe8/0x150 [ 660.795030][T14076] should_fail_ex+0x3eb/0x540 [ 660.795067][T14076] should_failslab+0xa8/0x100 [ 660.795099][T14076] __kmalloc_cache_noprof+0x9e/0x600 [ 660.795123][T14076] ? rcu_is_watching+0x16/0xb0 [ 660.795148][T14076] ? vhost_task_create+0x123/0x380 [ 660.795167][T14076] ? vhost_task_create+0x123/0x380 [ 660.795191][T14076] vhost_task_create+0x123/0x380 [ 660.795215][T14076] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 660.795273][T14076] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 660.795299][T14076] ? __pfx_vhost_task_create+0x10/0x10 [ 660.795323][T14076] ? register_lock_class+0x31/0x2e0 [ 660.795355][T14076] ? __pfx_vhost_task_fn+0x10/0x10 [ 660.795388][T14076] ? kasan_quarantine_put+0xbb/0x1f0 [ 660.795420][T14076] kvm_mmu_post_init_vm+0x147/0x2b0 [ 660.795450][T14076] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 660.795486][T14076] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 660.795519][T14076] kvm_vcpu_ioctl+0xa61/0xfd0 [ 660.795547][T14076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 660.795586][T14076] ? __fget_files+0x2a/0x420 [ 660.795613][T14076] ? __fget_files+0x2a/0x420 [ 660.795647][T14076] ? __fget_files+0x2a/0x420 [ 660.795673][T14076] ? bpf_lsm_file_ioctl+0x9/0x20 [ 660.795697][T14076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 660.795715][T14076] __se_sys_ioctl+0xfc/0x170 [ 660.795741][T14076] do_syscall_64+0x166/0x520 [ 660.795764][T14076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.795780][T14076] ? clear_bhb_loop+0x70/0xc0 [ 660.795800][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.795815][T14076] RIP: 0033:0x7f5dbcf9e159 [ 660.795831][T14076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.795844][T14076] RSP: 002b:00007f5dbddef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.795864][T14076] RAX: ffffffffffffffda RBX: 00007f5dbd225fa0 RCX: 00007f5dbcf9e159 [ 660.795876][T14076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 660.795886][T14076] RBP: 00007f5dbddef090 R08: 0000000000000000 R09: 0000000000000000 [ 660.795896][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.795906][T14076] R13: 00007f5dbd226038 R14: 00007f5dbd225fa0 R15: 00007ffedec28aa8 [ 660.795930][T14076] [ 661.199934][T14087] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 662.308973][T13812] Bluetooth: hci3: command 0x0c1a tx timeout [ 662.309006][T13734] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.309013][T13812] Bluetooth: hci0: command 0x0406 tx timeout [ 662.309081][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 662.375350][T14091] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 663.566940][T14091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.616517][T14089] bond1: (slave veth0_to_bond): making interface the new active one [ 664.504372][T14089] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 664.536466][T14092] bond1: entered promiscuous mode [ 664.536488][T14092] veth0_to_bond: entered promiscuous mode [ 664.536679][T14092] bond1: entered allmulticast mode [ 664.536694][T14092] veth0_to_bond: entered allmulticast mode [ 664.702311][T14094] macvlan2: entered promiscuous mode [ 664.702333][T14094] macvlan2: entered allmulticast mode [ 664.717488][T14094] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 664.743869][T14094] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 664.768208][ T8372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.555932][T14117] loop4: detected capacity change from 0 to 4096 [ 665.715945][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 666.016456][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 667.018316][T14117] NILFS (loop4): ifile inode (checkpoint number=2) corrupted [ 667.019417][T14117] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 667.309871][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'. [ 668.474237][T14147] FAULT_INJECTION: forcing a failure. [ 668.474237][T14147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.474269][T14147] CPU: 1 UID: 0 PID: 14147 Comm: syz.1.1281 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 668.474298][T14147] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 668.474307][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 668.474319][T14147] Call Trace: [ 668.474328][T14147] [ 668.474336][T14147] dump_stack_lvl+0xe8/0x150 [ 668.474370][T14147] should_fail_ex+0x3eb/0x540 [ 668.474406][T14147] _copy_from_user+0x2d/0xb0 [ 668.474430][T14147] ___sys_sendmsg+0x1c6/0x360 [ 668.474456][T14147] ? __lock_acquire+0x747/0x2de0 [ 668.474486][T14147] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.474543][T14147] ? __fget_files+0x3a2/0x420 [ 668.474568][T14147] ? __fget_files+0x2a/0x420 [ 668.474601][T14147] __x64_sys_sendmsg+0x1b1/0x290 [ 668.474630][T14147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.474675][T14147] do_syscall_64+0x166/0x520 [ 668.474702][T14147] ? trace_irq_disable+0x3b/0x140 [ 668.474728][T14147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.474749][T14147] ? clear_bhb_loop+0x70/0xc0 [ 668.474773][T14147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.474793][T14147] RIP: 0033:0x7fda7b19e159 [ 668.474811][T14147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.474828][T14147] RSP: 002b:00007fda7c14c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.474850][T14147] RAX: ffffffffffffffda RBX: 00007fda7b425fa0 RCX: 00007fda7b19e159 [ 668.474865][T14147] RDX: 000000002000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 668.474878][T14147] RBP: 00007fda7c14c090 R08: 0000000000000000 R09: 0000000000000000 [ 668.474891][T14147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.474903][T14147] R13: 00007fda7b426038 R14: 00007fda7b425fa0 R15: 00007ffd9b965078 [ 668.474933][T14147] [ 669.005657][T14153] loop1: detected capacity change from 0 to 4096 [ 669.032220][T14153] EXT4-fs (loop1): Test dummy encryption mode enabled [ 669.125870][T14153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.232538][T12304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.603515][T14177] FAULT_INJECTION: forcing a failure. [ 672.603515][T14177] name failslab, interval 1, probability 0, space 0, times 0 [ 672.603538][T14177] CPU: 0 UID: 0 PID: 14177 Comm: syz.1.1286 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 672.603559][T14177] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 672.603565][T14177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 672.603574][T14177] Call Trace: [ 672.603580][T14177] [ 672.603586][T14177] dump_stack_lvl+0xe8/0x150 [ 672.603612][T14177] should_fail_ex+0x3eb/0x540 [ 672.603639][T14177] should_failslab+0xa8/0x100 [ 672.603662][T14177] __kmalloc_cache_noprof+0x9e/0x600 [ 672.603682][T14177] ? rcu_is_watching+0x16/0xb0 [ 672.603705][T14177] ? vhost_task_create+0x123/0x380 [ 672.603722][T14177] ? vhost_task_create+0x123/0x380 [ 672.603743][T14177] vhost_task_create+0x123/0x380 [ 672.603761][T14177] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 672.603779][T14177] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 672.603797][T14177] ? __pfx_vhost_task_create+0x10/0x10 [ 672.603813][T14177] ? register_lock_class+0x31/0x2e0 [ 672.603836][T14177] ? __pfx_vhost_task_fn+0x10/0x10 [ 672.603859][T14177] ? kasan_quarantine_put+0xbb/0x1f0 [ 672.603882][T14177] kvm_mmu_post_init_vm+0x147/0x2b0 [ 672.603903][T14177] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 672.603923][T14177] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 672.603943][T14177] kvm_vcpu_ioctl+0xa61/0xfd0 [ 672.603962][T14177] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 672.603990][T14177] ? __fget_files+0x2a/0x420 [ 672.604009][T14177] ? __fget_files+0x2a/0x420 [ 672.604027][T14177] ? __fget_files+0x2a/0x420 [ 672.604047][T14177] ? bpf_lsm_file_ioctl+0x9/0x20 [ 672.604068][T14177] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 672.604084][T14177] __se_sys_ioctl+0xfc/0x170 [ 672.604107][T14177] do_syscall_64+0x166/0x520 [ 672.604127][T14177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.604141][T14177] ? clear_bhb_loop+0x70/0xc0 [ 672.604159][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.604199][T14177] RIP: 0033:0x7fda7b19e159 [ 672.604218][T14177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.604235][T14177] RSP: 002b:00007fda7c14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.604256][T14177] RAX: ffffffffffffffda RBX: 00007fda7b425fa0 RCX: 00007fda7b19e159 [ 672.604271][T14177] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 672.604282][T14177] RBP: 00007fda7c14c090 R08: 0000000000000000 R09: 0000000000000000 [ 672.604294][T14177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.604306][T14177] R13: 00007fda7b426038 R14: 00007fda7b425fa0 R15: 00007ffd9b965078 [ 672.604337][T14177] [ 672.901950][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22 [ 674.476387][T14165] loop3: detected capacity change from 0 to 32768 [ 674.506759][T14165] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 674.540436][ T32] kauditd_printk_skb: 107 callbacks suppressed [ 674.540453][ T32] audit: type=1800 audit(1790747661.902:5406): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1290" name="file1" dev="tmpfs" ino=266 res=0 errno=-22 [ 674.560718][T14187] FAULT_INJECTION: forcing a failure. [ 674.560718][T14187] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 674.560789][T14187] CPU: 1 UID: 0 PID: 14187 Comm: syz.1.1290 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 674.560886][T14187] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 674.560918][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 674.560957][T14187] Call Trace: [ 674.560979][T14187] [ 674.561002][T14187] dump_stack_lvl+0xe8/0x150 [ 674.561106][T14187] should_fail_ex+0x3eb/0x540 [ 674.561229][T14187] prepare_alloc_pages+0x21e/0x5f0 [ 674.561361][T14187] __alloc_frozen_pages_noprof+0x17a/0x400 [ 674.561448][T14187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.561522][T14187] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 674.561629][T14187] ? policy_nodemask+0x2cc/0x8e0 [ 674.561737][T14187] alloc_pages_mpol+0x21e/0x390 [ 674.561843][T14187] alloc_pages_noprof+0xb1/0x2b0 [ 674.561941][T14187] pte_alloc_one+0x22/0x370 [ 674.562041][T14187] __do_fault+0xd1/0x2a0 [ 674.562110][T14187] do_pte_missing+0x649/0x3570 [ 674.562186][T14187] ? do_raw_spin_unlock+0xf5/0x200 [ 674.562258][T14187] ? _raw_spin_unlock+0x28/0x50 [ 674.562320][T14187] ? __pmd_alloc+0x40a/0x5c0 [ 674.562386][T14187] handle_mm_fault+0x1a53/0x3750 [ 674.562465][T14187] ? handle_mm_fault+0xf1/0x3750 [ 674.562551][T14187] ? __pfx_handle_mm_fault+0x10/0x10 [ 674.562664][T14187] ? __lock_acquire+0x747/0x2de0 [ 674.562741][T14187] ? lock_mm_and_find_vma+0xa7/0x340 [ 674.562803][T14187] do_user_addr_fault+0x7f6/0x1480 [ 674.562894][T14187] exc_page_fault+0x6a/0xc0 [ 674.562970][T14187] asm_exc_page_fault+0x26/0x30 [ 674.563020][T14187] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 674.563078][T14187] Code: e9 44 76 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 76 04 00 66 2e 0f 1f [ 674.563125][T14187] RSP: 0018:ffffc90006f67ac8 EFLAGS: 00050202 [ 674.563176][T14187] RAX: ffffffff84e369fe RBX: 0000000000000004 RCX: 0000000000000004 [ 674.563213][T14187] RDX: 0000000000000000 RSI: ffffc90006f67cd0 RDI: 0000000000000000 [ 674.563260][T14187] RBP: ffffc90006f67ee0 R08: ffffc90006f67cd3 R09: 1ffff92000decf9a [ 674.563300][T14187] R10: dffffc0000000000 R11: fffff52000decf9b R12: 0000000000000004 [ 674.563339][T14187] R13: 00007ffffffff000 R14: ffffc90006f67cd0 R15: 0000000000000000 [ 674.563411][T14187] ? _copy_to_user+0x6e/0xb0 [ 674.563478][T14187] _copy_to_user+0x8a/0xb0 [ 674.563540][T14187] __se_sys_move_pages+0x1858/0x1c80 [ 674.563616][T14187] ? try_to_wake_up+0x8ce/0x14e0 [ 674.563722][T14187] ? __pfx___se_sys_move_pages+0x10/0x10 [ 674.563758][T14187] ? futex_wait+0x2a2/0x390 [ 674.563859][T14187] ? __pfx_futex_wait+0x10/0x10 [ 674.563996][T14187] ? __pfx_do_futex+0x10/0x10 [ 674.564054][T14187] ? __fget_files+0x3a2/0x420 [ 674.564118][T14187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 674.564200][T14187] ? __se_sys_futex+0x3a8/0x450 [ 674.564278][T14187] ? rcu_is_watching+0x16/0xb0 [ 674.564361][T14187] ? __x64_sys_move_pages+0x21/0xf0 [ 674.564417][T14187] do_syscall_64+0x166/0x520 [ 674.564482][T14187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.564535][T14187] ? clear_bhb_loop+0x70/0xc0 [ 674.564592][T14187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.564645][T14187] RIP: 0033:0x7fda7b19e159 [ 674.564685][T14187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.564730][T14187] RSP: 002b:00007fda7c14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 674.564778][T14187] RAX: ffffffffffffffda RBX: 00007fda7b425fa0 RCX: 00007fda7b19e159 [ 674.564815][T14187] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 674.564845][T14187] RBP: 00007fda7b23506b R08: 0000000000000000 R09: 0000000000000000 [ 674.564874][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.564911][T14187] R13: 00007fda7b426038 R14: 00007fda7b425fa0 R15: 00007ffd9b965078 [ 674.564985][T14187] [ 674.949819][T14165] XFS (loop3): Ending clean mount [ 675.102321][ T32] audit: type=1800 audit(1790747662.462:5407): pid=14165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1277" name="file1" dev="loop3" ino=6150 res=0 errno=-22 [ 675.490950][T14165] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 675.646695][T14199] loop4: detected capacity change from 0 to 64 [ 675.805320][ T8372] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 676.768822][T11032] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 676.852474][ T5269] 8021q: adding VLAN 0 to HW filter on device eth23 [ 677.026884][T14226] loop3: detected capacity change from 0 to 32768 [ 677.027544][T14226] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 677.028030][T14226] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1291 (14226) [ 677.040717][T11032] usb 2-1: New USB device found: idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 677.043269][T11032] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 677.043344][T11032] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.043411][T11032] usb 2-1: config 0 has no interface number 0 [ 677.044764][T14226] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 677.044795][T14226] BTRFS info (device loop3): using crc32c checksum algorithm [ 677.076100][T11032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.076163][T11032] usb 2-1: Product: syz [ 677.076208][T11032] usb 2-1: Manufacturer: syz [ 677.076244][T11032] usb 2-1: SerialNumber: syz [ 677.089886][T11032] usb 2-1: config 0 descriptor?? [ 677.215231][T14226] BTRFS info (device loop3): rebuilding free space tree [ 677.313245][T14226] BTRFS info (device loop3): disabling free space tree [ 677.313290][T14226] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 677.313305][T14226] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 677.316156][T11032] usb 2-1: USB disconnect, device number 12 [ 677.328146][T14226] BTRFS info (device loop3): enabling ssd optimizations [ 677.328201][T14226] BTRFS info (device loop3): turning on async discard [ 677.328237][T14226] BTRFS info (device loop3): force clearing of disk cache [ 677.328302][T14226] BTRFS info (device loop3): use zstd compression, level 3 [ 678.627927][ T8372] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 678.671527][T14261] FAULT_INJECTION: forcing a failure. [ 678.671527][T14261] name failslab, interval 1, probability 0, space 0, times 0 [ 678.671554][T14261] CPU: 1 UID: 0 PID: 14261 Comm: syz.5.1296 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 678.671578][T14261] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 678.671586][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 678.671596][T14261] Call Trace: [ 678.671602][T14261] [ 678.671610][T14261] dump_stack_lvl+0xe8/0x150 [ 678.671639][T14261] should_fail_ex+0x3eb/0x540 [ 678.671670][T14261] should_failslab+0xa8/0x100 [ 678.671702][T14261] __kmalloc_cache_noprof+0x9e/0x600 [ 678.671725][T14261] ? ipv6_flowlabel_opt+0xf94/0x2b10 [ 678.671853][T14261] ? ipv6_flowlabel_opt+0xf94/0x2b10 [ 678.671888][T14261] ipv6_flowlabel_opt+0xf94/0x2b10 [ 678.671925][T14261] ? register_lock_class+0x31/0x2e0 [ 678.671963][T14261] ? __lock_acquire+0x747/0x2de0 [ 678.671996][T14261] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 678.672029][T14261] ? do_raw_spin_lock+0x12b/0x2f0 [ 678.672044][T14261] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 678.672061][T14261] ? do_ipv6_setsockopt+0x956/0x2960 [ 678.672102][T14261] ? __local_bh_enable_ip+0xd6/0x140 [ 678.672125][T14261] do_ipv6_setsockopt+0x9cb/0x2960 [ 678.672148][T14261] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 678.672165][T14261] ? aa_inet_opt_perm+0x94d/0xcd0 [ 678.672209][T14261] ? get_pid_task+0x20/0x1f0 [ 678.672230][T14261] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 678.672257][T14261] ? ksys_write+0x1e6/0x270 [ 678.672281][T14261] ? lock_acquire+0x115/0x350 [ 678.672305][T14261] ? aa_sock_opt_perm+0xe1/0x1e0 [ 678.672325][T14261] ipv6_setsockopt+0x59/0x170 [ 678.672343][T14261] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 678.672360][T14261] do_sock_setsockopt+0x17c/0x1b0 [ 678.672381][T14261] __x64_sys_setsockopt+0x13d/0x1b0 [ 678.672403][T14261] do_syscall_64+0x166/0x520 [ 678.672422][T14261] ? trace_irq_disable+0x3b/0x140 [ 678.672441][T14261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.672456][T14261] ? clear_bhb_loop+0x70/0xc0 [ 678.672473][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.672487][T14261] RIP: 0033:0x7f5dbcf9e159 [ 678.672501][T14261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.672514][T14261] RSP: 002b:00007f5dbddef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 678.672529][T14261] RAX: ffffffffffffffda RBX: 00007f5dbd225fa0 RCX: 00007f5dbcf9e159 [ 678.672540][T14261] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 678.672548][T14261] RBP: 00007f5dbddef090 R08: 0000000000000020 R09: 0000000000000000 [ 678.672557][T14261] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 678.672567][T14261] R13: 00007f5dbd226038 R14: 00007f5dbd225fa0 R15: 00007ffedec28aa8 [ 678.672588][T14261] [ 678.835541][ T5791] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 678.989853][ T5791] usb 2-1: device descriptor read/64, error -71 [ 679.230025][ T5791] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 680.589202][ T5791] usb 2-1: device descriptor read/64, error -71 [ 680.699390][ T5791] usb usb2-port1: attempt power cycle [ 681.094736][ T5791] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 681.134935][ T5791] usb 2-1: device descriptor read/8, error -71 [ 681.478837][ T5791] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 681.847171][ T5269] 8021q: adding VLAN 0 to HW filter on device eth24 [ 682.069845][ T5791] usb 2-1: device descriptor read/8, error -71 [ 682.429526][ T5791] usb usb2-port1: unable to enumerate USB device [ 683.051165][T14312] loop1: detected capacity change from 0 to 164 [ 683.250279][T14320] Can't find a SQUASHFS superblock on nullb0 [ 683.331256][T14320] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 683.331546][T14320] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 683.331785][T14320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 683.387029][T14320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.513246][T14321] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 684.527783][T14330] nbd: socks must be embedded in a SOCK_ITEM attr [ 684.566813][T14330] block nbd0: shutting down sockets [ 684.673957][ T32] audit: type=1326 audit(1790747672.032:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.674006][ T32] audit: type=1326 audit(1790747672.032:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.687007][ T32] audit: type=1326 audit(1790747672.042:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.687128][ T32] audit: type=1326 audit(1790747672.042:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.687234][ T32] audit: type=1326 audit(1790747672.042:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.705142][ T32] audit: type=1326 audit(1790747672.042:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.708606][ T32] audit: type=1326 audit(1790747672.062:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.750512][ T32] audit: type=1326 audit(1790747672.062:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001d39e159 code=0x7ffc0000 [ 684.750629][ T32] audit: type=1326 audit(1790747672.092:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f001d35e98e code=0x7ffc0000 [ 684.783116][ T32] audit: type=1326 audit(1790747672.122:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14336 comm="syz.3.1312" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f001d39ddeb code=0x7ffc0000 [ 685.058829][ T5748] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 685.133427][T14343] loop1: detected capacity change from 0 to 16 [ 685.163841][T14342] loop5: detected capacity change from 0 to 128 [ 685.205611][T14342] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 685.205933][T14342] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.215803][ T5748] usb 4-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 685.238471][ T5748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.238521][ T5748] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 685.250649][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.250675][ T5748] usb 4-1: Product: syz [ 685.250690][ T5748] usb 4-1: Manufacturer: syz [ 685.250704][ T5748] usb 4-1: SerialNumber: syz [ 685.266295][T14343] erofs (device loop1): compressed inode (nid 36) is invalid in a plain filesystem [ 685.338463][ T5748] sisusb 4-1:1.0: Invalid USB2VGA device [ 685.338487][ T5748] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 685.353781][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 685.359968][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 685.359995][T13812] Bluetooth: hci4: command 0x0c1a tx timeout [ 685.360002][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 685.439217][ T5791] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 685.548005][ T5748] usb 4-1: USB disconnect, device number 21 [ 685.569894][T12887] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 685.597999][ T5791] usb 8-1: New USB device found: idVendor=056a, idProduct=00d7, bcdDevice=0.40 [ 685.611081][ T5791] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 685.611116][ T5791] usb 8-1: config 1 interface 0 has no altsetting 0 [ 685.613184][ T5791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.613229][ T5791] usb 8-1: Product: ц [ 685.613246][ T5791] usb 8-1: Manufacturer: Н [ 685.613262][ T5791] usb 8-1: SerialNumber: ည [ 685.752468][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.752512][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.578553][ T5791] usbhid 8-1:1.0: can't add hid device: -71 [ 687.578674][ T5791] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 687.601566][ T5791] usb 8-1: USB disconnect, device number 16 [ 687.733801][T14364] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 687.821570][T14364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 687.842880][T14370] FAULT_INJECTION: forcing a failure. [ 687.842880][T14370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.842910][T14370] CPU: 1 UID: 0 PID: 14370 Comm: syz.3.1320 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 687.842939][T14370] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 687.842948][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 687.842960][T14370] Call Trace: [ 687.842968][T14370] [ 687.842977][T14370] dump_stack_lvl+0xe8/0x150 [ 687.843011][T14370] should_fail_ex+0x3eb/0x540 [ 687.843047][T14370] _copy_to_user+0x31/0xb0 [ 687.843072][T14370] simple_read_from_buffer+0xe1/0x170 [ 687.843103][T14370] proc_fail_nth_read+0x1bb/0x230 [ 687.843134][T14370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.843166][T14370] ? rw_verify_area+0x24a/0x4c0 [ 687.843193][T14370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.843221][T14370] vfs_read+0x213/0xa80 [ 687.843253][T14370] ? __pfx_vfs_read+0x10/0x10 [ 687.843289][T14370] ? fdget+0x16b/0x250 [ 687.843319][T14370] ksys_read+0x150/0x270 [ 687.843347][T14370] ? __pfx_ksys_read+0x10/0x10 [ 687.843386][T14370] do_syscall_64+0x166/0x520 [ 687.843413][T14370] ? trace_irq_disable+0x3b/0x140 [ 687.843439][T14370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.843459][T14370] ? clear_bhb_loop+0x70/0xc0 [ 687.843489][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.843509][T14370] RIP: 0033:0x7f001d35e98e [ 687.843527][T14370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 687.843544][T14370] RSP: 002b:00007f001e1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 687.843566][T14370] RAX: ffffffffffffffda RBX: 00007f001e1f66c0 RCX: 00007f001d35e98e [ 687.843581][T14370] RDX: 000000000000000f RSI: 00007f001e1f60a0 RDI: 0000000000000004 [ 687.843594][T14370] RBP: 00007f001e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 687.843607][T14370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.843619][T14370] R13: 00007f001d626038 R14: 00007f001d625fa0 R15: 00007ffdc3a91518 [ 687.843650][T14370] [ 687.843909][T14369] bond1: (slave veth0_to_bond): Releasing active interface [ 687.843933][T14369] veth0_to_bond: left promiscuous mode [ 687.844115][T14369] veth0_to_bond: left allmulticast mode [ 687.985229][T14369] bond2: (slave veth0_to_bond): making interface the new active one [ 688.025449][T14369] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 688.236788][T14364] bond2: entered promiscuous mode [ 688.236810][T14364] veth0_to_bond: entered promiscuous mode [ 688.236979][T14364] bond2: entered allmulticast mode [ 688.236995][T14364] veth0_to_bond: entered allmulticast mode [ 688.267390][T14374] netlink: 'syz.3.1322': attribute type 1 has an invalid length. [ 688.299407][T14374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 688.348305][T14364] macvlan2: entered promiscuous mode [ 688.348327][T14364] macvlan2: entered allmulticast mode [ 688.362775][T14364] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 688.388359][T14364] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 688.483095][T14375] loop7: detected capacity change from 0 to 4096 [ 688.496662][T14375] EXT4-fs (loop7): Test dummy encryption mode enabled [ 688.517823][T14374] bond3: (slave veth0_to_bond): Releasing active interface [ 688.543058][T14374] bond5: (slave veth0_to_bond): making interface the new active one [ 688.550908][T14374] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 688.560410][T14375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.606258][T14378] bond5: entered promiscuous mode [ 688.606279][T14378] veth0_to_bond: entered promiscuous mode [ 688.606453][T14378] bond5: entered allmulticast mode [ 688.606468][T14378] veth0_to_bond: entered allmulticast mode [ 688.896941][T14385] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 689.851600][T14379] macvlan2: entered promiscuous mode [ 689.852411][T14379] macvlan2: entered allmulticast mode [ 689.940212][T14379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 690.067602][T14379] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 691.444695][T14399] loop4: detected capacity change from 0 to 128 [ 691.501307][T14399] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 691.503025][T14399] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.505439][T10992] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.875676][T11657] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 691.958886][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 692.502100][T14409] loop7: detected capacity change from 0 to 4096 [ 692.913541][T14422] FAULT_INJECTION: forcing a failure. [ 692.913541][T14422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.913574][T14422] CPU: 1 UID: 0 PID: 14422 Comm: syz.5.1331 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 692.913603][T14422] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 692.913612][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 692.913624][T14422] Call Trace: [ 692.913632][T14422] [ 692.913641][T14422] dump_stack_lvl+0xe8/0x150 [ 692.913675][T14422] should_fail_ex+0x3eb/0x540 [ 692.913711][T14422] _copy_from_user+0x2d/0xb0 [ 692.913735][T14422] do_ipv6_setsockopt+0x245/0x2960 [ 692.913768][T14422] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 692.913793][T14422] ? aa_inet_opt_perm+0x94d/0xcd0 [ 692.913817][T14422] ? get_pid_task+0x20/0x1f0 [ 692.913846][T14422] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 692.913885][T14422] ? ksys_write+0x1e6/0x270 [ 692.913919][T14422] ? lock_acquire+0x115/0x350 [ 692.913954][T14422] ? aa_sock_opt_perm+0xe1/0x1e0 [ 692.913981][T14422] ipv6_setsockopt+0x59/0x170 [ 692.914007][T14422] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 692.914031][T14422] do_sock_setsockopt+0x17c/0x1b0 [ 692.914069][T14422] __x64_sys_setsockopt+0x13d/0x1b0 [ 692.914099][T14422] do_syscall_64+0x166/0x520 [ 692.914126][T14422] ? trace_irq_disable+0x3b/0x140 [ 692.914153][T14422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.914173][T14422] ? clear_bhb_loop+0x70/0xc0 [ 692.914196][T14422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.914216][T14422] RIP: 0033:0x7f5dbcf9e159 [ 692.914252][T14422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.914270][T14422] RSP: 002b:00007f5dbddef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 692.914294][T14422] RAX: ffffffffffffffda RBX: 00007f5dbd225fa0 RCX: 00007f5dbcf9e159 [ 692.914310][T14422] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 692.914323][T14422] RBP: 00007f5dbddef090 R08: 0000000000000570 R09: 0000000000000000 [ 692.914338][T14422] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.914351][T14422] R13: 00007f5dbd226038 R14: 00007f5dbd225fa0 R15: 00007ffedec28aa8 [ 692.914384][T14422] [ 693.201309][T14425] loop7: detected capacity change from 0 to 1764 [ 693.219572][T14426] loop3: detected capacity change from 0 to 4096 [ 693.224628][T14426] EXT4-fs (loop3): Test dummy encryption mode enabled [ 693.287684][T14426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.310726][T14425] tmpfs: Unknown parameter 'nr_blockst-net' [ 693.347220][T14429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1334'. [ 694.829418][T14436] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 696.269615][T14444] 9p: Bad value for 'rfdno' [ 696.330649][ T5796] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 696.432930][ T8372] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.483850][ T5796] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 696.487817][ T5796] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 696.487853][ T5796] usb 5-1: config 1 has no interface number 0 [ 696.504591][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.504662][ T5796] usb 5-1: Product: syz [ 696.504698][ T5796] usb 5-1: Manufacturer: syz [ 696.504737][ T5796] usb 5-1: SerialNumber: syz [ 696.567453][ T5796] usb 5-1: 3:1 : does not exist [ 696.567478][ T5796] usb 5-1: 3:2 : does not exist [ 697.330688][T14459] Can't find a SQUASHFS superblock on nullb0 [ 697.655128][T14459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 697.655294][T14459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 697.655430][T14459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 697.655877][T14459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 698.022518][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1343'. [ 698.297151][T14483] FAULT_INJECTION: forcing a failure. [ 698.297151][T14483] name failslab, interval 1, probability 0, space 0, times 0 [ 698.297183][T14483] CPU: 1 UID: 0 PID: 14483 Comm: syz.3.1344 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 698.297211][T14483] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 698.297220][T14483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 698.297233][T14483] Call Trace: [ 698.297241][T14483] [ 698.297250][T14483] dump_stack_lvl+0xe8/0x150 [ 698.297287][T14483] should_fail_ex+0x3eb/0x540 [ 698.297323][T14483] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 698.297345][T14483] should_failslab+0xa8/0x100 [ 698.297377][T14483] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 698.297395][T14483] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 698.297421][T14483] ? shmem_alloc_inode+0x28/0x40 [ 698.297439][T14483] ? shmem_alloc_inode+0x28/0x40 [ 698.297463][T14483] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 698.297481][T14483] shmem_alloc_inode+0x28/0x40 [ 698.297501][T14483] alloc_inode+0x6a/0x1b0 [ 698.297525][T14483] new_inode+0x1f/0x170 [ 698.297547][T14483] ? shmem_get_inode+0x29a/0x1030 [ 698.297568][T14483] shmem_get_inode+0x3a4/0x1030 [ 698.297596][T14483] ? __pfx_shmem_get_inode+0x10/0x10 [ 698.297624][T14483] __shmem_file_setup+0x20b/0x370 [ 698.297654][T14483] ? __pfx___shmem_file_setup+0x10/0x10 [ 698.297689][T14483] memfd_alloc_file+0x99/0x540 [ 698.297715][T14483] ? __pfx_memfd_alloc_file+0x10/0x10 [ 698.297751][T14483] __se_sys_memfd_create+0x31f/0x410 [ 698.297776][T14483] do_syscall_64+0x166/0x520 [ 698.297806][T14483] ? trace_irq_disable+0x3b/0x140 [ 698.297832][T14483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.297851][T14483] ? clear_bhb_loop+0x70/0xc0 [ 698.297869][T14483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.297884][T14483] RIP: 0033:0x7f001d39e159 [ 698.297899][T14483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.297912][T14483] RSP: 002b:00007f001e1f5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 698.297929][T14483] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007f001d39e159 [ 698.297940][T14483] RDX: 00007f001e1f5ee0 RSI: 0000000000000000 RDI: 00007f001d43524b [ 698.297950][T14483] RBP: 0000200000000c00 R08: 00000000ffffffff R09: 0000000000000000 [ 698.297960][T14483] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 698.297970][T14483] R13: 00007f001e1f5ee0 R14: 00007f001e1f5ea0 R15: 0000200000000780 [ 698.297993][T14483] [ 699.415320][ T5748] usb 5-1: USB disconnect, device number 5 [ 699.669088][T13812] Bluetooth: hci4: command 0x0c1a tx timeout [ 699.669123][T13812] Bluetooth: hci0: command 0x0406 tx timeout [ 699.669172][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 699.669205][T10641] Bluetooth: hci3: command 0x0c1a tx timeout [ 700.342040][T14515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 700.447832][T14512] loop3: detected capacity change from 0 to 32768 [ 700.448512][T14512] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 700.534710][T14512] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1350 (14512) [ 700.558464][T14512] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 700.558496][T14512] BTRFS info (device loop3): using crc32c checksum algorithm [ 700.659326][T13298] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 700.686079][T14512] BTRFS info (device loop3): rebuilding free space tree [ 700.704243][T14512] BTRFS info (device loop3): disabling free space tree [ 700.704300][T14512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 700.704324][T14512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 700.717364][T14512] BTRFS info (device loop3): enabling ssd optimizations [ 700.717439][T14512] BTRFS info (device loop3): turning on async discard [ 700.717478][T14512] BTRFS info (device loop3): force clearing of disk cache [ 700.717529][T14512] BTRFS info (device loop3): use zstd compression, level 3 [ 700.872327][T13298] usb 6-1: unable to get BOS descriptor or descriptor too short [ 700.872851][T13298] usb 6-1: not running at top speed; connect to a high speed hub [ 700.872881][T13298] usb 6-1: New USB device found: idVendor=1410, idProduct=9011, bcdDevice=a2.7c [ 700.873864][T13298] usb 6-1: config 161 has an invalid interface number: 197 but max is 0 [ 700.873888][T13298] usb 6-1: config 161 has no interface number 0 [ 700.873922][T13298] usb 6-1: config 161 interface 197 has no altsetting 0 [ 700.877266][T13298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.877303][T13298] usb 6-1: Product: syz [ 700.877320][T13298] usb 6-1: Manufacturer: syz [ 700.877335][T13298] usb 6-1: SerialNumber: syz [ 701.668169][T13298] qmi_wwan 6-1:161.197: bogus CDC Union: master=0, slave=0 [ 701.686099][T13298] qmi_wwan 6-1:161.197: probe with driver qmi_wwan failed with error -22 [ 701.714081][T13298] usb 6-1: USB disconnect, device number 5 [ 701.979196][ T46] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 702.037028][ T8372] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 702.157134][ T46] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 702.170272][ T46] usb 8-1: config 3 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.170301][ T46] usb 8-1: config 3 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 16896, setting to 1024 [ 702.175589][ T46] usb 8-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 702.175613][ T46] usb 8-1: Manufacturer: syz [ 702.205417][ T46] cdc_acm 8-1:3.0: skipping garbage [ 702.208961][ T5796] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 702.366961][ T5796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 702.367008][ T5796] usb 5-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 702.375435][ T5796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.375536][ T5796] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 702.375678][ T5796] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 702.375767][ T5796] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 702.375894][ T5796] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 702.375965][ T5796] usb 5-1: config 1 interface 1 has no altsetting 0 [ 702.433603][ T5796] usb 5-1: string descriptor 0 read error: -22 [ 702.434075][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.478043][ T46] cdc_acm 8-1:3.0: ttyACM0: USB ACM device [ 702.731279][ T46] usb 8-1: USB disconnect, device number 17 [ 702.798035][T14548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.798522][T14548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.908526][T14558] loop5: detected capacity change from 0 to 1764 [ 704.438411][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 704.893778][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 705.374252][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 705.826128][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 707.912149][ T5796] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 707.912181][ T5796] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 707.912200][ T5796] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 707.965419][ T5796] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 707.987270][ T5796] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 747.191549][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.191604][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.635250][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.635307][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.628953][ T33] INFO: task jbd2/sda1-8:4936 blocked in I/O wait for more than 143 seconds. [ 856.628986][ T33] Tainted: G ** replaying previous printk message ** [ 856.628986][ T33] Tainted: G L Y syzkaller #0 [ 856.628997][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.629008][ T33] task:jbd2/sda1-8 state:D stack:24808 pid:4936 tgid:4936 ppid:2 task_flags:0x240040 flags:0x00080000 [ 856.629084][ T33] Call Trace: [ 856.629093][ T33] [ 856.629107][ T33] __schedule+0x1b47/0x5b40 [ 856.629152][ T33] ? percpu_ref_put_many+0x21/0x240 [ 856.629259][ T33] ? percpu_ref_put_many+0x18e/0x240 [ 856.629285][ T33] ? __pfx___schedule+0x10/0x10 [ 856.629312][ T33] ? schedule+0x90/0x2b0 [ 856.629333][ T33] schedule+0x164/0x2b0 [ 856.629359][ T33] io_schedule+0x7f/0xd0 [ 856.629380][ T33] bit_wait_io+0x13/0x110 [ 856.629404][ T33] __wait_on_bit+0xac/0x300 [ 856.629424][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.629447][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 856.629469][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.629489][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 856.629512][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 856.629542][ T33] ? __wait_on_buffer+0xe/0x80 [ 856.629572][ T33] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 856.629642][ T33] ? trace_hrtimer_start+0x82/0x200 [ 856.629685][ T33] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 856.629715][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 856.629748][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 856.629768][ T33] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 856.629787][ T33] ? __timer_delete_sync+0x4a7/0x520 [ 856.629811][ T33] kjournald2+0x3bc/0x740 [ 856.629869][ T33] ? __pfx_kjournald2+0x10/0x10 [ 856.629886][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 856.629910][ T33] ? __kthread_parkme+0x71/0x1f0 [ 856.629927][ T33] ? __kthread_parkme+0x199/0x1f0 [ 856.629945][ T33] kthread+0x38b/0x480 [ 856.629963][ T33] ? __pfx_kjournald2+0x10/0x10 [ 856.629978][ T33] ? __pfx_kthread+0x10/0x10 [ 856.629996][ T33] ret_from_fork+0x514/0xb70 [ 856.630014][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 856.630028][ T33] ? __switch_to+0xc78/0x1410 [ 856.630052][ T33] ? __pfx_kthread+0x10/0x10 [ 856.630070][ T33] ret_from_fork_asm+0x1a/0x30 [ 856.630104][ T33] [ 856.630117][ T33] INFO: task syz-executor:5595 blocked in I/O wait for more than 143 seconds. [ 856.630131][ T33] Tainted: G L Y syzkaller #0 [ 856.630139][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.630146][ T33] task:syz-executor state:D stack:22280 pid:5595 tgid:5595 ppid:5594 task_flags:0x440100 flags:0x00080000 [ 856.630188][ T33] Call Trace: [ 856.630193][ T33] [ 856.630202][ T33] __schedule+0x1b47/0x5b40 [ 856.630227][ T33] ? trace_irq_disable+0x3b/0x140 [ 856.630260][ T33] ? __pfx___schedule+0x10/0x10 [ 856.630407][ T33] ? schedule+0x90/0x2b0 [ 856.630438][ T33] schedule+0x164/0x2b0 [ 856.630467][ T33] io_schedule+0x7f/0xd0 [ 856.630515][ T33] bit_wait_io+0x13/0x110 [ 856.630539][ T33] __wait_on_bit+0xac/0x300 [ 856.630571][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.630596][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 856.630620][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.630642][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 856.630667][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 856.630699][ T33] do_get_write_access+0x658/0x10c0 [ 856.630735][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 856.630761][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 856.630800][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 856.630823][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 856.630862][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 856.630891][ T33] ext4_reserve_inode_write+0x294/0x360 [ 856.630922][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 856.630949][ T33] ext4_dirty_inode+0xd0/0x110 [ 856.630972][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 856.630994][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 856.631016][ T33] file_update_time_flags+0x399/0x440 [ 856.631046][ T33] ext4_page_mkwrite+0x21f/0x12c0 [ 856.631070][ T33] ? reacquire_held_locks+0x117/0x1a0 [ 856.631104][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 856.631126][ T33] ? __lock_acquire+0x747/0x2de0 [ 856.631154][ T33] do_page_mkwrite+0x147/0x310 [ 856.631179][ T33] do_wp_page+0x1a85/0x4b60 [ 856.631220][ T33] ? __pfx_do_wp_page+0x10/0x10 [ 856.631244][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 856.631263][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 856.631288][ T33] handle_mm_fault+0x15d7/0x3750 [ 856.631313][ T33] ? handle_mm_fault+0xf1/0x3750 [ 856.631337][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 856.631358][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 856.631375][ T33] ? __pfx_set_user_sigmask+0x10/0x10 [ 856.631416][ T33] do_user_addr_fault+0xb35/0x1480 [ 856.631443][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 856.631462][ T33] exc_page_fault+0x6a/0xc0 [ 856.631486][ T33] asm_exc_page_fault+0x26/0x30 [ 856.631503][ T33] RIP: 0033:0x7f4ad607c6e2 [ 856.631519][ T33] RSP: 002b:00007ffe6430f880 EFLAGS: 00010202 [ 856.631534][ T33] RAX: 00007f4ad40a0000 RBX: 000055556f0fa290 RCX: 0000000000000002 [ 856.631546][ T33] RDX: 000000000000079f RSI: 000055556f0fd708 RDI: 0000000000000004 [ 856.631557][ T33] RBP: 00007ffe6430fd80 R08: 000055556f0fd708 R09: 00000000000000a2 [ 856.631569][ T33] R10: 0000000000004000 R11: 0000000000000001 R12: 00007ffe6430fbc0 [ 856.631580][ T33] R13: 00007ffe6430f9b0 R14: 585858582e7a7973 R15: 00007ffe6430f900 [ 856.631606][ T33] [ 856.631641][ T33] INFO: task kworker/u8:15:13588 blocked in I/O wait for more than 143 seconds. [ 856.631656][ T33] Tainted: G L Y syzkaller #0 [ 856.631666][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.631673][ T33] task:kworker/u8:15 state:D stack:21832 pid:13588 tgid:13588 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 856.631720][ T33] Workqueue: writeback wb_workfn (flush-8:0) [ 856.631773][ T33] Call Trace: [ 856.631778][ T33] [ 856.631788][ T33] __schedule+0x1b47/0x5b40 [ 856.631810][ T33] ? blk_mq_flush_plug_list+0x415/0x540 [ 856.631835][ T33] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 856.631857][ T33] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 856.631878][ T33] ? __blk_flush_plug+0x416/0x4d0 [ 856.631926][ T33] ? __pfx___schedule+0x10/0x10 [ 856.631955][ T33] ? schedule+0x90/0x2b0 [ 856.631977][ T33] schedule+0x164/0x2b0 [ 856.632011][ T33] io_schedule+0x7f/0xd0 [ 856.632044][ T33] bit_wait_io+0x13/0x110 [ 856.632065][ T33] __wait_on_bit+0xac/0x300 [ 856.632085][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.632108][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 856.632130][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.632150][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 856.632174][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 856.632204][ T33] do_get_write_access+0x658/0x10c0 [ 856.632237][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 856.632261][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 856.632286][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 856.632315][ T33] ext4_mb_mark_context+0x171/0xec0 [ 856.632366][ T33] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 856.632385][ T33] ? ext4_sb_block_valid+0x16d/0x560 [ 856.632407][ T33] ? ext4_sb_block_valid+0x484/0x560 [ 856.632428][ T33] ext4_mb_mark_diskspace_used+0x338/0x760 [ 856.632458][ T33] ext4_mb_new_blocks+0x1062/0x4520 [ 856.632482][ T33] ? trace_kmalloc+0x2a/0xf0 [ 856.632505][ T33] ? ext4_ext_search_right+0x39a/0x860 [ 856.632528][ T33] ? __asan_memcpy+0x40/0x70 [ 856.632549][ T33] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 856.632571][ T33] ? ext4_ext_find_goal+0xf0/0x1e0 [ 856.632596][ T33] ext4_ext_map_blocks+0x13f1/0x5680 [ 856.632618][ T33] ? kmem_cache_alloc_noprof+0x151/0x600 [ 856.632635][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 856.632674][ T33] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 856.632706][ T33] ? kmem_cache_alloc_noprof+0x151/0x600 [ 856.632724][ T33] ? kasan_save_track+0x3e/0x80 [ 856.632744][ T33] ? __kasan_slab_alloc+0x6c/0x80 [ 856.632765][ T33] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 856.632781][ T33] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 856.632800][ T33] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 856.632825][ T33] ? lock_acquire+0x115/0x350 [ 856.632857][ T33] ? down_write+0x166/0x200 [ 856.632882][ T33] ext4_map_create_blocks+0x116/0x530 [ 856.632900][ T33] ? ext4_fc_track_inode+0xf3/0x3f0 [ 856.632917][ T33] ext4_map_blocks+0x791/0x12c0 [ 856.632938][ T33] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 856.632959][ T33] ? __pfx_ext4_map_blocks+0x10/0x10 [ 856.632974][ T33] ? kmem_cache_alloc_noprof+0x151/0x600 [ 856.632999][ T33] ? ext4_inode_journal_mode+0x376/0x470 [ 856.633021][ T33] ext4_do_writepages+0x2398/0x4770 [ 856.633056][ T33] ? ieee80211_inform_bss+0xbda/0x10d0 [ 856.633121][ T33] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 856.633142][ T33] ? __pfx_ext4_do_writepages+0x10/0x10 [ 856.633160][ T33] ? __lock_acquire+0x747/0x2de0 [ 856.633183][ T33] ? trace_cfg80211_return_bss+0x7c/0x1f0 [ 856.633237][ T33] ? __lock_acquire+0x747/0x2de0 [ 856.633262][ T33] ? lock_acquire+0x115/0x350 [ 856.633294][ T33] ext4_writepages+0x1fe/0x4e0 [ 856.633319][ T33] ? __pfx_ext4_writepages+0x10/0x10 [ 856.633357][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 856.633373][ T33] ? __pfx_ext4_writepages+0x10/0x10 [ 856.633396][ T33] do_writepages+0x338/0x560 [ 856.633419][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 856.633437][ T33] ? reacquire_held_locks+0x117/0x1a0 [ 856.633458][ T33] ? writeback_sb_inodes+0x450/0x1af0 [ 856.633480][ T33] __writeback_single_inode+0x136/0x1220 [ 856.633500][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 856.633519][ T33] writeback_sb_inodes+0x9de/0x1af0 [ 856.633563][ T33] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 856.633579][ T33] ? lock_acquire+0x115/0x350 [ 856.633618][ T33] ? __pfx_down_read_trylock+0x10/0x10 [ 856.633650][ T33] __writeback_inodes_wb+0x114/0x240 [ 856.633673][ T33] wb_writeback+0x42f/0xad0 [ 856.633691][ T33] ? queue_io+0x251/0x470 [ 856.633711][ T33] ? __pfx_wb_writeback+0x10/0x10 [ 856.633726][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 856.633751][ T33] wb_workfn+0xc92/0x10f0 [ 856.633786][ T33] ? __pfx_wb_workfn+0x10/0x10 [ 856.633823][ T33] ? lock_acquire+0x115/0x350 [ 856.633847][ T33] ? rcu_is_watching+0x16/0xb0 [ 856.633871][ T33] ? process_scheduled_works+0x97a/0x1630 [ 856.633892][ T33] process_scheduled_works+0xc3d/0x1630 [ 856.633932][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.633957][ T33] ? assign_work+0x3cf/0x5d0 [ 856.633980][ T33] worker_thread+0xa47/0xfb0 [ 856.634010][ T33] ? __kthread_parkme+0x71/0x1f0 [ 856.634048][ T33] kthread+0x38b/0x480 [ 856.634066][ T33] ? __pfx_worker_thread+0x10/0x10 [ 856.634088][ T33] ? __pfx_kthread+0x10/0x10 [ 856.634107][ T33] ret_from_fork+0x514/0xb70 [ 856.634124][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 856.634138][ T33] ? __switch_to+0xc78/0x1410 [ 856.634161][ T33] ? __pfx_kthread+0x10/0x10 [ 856.634180][ T33] ret_from_fork_asm+0x1a/0x30 [ 856.634214][ T33] [ 856.634223][ T33] INFO: task syz.4.1354:14547 blocked in I/O wait for more than 143 seconds. [ 856.634236][ T33] Tainted: G L Y syzkaller #0 [ 856.634244][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.634251][ T33] task:syz.4.1354 state:D stack:25608 pid:14547 tgid:14547 ppid:11657 task_flags:0x440040 flags:0x00080002 [ 856.634296][ T33] Call Trace: [ 856.634301][ T33] [ 856.634310][ T33] __schedule+0x1b47/0x5b40 [ 856.634338][ T33] ? lock_acquire+0x115/0x350 [ 856.634372][ T33] ? __pfx___schedule+0x10/0x10 [ 856.634398][ T33] ? schedule+0x90/0x2b0 [ 856.634418][ T33] schedule+0x164/0x2b0 [ 856.634439][ T33] io_schedule+0x7f/0xd0 [ 856.634461][ T33] bit_wait_io+0x13/0x110 [ 856.634483][ T33] __wait_on_bit+0xac/0x300 [ 856.634503][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.634526][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 856.634548][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.634568][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 856.634591][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 856.634621][ T33] do_get_write_access+0x658/0x10c0 [ 856.634654][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 856.634678][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 856.634704][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 856.634725][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 856.634742][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 856.634768][ T33] ext4_reserve_inode_write+0x294/0x360 [ 856.634794][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 856.634818][ T33] ext4_dirty_inode+0xd0/0x110 [ 856.634839][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 856.634861][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 856.634880][ T33] file_update_time_flags+0x399/0x440 [ 856.634905][ T33] ext4_page_mkwrite+0x21f/0x12c0 [ 856.634933][ T33] ? __pfx_filemap_fault+0x10/0x10 [ 856.634958][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 856.634986][ T33] do_page_mkwrite+0x147/0x310 [ 856.635008][ T33] do_pte_missing+0x70f/0x3570 [ 856.635033][ T33] ? handle_mm_fault+0xf1/0x3750 [ 856.635051][ T33] handle_mm_fault+0x1a53/0x3750 [ 856.635073][ T33] ? handle_mm_fault+0xf1/0x3750 [ 856.635095][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 856.635108][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 856.635140][ T33] do_user_addr_fault+0xb35/0x1480 [ 856.635163][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 856.635181][ T33] exc_page_fault+0x6a/0xc0 [ 856.635202][ T33] asm_exc_page_fault+0x26/0x30 [ 856.635216][ T33] RIP: 0033:0x7f82bba72f32 [ 856.635229][ T33] RSP: 002b:00007fffa4266830 EFLAGS: 00010202 [ 856.635242][ T33] RAX: 0000000000007008 RBX: 00007f82bc955720 RCX: 0000000000000000 [ 856.635252][ T33] RDX: 0000001b2d21d000 RSI: 0000000000000008 RDI: 00007f82bc955720 [ 856.635262][ T33] RBP: 0000000000000151 R08: 00007f82bbe10000 R09: 00007f82bbe26038 [ 856.635272][ T33] R10: 0000000000000003 R11: 0000000000000006 R12: ffffffff81c15157 [ 856.635283][ T33] R13: 00007f82bbe26038 R14: 00000000000000f3 R15: ffffffffffff9000 [ 856.635295][ T33] ? __css_rstat_updated+0x1e7/0x540 [ 856.635331][ T33] [ 856.635337][ T33] INFO: task syz.5.1356:14557 blocked in I/O wait for more than 143 seconds. [ 856.635355][ T33] Tainted: G L Y syzkaller #0 [ 856.635363][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.635369][ T33] task:syz.5.1356 state:D stack:25608 pid:14557 tgid:14557 ppid:12887 task_flags:0x440040 flags:0x00080002 [ 856.635412][ T33] Call Trace: [ 856.635417][ T33] [ 856.635426][ T33] __schedule+0x1b47/0x5b40 [ 856.635454][ T33] ? lock_acquire+0x115/0x350 [ 856.635480][ T33] ? __pfx___schedule+0x10/0x10 [ 856.635506][ T33] ? schedule+0x90/0x2b0 [ 856.635527][ T33] schedule+0x164/0x2b0 [ 856.635558][ T33] io_schedule+0x7f/0xd0 [ 856.635577][ T33] bit_wait_io+0x13/0x110 [ 856.635597][ T33] __wait_on_bit+0xac/0x300 [ 856.635616][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.635637][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 856.635658][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.635676][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 856.635698][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 856.635726][ T33] do_get_write_access+0x658/0x10c0 [ 856.635757][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 856.635779][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 856.635803][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 856.635822][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 856.635838][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 856.635862][ T33] ext4_reserve_inode_write+0x294/0x360 [ 856.635887][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 856.635909][ T33] ext4_dirty_inode+0xd0/0x110 [ 856.635929][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 856.635948][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 856.635966][ T33] file_update_time_flags+0x399/0x440 [ 856.635989][ T33] ext4_page_mkwrite+0x21f/0x12c0 [ 856.636015][ T33] ? __pfx_filemap_fault+0x10/0x10 [ 856.636038][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 856.636065][ T33] do_page_mkwrite+0x147/0x310 [ 856.636085][ T33] do_pte_missing+0x70f/0x3570 [ 856.636109][ T33] ? handle_mm_fault+0xf1/0x3750 [ 856.636125][ T33] handle_mm_fault+0x1a53/0x3750 [ 856.636146][ T33] ? handle_mm_fault+0xf1/0x3750 [ 856.636166][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 856.636179][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 856.636193][ T33] ? __pfx_do_futex+0x10/0x10 [ 856.636221][ T33] do_user_addr_fault+0xb35/0x1480 [ 856.636243][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 856.636259][ T33] exc_page_fault+0x6a/0xc0 [ 856.636278][ T33] asm_exc_page_fault+0x26/0x30 [ 856.636292][ T33] RIP: 0033:0x7f5dbce727a9 [ 856.636303][ T33] RSP: 002b:00007ffedec28af0 EFLAGS: 00010202 [ 856.636315][ T33] RAX: 0000001b31621000 RBX: ffffffff8253ca46 RCX: 0000001b31620ff8 [ 856.636325][ T33] RDX: 0000001b3122421c RSI: 0000000000000008 RDI: 00007f5dbdd55720 [ 856.636335][ T33] RBP: 0000000000000180 R08: 00007f5dbd210000 R09: 00007f5dbd212000 [ 856.636349][ T33] R10: 000000008253ca4a R11: 0000000000000003 R12: 00007f5dbd226038 [ 856.636358][ T33] R13: 0000000000000297 R14: ffffffff8253c661 R15: 00007f5dbdd55720 [ 856.636369][ T33] ? nd_jump_root+0x301/0x430 [ 856.636387][ T33] ? set_root+0x2a6/0x3b0 [ 856.636411][ T33] [ 856.636417][ T33] INFO: task syz.3.1358:14559 blocked in I/O wait for more than 143 seconds. [ 856.636429][ T33] Tainted: G L Y syzkaller #0 [ 856.636436][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.636443][ T33] task:syz.3.1358 state:D stack:26696 pid:14559 tgid:14559 ppid:8372 task_flags:0x440040 flags:0x00080002 [ 856.636483][ T33] Call Trace: [ 856.636488][ T33] [ 856.636496][ T33] __schedule+0x1b47/0x5b40 [ 856.636522][ T33] ? __lock_acquire+0x747/0x2de0 [ 856.636547][ T33] ? __pfx___schedule+0x10/0x10 [ 856.636571][ T33] ? schedule+0x90/0x2b0 [ 856.636591][ T33] schedule+0x164/0x2b0 [ 856.636610][ T33] io_schedule+0x7f/0xd0 [ 856.636629][ T33] bit_wait_io+0x13/0x110 [ 856.636649][ T33] __wait_on_bit+0xac/0x300 [ 856.636668][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.636689][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 856.636710][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.636728][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 856.636750][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 856.636778][ T33] do_get_write_access+0x658/0x10c0 [ 856.636809][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 856.636832][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 856.636855][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 856.636882][ T33] ext4_reserve_inode_write+0x294/0x360 [ 856.636907][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 856.636929][ T33] ext4_dirty_inode+0xd0/0x110 [ 856.636948][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 856.636967][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 856.636980][ T33] ? mnt_get_write_access+0x216/0x280 [ 856.637002][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 856.637020][ T33] touch_atime+0x568/0x670 [ 856.637039][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 856.637078][ T33] ext4_file_mmap_prepare+0x277/0x450 [ 856.637100][ T33] mmap_region+0xf0b/0x2c60 [ 856.637127][ T33] ? __update_page_owner_handle+0x5a/0x580 [ 856.637155][ T33] ? lock_acquire+0x115/0x350 [ 856.637175][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.637198][ T33] ? __pfx_mmap_region+0x10/0x10 [ 856.637221][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.637246][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.637267][ T33] ? __page_table_check_zero+0x3c3/0x430 [ 856.637289][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.637328][ T33] ? lock_acquire+0x115/0x350 [ 856.637398][ T33] ? mt_find+0x186/0x630 [ 856.637443][ T33] ? mt_find+0x5ff/0x630 [ 856.637466][ T33] ? mt_find+0x186/0x630 [ 856.637488][ T33] ? __pfx_mt_find+0x10/0x10 [ 856.637515][ T33] ? bpf_lsm_mmap_addr+0x9/0x50 [ 856.637536][ T33] ? security_mmap_addr+0x71/0x240 [ 856.637562][ T33] ? shmem_mapping+0xd/0x50 [ 856.637579][ T33] ? memfd_check_seals_mmap+0xc5/0x220 [ 856.637598][ T33] do_mmap+0xe0a/0x1300 [ 856.637628][ T33] ? __pfx_do_mmap+0x10/0x10 [ 856.637659][ T33] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 856.637678][ T33] ? down_write_killable+0x179/0x230 [ 856.637703][ T33] ? __pfx_down_write_killable+0x10/0x10 [ 856.637727][ T33] ? apparmor_mmap_file+0x2e7/0x390 [ 856.637754][ T33] vm_mmap_pgoff+0x272/0x4e0 [ 856.637774][ T33] ? lock_acquire+0x115/0x350 [ 856.637796][ T33] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 856.637816][ T33] ? __fget_files+0x2a/0x420 [ 856.637837][ T33] ? __fget_files+0x3a2/0x420 [ 856.637855][ T33] ? __fget_files+0x2a/0x420 [ 856.637876][ T33] ksys_mmap_pgoff+0x4dc/0x760 [ 856.637896][ T33] do_syscall_64+0x166/0x520 [ 856.637916][ T33] ? trace_irq_disable+0x3b/0x140 [ 856.637936][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.637951][ T33] ? clear_bhb_loop+0x70/0xc0 [ 856.637969][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.637985][ T33] RIP: 0033:0x7f001d39dec2 [ 856.637997][ T33] RSP: 002b:00007ffdc3a91638 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 856.638012][ T33] RAX: ffffffffffffffda RBX: 0000001b2ed64000 RCX: 00007f001d39dec2 [ 856.638023][ T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b2ed64000 [ 856.638033][ T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 856.638054][ T33] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000bb [ 856.638063][ T33] R13: 00000000000927c0 R14: 00000000000ab86a R15: 00007ffdc3a91910 [ 856.638101][ T33] [ 856.638107][ T33] INFO: task syz.1.1357:14562 blocked in I/O wait for more than 143 seconds. [ 856.638120][ T33] Tainted: G L Y syzkaller #0 [ 856.638128][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 856.638135][ T33] task:syz.1.1357 state:D stack:25208 pid:14562 tgid:14562 ppid:12304 task_flags:0x440040 flags:0x00080002 [ 856.638179][ T33] Call Trace: [ 856.638184][ T33] [ 856.638193][ T33] __schedule+0x1b47/0x5b40 [ 856.638230][ T33] ? __pfx___schedule+0x10/0x10 [ 856.638255][ T33] ? schedule+0x90/0x2b0 [ 856.638276][ T33] schedule+0x164/0x2b0 [ 856.638296][ T33] io_schedule+0x7f/0xd0 [ 856.638316][ T33] bit_wait_io+0x13/0x110 [ 856.638338][ T33] __wait_on_bit+0xac/0x300 [ 856.638363][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.638386][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 856.638408][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 856.638428][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 856.638451][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 856.638481][ T33] do_get_write_access+0x658/0x10c0 [ 856.638514][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 856.638538][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 856.638563][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 856.638592][ T33] ext4_reserve_inode_write+0x294/0x360 [ 856.638619][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 856.638817][ T33] ext4_dirty_inode+0xd0/0x110 [ 856.638912][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 856.638993][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 856.639042][ T33] ? mnt_get_write_access+0x216/0x280 [ 856.639126][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 856.639186][ T33] touch_atime+0x568/0x670 [ 856.639262][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 856.639330][ T33] ext4_file_mmap_prepare+0x277/0x450 [ 856.639534][ T33] mmap_region+0xf0b/0x2c60 [ 856.639627][ T33] ? __update_page_owner_handle+0x5a/0x580 [ 856.639727][ T33] ? lock_acquire+0x115/0x350 [ 856.639796][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.639895][ T33] ? __pfx_mmap_region+0x10/0x10 [ 856.639975][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.640058][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.640137][ T33] ? __page_table_check_zero+0x3c3/0x430 [ 856.640218][ T33] ? __page_table_check_zero+0x6c/0x430 [ 856.640373][ T33] ? __pfx_flush_tlb_func+0x10/0x10 [ 856.640447][ T33] ? smp_call_function_many_cond+0xfc7/0x1500 [ 856.640562][ T33] ? __pfx_flush_tlb_func+0x10/0x10 [ 856.640770][ T33] ? mt_find+0x186/0x630 [ 856.640886][ T33] ? mt_find+0x5ff/0x630 [ 856.640973][ T33] ? mt_find+0x186/0x630 [ 856.641058][ T33] ? __pfx_mt_find+0x10/0x10 [ 856.641157][ T33] ? bpf_lsm_mmap_addr+0x9/0x50 [ 856.641241][ T33] ? security_mmap_addr+0x71/0x240 [ 856.641338][ T33] ? shmem_mapping+0xd/0x50 [ 856.641403][ T33] ? memfd_check_seals_mmap+0xc5/0x220 [ 856.641479][ T33] do_mmap+0xe0a/0x1300 [ 856.641597][ T33] ? __pfx_do_mmap+0x10/0x10 [ 856.641738][ T33] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 856.641814][ T33] ? down_write_killable+0x179/0x230 [ 856.641906][ T33] ? __pfx_down_write_killable+0x10/0x10 [ 856.641993][ T33] ? apparmor_mmap_file+0x2e7/0x390 [ 856.642121][ T33] vm_mmap_pgoff+0x272/0x4e0 [ 856.642183][ T33] ? lock_acquire+0x115/0x350 [ 856.642254][ T33] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 856.642339][ T33] ? __fget_files+0x2a/0x420 [ 856.642417][ T33] ? __fget_files+0x3a2/0x420 [ 856.642477][ T33] ? __fget_files+0x2a/0x420 [ 856.642549][ T33] ksys_mmap_pgoff+0x4dc/0x760 [ 856.642618][ T33] do_syscall_64+0x166/0x520 [ 856.642694][ T33] ? trace_irq_disable+0x3b/0x140 [ 856.642764][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.642820][ T33] ? clear_bhb_loop+0x70/0xc0 [ 856.642881][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.642939][ T33] RIP: 0033:0x7fda7b19dec2 [ 856.642995][ T33] RSP: 002b:00007ffd9b965198 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 856.643058][ T33] RAX: ffffffffffffffda RBX: 0000001b2cd64000 RCX: 00007fda7b19dec2 [ 856.643110][ T33] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b2cd64000 [ 856.643151][ T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 856.643182][ T33] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000039 [ 856.643220][ T33] R13: 000000000000000b R14: 00000000000aad39 R15: 00007ffd9b965470 [ 856.643291][ T33] [ 856.643394][ T33] [ 856.643394][ T33] Showing all locks held in the system: [ 856.643417][ T33] locks held by pr/ttyS0/16: 2, last CPU#0: [ 856.643465][ T33] #0: ffffffff8ec36118 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 856.643606][ T33] #1: ffffffff9ad61f58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 856.643838][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 856.643875][ T33] #0: ffffffff8ed5c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 856.644075][ T33] locks held by klogd/4963: 1, on CPU#0: [ 856.644106][ T33] #0: ffff8880345c0e28 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x737/0x13b0 [ 856.644258][ T33] locks held by dhcpcd/5268: 1, on CPU#0: [ 856.644295][ T33] #0: ffff8880779a4d98 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa5c/0x13b0 [ 856.644471][ T33] locks held by crond/5347: 1, on CPU#1: [ 856.644512][ T33] #0: ffff8880345c0e28 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa5c/0x13b0 [ 856.644652][ T33] locks held by getty/5365: 2, on CPU#1: [ 856.644687][ T33] #0: ffff888031b950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 856.644899][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 856.645033][ T33] locks held by syz-executor/5595: 3, on CPU#1: [ 856.645066][ T33] #0: ffff88807577d088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 856.645194][ T33] #1: ffff88803438c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 856.645343][ T33] #2: ffff888034388938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 856.645505][ T33] locks held by kworker/u8:15/13588: 6, on CPU#0: [ 856.645546][ T33] #0: ffff88802068c148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 856.645697][ T33] #1: ffffc90003677c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 856.645860][ T33] #2: ffff88803438c0e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 856.646020][ T33] #3: ffff88803438ac98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 856.646177][ T33] #4: ffff888034388938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 856.646307][ T33] #5: ffff8880779e4a98 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 856.646448][ T33] locks held by syz.4.1354/14547: 3, on CPU#1: [ 856.646484][ T33] #0: ffff888024fd6bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 856.646599][ T33] #1: ffff88803438c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 856.646718][ T33] #2: ffff888034388938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 856.646854][ T33] locks held by syz.5.1356/14557: 3, on CPU#1: [ 856.646891][ T33] #0: ffff88801ff40e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 856.647007][ T33] #1: ffff88803438c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 856.647159][ T33] #2: ffff888034388938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 856.647300][ T33] locks held by syz.3.1358/14559: 3, on CPU#0: [ 856.647347][ T33] #0: ffff888034ffd900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 856.647490][ T33] #1: ffff88803438c460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 856.647632][ T33] #2: ffff888034388938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 856.647778][ T33] locks held by syz.1.1357/14562: 3, on CPU#0: [ 856.647811][ T33] #0: ffff888034ffc080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 856.647950][ T33] #1: ffff88803438c460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 856.648093][ T33] #2: ffff888034388938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 856.648246][ T33] [ 856.648258][ T33] ============================================= [ 856.648258][ T33] [ 856.648288][ T33] NMI backtrace for cpu 1 [ 856.648338][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 856.648410][ T33] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 856.648430][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 856.648468][ T33] Call Trace: [ 856.648495][ T33] [ 856.648516][ T33] dump_stack_lvl+0xe8/0x150 [ 856.648588][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 856.648694][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 856.648785][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 856.648857][ T33] sys_info+0x135/0x170 [ 856.648908][ T33] watchdog+0x1058/0x10d0 [ 856.649005][ T33] ? watchdog+0x209/0x10d0 [ 856.649111][ T33] kthread+0x38b/0x480 [ 856.649172][ T33] ? __pfx_watchdog+0x10/0x10 [ 856.649233][ T33] ? __pfx_kthread+0x10/0x10 [ 856.649293][ T33] ret_from_fork+0x514/0xb70 [ 856.649362][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 856.649443][ T33] ? __switch_to+0xc78/0x1410 [ 856.649536][ T33] ? __pfx_kthread+0x10/0x10 [ 856.649595][ T33] ret_from_fork_asm+0x1a/0x30 [ 856.649707][ T33] [ 856.650011][ T33] Sending NMI from CPU 1 to CPUs 0: [ 856.650084][ C0] NMI backtrace for cpu 0 [ 856.650100][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 856.650126][ C0] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 856.650133][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 856.650144][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 856.650206][ C0] Code: e8 0e 4d 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 1a c2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 856.650223][ C0] RSP: 0000:ffffc900001578b8 EFLAGS: 00000002 [ 856.650238][ C0] RAX: 1ffffffff35ac300 RBX: 00000000000003fd RCX: 0000000000000000 [ 856.650251][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 856.650263][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 856.650274][ C0] R10: dffffc0000000000 R11: ffffffff8578b3f0 R12: dffffc0000000000 [ 856.650288][ C0] R13: 0000000000000000 R14: ffffffff9ad61f80 R15: 0000000000000000 [ 856.650301][ C0] FS: 0000000000000000(0000) GS:ffff888124cac000(0000) knlGS:0000000000000000 [ 856.650317][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.650329][ C0] CR2: 00007f3db857ba37 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 856.650346][ C0] Call Trace: [ 856.650353][ C0] [ 856.650362][ C0] wait_for_lsr+0x184/0x2f0 [ 856.650383][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 856.650413][ C0] serial8250_console_write+0xaa1/0x1200 [ 856.650438][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 856.650458][ C0] ? rcu_is_watching+0x16/0xb0 [ 856.650492][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 856.650524][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 856.650552][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 856.650594][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 856.650617][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 856.650644][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 856.650666][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 856.650693][ C0] ? __kthread_parkme+0x71/0x1f0 [ 856.650711][ C0] ? __kthread_parkme+0x199/0x1f0 [ 856.650730][ C0] kthread+0x38b/0x480 [ 856.650751][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 856.650772][ C0] ? __pfx_kthread+0x10/0x10 [ 856.650796][ C0] ret_from_fork+0x514/0xb70 [ 856.650819][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 856.650853][ C0] ? __switch_to+0xc78/0x1410 [ 856.650881][ C0] ? __pfx_kthread+0x10/0x10 [ 856.650904][ C0] ret_from_fork_asm+0x1a/0x30 [ 856.650943][ C0] [ 856.651107][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 859.912969][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 859.923747][ T33] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 859.929562][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 859.939645][ T33] Call Trace: [ 859.942918][ T33] [ 859.945928][ T33] vpanic+0x26f/0x710 [ 859.949916][ T33] panic+0xc5/0xd0 [ 859.953650][ T33] ? __pfx_panic+0x10/0x10 [ 859.958086][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 859.963113][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 859.969263][ T33] watchdog+0x10cc/0x10d0 [ 859.973603][ T33] ? watchdog+0x209/0x10d0 [ 859.978020][ T33] kthread+0x38b/0x480 [ 859.982105][ T33] ? __pfx_watchdog+0x10/0x10 [ 859.986777][ T33] ? __pfx_kthread+0x10/0x10 [ 859.991370][ T33] ret_from_fork+0x514/0xb70 [ 859.995963][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 860.001066][ T33] ? __switch_to+0xc78/0x1410 [ 860.005764][ T33] ? __pfx_kthread+0x10/0x10 [ 860.010391][ T33] ret_from_fork_asm+0x1a/0x30 [ 860.015200][ T33] [ 860.018936][ T33] Kernel Offset: disabled [ 860.023268][ T33] Rebooting in 86400 seconds..